$ rpki-client -vvf rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/F268590C1B9911ED9A50C30EC4F9AE02.roa File: F268590C1B9911ED9A50C30EC4F9AE02.roa (raw, json) Hash identifier: Im0kZv5va3DbJ8z323rnmgA9B8R/OKM++S+e6kg2R8Q= Subject key identifier: B9:76:76:A8:59:A3:B1:03:A2:10:04:EC:3E:37:65:FA:9B:59:53:B0 Certificate issuer: /CN=A916A171/serialNumber=ECE6D74729A9B649512CFCE78B2DAFCEC146973A Certificate serial: 0D8C Authority key identifier: EC:E6:D7:47:29:A9:B6:49:51:2C:FC:E7:8B:2D:AF:CE:C1:46:97:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/F268590C1B9911ED9A50C30EC4F9AE02.roa Signing time: Tue 04 Aug 2026 18:35:22 +0000 ROA not before: Tue 04 Aug 2026 18:35:22 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 45905 IP address blocks: 45.118.244.0/22 maxlen: 24 45.126.74.0/23 maxlen: 24 103.59.36.0/22 maxlen: 24 103.96.36.0/22 maxlen: 24 123.253.196.0/24 maxlen: 24 123.253.197.0/24 maxlen: 24 123.253.198.0/24 maxlen: 24 123.253.199.0/24 maxlen: 24 180.148.208.0/21 maxlen: 24 2405:86c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.crl rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3468 (0xd8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A171, serialNumber=ECE6D74729A9B649512CFCE78B2DAFCEC146973A Validity Not Before: Aug 4 18:35:22 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a7230ea-e3f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:fa:03:ee:ec:30:82:8f:27:41:de:21:42:67: a0:c7:e2:64:41:e2:c2:71:7b:cf:75:2b:d9:42:db: b2:4a:9c:b3:af:e1:33:59:35:30:b7:b8:07:42:4f: 89:c9:a3:12:0d:2a:65:eb:83:df:fa:d2:d0:a6:67: c0:e4:b5:55:68:2e:56:75:dd:43:2b:c7:6c:03:27: e6:1d:52:0a:60:62:63:28:86:70:2b:7d:92:8b:24: 3f:cb:ab:b1:ba:50:e4:a8:a1:c5:8d:43:89:5d:42: 8f:2e:62:49:dc:5d:c1:90:39:af:7e:8f:fe:7d:57: c3:ad:a2:64:0c:b3:e3:bb:ff:a1:5b:87:75:90:16: 45:5e:24:64:2b:93:89:74:c1:00:19:be:77:04:5b: a2:1b:b7:76:0b:4b:f9:e5:a0:66:64:56:1b:ce:59: 41:10:61:09:dc:cc:bd:72:71:80:a6:47:aa:cc:b2: 56:40:e1:48:9d:33:89:ea:fd:4a:3a:b4:98:32:7c: ac:f2:aa:fb:01:7c:a9:47:e4:6e:59:92:12:26:db: ff:3d:6b:b2:81:2c:64:67:ce:9e:a2:d1:19:c8:3a: bb:ff:6e:33:26:9a:17:21:76:01:0f:ca:51:c7:19: 02:8e:41:d5:53:81:56:d1:d3:b8:d8:b3:ec:bb:73: 4f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:76:76:A8:59:A3:B1:03:A2:10:04:EC:3E:37:65:FA:9B:59:53:B0 X509v3 Authority Key Identifier: keyid:EC:E6:D7:47:29:A9:B6:49:51:2C:FC:E7:8B:2D:AF:CE:C1:46:97:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/7ObXRymptklRLPzniy2vzsFGlzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ObXRymptklRLPzniy2vzsFGlzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A171/4F57E9BEF49911E98F37DC1CC4F9AE02/F268590C1B9911ED9A50C30EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.118.244.0/22 