$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/B883270E356B11E7A51C314CC4F9AE02.roa File: B883270E356B11E7A51C314CC4F9AE02.roa (raw, json) Hash identifier: uCruIi6MxVYOqaafDxcv1kc8VEHh/zCOLmH+2sl7OHQ= Subject key identifier: 94:8C:24:09:F8:13:35:12:0C:FC:91:40:B5:38:70:4E:02:13:B9:C3 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3BA3 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/B883270E356B11E7A51C314CC4F9AE02.roa Signing time: Thu 20 Aug 2026 16:24:12 +0000 ROA not before: Thu 20 Aug 2026 16:24:12 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 38778 IP address blocks: 45.64.4.0/22 maxlen: 22 45.64.4.0/23 maxlen: 23 45.64.4.0/24 maxlen: 24 45.64.5.0/24 maxlen: 24 45.64.6.0/23 maxlen: 23 45.64.6.0/24 maxlen: 24 45.64.7.0/24 maxlen: 24 103.228.236.0/22 maxlen: 22 103.228.236.0/23 maxlen: 23 103.228.236.0/24 maxlen: 24 103.228.237.0/24 maxlen: 24 103.228.238.0/23 maxlen: 23 103.228.238.0/24 maxlen: 24 103.228.239.0/24 maxlen: 24 115.69.216.0/21 maxlen: 21 115.69.216.0/22 maxlen: 22 115.69.216.0/23 maxlen: 23 115.69.216.0/24 maxlen: 24 115.69.217.0/24 maxlen: 24 115.69.218.0/23 maxlen: 23 115.69.218.0/24 maxlen: 24 115.69.219.0/24 maxlen: 24 115.69.220.0/22 maxlen: 22 115.69.220.0/23 maxlen: 23 115.69.220.0/24 maxlen: 24 115.69.221.0/24 maxlen: 24 115.69.222.0/23 maxlen: 23 115.69.222.0/24 maxlen: 24 115.69.223.0/24 maxlen: 24 2407:f900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 15:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15267 (0x3ba3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Aug 20 16:24:12 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a872a2c-1542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4a:40:3e:00:1e:8d:0e:2f:cb:fe:74:7b:23: 6e:8e:dd:61:a6:98:77:38:36:bc:bb:a4:c7:41:33: a9:86:7e:f1:25:69:3e:fa:64:81:49:9b:3a:10:1d: b1:5b:88:f4:d5:a7:9b:5f:69:df:aa:d5:72:4c:b0: 3c:8b:d8:79:ff:52:d2:ca:7f:97:53:a2:e3:1e:fe: 04:ec:1f:34:86:0f:35:2c:bf:e9:af:93:e3:10:f1: 5f:27:ff:06:55:cc:93:90:fa:7f:9b:20:9a:6a:b2: 7c:ed:10:78:da:29:c1:57:a8:35:f1:c0:29:d0:94: 24:93:95:d3:85:43:07:18:3b:f4:f7:03:bc:11:d9: 60:78:dc:61:f6:db:54:3c:43:20:b9:60:c2:14:11: 1e:e0:89:6c:00:b9:f9:ac:30:10:88:73:af:eb:ac: e9:a8:dd:ba:8f:c6:72:b5:a7:76:87:99:97:a4:4d: 14:f8:1a:51:9b:c7:a3:69:96:a0:08:f0:00:e0:61: 57:1a:38:ab:3c:5b:32:a6:97:67:0e:ad:cc:22:0e: 4a:91:7c:8d:e5:99:af:ae:75:b3:d5:ec:7b:0f:8d: 4c:fa:58:0b:f3:d2:55:07:fa:e1:b0:46:86:c8:19: 