$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/42F4260E86F211F1B8F66003A7EE528E.roa File: 42F4260E86F211F1B8F66003A7EE528E.roa (raw, json) Hash identifier: vfUZixrUj69f8oGm3SJCT4P/nwbYiHNMmZYHs7EynG4= Subject key identifier: 19:6D:71:FF:99:28:B3:41:8D:28:59:E0:27:99:72:45:3A:EB:56:D2 Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Certificate serial: 0838 Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/42F4260E86F211F1B8F66003A7EE528E.roa Signing time: Wed 26 Aug 2026 22:43:52 +0000 ROA not before: Wed 26 Aug 2026 22:43:52 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 134540 IP address blocks: 14.96.64.0/20 maxlen: 24 14.96.80.0/20 maxlen: 24 14.96.96.0/20 maxlen: 24 14.96.112.0/20 maxlen: 24 2406:e00::/48 maxlen: 51 2406:e00:1::/48 maxlen: 51 2406:e00:2::/48 maxlen: 51 2406:e00:3::/48 maxlen: 51 2406:e00:4::/48 maxlen: 51 2406:e00:5::/48 maxlen: 51 2406:e00:6::/48 maxlen: 51 2406:e00:7::/48 maxlen: 51 2406:e00:8::/48 maxlen: 51 2406:e00:a::/48 maxlen: 51 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 22:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2104 (0x838) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Validity Not Before: Aug 26 22:43:52 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a8f6c27-d8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9d:75:d2:04:03:90:c2:ff:6c:7c:7b:05:4a: 54:4c:42:59:43:f8:1a:c4:85:87:5e:f3:54:ec:57: 98:b7:5f:ff:8e:35:b9:d2:ea:8b:d3:ea:22:75:ef: bf:1f:cf:9e:88:33:0e:c7:0d:21:22:df:d5:d1:d7: 4a:75:e7:cf:64:3b:54:3b:1f:25:98:7a:ef:8c:9a: a2:27:68:04:d3:eb:df:c7:7b:70:33:97:80:76:c3: 2f:43:92:64:8e:fc:d9:c8:37:9e:25:1c:9c:4d:62: fa:b6:8a:9e:06:e7:b4:34:fd:03:fc:3e:3e:40:00: c2:92:6b:cb:23:25:b5:f8:dd:61:e2:64:b9:2a:52: d3:93:e1:e8:08:a8:96:66:60:03:a2:a6:9b:a3:54: 2e:cb:8f:30:88:cb:27:67:a1:ef:9b:9b:99:87:34: 70:df:3b:23:ec:35:ce:a5:3f:87:75:4a:08:f8:a0: 13:d3:df:42:02:91:33:fc:66:d0:17:3f:eb:a1:1b: 6b:64:9f:a5:15:9a:29:82:e8:bc:bc:ce:39:4b:fd: a7:03:b4:00:42:9b:31:65:37:bd:46:87:14:6f:54: 0d:83:4f:53:a8:1f:59:b2:45:37:d7:67:fd:50:56: 9c:4a:1d:20:a1:58:4f:aa:8b:f8:c8:32:3f:0c:4c: 86:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:6D:71:FF:99:28:B3:41:8D:28:59:E0:27:99:72:45:3A:EB:56:D2 X509v3 Authority Key Identifier: keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/42F4260E86F211F1B8F66003A7EE528E.roa sbgp-ipAddrBlock: critical IPv4: 14.96.64.0/18 IPv6: 2406:e00::-2406:e00:8:ffff:ffff:ffff:ffff:ffff 2406:e00:a::/48 Signature Algorithm: sha256WithRSAEncryption 