$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/4F2C2040066011EEA5F59657C4F9AE02.roa File: 4F2C2040066011EEA5F59657C4F9AE02.roa (raw, json) Hash identifier: isYP7SmeirPesovdjy03s89jODjPg4O0Dds10sLSl0Q= Subject key identifier: 50:25:22:8D:A8:A9:DE:5B:A7:F8:AC:AA:B3:EB:C8:E4:FD:14:04:F2 Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 2116 Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/4F2C2040066011EEA5F59657C4F9AE02.roa Signing time: Wed 30 Sep 2026 16:31:49 +0000 ROA not before: Wed 30 Sep 2026 16:31:49 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 4812 IP address blocks: 116.232.0.0/16 maxlen: 24 124.74.0.0/16 maxlen: 24 124.75.0.0/16 maxlen: 16 124.76.0.0/15 maxlen: 24 124.78.0.0/15 maxlen: 24 202.96.194.0/24 maxlen: 24 202.101.0.0/19 maxlen: 24 202.101.32.0/19 maxlen: 19 202.109.0.0/18 maxlen: 18 202.109.64.0/18 maxlen: 24 218.1.0.0/16 maxlen: 24 218.30.132.0/24 maxlen: 24 222.68.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8470 (0x2116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Sep 30 16:31:49 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd3975-ce6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6d:dd:6d:27:97:6c:36:22:b0:88:7c:16:5e: b3:2f:54:a6:b6:87:76:4f:36:2e:9d:c0:cf:11:7c: 53:43:c2:ad:90:e6:f9:29:54:f6:d1:df:79:58:ee: 97:cb:6c:b7:f2:50:ff:ba:0f:c3:44:98:e0:41:1e: 1c:1d:30:3b:59:ce:bc:1a:03:0a:82:c5:ef:05:d3: ac:8f:eb:85:6a:a9:03:f3:90:c0:77:ee:38:78:c5: 43:6f:c3:2e:a4:04:00:54:9a:cf:e8:f8:24:6a:84: 9b:92:b5:58:44:d1:36:de:c1:28:ad:a8:25:ae:bd: 8e:cd:78:32:6a:7c:d3:1b:35:0d:6b:9f:88:07:f4: 9f:1b:2b:79:42:3b:cb:3d:2f:0a:eb:28:da:b5:70: 68:1f:d6:ab:0b:88:e7:9a:fd:0f:8e:fa:0d:70:49: 1e:9f:92:23:6e:d4:56:8e:48:a7:8c:18:cf:74:ab: 67:47:2d:a2:cb:50:21:1c:fb:5f:8f:17:f8:7a:ec: ea:7c:3e:de:92:3a:e9:c1:88:bb:ce:04:28:bc:8c: 52:24:13:46:cf:5a:73:b0:c2:35:9b:0e:8c:d4:c8: 6a:36:57:bb:d0:08:68:89:2f:2a:ec:eb:8e:56:34: f7:fa:9d:fe:54:c8:1c:71:ef:ac:6d:d9:f2:4f:68: be:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:25:22:8D:A8:A9:DE:5B:A7:F8:AC:AA:B3:EB:C8:E4:FD:14:04:F2 X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/4F2C2040066011EEA5F59657C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.232.0.0/16 124.74.0.0-124.79.255.255 202.96.194.0/24 202.101.0.0/18 202.109.0.0/17 218.1.0.0/16 218.30.132.0/24 222.68.240.0/20 Signature Algorithm: sha256WithRSAEncryption 27:bf:4a:8c:94:40:a4:e3:7b:fc:f0:71:a1:32:35:f2:39:e1: e0:de:25:c1:91:89:c1:bb:6e:f7:c0:35:93:77:32:72:8d:cd: 71:6a:33:9d:0c:f2:b5:3e:f2:b8:d2:5d:05:50:d3:df:e9:d8: ee:b2:b2:bf:3f:9e:12:20:33:e6:1a:43:67:84:83:a3:f0:5e: 2d:32:41:f4:13:46:d1:fa:27:e0:31:36:96:cc:67:79:aa:0f: 70:d4:0d:32:bf:54:0b:46:e1:18:59:8b:50:f3:79:bf:74:ed: 3b:0d:aa:a4:58:cb:96:6e:04:32:1a:f9:1f:0f:3d:c2:62:63: 24:0a:17:51:d0:99:3f:4a:27:24:bd:ad:d9:12:84:79:ec:07: 16:8d:16:be:c0:3d:e8:0e:92:86:b2:6e:ff:9a:73:f5:40:38: d2:04:ea:67:22:f3:b2:59:ee:3c:a6:dd:ea:0a:3d:7f:06:ab: dc:88:aa:5c:d4:06:72:90:41:48:57:a9:19:d7:ee:78:6f:3e: 40:9b:23:6a:a3:15:80:37:8d:8d:10:bc:4a:7c:5f:48:6b:89: b7:58:d9:84:c9:c3:a9:04:3f:a2:f4:f6:04:91:5b:df:be:4b: 2b:db:30:c7:f9:77:8c:f3:f1:5e:dc:6f:88:c0:42:e7:3d:05: 8b:fc:bd:9a -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgICIRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjYwOTMwMTYzMTQ5WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkMzk3NS1jZTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl23dbSeXbDYisIh8Fl6zL1Smtod2TzYuncDPEXxTQ8KtkOb5KVT20d95WO6X y2y38lD/ug/DRJjgQR4cHTA7Wc68GgMKgsXvBdOsj+uFaqkD85DAd+44eMVDb8Mu pAQAVJrP6PgkaoSbkrVYRNE23sEoraglrr2OzXgyanzTGzUNa5+IB/SfGyt5QjvL PS8K6yjatXBoH9arC4jnmv0PjvoNcEken5IjbtRWjkinjBjPdKtnRy2iy1AhHPtf jxf4euzqfD7ekjrpwYi7zgQovIxSJBNGz1pzsMI1mw6M1MhqNle70AhoiS8q7OuO VjT3+p3+VMgcce+sbdnyT2i++wIDAQABo4ICjjCCAoowHQYDVR0OBBYEFFAlIo2o qd5bp/isqrPryOT9FATyMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvNEYyQzIwNDAw NjYwMTFFRUE1RjU5NjU3QzRGOUFFMDIucm9hME0GCCsGAQUFBwEHAQH/BD4wPDA6 BAIAATA0AwMAdOgwCgMDAXxKAwMEfEADBADKYMIDBAbKZQADBAfKbQADAwDaAQME ANoehAMEBN5E8DANBgkqhkiG9w0BAQsFAAOCAQEAJ79KjJRApON7/PBxoTI18jnh 4N4lwZGJwbtu98A1k3cyco3NcWoznQzytT7yuNJdBVDT3+nY7rKyvz+eEiAz5hpD Z4SDo/BeLTJB9BNG0fon4DE2lsxneaoPcNQNMr9UC0bhGFmLUPN5v3TtOw2qpFjL lm4EMhr5Hw89wmJjJAoXUdCZP0onJL2t2RKEeewHFo0WvsA96A6ShrJu/5pz9UA4 0gTqZyLzslnuPKbd6go9fwar3IiqXNQGcpBBSFepGdfueG8+QJsjaqMVgDeNjRC8 SnxfSGuJt1jZhMnDqQQ/ovT2BJFb375LK9swx/l3jPPxXtxviMBC5z0Fi/y9mg== -----END CERTIFICATE-----Generated at Tue Oct 27 05:13:54 2026 by rpki-client