$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/DFC84A5CB6F711F1BA4DC4E4A6EE528E.roa File: DFC84A5CB6F711F1BA4DC4E4A6EE528E.roa (raw, json) Hash identifier: WPAzyGHQmCwWXTOVH20Dy7jctrLe4/AdM09gflFSAHc= Subject key identifier: 15:6C:AA:45:D4:64:43:18:D4:04:82:D9:22:3B:C9:8D:C4:77:FF:FD Certificate issuer: /CN=A916D23A/serialNumber=D563B4D171A9239B7D99981E906A44468167BC26 Certificate serial: 02 Authority key identifier: D5:63:B4:D1:71:A9:23:9B:7D:99:98:1E:90:6A:44:46:81:67:BC:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WO00XGpI5t9mZgekGpERoFnvCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/DFC84A5CB6F711F1BA4DC4E4A6EE528E.roa Signing time: Wed 23 Sep 2026 02:38:35 +0000 ROA not before: Wed 23 Sep 2026 02:38:35 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 59362 IP address blocks: 45.251.228.0/22 maxlen: 22 45.251.228.0/23 maxlen: 24 45.251.230.0/23 maxlen: 24 103.220.204.0/22 maxlen: 24 2407:5c80::/32 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/1WO00XGpI5t9mZgekGpERoFnvCY.crl rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/1WO00XGpI5t9mZgekGpERoFnvCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WO00XGpI5t9mZgekGpERoFnvCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 19:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D23A, serialNumber=D563B4D171A9239B7D99981E906A44468167BC26 Validity Not Before: Sep 23 02:38:35 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6ab33bab-cd8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b1:c7:42:06:72:81:bb:7c:a1:b9:de:47:4b: fa:7a:cb:b0:f6:d3:fd:01:99:70:f0:62:cb:93:3e: ae:f8:02:fb:90:e3:37:f9:ee:a4:71:4a:97:96:dc: 37:36:7c:cb:68:43:bb:eb:e5:4a:dc:5e:65:19:45: 4f:d1:d0:a2:0f:c6:df:cd:25:32:f2:38:8f:bb:d2: db:0f:cc:31:d9:ee:05:75:fd:a4:5f:96:15:83:74: cf:3f:99:c9:d0:c3:f5:44:ec:17:cc:fd:b7:c0:3e: 6e:56:b8:30:86:8c:14:eb:37:37:88:b7:12:f1:84: 67:bf:e0:9f:04:83:12:7b:f9:24:86:bf:da:96:bd: 1b:ab:8f:15:9b:65:a7:24:85:63:50:c5:e3:64:b6: 2a:6d:2c:d7:39:7d:58:10:ce:2f:f1:f1:82:99:3e: 24:ed:3d:1d:f2:b7:10:69:e1:da:5c:92:bc:b4:6a: 6c:e6:71:b8:52:99:b6:9b:7c:b3:09:4e:19:f1:c3: c0:ef:9c:b9:f1:a1:30:8e:e5:3c:2c:fd:af:89:12: 29:37:37:b6:48:52:ba:36:69:b9:f4:ba:35:85:82: e2:57:3a:d3:45:96:67:ab:71:25:7f:eb:9d:67:3d: b0:00:fc:68:32:b7:6e:9f:16:db:6d:65:1f:fa:3d: 84:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6C:AA:45:D4:64:43:18:D4:04:82:D9:22:3B:C9:8D:C4:77:FF:FD X509v3 Authority Key Identifier: keyid:D5:63:B4:D1:71:A9:23:9B:7D:99:98:1E:90:6A:44:46:81:67:BC:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/1WO00XGpI5t9mZgekGpERoFnvCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WO00XGpI5t9mZgekGpERoFnvCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/DFC84A5CB6F711F1BA4DC4E4A6EE528E.roa