$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/E1E1C946E01611ED8385DA62C4F9AE02.roa File: E1E1C946E01611ED8385DA62C4F9AE02.roa (raw, json) Hash identifier: DGnzR1/8ZAYIbBr3dnBzx+A6vNuECzQtMlp/9z5Ib8Q= Subject key identifier: CB:27:FB:80:B9:4C:37:9D:5A:AD:F3:76:D4:D5:23:AC:5F:4D:28:ED Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 2119 Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/E1E1C946E01611ED8385DA62C4F9AE02.roa Signing time: Wed 30 Sep 2026 16:31:55 +0000 ROA not before: Wed 30 Sep 2026 16:31:55 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 4835 IP address blocks: 124.116.158.0/23 maxlen: 23 125.76.224.0/19 maxlen: 24 218.30.19.0/24 maxlen: 24 218.30.20.0/24 maxlen: 24 218.30.21.0/24 maxlen: 24 218.30.22.0/24 maxlen: 24 218.30.23.0/24 maxlen: 24 218.30.24.0/24 maxlen: 24 218.30.66.0/24 maxlen: 24 218.30.67.0/24 maxlen: 24 218.30.68.0/22 maxlen: 22 218.30.72.0/22 maxlen: 22 218.30.72.0/24 maxlen: 24 218.30.73.0/24 maxlen: 24 218.30.74.0/24 maxlen: 24 218.30.76.0/22 maxlen: 23 218.30.80.0/24 maxlen: 24 218.30.81.0/24 maxlen: 24 218.30.82.0/24 maxlen: 24 218.30.83.0/24 maxlen: 24 218.30.85.0/24 maxlen: 24 218.30.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 16:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8473 (0x2119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Sep 30 16:31:55 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd397b-01e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:61:ae:5d:78:b5:00:e2:75:50:c2:0b:14:43: 20:40:4c:35:7d:29:ef:e6:a4:eb:7b:6d:66:62:25: 88:df:27:1b:d2:43:2f:3a:35:2b:83:cd:e6:d8:77: 5b:8a:e3:74:ba:3e:df:1c:54:e9:89:51:5b:cb:7b: 32:3b:29:09:e2:d3:70:f3:5d:20:f8:01:de:64:76: 0f:c5:8b:14:fa:cb:aa:5e:ad:94:e1:93:35:ae:bc: a7:9b:04:03:3f:c3:b5:cb:f6:aa:9b:d9:24:1b:18: 02:a5:05:bf:10:4f:44:5d:4a:44:a8:00:1d:ef:17: b4:cb:a6:e1:d2:6c:dc:64:e7:8d:d8:ad:64:83:85: 71:4e:3d:25:a9:11:10:7c:39:e2:6e:84:1a:21:99: 58:51:da:82:0e:3e:e5:6c:6e:53:b5:a8:01:e9:86: a2:8f:31:c7:14:81:33:70:87:56:77:1f:bd:00:39: bb:81:50:35:26:64:ad:76:be:36:2f:78:d0:12:60: 1b:9c:da:8d:4f:a9:6d:8a:4d:18:79:18:30:88:71: c4:8a:e9:e3:4b:5c:94:38:71:3c:2e:54:28:5e:f0: 06:13:33:b7:bc:8e:05:7c:e8:8e:9a:af:b0:67:26: 94:02:00:27:20:68:07:d5:69:c2:b8:74:58:f6:c9: a9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:27:FB:80:B9:4C:37:9D:5A:AD:F3:76:D4:D5:23:AC:5F:4D:28:ED X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/E1E1C946E01611ED8385DA62C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 124.116.158.0/23 125.76.224.0/19 218.30.19.0-218.30.24.255 218.30.66.0-218.30.83.255 218.30.85.0/24 218.30.88.