1c:94:04:1c:1a:b3:ff:a8:9c:14:64:96:28:f6:13:d0:db:ca: ef:dd:59:93:de:f7:bf:1e:dc:e7:61:92:5f:9c:45:c5:15:06: d9:e3:8d:b9:61:6e:33:cc:a4:1c:b5:b4:34:91:b2:db:bb:d7: 17:8a:5e:a6:d0:68:6a:b0:c4:5b:98:b7:8e:83:8a:26:b7:54: 42:a8:80:51:08:f2:3d:e8:ba:fe:6e:7d:79:84:42:ad:37:2d: 73:93:a8:76:a0:2d:25:bb:03:56:01:81:fa:43:ec:90:c4:6c: 66:46:19:d9:07:cf:94:7c:07:bf:d8:26:85:3d:6f:4c:b7:c5: 0b:6a:5d:6b:40:84:eb:02:ff:8c:18:71:89:d8:76:30:d5:ca: ad:f0:9d:7b:b7:44:3c:dc:58:49:ac:04:75:8c:20:7f:35:91: 59:4f:4b:ec:68:3f:f4:38:60:0c:5e:d7:68:e4:08:f9:88:01: e2:ba:9a:c0:cd:05:fc:51:8f:60:c0:2b:b9:bc:11:f3:b1:41: 2d:15:59:4f:dd:d1:f1:ba:82:24:a8:83:42:a6:62:67:77:9a: 72:96:85:56:9c:2b:2d:3a:44:40:63:2d:ba:25:7b:12:10:19: 9b:9e:fe:a6:16:09:69:fd:d2:a5:53:49:ab:3e:3c:33:8c:fc: b0:ea:35:e8 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICCDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RFQTQxMTAvBgNVBAUTKEI0RDZGRkQ1REZGOUVBQzQxM0FCNDQwOEUwOTYzN0Iw OTQ5NERCQzgwHhcNMjYwODI2MjI0MzUyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YThmNmMyNy1kOGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyp110gQDkML/bHx7BUpUTEJZQ/gaxIWHXvNU7FeYt1//jjW50uqL0+oide+/ H8+eiDMOxw0hIt/V0ddKdefPZDtUOx8lmHrvjJqiJ2gE0+vfx3twM5eAdsMvQ5Jk jvzZyDeeJRycTWL6toqeBue0NP0D/D4+QADCkmvLIyW1+N1h4mS5KlLTk+HoCKiW ZmADoqabo1Quy48wiMsnZ6Hvm5uZhzRw3zsj7DXOpT+HdUoI+KAT099CApEz/GbQ Fz/roRtrZJ+lFZopgui8vM45S/2nA7QAQpsxZTe9RocUb1QNg09TqB9ZskU312f9 UFacSh0goVhPqov4yDI/DEyGdwIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFBltcf+Z KLNBjShZ4CeZckU661bSMB8GA1UdIwQYMBaAFLTW/9Xf+erEE6tECOCWN7CUlNvI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REVBNC9BMjQyNkI2MDk4 MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZzUVRxMFFJNEpZM3NKU1Uy OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROYl8xZF81NnNRVHEwUUk0Slkzc0pTVTI4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0RFQTQvQTI0MjZCNjA5ODI5MTFFQkI3ODgyMDgxQzRGOUFFMDIvNDJGNDI2MEU4 NkYyMTFGMUI4RjY2MDAzQTdFRTUyOEUucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAM BAIAATAGAwQGDmBAMCAEAgACMBowDwMEASQGDgMHACQGDgAACAMHACQGDgAACjAN BgkqhkiG9w0BAQsFAAOCAQEAHJQEHBqz/6icFGSWKPYT0NvK791Zk973vx7c52GS X5xFxRUG2eONuWFuM8ykHLW0NJGy27vXF4peptBoarDEW5i3joOKJrdUQqiAUQjy Pei6/m59eYRCrTctc5OodqAtJbsDVgGB+kPskMRsZkYZ2QfPlHwHv9gmhT1vTLfF C2pda0CE6wL/jBhxidh2MNXKrfCde7dEPNxYSawEdYwgfzWRWU9L7Gg/9DhgDF7X aOQI+YgB4rqawM0F/FGPYMArubwR87FBLRVZT93R8bqCJKiDQqZiZ3eacpaFVpwr LTpEQGMtuiV7EhAZm57+phYJaf3SpVNJqz48M4z8sOo16A== -----END CERTIFICATE-----Generated at Tue Sep 1 03:59:46 2026 by rpki-client