$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/688029EE184B11EA85906435C4F9AE02.roa File: 688029EE184B11EA85906435C4F9AE02.roa (raw, json) Hash identifier: awV0Cg1W0G3u4HVLzcNkFqKiIPw0PDxHgtbD73K8wX0= Subject key identifier: F4:B7:C6:E7:A5:5B:81:B9:CC:95:F7:00:72:29:E2:C1:19:89:3D:71 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3B80 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/688029EE184B11EA85906435C4F9AE02.roa Signing time: Thu 20 Aug 2026 16:23:02 +0000 ROA not before: Thu 20 Aug 2026 16:23:02 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 133823 IP address blocks: 45.116.156.0/24 maxlen: 24 45.116.157.0/24 maxlen: 24 45.116.158.0/24 maxlen: 24 45.116.159.0/24 maxlen: 24 103.54.93.0/24 maxlen: 24 103.54.94.0/24 maxlen: 24 103.54.95.0/24 maxlen: 24 103.104.132.0/24 maxlen: 24 103.104.133.0/24 maxlen: 24 103.104.134.0/24 maxlen: 24 103.104.135.0/24 maxlen: 24 103.111.196.0/24 maxlen: 24 103.111.197.0/24 maxlen: 24 103.111.198.0/24 maxlen: 24 103.111.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 15:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15232 (0x3b80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Aug 20 16:23:02 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a8729e6-ca23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:51:3a:6e:80:41:d4:66:a6:b3:3e:cf:1a:44: ff:df:a6:65:ef:b0:35:53:80:cc:80:71:41:63:9e: 44:18:55:f8:37:3b:57:4f:8c:0b:8e:a6:0c:ca:90: b0:84:99:03:fc:bb:c2:38:43:6b:cc:ce:f1:c5:63: 1b:4d:c7:b7:ea:27:51:49:84:b1:da:36:e9:e0:98: f9:d4:28:f6:ed:a2:b6:c4:2f:a7:a2:f6:28:96:97: 61:99:4b:96:60:60:47:2e:a3:17:61:d4:b8:b8:31: 09:c8:6f:bb:39:a0:d7:23:56:5e:93:bf:9c:4e:11: 3f:4e:49:d0:bc:5d:1f:ea:88:91:a9:9e:30:2a:8f: 70:0b:1d:ba:02:e6:13:12:48:87:ff:01:00:1b:64: 3e:58:2e:2c:79:29:cc:88:54:97:43:72:e4:ef:10: 31:81:09:1a:f3:b3:67:6c:a6:e6:0d:92:26:43:c9: 78:5e:1f:2e:79:c3:84:c6:d0:74:54:0f:2e:54:d0: 3a:ce:56:de:4f:b6:a8:47:4b:40:9a:7f:be:98:0d: 47:fc:2e:65:51:70:52:0d:b4:d0:13:1c:1f:56:ee: 9a:fa:24:12:4f:76:7b:34:67:6f:d7:3a:39:32:15: 68:90:0b:92:ee:8b:50:36:b9:0c:09:d6:25:ed:42: de:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B7:C6:E7:A5:5B:81:B9:CC:95:F7:00:72:29:E2:C1:19:89:3D:71 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/688029EE184B11EA85906435C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.116.156.0/22 103.54.93.0-103.54.95.255 103.104.132.0/22 103.111.196.0/22 Signature Algorithm: sha256WithRSAEncryption a0:cc:62:ed:3b:e6:b6:cf:32:e3:a9:95:10:01:cf:1c:ef:79: 62:7a:db:97:1a:f9:82:3e:39:39:69:90:04:1f:56:07:cb:45: 5d:9f:08:98:2a:2c:6a:4f:0b:53:98:90:8b:55:76:18:3c:82: 8c:67:20:7c:f7:cc:15:61:d2:96:d2:c4:94:dc:f9:1c:ef:1b: b7:20:80:6b:b0:e3:e6:d0:f0:af:97:4d:24:10:1a:15:e8:6d: 3c:cd:87:75:d3:9d:89:be:7f:fe:b0:c3:87:32:0d:b6:d3:8a: 30:1f:de:ab:ed:01:77:1c:fc:53:e1:1d:7c:c0:74:90:b1:04: 06:a9:fb:80:e4:70:22:79:61:a5:a4:f8:0f:38:d4:c8:29:b2: 95:55:3d:ad:2f:69:a3:24:dd:25:16:e0:12:cd:5e:34:88:62: 65:5c:e5:ca:4d:bd:1c:92:92:d0:9a:68:fc:7e:bb:c6:1e:22: 5c:5c:bf:50:4e:fe:b3:c1:4e:63:83:3d:86:c8:0b:34:70:1e: 84:20:88:cc:1a:61:af:b5:63:52:77:d9:68:59:bb:72:68:f8: cb:c6:00:0a:bf:b7:5a:a9:16:dc:80:c5:b7:8f:ef:83:4a:08: 36:4b:36:4a:c3:f3:bf:22:cb:5d:e2:1e:2e:ac:d6:5e:bd:08: 82:1e:5f:ab -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICO4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjYwODIwMTYyMzAyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg3MjllNi1jYTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFE6boBB1Gamsz7PGkT/36Zl77A1U4DMgHFBY55EGFX4NztXT4wLjqYMypCw hJkD/LvCOENrzM7xxWMbTce36idRSYSx2jbp4Jj51Cj27aK2xC+novYolpdhmUuW YGBHLqMXYdS4uDEJyG+7OaDXI1Zek7+cThE/TknQvF0f6oiRqZ4wKo9wCx26AuYT EkiH/wEAG2Q+WC4seSnMiFSXQ3Lk7xAxgQka87NnbKbmDZImQ8l4Xh8uecOExtB0 VA8uVNA6zlbeT7aoR0tAmn++mA1H/C5lUXBSDbTQExwfVu6a+iQST3Z7NGdv1zo5 MhVokAuS7otQNrkMCdYl7ULe7wIDAQABo4ICejCCAnYwHQYDVR0OBBYEFPS3xuel W4G5zJX3AHIp4sEZiT1xMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvNjg4MDI5RUUx ODRCMTFFQTg1OTA2NDM1QzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQCLXScMAwDBABnNl0DBAVnNkADBAJnaIQDBAJnb8QwDQYJKoZIhvcN AQELBQADggEBAKDMYu075rbPMuOplRABzxzveWJ625ca+YI+OTlpkAQfVgfLRV2f CJgqLGpPC1OYkItVdhg8goxnIHz3zBVh0pbSxJTc+RzvG7cggGuw4+bQ8K+XTSQQ GhXobTzNh3XTnYm+f/6ww4cyDbbTijAf3qvtAXcc/FPhHXzAdJCxBAap+4DkcCJ5 YaWk+A841MgpspVVPa0vaaMk3SUW4BLNXjSIYmVc5cpNvRySktCaaPx+u8YeIlxc v1BO/rPBTmODPYbICzRwHoQgiMwaYa+1Y1J32WhZu3Jo+MvGAAq/t1qpFtyAxbeP 74NKCDZLNkrD878iy13iHi6s1l69CIIeX6s= -----END CERTIFICATE-----Generated at Thu Sep 10 20:31:27 2026 by rpki-client