$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D36286F2D55C11EAA224E026C4F9AE02.roa File: D36286F2D55C11EAA224E026C4F9AE02.roa (raw, json) Hash identifier: C4s8QYA1umkIB/qMQKtCIeayLP5KSLQLnUvwmaBz5vQ= Subject key identifier: 39:08:CD:53:D3:F2:DC:2D:B9:A0:D1:D3:2A:D9:C2:40:DD:6D:67:42 Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 20FB Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D36286F2D55C11EAA224E026C4F9AE02.roa Signing time: Wed 30 Sep 2026 16:30:46 +0000 ROA not before: Wed 30 Sep 2026 16:30:46 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 134419 IP address blocks: 124.227.64.0/20 maxlen: 20 124.227.144.0/22 maxlen: 22 202.103.214.0/23 maxlen: 23 202.103.247.0/24 maxlen: 24 218.21.104.0/21 maxlen: 21 218.21.112.0/21 maxlen: 21 218.65.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8443 (0x20fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Sep 30 16:30:46 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd3936-5a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:dd:8a:62:3d:85:f5:75:e2:86:c1:fc:10:dd: 5b:0e:a0:f5:eb:a2:2b:56:16:c9:3b:34:6a:84:71: ea:72:33:fa:62:99:a7:63:a5:3b:99:b2:5f:67:9a: 04:f4:c2:23:c5:76:b3:bf:a6:a8:03:ab:56:5c:35: f7:03:23:ce:fa:fb:9a:b7:bc:ea:cd:05:39:d1:b9: 81:6f:87:1d:08:ef:74:92:48:1e:68:95:0b:38:23: 7c:51:73:81:ac:ad:1d:a7:f5:96:fa:88:ac:e1:4c: db:9a:d5:00:a1:23:77:bd:bc:d1:53:c9:5b:9b:66: 34:dd:36:b2:80:cc:f9:0a:24:ea:36:e0:9d:00:f2: b6:72:d7:53:86:81:87:9f:fd:ee:1d:3c:c0:36:39: fd:9b:2a:dc:5b:9d:4a:22:d3:30:22:e0:13:9c:b0: c4:4d:ec:56:9a:89:00:fb:02:6e:af:ff:92:d5:59: a1:0d:52:5f:44:58:b4:86:d9:94:e1:ac:c9:b7:c9: bb:9c:bb:f9:0a:6a:82:d3:77:f4:4d:90:13:20:37: 6f:c9:51:f1:f7:1f:ef:d4:e5:ae:7d:8f:fb:be:47: 14:b1:f6:01:68:93:ee:86:e6:8b:37:a6:f0:44:26: a6:9f:5a:e1:6c:aa:aa:8a:ce:da:c0:f8:69:79:1c: b7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:08:CD:53:D3:F2:DC:2D:B9:A0:D1:D3:2A:D9:C2:40:DD:6D:67:42 X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D36286F2D55C11EAA224E026C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 124.227.64.0/20 124.227.144.0/22 202.103.214.0/23 202.103.247.0/24 218.21.104.0-218.21.119.255 218.65.132.0/24 Signature Algorithm: sha256WithRSAEncryption b7:10:b5:2f:c9:8b:c7:0a:ee:99:a3:c7:79:e3:1b:03:ff:a4: e7:54:b5:d8:07:a4:b3:51:7f:1c:22:28:61:ea:7c:2e:12:56: f9:da:07:4a:c7:82:98:be:56:29:2a:d4:36:63:1f:ad:7c:c3: a7:54:f9:d7:3c:d8:2d:96:42:a5:c8:f3:32:32:2f:07:8e:64: f9:ec:ed:11:06:10:01:af:99:5e:ab:78:e5:72:68:51:5f:66: 56:a0:53:eb:14:44:60:39:29:fc:7b:18:2f:85:49:24:1d:c6: d6:f4:88:26:c1:06:38:f3:ff:11:07:12:ac:19:e2:54:a7:d1: 6d:d6:b0:88:82:13:c5:4c:67:10:68:e8:c5:9c:e3:ae:68:dc: cf:cc:4c:c9:ac:b4:9a:38:bd:03:f2:22:69:1a:a6:29:00:3b: 90:26:d2:04:76:94:e9:77:51:b5:23:58:6e:6e:59:d7:e1:52: d7:5a:a4:9a:cb:fe:b0:e3:56:51:66:b5:cc:4d:93:ad:6e:da: 19:aa:82:e3:2c:8f:f0:85:df:19:6d:2b:97:26:5a:56:7c:b4: af:c2:e7:ce:db:d1:e5:32:4b:c2:6f:02:79:e6:0d:af:b4:76: d5:11:9d:0e:cd:4f:5c:1d:67:b0:04:e5:84:5a:67:38:09:d0: fd:60:23:e3 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgICIPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjYwOTMwMTYzMDQ2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkMzkzNi01YTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8t2KYj2F9XXihsH8EN1bDqD166IrVhbJOzRqhHHqcjP6YpmnY6U7mbJfZ5oE 9MIjxXazv6aoA6tWXDX3AyPO+vuat7zqzQU50bmBb4cdCO90kkgeaJULOCN8UXOB rK0dp/WW+ois4UzbmtUAoSN3vbzRU8lbm2Y03TaygMz5CiTqNuCdAPK2ctdThoGH n/3uHTzANjn9myrcW51KItMwIuATnLDETexWmokA+wJur/+S1VmhDVJfRFi0htmU 4azJt8m7nLv5CmqC03f0TZATIDdvyVHx9x/v1OWufY/7vkcUsfYBaJPuhuaLN6bw RCamn1rhbKqqis7awPhpeRy33QIDAQABo4IChjCCAoIwHQYDVR0OBBYEFDkIzVPT 8twtuaDR0yrZwkDdbWdCMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvRDM2Mjg2RjJE NTVDMTFFQUEyMjRFMDI2QzRGOUFFMDIucm9hMEUGCCsGAQUFBwEHAQH/BDYwNDAy BAIAATAsAwQEfONAAwQCfOOQAwQBymfWAwQAymf3MAwDBAPaFWgDBAPaFXADBADa QYQwDQYJKoZIhvcNAQELBQADggEBALcQtS/Ji8cK7pmjx3njGwP/pOdUtdgHpLNR fxwiKGHqfC4SVvnaB0rHgpi+Vikq1DZjH618w6dU+dc82C2WQqXI8zIyLweOZPns 7REGEAGvmV6reOVyaFFfZlagU+sURGA5Kfx7GC+FSSQdxtb0iCbBBjjz/xEHEqwZ 4lSn0W3WsIiCE8VMZxBo6MWc465o3M/MTMmstJo4vQPyImkapikAO5Am0gR2lOl3 UbUjWG5uWdfhUtdapJrL/rDjVlFmtcxNk61u2hmqguMsj/CF3xltK5cmWlZ8tK/C 587b0eUyS8JvAnnmDa+0dtURnQ7NT1wdZ7AE5YRaZzgJ0P1gI+M= -----END CERTIFICATE-----Generated at Tue Oct 27 16:34:22 2026 by rpki-client