$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/88F058948E7E11EA955D1E64C4F9AE02.roa File: 88F058948E7E11EA955D1E64C4F9AE02.roa (raw, json) Hash identifier: jD3UgwA2bor96tJcVFApC8QOuQf4N9JYSHoKOI3FiYo= Subject key identifier: 01:0D:4F:BB:C8:71:8B:59:CA:72:F9:E8:75:B4:5A:14:1C:6E:B8:D9 Certificate issuer: /CN=A914A594/serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Certificate serial: 0A85 Authority key identifier: 83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/88F058948E7E11EA955D1E64C4F9AE02.roa Signing time: Tue 22 Sep 2026 19:39:38 +0000 ROA not before: Tue 22 Sep 2026 19:39:38 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 45355 IP address blocks: 45.117.240.0/22 maxlen: 22 45.117.240.0/24 maxlen: 24 103.58.20.0/22 maxlen: 22 202.151.16.0/20 maxlen: 20 2402:1840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 19:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2693 (0xa85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A594, serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Validity Not Before: Sep 22 19:39:38 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6ab2d97a-f005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:10:b4:be:4e:af:1f:72:7b:8c:95:f0:b6:a1: 59:75:e5:d7:7b:ac:c5:f2:18:44:c2:d5:46:83:14: 80:1a:10:e7:ef:c8:79:23:7a:02:97:a3:f7:f7:eb: d6:51:a5:01:1f:fb:09:ae:b8:f3:ac:84:95:d3:bd: 2c:03:a7:7c:f2:76:49:df:17:97:c0:51:4c:d8:c9: 86:38:5d:e0:84:9d:62:16:d2:86:99:5f:a0:7b:69: bf:04:50:7a:ef:f8:3b:0a:41:a8:cc:14:ef:c5:76: f9:f5:da:25:b2:7d:ad:25:3b:20:3e:b3:18:62:8e: 07:d1:12:05:b8:9f:c9:e3:60:4d:0b:66:82:b6:6b: f7:3e:3f:3b:b8:28:61:4e:7e:2b:d6:bb:1d:46:ae: 5a:74:a5:0f:03:a7:5c:45:c8:2d:8f:d4:51:8c:6a: 21:5f:ed:04:f6:43:fc:2c:f1:26:f8:27:44:d3:86: 8e:d8:34:f1:ce:cc:f8:23:9b:d1:64:73:bd:e9:fb: 42:4f:f3:4c:53:4f:d5:88:04:49:11:53:ad:fd:49: 99:a8:db:61:ea:4d:b3:fb:ac:c6:13:40:ea:52:29: 7b:0b:45:3d:15:9a:e7:3b:85:bb:47:b3:14:7d:32: bc:ce:34:45:cb:55:26:a2:03:ed:a5:92:76:97:b3: 07:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0D:4F:BB:C8:71:8B:59:CA:72:F9:E8:75:B4:5A:14:1C:6E:B8:D9 X509v3 Authority Key Identifier: keyid:83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/88F058948E7E11EA955D1E64C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.117.240.0/22 103.58.20.0/22 202.151.16.0/20 IPv6: 2402:1840::/32 Signature Algorithm: sha256WithRSAEncryption 0a:9e:5b:3e:d7:ec:e4:69:ab:cb:1c:07:01:87:fe:97:f0:0d: 6a:07:c6:81:d6:13:f4:60:03:37:74:3d:bb:dc:33:63:2a:fb: 3c:b4:50:70:83:b9:3f:3a:62:a2:92:ea:58:fd:9f:51:7b:4b: 36:cd:c7:e8:a1:84:1a:fe:ef:ce:62:98:96:ad:bf:0d:47:12: 06:cd:cf:56:d5:be:7b:86:29:3d:d3:1c:f5:6a:b1:72:e8:14: af:b3:04:35:42:35:a0:33:82:fc:79:47:fd:03:e1:9e:70:9e: e1:ba:1a:55:4f:ed:38:e0:ca:7a:86:25:ce:9b:85:70:20:f8: e6:4d:1d:63:ed:13:63:1e:cd:e6:88:20:84:b1:90:4f:92:64: f4:52:e1:e9:e0:02:4d:bd:74:58:be:42:7b:62:94:83:d1:7d: 04:39:ac:22:16:b2:42:a4:11:d7:a2:78:42:93:42:fe:ed:ab: 44:9f:ab:0b:82:57:42:41:50:d9:0c:6d:9e:ac:21:e7:94:9c: 9a:4e:f8:eb:e0:b3:51:89:77:5a:65:73:9d:f1:5e:ed:b6:a5: 3a:68:65:5a:d5:d2:29:70:88:71:8d:9e:a8:16:76:ff:69:cd: 8f:fa:d6:58:ef:fb:2c:7e:b3:a0:90:d4:8b:e7:64:03:f0:46: 8e:78:f8:e7 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICCoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1OTQxMTAvBgNVBAUTKDgzQ0M3MkRFN0Q1QzFGRTUzRkMxNDFGOEJDMUFDMjdC MURGMzAzQjEwHhcNMjYwOTIyMTkzOTM4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIyZDk3YS1mMDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhC0vk6vH3J7jJXwtqFZdeXXe6zF8hhEwtVGgxSAGhDn78h5I3oCl6P39+vW UaUBH/sJrrjzrISV070sA6d88nZJ3xeXwFFM2MmGOF3ghJ1iFtKGmV+ge2m/BFB6 7/g7CkGozBTvxXb59dolsn2tJTsgPrMYYo4H0RIFuJ/J42BNC2aCtmv3Pj87uChh Tn4r1rsdRq5adKUPA6dcRcgtj9RRjGohX+0E9kP8LPEm+CdE04aO2DTxzsz4I5vR ZHO96ftCT/NMU0/ViARJEVOt/UmZqNth6k2z+6zGE0DqUil7C0U9FZrnO4W7R7MU fTK8zjRFy1UmogPtpZJ2l7MHbQIDAQABo4ICezCCAncwHQYDVR0OBBYEFAENT7vI cYtZynL56HW0WhQcbrjZMB8GA1UdIwQYMBaAFIPMct59XB/lP8FB+Lwawnsd8wOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU5NC81MzE3OUZGODhF N0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gtVV93VUg0dkJyQ2V4M3pB N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c4eHkzbjFjSC1VX3dVSDR2QnJDZXgzekE3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEE1OTQvNTMxNzlGRjg4RTdEMTFFQUI1RjMzMjYxQzRGOUFFMDIvODhGMDU4OTQ4 RTdFMTFFQTk1NUQxRTY0QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCLXXwAwQCZzoUAwQEypcQMA0EAgACMAcDBQAkAhhAMA0GCSqGSIb3 DQEBCwUAA4IBAQAKnls+1+zkaavLHAcBh/6X8A1qB8aB1hP0YAM3dD273DNjKvs8 tFBwg7k/OmKikupY/Z9Re0s2zcfooYQa/u/OYpiWrb8NRxIGzc9W1b57hik90xz1 arFy6BSvswQ1QjWgM4L8eUf9A+GecJ7huhpVT+044Mp6hiXOm4VwIPjmTR1j7RNj Hs3miCCEsZBPkmT0UuHp4AJNvXRYvkJ7YpSD0X0EOawiFrJCpBHXonhCk0L+7atE n6sLgldCQVDZDG2erCHnlJyaTvjr4LNRiXdaZXOd8V7ttqU6aGVa1dIpcIhxjZ6o Fnb/ac2P+tZY7/ssfrOgkNSL52QD8EaOePjn -----END CERTIFICATE-----Generated at Mon Sep 28 23:37:37 2026 by rpki-client