45.126.74.0/23 103.59.36.0/22 103.96.36.0/22 123.253.196.0/22 180.148.208.0/21 IPv6: 2405:86c0::/32 Signature Algorithm: sha256WithRSAEncryption 9e:de:24:f6:4b:a4:88:f0:4c:0c:a1:ce:d8:99:f9:a5:07:ab: ba:72:65:cd:50:99:c3:9a:78:b0:5c:d9:6d:0c:59:bf:8d:e7: 97:38:c1:45:7f:05:c3:46:c5:f2:10:ce:ee:4d:a1:45:fb:45: 85:15:87:2f:fb:fa:ff:4b:fd:31:81:06:c3:5e:d7:35:8d:df: 64:fc:60:f3:10:6d:34:cc:20:94:b1:6f:a6:e1:70:1f:93:67: e9:1b:7e:74:9b:32:b1:33:e6:74:ea:d8:57:bc:00:58:f6:29: 40:0e:c1:a8:3e:80:cb:9c:36:85:89:05:75:a5:83:8e:be:28: ea:5c:2e:85:58:be:1a:1a:7f:72:85:ec:42:09:f2:32:81:54: 01:06:f5:b9:ca:6d:a2:7c:14:52:cc:1b:19:50:34:af:07:55: 2b:3b:e5:1d:e6:ac:bd:92:c7:8d:0d:7e:b4:c4:78:44:40:54: 23:3b:7d:b1:7e:ce:7c:a1:a0:d7:37:b6:e7:ce:bf:cd:3b:21: 9b:64:d8:c4:c2:dc:1b:31:79:d3:eb:1c:87:b3:6e:ad:f8:65: a7:52:bb:2f:14:2d:a5:88:e9:3b:cc:fc:c2:4b:f4:12:cc:12: 16:54:c5:ad:4f:53:7e:1c:bd:d3:7b:4e:2b:c3:e6:e3:9e:64: 0a:90:12:8e -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgICDYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkExNzExMTAvBgNVBAUTKEVDRTZENzQ3MjlBOUI2NDk1MTJDRkNFNzhCMkRBRkNF QzE0Njk3M0EwHhcNMjYwODA0MTgzNTIyWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTcyMzBlYS1lM2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+PoD7uwwgo8nQd4hQmegx+JkQeLCcXvPdSvZQtuySpyzr+EzWTUwt7gHQk+J yaMSDSpl64Pf+tLQpmfA5LVVaC5Wdd1DK8dsAyfmHVIKYGJjKIZwK32SiyQ/y6ux ulDkqKHFjUOJXUKPLmJJ3F3BkDmvfo/+fVfDraJkDLPju/+hW4d1kBZFXiRkK5OJ dMEAGb53BFuiG7d2C0v55aBmZFYbzllBEGEJ3My9cnGApkeqzLJWQOFInTOJ6v1K OrSYMnys8qr7AXypR+RuWZISJtv/PWuygSxkZ86eotEZyDq7/24zJpoXIXYBD8pR xxkCjkHVU4FW0dO42LPsu3NPMwIDAQABo4ICjTCCAokwHQYDVR0OBBYEFLl2dqhZ o7EDohAE7D43ZfqbWVOwMB8GA1UdIwQYMBaAFOzm10cpqbZJUSz854str87BRpc6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTE3MS80RjU3RTlCRUY0 OTkxMUU5OEYzN0RDMUNDNEY5QUUwMi83T2JYUnltcHRrbFJMUHpuaXkydnpzRkds em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdPYlhSeW1wdGtsUkxQem5peTJ2enNGR2x6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkExNzEvNEY1N0U5QkVGNDk5MTFFOThGMzdEQzFDQzRGOUFFMDIvRjI2ODU5MEMx Qjk5MTFFRDlBNTBDMzBFQzRGOUFFMDIucm9hMEwGCCsGAQUFBwEHAQH/BD0wOzAq BAIAATAkAwQCLXb0AwQBLX5KAwQCZzskAwQCZ2AkAwQCe/3EAwQDtJTQMA0EAgAC MAcDBQAkBYbAMA0GCSqGSIb3DQEBCwUAA4IBAQCe3iT2S6SI8EwMoc7YmfmlB6u6 cmXNUJnDmniwXNltDFm/jeeXOMFFfwXDRsXyEM7uTaFF+0WFFYcv+/r/S/0xgQbD Xtc1jd9k/GDzEG00zCCUsW+m4XAfk2fpG350mzKxM+Z06thXvABY9ilADsGoPoDL nDaFiQV1pYOOvijqXC6FWL4aGn9yhexCCfIygVQBBvW5ym2ifBRSzBsZUDSvB1Ur O+Ud5qy9kseNDX60xHhEQFQjO32xfs58oaDXN7bnzr/NOyGbZNjEwtwbMXnT6xyH s26t+GWnUrsvFC2liOk7zPzCS/QSzBIWVMWtT1N+HL3Te04rw+bjnmQKkBKO -----END CERTIFICATE-----Generated at Wed Aug 19 16:01:55 2026 by rpki-client