$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/D716391C53CC11F0BC106B7CC4F9AE02.roa File: D716391C53CC11F0BC106B7CC4F9AE02.roa (raw, json) Hash identifier: BLni4Yd/1+eVE2g8cq842019Ap4OliRK/7Yy17FI8hg= Subject key identifier: 2C:F4:CC:CF:FF:97:B3:50:A6:99:4C:D9:B3:42:0D:55:64:A5:C5:3A Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 09AB Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/D716391C53CC11F0BC106B7CC4F9AE02.roa Signing time: Sat 10 Oct 2026 22:44:23 +0000 ROA not before: Sat 10 Oct 2026 22:44:23 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 21859 IP address blocks: 36.255.193.0/24 maxlen: 24 36.255.194.0/24 maxlen: 24 43.229.152.0/24 maxlen: 24 103.209.233.0/24 maxlen: 24 103.209.234.0/24 maxlen: 24 150.107.0.0/24 maxlen: 24 163.53.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 22:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2475 (0x9ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 10 22:44:23 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acabfc7-8567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:61:fe:85:4d:6b:af:10:dc:28:39:cf:a8:48: 2f:2f:d2:72:e9:fa:a2:4d:52:60:d6:f1:0a:c2:2a: ca:c7:9a:16:03:25:e4:a7:ae:c1:b7:b9:2e:e1:51: db:33:9e:8c:fc:37:fa:21:f4:b5:01:e4:6c:d2:7d: c4:ee:9a:77:ec:45:34:49:93:52:8f:0f:18:24:89: f4:bc:4c:61:4b:c8:f4:96:60:e9:54:65:ba:dd:70: 79:79:8b:a2:4b:36:a2:7e:0a:27:f9:10:11:48:fe: f7:a1:f3:47:81:df:a5:2d:d8:95:75:30:1b:b2:d5: aa:52:b2:c0:16:b8:46:87:d0:9b:d3:e8:66:5d:42: 33:27:cc:ee:15:ca:35:18:00:85:b1:f5:fb:4f:6a: 13:47:e3:77:c8:48:a2:3b:8e:02:82:a4:16:33:9a: 00:93:28:21:dd:06:c2:7e:be:4a:60:0f:ba:ea:42: 44:73:9f:52:32:87:9b:0f:cd:16:9b:e1:d0:0e:59: 04:ee:d7:b3:08:1d:85:de:9e:b9:82:33:1d:c9:41: 97:28:ed:9d:ff:fd:59:b2:98:5a:78:11:09:48:c8: 0c:53:54:0f:fa:3f:35:cf:b4:f1:ce:b2:a2:3b:38: 9a:bb:a3:d6:7f:ec:50:f7:c2:c6:67:49:b8:e9:74: 4c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F4:CC:CF:FF:97:B3:50:A6:99:4C:D9:B3:42:0D:55:64:A5:C5:3A X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/D716391C53CC11F0BC106B7CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.255.193.0-36.255.194.255 43.229.152.0/24 103.209.233.0-103.209.234.255 150.107.0.0/24 163.53.17.0/24 Signature Algorithm: sha256WithRSAEncryption 46:35:eb:ce:47:07:43:e2:dd:a6:dd:e1:95:ff:3f:9c:36:70: d4:13:51:4e:04:d6:8f:35:7d:30:82:71:06:4e:0f:28:0f:a3: e8:b1:e6:d9:32:92:3c:7f:14:04:1e:bc:81:9c:ae:cc:c5:b9: ab:e7:0a:31:98:d8:92:60:58:6b:60:61:c8:e9:ac:db:be:60: e4:56:ee:04:3f:cc:3e:9e:94:66:0b:52:e9:f6:8f:b3:be:08: 06:a1:fe:a3:73:24:4f:de:b1:61:44:ba:3c:89:be:5a:dc:12: ab:17:c0:a8:6f:62:e8:1e:34:39:df:96:b0:da:cf:dc:77:9f: 84:39:e8:71:ee:f3:67:f1:9a:31:dc:14:ac:44:a7:93:f9:bc: 74:02:90:dd:30:2c:b0:4a:d6:f0:21:8e:38:38:10:d0:5a:12: 1a:17:40:d3:51:7e:f4:3c:96:d9:c5:4b:fa:38:e6:cb:94:49: 9f:ba:55:9d:e3:e9:38:a3:4e:22:b8:8d:c0:87:80:e7:ad:ca: 1c:19:89:45:35:c4:a0:f7:7e:47:59:c8:b8:a6:d2:d2:77:97: a7:0e:a1:68:51:0e:df:8c:15:3c:23:2b:93:96:1b:28:e2:43: b2:c8:d4:c7:1e:47:53:27:38:c5:c8:04:88:28:31:4f:45:7d: 5a:1f:c0:54 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgICCaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjYxMDEwMjI0NDIzWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNhYmZjNy04NTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlmH+hU1rrxDcKDnPqEgvL9Jy6fqiTVJg1vEKwirKx5oWAyXkp67Bt7ku4VHb M56M/Df6IfS1AeRs0n3E7pp37EU0SZNSjw8YJIn0vExhS8j0lmDpVGW63XB5eYui Szaifgon+RARSP73ofNHgd+lLdiVdTAbstWqUrLAFrhGh9Cb0+hmXUIzJ8zuFco1 GACFsfX7T2oTR+N3yEiiO44CgqQWM5oAkygh3QbCfr5KYA+66kJEc59SMoebD80W m+HQDlkE7tezCB2F3p65gjMdyUGXKO2d//1ZsphaeBEJSMgMU1QP+j81z7TxzrKi Oziau6PWf+xQ98LGZ0m46XRMcwIDAQABo4ICiDCCAoQwHQYDVR0OBBYEFCz0zM// l7NQpplM2bNCDVVkpcU6MB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvRDcxNjM5MUM1 M0NDMTFGMEJDMTA2QjdDQzRGOUFFMDIucm9hMEcGCCsGAQUFBwEHAQH/BDgwNjA0 BAIAATAuMAwDBAAk/8EDBAAk/8IDBAAr5ZgwDAMEAGfR6QMEAGfR6gMEAJZrAAME AKM1ETANBgkqhkiG9w0BAQsFAAOCAQEARjXrzkcHQ+Ldpt3hlf8/nDZw1BNRTgTW jzV9MIJxBk4PKA+j6LHm2TKSPH8UBB68gZyuzMW5q+cKMZjYkmBYa2BhyOms275g 5FbuBD/MPp6UZgtS6faPs74IBqH+o3MkT96xYUS6PIm+WtwSqxfAqG9i6B40Od+W sNrP3HefhDnoce7zZ/GaMdwUrESnk/m8dAKQ3TAssErW8CGOODgQ0FoSGhdA01F+ 9DyW2cVL+jjmy5RJn7pVnePpOKNOIriNwIeA563KHBmJRTXEoPd+R1nIuKbS0neX pw6haFEO34wVPCMrk5YbKOJDssjUxx5HUyc4xcgEiCgxT0V9Wh/AVA== -----END CERTIFICATE-----Generated at Sat Oct 24 18:47:46 2026 by rpki-client