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:da:e7:20:40:c0:3f:33:dd:26:c9:61:58:57:e3:4a:42:4e: 59:ce:37:9e:3a:71:a3:66:56:59:a0:73:5b:ed:98:1a:74:00: 00:25:8d:b9:be:21:6d:92:57:ac:d2:3f:ed:47:41:5a:7a:1c: df:ac:c1:57:d3:11:21:54:97:29:35:28:ca:a9:e1:c4:0e:d8: f2:78:e6:58:51:0a:94:4b:d5:59:c8:4f:a5:fb:bc:72:62:9b: 78:f9:39:de:67:40:06:8d:aa:39:32:b5:cb:b6:7c:c5:c1:90: 49:d9:6a:22:e6:2b:81:a5:32:1e:55:d6:b1:23:96:5e:71:f3: f8:ae:b3:30:95:d6:91:54:99:d9:bf:04:87:c3:3b:32:c0:6a: 78:80:2b:aa:d9:15:3c:d2:d9:f3:f4:3c:ba:a1:44:af:f8:6a: 5a:26:49:9d:e9:d8:f8:05:65:ea:d3:ff:c9:5d:91:e6:a5:f1: 3b:cf:ad:ca:4f:37:b9:37:27:0e:4a:41:28:fc:91:81:3d:bf: 41:bf:cc:ac:f5:58:bf:a2:f1:47:b7:11:c1:32:4b:c8:21:49: 4c:f2:68:ae:58:cf:de:a4:00:23:11:4d:47:ce:8e:44:15:96: 28:d3:9b:fc:aa:34:50:d6:c0:84:42:89:b3:94:cf:98:61:5a: 50:7c:98:3b -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgICIRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjYwOTMwMTYzMTU1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkMzk3Yi0wMWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2GuXXi1AOJ1UMILFEMgQEw1fSnv5qTre21mYiWI3ycb0kMvOjUrg83m2Hdb iuN0uj7fHFTpiVFby3syOykJ4tNw810g+AHeZHYPxYsU+suqXq2U4ZM1rrynmwQD P8O1y/aqm9kkGxgCpQW/EE9EXUpEqAAd7xe0y6bh0mzcZOeN2K1kg4VxTj0lqREQ fDniboQaIZlYUdqCDj7lbG5TtagB6YaijzHHFIEzcIdWdx+9ADm7gVA1JmStdr42 L3jQEmAbnNqNT6ltik0YeRgwiHHEiunjS1yUOHE8LlQoXvAGEzO3vI4FfOiOmq+w ZyaUAgAnIGgH1WnCuHRY9smpfwIDAQABo4ICjjCCAoowHQYDVR0OBBYEFMsn+4C5 TDedWq3zdtTVI6xfTSjtMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvRTFFMUM5NDZF MDE2MTFFRDgzODVEQTYyQzRGOUFFMDIucm9hME0GCCsGAQUFBwEHAQH/BD4wPDA6 BAIAATA0AwQBfHSeAwQFfUzgMAwDBADaHhMDBADaHhgwDAMEAdoeQgMEAtoeUAME ANoeVQMEAtoeWDANBgkqhkiG9w0BAQsFAAOCAQEAW9rnIEDAPzPdJslhWFfjSkJO Wc43njpxo2ZWWaBzW+2YGnQAACWNub4hbZJXrNI/7UdBWnoc36zBV9MRIVSXKTUo yqnhxA7Y8njmWFEKlEvVWchPpfu8cmKbePk53mdABo2qOTK1y7Z8xcGQSdlqIuYr gaUyHlXWsSOWXnHz+K6zMJXWkVSZ2b8Eh8M7MsBqeIArqtkVPNLZ8/Q8uqFEr/hq WiZJnenY+AVl6tP/yV2R5qXxO8+tyk83uTcnDkpBKPyRgT2/Qb/MrPVYv6LxR7cR wTJLyCFJTPJorljP3qQAIxFNR86ORBWWKNOb/Ko0UNbAhEKJs5TPmGFaUHyYOw== -----END CERTIFICATE-----Generated at Wed Oct 28 22:51:25 2026 by rpki-client