$ rpki-client -vvvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/D0295F98B99311F1BA708A566F11F970.roa File: D0295F98B99311F1BA708A566F11F970.roa (raw, json) Hash identifier: LVsIBNxMrTdFUP1Gu+lgBHWUOjv+fMxb0WuoxXD4U8o= Subject key identifier: 51:70:43:06:99:01:EB:56:2A:E3:77:25:F1:64:CA:FA:38:31:A9:87 Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Certificate serial: 0191 Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/D0295F98B99311F1BA708A566F11F970.roa Signing time: Sat 26 Sep 2026 10:19:53 +0000 ROA not before: Sat 26 Sep 2026 10:19:53 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 154803 IP address blocks: 110.78.29.0/24 maxlen: 24 2001:c38:9126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 07:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Validity Not Before: Sep 26 10:19:53 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6ab79c49-662a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e9:22:4b:84:af:f8:43:8d:65:a7:38:e5:4c: dc:93:52:b6:4a:7e:59:af:bd:89:f7:c4:89:1e:45: 89:5f:24:68:6f:b4:4e:8c:0c:2d:67:51:16:22:1d: 00:86:b2:99:3d:5b:78:13:be:ed:cb:30:fe:ed:9d: 6d:74:05:64:b9:0f:5d:a9:b5:6f:62:f0:ed:d2:5b: a3:0a:62:7b:14:dc:c8:cf:b2:2d:3e:41:56:8c:21: a3:ff:f5:39:2b:52:77:0d:70:a7:2a:6e:26:07:d9: e8:23:14:8d:80:f7:10:72:48:2c:e9:b5:ab:82:04: fc:1d:17:f2:96:1b:88:31:e4:e5:da:d0:08:3b:41: f8:26:68:15:37:2c:bb:68:33:f6:5b:4d:a0:61:43: 61:cc:dc:ea:05:df:c1:b0:1e:03:6e:d0:24:e6:af: 70:01:60:0a:4c:01:d3:28:d5:e5:50:bd:8c:fb:ef: bf:24:01:a9:ce:7d:24:c1:ad:36:0b:6a:1c:59:47: d0:2b:0d:78:63:3d:c1:13:4c:04:ca:bb:f2:0c:e3: a7:30:fb:bc:b1:97:0a:97:d6:3f:21:14:49:79:b1: ba:e1:10:ca:f4:ae:4e:a1:4f:b4:dd:99:7f:29:b1: 2b:15:ac:4e:8a:12:22:6d:c6:5f:7b:00:59:80:5c: a3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:70:43:06:99:01:EB:56:2A:E3:77:25:F1:64:CA:FA:38:31:A9:87 X509v3 Authority Key Identifier: keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/D0295F98B99311F1BA708A566F11F970.roa sbgp-ipAddrBlock: critical IPv4: 110.78.29.0/24 IPv6: 2001:c38:9126::/48 Signature Algorithm: sha256WithRSAEncryption 8b:c5:27:59:2f:fb:a4:61:c1:aa:5f:93:57:e5:81:58:fa:8c: ad:6b:fd:57:ff:08:bb:04:52:bf:7e:58:f5:87:b8:d0:97:a7: 6c:48:17:85:34:a5:dc:bd:6f:c4:47:f9:3c:2a:43:52:5c:93: a7:76:d4:53:34:14:8d:aa:f7:ce:2b:40:9f:c1:2d:0e:7d:09: 60:04:7c:8d:1b:32:97:67:04:41:e8:f7:8d:d5:46:25:ae:2f: 38:f8:10:56:f6:00:2f:35:02:95:07:4c:2e:8e:d2:24:a3:ea: 30:db:f4:20:af:11:36:e9:53:ab:2d:9e:64:e6:3e:ce:41:e6: 58:2d:a6:95:23:ea:3c:9f:6a:e3:0c:56:66:98:ea:0d:1a:de: 44:d5:63:12:67:e1:72:8e:f0:30:a4:43:ee:18:db:82:b7:56: 2d:c6:1d:7e:8b:c2:2f:b7:21:24:32:91:0d:ba:91:92:3d:5f: a1:a1:6d:97:92:20:1e:1e:31:12:56:2f:3e:a8:6f:ac:c2:d8: 9e:83:dd:52:d0:45:fd:b3:81:53:15:4c:e8:fe:98:95:e3:49: eb:e0:26:7e:80:3c:33:92:31:c2:d8:ac:56:4b:d7:be:5a:15: fe:8a:db:8e:b4:0f:12:36:a9:1e:20:ee:3a:d1:39:f5:37:6c: e6:69:f0:df -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU5OEQxMTAvBgNVBAUTKDlBM0E2N0VERENEMDk3NzUzM0E5QTBCOEM0OUY0QzAx MDBDODUzOTEwHhcNMjYwOTI2MTAxOTUzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI3OWM0OS02NjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzukiS4Sv+EONZac45Uzck1K2Sn5Zr72J98SJHkWJXyRob7ROjAwtZ1EWIh0A hrKZPVt4E77tyzD+7Z1tdAVkuQ9dqbVvYvDt0lujCmJ7FNzIz7ItPkFWjCGj//U5 K1J3DXCnKm4mB9noIxSNgPcQckgs6bWrggT8HRfylhuIMeTl2tAIO0H4JmgVNyy7 aDP2W02gYUNhzNzqBd/BsB4DbtAk5q9wAWAKTAHTKNXlUL2M+++/JAGpzn0kwa02 C2ocWUfQKw14Yz3BE0wEyrvyDOOnMPu8sZcKl9Y/IRRJebG64RDK9K5OoU+03Zl/ KbErFaxOihIibcZfewBZgFyjhQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFFwQwaZ AetWKuN3JfFkyvo4MamHMB8GA1UdIwQYMBaAFJo6Z+3c0Jd1M6mguMSfTAEAyFOR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTk4RC9CODg1MzFDQUM4 RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi9tanBuN2R6UWwzVXpxYUM0eEo5TUFRRElV NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU5OEQvQjg4NTMxQ0FDOEVDMTFGMEEzNDRBQjQ1QzRGOUFFMDIvRDAyOTVGOThC OTkzMTFGMUJBNzA4QTU2NkYxMUY5NzAucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAbk4dMA8EAgACMAkDBwAgAQw4kSYwDQYJKoZIhvcNAQELBQADggEB AIvFJ1kv+6Rhwapfk1flgVj6jK1r/Vf/CLsEUr9+WPWHuNCXp2xIF4U0pdy9b8RH +TwqQ1Jck6d21FM0FI2q984rQJ/BLQ59CWAEfI0bMpdnBEHo943VRiWuLzj4EFb2 AC81ApUHTC6O0iSj6jDb9CCvETbpU6stnmTmPs5B5lgtppUj6jyfauMMVmaY6g0a 3kTVYxJn4XKO8DCkQ+4Y24K3Vi3GHX6Lwi+3ISQykQ26kZI9X6GhbZeSIB4eMRJW Lz6ob6zC2J6D3VLQRf2zgVMVTOj+mJXjSevgJn6APDOSMcLYrFZL175aFf6K2460 DxI2qR4g7jrROfU3bOZp8N8= -----END CERTIFICATE-----Generated at Wed Oct 7 19:16:58 2026 by rpki-client