$ rpki-client -vvvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/0526730C2C4811EEAC2E4D46C4F9AE02.roa File: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (raw, json) Hash identifier: 9nTKPawfGHtPhjNOmWn8l90W8nDxOehnoaoOT9irCWw= Subject key identifier: DE:D1:9E:34:B6:9F:84:EF:DA:B7:F0:A6:E6:95:F5:04:A0:6F:1B:F9 Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100 Certificate serial: 7E88 Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/0526730C2C4811EEAC2E4D46C4F9AE02.roa Signing time: Wed 02 Sep 2026 17:33:07 +0000 ROA not before: Wed 02 Sep 2026 17:33:07 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 139760 IP address blocks: 118.127.67.0/29 maxlen: 29 118.127.72.32/29 maxlen: 29 118.127.89.112/29 maxlen: 29 202.9.114.12/30 maxlen: 30 202.9.114.28/30 maxlen: 30 202.9.114.32/28 maxlen: 28 202.9.114.48/28 maxlen: 28 202.9.114.96/28 maxlen: 28 202.9.114.112/29 maxlen: 29 202.9.114.128/27 maxlen: 27 202.9.114.160/29 maxlen: 29 202.9.114.168/29 maxlen: 29 202.9.114.176/28 maxlen: 28 202.9.114.192/27 maxlen: 27 202.9.114.224/28 maxlen: 28 202.9.114.240/29 maxlen: 29 202.9.115.32/28 maxlen: 28 202.9.115.96/27 maxlen: 27 202.9.115.240/28 maxlen: 28 203.4.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 15:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32392 (0x7e88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100 Validity Not Before: Sep 2 17:33:07 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a985dd3-a673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ba:2e:88:cd:5a:2e:2c:81:11:54:99:1e:97: b2:45:4f:e9:ac:6a:66:25:37:f8:76:f4:46:42:57: eb:bc:a4:a3:2b:7e:67:7d:b1:d1:88:d6:bb:c2:63: 60:d8:b4:a9:1d:5e:20:65:0f:d6:8a:9b:38:26:64: 73:0c:c1:21:b7:c2:2a:73:de:24:c6:74:80:99:31: 30:a8:10:75:ab:97:9d:64:bc:08:69:0d:64:5a:50: b9:8a:bc:1e:67:3f:fe:7b:34:80:b2:2c:7f:44:c4: 35:3a:04:94:64:71:f6:d9:34:37:6e:a7:d7:3e:c6: e9:51:69:45:ed:97:3e:22:f2:64:37:7e:2d:81:ae: 08:ac:ab:21:ed:5c:ea:50:d7:d1:6f:35:cb:1f:aa: bd:59:e1:70:b9:52:52:43:99:59:d2:e8:1a:ad:c1: fd:14:3d:ed:3c:78:a8:de:16:70:aa:1f:f7:1d:61: 7e:15:5f:f3:70:39:cf:87:c6:65:65:e6:b4:e2:76: 46:94:c1:5e:a4:a6:4c:c6:5e:45:10:c8:6e:e2:6d: db:f6:d9:93:9a:7d:40:95:65:4c:dd:53:5c:40:27: 13:3a:9c:99:53:0a:5f:47:e0:44:e0:fa:e3:fe:a9: 4a:78:38:35:d1:01:0d:b3:d5:42:09:b1:14:c8:1a: 19:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D1:9E:34:B6:9F:84:EF:DA:B7:F0:A6:E6:95:F5:04:A0:6F:1B:F9 X509v3 Authority Key Identifier: keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/0526730C2C4811EEAC2E4D46C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 118.127.67.0/29 118.127.72.32/29 118.127.89.112/29 202.9.114.12/30 202.9.114.28-202.9.114.63 202.9.114.96-202.9.114.119 202.9.114.128-202.9.114.247 