$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D3CE622872D911E9B41E5B11C4F9AE02.roa File: D3CE622872D911E9B41E5B11C4F9AE02.roa (raw, json) Hash identifier: cyLwwY0HdNN3NbwEXa9UILpkXSSRNB+lovYuF50KX1Y= Subject key identifier: 90:38:5F:F8:BA:98:AD:5E:1F:4B:1D:93:5E:9A:10:F8:4C:CB:57:3F Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 211A Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D3CE622872D911E9B41E5B11C4F9AE02.roa Signing time: Wed 30 Sep 2026 16:31:57 +0000 ROA not before: Wed 30 Sep 2026 16:31:57 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 4847 IP address blocks: 115.171.0.0/16 maxlen: 16 115.171.0.0/18 maxlen: 18 115.171.64.0/18 maxlen: 18 115.171.128.0/18 maxlen: 18 115.171.192.0/18 maxlen: 18 218.30.179.0/24 maxlen: 24 218.30.180.0/24 maxlen: 24 218.30.181.0/24 maxlen: 24 218.30.182.0/24 maxlen: 24 240e:108:4001::/48 maxlen: 48 240e:108:4801::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8474 (0x211a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Sep 30 16:31:57 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd397d-4c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:60:74:82:3c:9b:3e:2e:78:15:86:b5:17: ad:97:8c:d2:85:fd:27:37:ec:1d:ea:94:77:1d:53: 8f:d4:0d:2a:33:43:2e:0c:f8:76:00:e7:60:27:92: d3:54:e2:f6:5c:7e:43:8d:d6:e6:80:8c:40:84:21: 45:1a:a7:bd:7f:ff:5b:17:3f:47:59:3c:d4:ed:77: c8:82:64:19:13:b4:83:7a:54:b4:78:12:83:24:87: 00:3b:62:48:f7:3e:5a:e0:bf:8e:b8:bc:0f:bb:15: d1:14:e3:cf:57:51:7e:97:f6:fa:0e:89:21:95:77: a1:7a:ac:46:93:53:10:e8:6f:8b:34:cf:94:c9:bb: f7:df:36:41:07:49:93:fa:65:e2:32:35:62:d0:88: 3d:f5:01:bd:fd:98:b3:b2:8d:fb:19:0b:69:1d:6f: 99:8b:c1:1a:fa:bc:49:16:c5:a8:59:f2:66:e3:10: 04:dd:4a:68:90:cc:48:5a:63:b2:1a:7d:28:30:85: be:95:0d:3f:a6:c4:11:da:17:ee:f4:89:bd:9f:79: 93:31:fd:7f:aa:b5:4e:d7:6f:4d:e8:85:84:9e:c8: 34:77:0f:be:76:ab:a8:0c:28:e5:7b:56:9a:71:7d: 70:53:f5:b9:f7:3a:7f:3f:f8:02:1c:e4:5c:3a:f9: 94:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:38:5F:F8:BA:98:AD:5E:1F:4B:1D:93:5E:9A:10:F8:4C:CB:57:3F X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D3CE622872D911E9B41E5B11C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 115.171.0.0/16 218.30.179.0-218.30.182.255 IPv6: 240e:108:4001::/48 240e:108:4801::/48 Signature Algorithm: sha256WithRSAEncryption bc:be:40:7b:75:c3:44:4d:11:99:a1:8f:61:4a:16:87:76:f3: e8:58:79:67:53:b3:d7:89:81:79:a9:51:b1:20:8c:92:4a:4c: a3:69:34:1f:c3:b6:56:f5:ef:93:b1:dd:d8:d2:ba:e0:f9:af: 9e:60:79:0c:93:c0:e4:cd:94:9a:53:4d:90:bb:eb:67:a4:96: a5:72:fa:a2:62:4d:6e:07:0c:56:e1:cd:72:14:b3:c8:3b:b4: a9:36:e1:b4:88:83:da:e9:f2:24:e1:9c:5e:68:ed:90:06:9e: b4:7d:e9:a7:8f:27:40:9a:38:ac:30:6a:f2:6a:70:b0:2d:c5: fb:99:10:60:d8:e9:c8:15:38:73:10:30:52:2c:90:a1:a2:e6: 00:99:19:ab:74:f3:53:cd:09:d3:76:22:31:c2:c8:98:98:9c: b9:48:77:39:c4:70:83:4b:f5:4d:e5:86:52:bd:af:b4:33:22: ce:6c:b5:d4:f4:6b:01:38:e8:cd:29:d6:d0:a7:98:38:e3:14: 2b:45:f8:55:c8:73:aa:60:d3:3c:6e:d6:49:ce:0d:7d:21:9d: 1f:2e:15:d8:95:61:ac:35:0c:0a:ae:f0:05:0f:96:a1:a4:37: 07:98:97:69:57:39:e7:b7:91:42:3a:07:47:b0:e9:75:f5:e0: 74:3b:8d:4d -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICIRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjYwOTMwMTYzMTU3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkMzk3ZC00YzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXVgdII8mz4ueBWGtRetl4zShf0nN+wd6pR3HVOP1A0qM0MuDPh2AOdgJ5LT VOL2XH5DjdbmgIxAhCFFGqe9f/9bFz9HWTzU7XfIgmQZE7SDelS0eBKDJIcAO2JI 9z5a4L+OuLwPuxXRFOPPV1F+l/b6DokhlXeheqxGk1MQ6G+LNM+Uybv33zZBB0mT +mXiMjVi0Ig99QG9/Zizso37GQtpHW+Zi8Ea+rxJFsWoWfJm4xAE3UpokMxIWmOy Gn0oMIW+lQ0/psQR2hfu9Im9n3mTMf1/qrVO129N6IWEnsg0dw++dquoDCjle1aa cX1wU/W59zp/P/gCHORcOvmUTQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFJA4X/i6 mK1eH0sdk16aEPhMy1c/MB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvRDNDRTYyMjg3 MkQ5MTFFOUI0MUU1QjExQzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAZ BAIAATATAwMAc6swDAMEANoeswMEANoetjAYBAIAAjASAwcAJA4BCEABAwcAJA4B CEgBMA0GCSqGSIb3DQEBCwUAA4IBAQC8vkB7dcNETRGZoY9hShaHdvPoWHlnU7PX iYF5qVGxIIySSkyjaTQfw7ZW9e+Tsd3Y0rrg+a+eYHkMk8DkzZSaU02Qu+tnpJal cvqiYk1uBwxW4c1yFLPIO7SpNuG0iIPa6fIk4ZxeaO2QBp60femnjydAmjisMGry anCwLcX7mRBg2OnIFThzEDBSLJChouYAmRmrdPNTzQnTdiIxwsiYmJy5SHc5xHCD S/VN5YZSva+0MyLObLXU9GsBOOjNKdbQp5g44xQrRfhVyHOqYNM8btZJzg19IZ0f LhXYlWGsNQwKrvAFD5ahpDcHmJdpVznnt5FCOgdHsOl19eB0O41N -----END CERTIFICATE-----Generated at Tue Oct 27 22:32:33 2026 by rpki-client