$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/AAF07158AFEB11EEBCAD8169C4F9AE02.roa File: AAF07158AFEB11EEBCAD8169C4F9AE02.roa (raw, json) Hash identifier: oNm1obdkzij6YjJxkuwM4wB/i0WVM3V1H2fXpc37iDE= Subject key identifier: 13:2A:83:A6:9C:72:92:C5:6B:DF:B0:85:C4:98:50:FD:7C:BC:6F:D8 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 29F6 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/AAF07158AFEB11EEBCAD8169C4F9AE02.roa Signing time: Sun 30 Aug 2026 16:24:48 +0000 ROA not before: Sun 30 Aug 2026 16:24:48 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 142594 IP address blocks: 45.249.88.0/24 maxlen: 24 45.249.89.0/24 maxlen: 24 103.217.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 15:42:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10742 (0x29f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Aug 30 16:24:48 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a945950-48fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8a:ce:d3:0b:83:ff:9c:3b:a0:2b:3a:76:cb: 6b:96:bf:ea:59:2f:87:b9:1a:7e:4a:2b:64:ef:0a: 1d:09:1a:36:46:ac:aa:5e:2e:6c:33:00:16:29:95: c8:36:58:25:e6:03:ef:80:e1:cb:4e:9d:eb:f4:c2: da:83:5e:9d:2a:5d:fe:c9:ba:9a:83:50:2c:87:af: 2c:09:f4:bb:6d:9a:28:67:f3:f8:b9:3a:ca:b4:4b: 32:92:5f:ef:57:17:12:65:0c:c7:fc:ae:13:ba:0a: 20:08:2b:07:40:5f:de:6d:f9:9b:b3:46:7f:7c:9e: fe:56:17:28:bc:46:79:7f:95:0d:95:2f:d4:7f:fb: 0b:24:5b:6a:98:6d:8a:ad:92:15:ff:09:6f:f4:f9: f5:cd:a4:5d:93:29:ac:ec:49:3b:12:1a:c7:02:1b: cb:f1:a6:64:4a:e2:d2:69:3e:15:2e:bc:5e:87:32: b6:71:df:b7:fa:6c:f8:a0:1d:bc:12:be:73:5e:d8: 11:e0:32:3a:2d:f7:dc:3c:09:d7:5f:96:84:32:32: 10:56:8e:00:35:52:ab:f6:86:77:b4:43:52:e2:0d: 45:27:55:d8:a1:1f:3b:5b:a3:75:f8:68:be:fb:5a: f3:b1:e9:24:1d:98:a3:84:5f:a0:64:1f:22:50:dc: e4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2A:83:A6:9C:72:92:C5:6B:DF:B0:85:C4:98:50:FD:7C:BC:6F:D8 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/AAF07158AFEB11EEBCAD8169C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.249.88.0/23 103.217.254.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:7c:48:ed:80:98:2f:0d:57:4b:1a:af:30:78:8a:6b:b1:7e: 3c:f3:96:b4:39:f0:80:53:28:8b:b4:0f:51:ea:f2:00:72:be: 65:b1:a1:63:50:43:9f:91:5e:1c:24:aa:da:1d:bd:a4:09:92: aa:9a:7f:40:1f:b7:11:ff:f3:0e:37:91:93:fb:03:a8:42:70: e0:32:d4:bc:3a:58:cd:6c:4f:66:ef:c0:5c:d2:9c:c0:a1:9a: d0:a2:2d:9c:af:9c:c5:d0:0e:a5:8a:74:80:25:39:c7:91:a5: e2:18:ab:26:df:6d:99:74:d4:fe:f8:6a:5a:7f:72:f2:ed:a1: 8b:15:d9:7f:5e:ba:b2:3a:e0:be:4c:c2:17:c1:2b:d7:2a:56: 52:d1:2b:a8:60:15:a6:e4:32:12:63:fd:f9:31:c3:d8:ec:b9: 75:26:32:6a:14:83:a7:82:58:56:be:61:be:82:2a:8c:ec:0c: 9d:27:ed:d7:9b:36:8f:5e:71:bf:97:91:0d:c3:c7:ed:61:5c: 4f:75:42:36:db:13:19:fe:34:d7:90:3e:36:0d:5f:73:12:ac: 0b:31:f7:56:97:2f:6e:77:04:3c:69:fd:74:9b:db:4a:d8:dc: cc:89:15:ff:33:ac:02:cd:c2:5d:87:37:87:53:3d:42:f5:74: 6d:b2:3c:46 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICKfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjYwODMwMTYyNDQ4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk0NTk1MC00OGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4rO0wuD/5w7oCs6dstrlr/qWS+HuRp+Sitk7wodCRo2RqyqXi5sMwAWKZXI Nlgl5gPvgOHLTp3r9MLag16dKl3+ybqag1Ash68sCfS7bZooZ/P4uTrKtEsykl/v VxcSZQzH/K4TugogCCsHQF/ebfmbs0Z/fJ7+VhcovEZ5f5UNlS/Uf/sLJFtqmG2K rZIV/wlv9Pn1zaRdkyms7Ek7EhrHAhvL8aZkSuLSaT4VLrxehzK2cd+3+mz4oB28 Er5zXtgR4DI6LffcPAnXX5aEMjIQVo4ANVKr9oZ3tENS4g1FJ1XYoR87W6N1+Gi+ +1rzsekkHZijhF+gZB8iUNzk7QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBMqg6ac cpLFa9+whcSYUP18vG/YMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvQUFGMDcxNThB RkVCMTFFRUJDQUQ4MTY5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBLflYAwQAZ9n+MA0GCSqGSIb3DQEBCwUAA4IBAQALfEjtgJgvDVdL Gq8weIprsX4885a0OfCAUyiLtA9R6vIAcr5lsaFjUEOfkV4cJKraHb2kCZKqmn9A H7cR//MON5GT+wOoQnDgMtS8OljNbE9m78Bc0pzAoZrQoi2cr5zF0A6linSAJTnH kaXiGKsm322ZdNT++Gpaf3Ly7aGLFdl/XrqyOuC+TMIXwSvXKlZS0SuoYBWm5DIS Y/35McPY7Ll1JjJqFIOnglhWvmG+giqM7AydJ+3XmzaPXnG/l5ENw8ftYVxPdUI2 2xMZ/jTXkD42DV9zEqwLMfdWly9udwQ8af10m9tK2NzMiRX/M6wCzcJdhzeHUz1C 9XRtsjxG -----END CERTIFICATE-----Generated at Fri Sep 4 23:44:36 2026 by rpki-client