202.9.115.32/28 202.9.115.96/27 202.9.115.240/28 203.4.212.0/22 Signature Algorithm: sha256WithRSAEncryption 09:90:a4:25:d9:f8:18:f3:92:ec:f9:e6:1f:d2:eb:a1:b9:63: 09:f5:ca:e7:e6:d5:67:1f:8c:2e:5e:42:9e:3f:00:26:a8:fa: 46:13:aa:1c:88:51:28:1e:91:f2:f0:d4:bb:1d:2c:2e:38:f0: 62:7d:e7:c9:97:34:e2:33:1e:fe:56:2a:8c:f0:28:99:95:a1: b5:50:cf:bc:14:69:9a:5a:6e:be:af:71:55:f8:c8:f0:1b:f5: 4d:06:d2:cb:a3:d9:cc:30:58:9f:92:71:b1:c4:35:4c:bd:8f: 23:9c:55:ba:b2:87:94:7c:eb:cc:66:8e:90:eb:69:51:99:04: 34:58:9b:10:69:e5:c9:b3:cd:c9:0f:f8:22:a1:48:b2:92:bf: a9:96:22:28:c8:75:58:36:48:48:fe:be:7b:82:54:5f:37:0f: 5a:39:57:e1:cc:db:eb:89:2f:53:6c:07:03:cc:6b:f5:bf:c2: 53:7c:5a:66:ac:70:6a:f9:0a:7c:6c:b5:a4:9f:7f:b7:03:15: 8a:72:5c:11:c7:4a:ec:04:e3:6d:8e:b2:59:76:f4:89:bd:02: e7:ba:7c:3b:a7:51:83:9f:0f:85:44:d7:7e:6f:07:fd:85:a0: a9:e3:63:3f:80:5d:38:dc:48:dc:f6:c0:97:34:24:0e:0c:88: ee:0b:d2:9e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICfogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwMEQxMTAvBgNVBAUTKEM2MDM3ODZENTVBOTA0MTI0RTc1OTJFRUQyODk5RUY1 Nzg5MjExMDAwHhcNMjYwOTAyMTczMzA3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4NWRkMy1hNjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAirouiM1aLiyBEVSZHpeyRU/prGpmJTf4dvRGQlfrvKSjK35nfbHRiNa7wmNg 2LSpHV4gZQ/Wips4JmRzDMEht8Iqc94kxnSAmTEwqBB1q5edZLwIaQ1kWlC5irwe Zz/+ezSAsix/RMQ1OgSUZHH22TQ3bqfXPsbpUWlF7Zc+IvJkN34tga4IrKsh7Vzq UNfRbzXLH6q9WeFwuVJSQ5lZ0ugarcH9FD3tPHio3hZwqh/3HWF+FV/zcDnPh8Zl Zea04nZGlMFepKZMxl5FEMhu4m3b9tmTmn1AlWVM3VNcQCcTOpyZUwpfR+BE4Prj /qlKeDg10QENs9VCCbEUyBoZSwIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFN7RnjS2 n4Tv2rfwpuaV9QSgbxv5MB8GA1UdIwQYMBaAFMYDeG1VqQQSTnWS7tKJnvV4khEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTAwRC9GQ0RDRDNBMEFD OUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJCSk9kWkx1MG9tZTlYaVNF UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnTjRiVldwQkJKT2RaTHUwb21lOVhpU0VRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkwMEQvRkNEQ0QzQTBBQzlEMTFFODkyQ0RBRDBEQzRGOUFFMDIvMDUyNjczMEMy QzQ4MTFFRUFDMkU0RDQ2QzRGOUFFMDIucm9hMIGABggrBgEFBQcBBwEB/wRxMG8w bQQCAAEwZwMFA3Z/QwADBQN2f0ggAwUDdn9ZcAMFAsoJcgwwDgMFAsoJchwDBQbK CXIAMA4DBQXKCXJgAwUDyglycDAOAwUHyglygAMFA8oJcvADBQTKCXMgAwUFyglz YAMFBMoJc/ADBALLBNQwDQYJKoZIhvcNAQELBQADggEBAAmQpCXZ+Bjzkuz55h/S 66G5Ywn1yufm1WcfjC5eQp4/ACao+kYTqhyIUSgekfLw1LsdLC448GJ958mXNOIz Hv5WKozwKJmVobVQz7wUaZpabr6vcVX4yPAb9U0G0suj2cwwWJ+ScbHENUy9jyOc Vbqyh5R868xmjpDraVGZBDRYmxBp5cmzzckP+CKhSLKSv6mWIijIdVg2SEj+vnuC VF83D1o5V+HM2+uJL1NsBwPMa/W/wlN8WmascGr5CnxstaSff7cDFYpyXBHHSuwE 422Osll29Im9Aue6fDunUYOfD4VE135vB/2FoKnjYz+AXTjcSNz2wJc0JA4MiO4L 0p4= -----END CERTIFICATE-----Generated at Thu Sep 10 20:29:56 2026 by rpki-client