64:ab:c3:b3:e7:19:42:52:7f:15:0a:b6:b9:b1:a5: 4a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8C:24:09:F8:13:35:12:0C:FC:91:40:B5:38:70:4E:02:13:B9:C3 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/B883270E356B11E7A51C314CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.64.4.0/22 103.228.236.0/22 115.69.216.0/21 IPv6: 2407:f900::/32 Signature Algorithm: sha256WithRSAEncryption ab:67:77:4b:08:8c:f3:0e:81:0a:a3:e4:6f:2f:ca:1b:0f:b9: 85:18:56:62:b2:c5:4b:c5:85:a5:5a:d6:41:09:bf:56:a5:73: 5d:7a:02:ec:4f:4b:68:9c:29:e8:99:ef:8a:24:a6:74:66:af: d7:1f:fe:25:15:f2:16:f9:5f:95:46:36:0a:c8:6b:2f:75:10: 9b:bd:a4:04:65:67:38:22:5b:4e:6f:0a:33:1e:ab:08:7a:ba: 1f:09:e6:e3:40:9a:1e:d7:c5:c3:36:22:19:0a:0a:cc:ad:83: ef:94:0f:39:05:9a:09:45:5a:b7:1c:2e:c2:e5:c2:3e:b1:be: a6:5e:18:63:c1:0c:20:64:6f:5e:c3:07:e2:aa:09:15:57:46: bb:ec:78:36:7a:ef:2f:5d:74:80:56:5e:d2:8c:25:62:b6:aa: 9a:ab:60:28:f1:72:72:92:10:92:b4:74:2b:4d:e6:59:f8:3a: e6:b5:ef:eb:d1:ee:36:c2:04:c0:2f:7a:a0:f6:09:f0:df:5c: 45:b5:08:e5:2c:23:ed:9c:7c:70:3e:84:f5:a0:20:04:e1:76: 90:04:18:89:07:6a:61:d1:96:70:3f:bc:6b:29:cf:2e:66:29: ae:e7:52:23:a9:0f:7e:f0:0e:05:6b:1f:57:5c:e1:d6:de:2a: 85:56:b9:b2 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICO6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjYwODIwMTYyNDEyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg3MmEyYy0xNTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykpAPgAejQ4vy/50eyNujt1hpph3ODa8u6THQTOphn7xJWk++mSBSZs6EB2x W4j01aebX2nfqtVyTLA8i9h5/1LSyn+XU6LjHv4E7B80hg81LL/pr5PjEPFfJ/8G VcyTkPp/myCaarJ87RB42inBV6g18cAp0JQkk5XThUMHGDv09wO8EdlgeNxh9ttU PEMguWDCFBEe4IlsALn5rDAQiHOv66zpqN26j8Zytad2h5mXpE0U+BpRm8ejaZag CPAA4GFXGjirPFsyppdnDq3MIg5KkXyN5ZmvrnWz1ex7D41M+lgL89JVB/rhsEaG yBlkq8Oz5xlCUn8VCra5saVK5wIDAQABo4ICezCCAncwHQYDVR0OBBYEFJSMJAn4 EzUSDPyRQLU4cE4CE7nDMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvQjg4MzI3MEUz NTZCMTFFN0E1MUMzMTRDQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCLUAEAwQCZ+TsAwQDc0XYMA0EAgACMAcDBQAkB/kAMA0GCSqGSIb3 DQEBCwUAA4IBAQCrZ3dLCIzzDoEKo+RvL8obD7mFGFZissVLxYWlWtZBCb9WpXNd egLsT0tonCnome+KJKZ0Zq/XH/4lFfIW+V+VRjYKyGsvdRCbvaQEZWc4IltObwoz HqsIerofCebjQJoe18XDNiIZCgrMrYPvlA85BZoJRVq3HC7C5cI+sb6mXhhjwQwg ZG9ewwfiqgkVV0a77Hg2eu8vXXSAVl7SjCVitqqaq2Ao8XJykhCStHQrTeZZ+Drm te/r0e42wgTAL3qg9gnw31xFtQjlLCPtnHxwPoT1oCAE4XaQBBiJB2ph0ZZwP7xr Kc8uZimu51IjqQ9+8A4Fax9XXOHW3iqFVrmy -----END CERTIFICATE-----Generated at Thu Sep 10 20:31:24 2026 by rpki-client