$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D7BBF774498911EF9ECB9967C4F9AE02.roa File: D7BBF774498911EF9ECB9967C4F9AE02.roa (raw, json) Hash identifier: kRmCkKz3hrwD2CjuPusuhDueDovYSYqwA3m+yXz/pnM= Subject key identifier: 33:00:8E:FE:56:DF:95:38:D4:4C:DC:8E:18:B7:C5:CA:68:57:BC:D5 Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 2104 Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D7BBF774498911EF9ECB9967C4F9AE02.roa Signing time: Wed 30 Sep 2026 16:31:06 +0000 ROA not before: Wed 30 Sep 2026 16:31:06 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 141679 IP address blocks: 218.30.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8452 (0x2104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Sep 30 16:31:06 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd394a-360f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:22:b4:be:78:d5:a7:de:2b:11:5b:2a:04:c5: c6:d9:a4:d9:52:98:7b:c8:45:ec:15:b4:7f:c3:5f: 90:40:41:3e:20:5f:0d:c7:30:e6:53:78:82:c1:f1: 57:b1:4a:46:aa:3d:b6:f5:10:ba:2f:72:08:d7:28: b8:19:97:fd:58:d5:5b:65:f9:23:df:0e:3b:7b:75: 94:a9:27:a3:99:60:fb:d4:65:ee:1a:a4:1a:5a:da: 52:95:fb:a1:54:cb:8f:3d:ac:c2:a6:40:07:49:e5: da:6d:d3:9e:0c:e5:08:5b:55:0f:73:17:53:bc:5c: 5e:b4:8f:28:0c:ca:46:fb:17:ac:9e:a0:44:e7:b7: 86:bc:a3:48:f5:e9:a8:d3:9d:56:57:e9:c6:2b:d2: 3c:63:c8:df:a3:2c:97:24:c6:bc:8d:c1:81:9e:6d: d8:71:8a:3d:c9:86:5f:df:de:99:fa:67:57:bf:f7: 49:77:f1:11:f1:da:f4:01:fe:d1:9b:70:6e:00:14: 3c:31:7c:f2:77:45:37:39:51:df:38:9a:6c:3a:94: 9c:ec:01:bd:bd:f2:80:0e:2e:a3:5c:0d:50:9e:9a: f6:12:df:f4:09:a4:d0:03:4b:89:4e:ca:62:0a:f7: 9e:01:78:c2:6d:7a:0c:aa:78:b2:5b:29:2e:1a:00: 3f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:00:8E:FE:56:DF:95:38:D4:4C:DC:8E:18:B7:C5:CA:68:57:BC:D5 X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D7BBF774498911EF9ECB9967C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 218.30.118.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:0f:4b:3c:d8:e4:7a:c5:d3:5b:3a:e7:67:26:e2:e9:2e:8f: ef:10:71:85:77:d2:a3:63:95:9c:eb:a1:16:0d:90:a1:f0:5f: 34:38:3b:1f:b6:34:43:e5:34:af:ff:38:7d:80:50:07:a5:33: ba:6b:55:ce:e6:6d:00:3c:b0:e2:95:1d:18:7a:30:56:e7:c5: 2f:39:ab:80:cc:d3:01:d5:78:78:18:08:c7:40:46:41:c0:15: b2:e2:e2:40:00:42:67:26:0a:e3:d0:75:f3:bf:fa:11:a1:f6: 78:0c:74:72:f5:f7:cc:52:6f:5b:40:b4:c7:bf:a4:ad:4c:c9: 18:86:1d:27:55:a0:11:1c:ff:bf:28:93:47:cc:4a:e7:4a:31: f7:f0:25:58:04:e1:27:71:e5:81:45:32:2d:4e:0d:4d:6a:9d: 4b:63:09:01:c5:39:db:38:63:11:91:9c:ad:55:3c:b7:45:da: a8:39:ec:e8:b4:8b:cb:1e:13:91:69:7a:6f:89:c6:de:5d:b8: 0c:35:9e:93:ea:18:db:8a:ae:35:ec:0c:86:32:b1:bd:a5:2c: b7:cf:bf:22:ff:c1:ba:55:31:fa:a3:45:ba:fc:84:51:cb:aa: 2e:c2:9e:d9:36:b5:4e:a9:db:2e:56:9a:b7:29:2c:75:b2:d0: 15:16:ee:fe -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICIQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjYwOTMwMTYzMTA2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkMzk0YS0zNjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3SK0vnjVp94rEVsqBMXG2aTZUph7yEXsFbR/w1+QQEE+IF8NxzDmU3iCwfFX sUpGqj229RC6L3II1yi4GZf9WNVbZfkj3w47e3WUqSejmWD71GXuGqQaWtpSlfuh VMuPPazCpkAHSeXabdOeDOUIW1UPcxdTvFxetI8oDMpG+xesnqBE57eGvKNI9emo 051WV+nGK9I8Y8jfoyyXJMa8jcGBnm3YcYo9yYZf396Z+mdXv/dJd/ER8dr0Af7R m3BuABQ8MXzyd0U3OVHfOJpsOpSc7AG9vfKADi6jXA1Qnpr2Et/0CaTQA0uJTspi CveeAXjCbXoMqniyWykuGgA/GQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDMAjv5W 35U41Ezcjhi3xcpoV7zVMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvRDdCQkY3NzQ0 OTg5MTFFRjlFQ0I5OTY3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQA2h52MA0GCSqGSIb3DQEBCwUAA4IBAQAMD0s82OR6xdNbOudnJuLp Lo/vEHGFd9KjY5Wc66EWDZCh8F80ODsftjRD5TSv/zh9gFAHpTO6a1XO5m0APLDi lR0YejBW58UvOauAzNMB1Xh4GAjHQEZBwBWy4uJAAEJnJgrj0HXzv/oRofZ4DHRy 9ffMUm9bQLTHv6StTMkYhh0nVaARHP+/KJNHzErnSjH38CVYBOEnceWBRTItTg1N ap1LYwkBxTnbOGMRkZytVTy3RdqoOezotIvLHhORaXpvicbeXbgMNZ6T6hjbiq41 7AyGMrG9pSy3z78i/8G6VTH6o0W6/IRRy6ouwp7ZNrVOqdsuVpq3KSx1stAVFu7+ -----END CERTIFICATE-----Generated at Wed Oct 28 14:06:25 2026 by rpki-client