sbgp-ipAddrBlock: critical IPv4: 45.251.228.0/22 103.220.204.0/22 IPv6: 2407:5c80::/32 Signature Algorithm: sha256WithRSAEncryption 6b:6e:b5:66:db:2a:e5:18:db:30:fa:47:75:d9:89:1d:11:ca: db:67:d7:34:f4:05:a5:fe:ad:12:4e:93:51:6a:d2:88:5f:2e: ec:c7:5d:05:1d:e1:d2:6b:d0:31:ea:a2:39:62:c8:a1:f7:bb: 93:c1:c9:fb:64:26:a6:c3:a3:f5:b4:2a:98:d3:63:53:3d:9f: 71:f1:86:a0:9e:1a:2c:03:f7:ea:fb:bd:6b:3e:20:88:66:87: 7b:43:75:4e:1e:4b:60:94:cc:11:47:ff:e4:43:e5:f4:c2:37: b5:89:c7:88:98:20:2f:6d:58:4c:91:f9:1e:27:f1:c0:94:d3: 9e:0d:aa:16:37:0c:6b:ee:88:99:b4:57:76:68:b4:93:18:b1: bd:dc:6c:64:06:aa:7b:fb:b5:a5:e0:f5:36:de:32:07:91:e3: 4e:69:79:0b:49:91:aa:e4:b1:d3:db:84:ba:69:03:85:f9:07: a1:be:c8:a0:1a:38:ff:69:eb:76:c5:df:25:64:b1:e1:76:e8: fc:9c:ac:21:c1:12:2a:a1:57:71:e9:74:07:07:12:f6:dd:cb: 43:c3:b8:f1:ff:be:8a:d8:5b:a8:11:b5:e5:6b:da:2a:c9:2b: cb:4b:70:bd:4e:2f:fc:60:77:5f:a3:b7:9f:e2:ec:c0:90:e4: 6d:8c:9a:70 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RDIzQTExMC8GA1UEBRMoRDU2M0I0RDE3MUE5MjM5QjdEOTk5ODFFOTA2QTQ0NDY4 MTY3QkMyNjAeFw0yNjA5MjMwMjM4MzVaFw0yNzA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYjMzYmFiLWNkOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6scdCBnKBu3yhud5HS/p6y7D20/0BmXDwYsuTPq74AvuQ4zf57qRxSpeW3Dc2 fMtoQ7vr5UrcXmUZRU/R0KIPxt/NJTLyOI+70tsPzDHZ7gV1/aRflhWDdM8/mcnQ w/VE7BfM/bfAPm5WuDCGjBTrNzeItxLxhGe/4J8EgxJ7+SSGv9qWvRurjxWbZack hWNQxeNktiptLNc5fVgQzi/x8YKZPiTtPR3ytxBp4dpckry0amzmcbhSmbabfLMJ Thnxw8DvnLnxoTCO5Tws/a+JEik3N7ZIUro2abn0ujWFguJXOtNFlmercSV/651n PbAA/Ggyt26fFtttZR/6PYSDAgMBAAGjggJ1MIICcTAdBgNVHQ4EFgQUFWyqRdRk QxjUBILZIjvJjcR3//0wHwYDVR0jBBgwFoAU1WO00XGpI5t9mZgekGpERoFnvCYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZEMjNBLzhFM0MxMjFFNDhE NTExRUE4MzM1MTc3MUM0RjlBRTAyLzFXTzAwWEdwSTV0OW1aZ2VrR3BFUm9GbnZD WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMVdPMDBYR3BJNXQ5bVpnZWtHcEVSb0ZudkNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDIzQS84RTNDMTIxRTQ4RDUxMUVBODMzNTE3NzFDNEY5QUUwMi9ERkM4NEE1Q0I2 RjcxMUYxQkE0REM0RTRBNkVFNTI4RS5yb2EwNAYIKwYBBQUHAQcBAf8EJTAjMBIE AgABMAwDBAIt++QDBAJn3MwwDQQCAAIwBwMFACQHXIAwDQYJKoZIhvcNAQELBQAD ggEBAGtutWbbKuUY2zD6R3XZiR0Ryttn1zT0BaX+rRJOk1Fq0ohfLuzHXQUd4dJr 0DHqojliyKH3u5PByftkJqbDo/W0KpjTY1M9n3HxhqCeGiwD9+r7vWs+IIhmh3tD dU4eS2CUzBFH/+RD5fTCN7WJx4iYIC9tWEyR+R4n8cCU054NqhY3DGvuiJm0V3Zo tJMYsb3cbGQGqnv7taXg9TbeMgeR405peQtJkarksdPbhLppA4X5B6G+yKAaOP9p 63bF3yVkseF26PycrCHBEiqhV3HpdAcHEvbdy0PDuPH/vorYW6gRteVr2irJK8tL cL1OL/xgd1+jt5/i7MCQ5G2MmnA= -----END CERTIFICATE-----Generated at Sat Oct 10 12:52:49 2026 by rpki-client