$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/2884888A717011E99BA2FB3DC4F9AE02.roa File: 2884888A717011E99BA2FB3DC4F9AE02.roa (raw, json) Hash identifier: peuctPXvXMTVPC5C64dym+8m/tYJBJhMK20RQK1Y+6E= Subject key identifier: 86:AD:82:77:45:B9:A3:5F:81:AF:FB:2D:46:70:0A:10:D0:C3:F7:4C Certificate issuer: /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686 Certificate serial: 1162 Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/2884888A717011E99BA2FB3DC4F9AE02.roa Signing time: Sun 02 Aug 2026 17:34:03 +0000 ROA not before: Sun 02 Aug 2026 17:34:03 +0000 ROA not after: Wed 02 Dec 2026 00:00:00 +0000 asID: 0 IP address blocks: 103.116.193.0/24 maxlen: 24 103.116.194.0/24 maxlen: 24 2001:df3:1300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4450 (0x1162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D3A9, serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686 Validity Not Before: Aug 2 17:34:03 2026 GMT Not After : Dec 2 00:00:00 2026 GMT Subject: CN=6a6f7f8b-8234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:03:72:bf:bc:34:53:a7:e4:13:4f:0f:c0:e2: de:82:ee:57:ad:1d:4c:50:e7:04:68:6a:0f:e0:7f: 9a:e4:18:b3:6d:0d:60:0e:75:cb:0d:60:06:61:4a: 47:eb:ca:87:32:7e:5e:42:e6:66:74:ab:81:e0:c6: 4c:f1:85:7b:49:6d:98:a6:28:13:63:80:aa:7b:d2: 02:1f:90:52:b2:93:33:eb:94:5e:a3:15:a8:d5:a7: 13:b1:5d:27:92:e0:79:8c:58:08:a8:ab:1c:4c:d5: fd:b0:08:3c:fb:c8:d1:eb:47:0c:1f:10:40:c5:60: d3:ba:2b:ae:c1:eb:89:38:7b:a2:eb:3b:20:47:92: 9e:97:22:ae:cd:38:e4:a9:52:04:e0:40:aa:94:6e: f7:0e:aa:d7:85:c9:5d:fb:22:d5:a0:39:31:8e:67: 73:b2:e9:2a:fe:be:3f:2f:45:27:67:ef:86:74:bb: 16:da:ce:41:de:ec:f5:16:c2:49:59:5c:77:26:4d: 78:3e:6b:64:a3:c0:92:16:9e:8a:3f:ca:44:11:08: 5c:57:df:a5:ec:ba:f6:4b:21:a6:50:b5:18:9d:0e: a1:70:d9:35:45:b9:1d:15:a0:7c:6c:e6:8a:19:b9: 95:b6:ae:08:50:91:7f:a6:59:55:e0:56:60:cc:e5: da:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AD:82:77:45:B9:A3:5F:81:AF:FB:2D:46:70:0A:10:D0:C3:F7:4C X509v3 Authority Key Identifier: keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/2884888A717011E99BA2FB3DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.116.193.0-103.116.194.255 IPv6: 2001:df3:1300::/48 Signature Algorithm: sha256WithRSAEncryption 24:c1:fa:fc:db:bd:01:96:4c:3b:9a:e6:96:e3:31:28:d8:57: ac:bd:f9:b0:df:7f:30:44:1c:a0:b4:62:3b:a9:1b:2a:83:33: 97:10:3a:03:e4:e6:ee:f3:da:64:02:64:d5:8e:fe:bb:47:00: 35:42:df:e9:17:81:8d:2c:73:56:76:7d:0a:9c:e4:d1:d9:52: d5:f8:39:c4:9c:1c:81:27:8a:c4:26:c8:46:bb:36:88:de:3e: f5:3d:2b:0c:75:2d:0d:87:3e:ea:31:67:c5:5b:60:af:8a:e5: 44:09:96:b0:3b:e2:39:38:cf:be:4e:f5:6f:17:7c:da:b7:c6: de:24:22:da:cb:da:64:ca:2d:0c:db:2b:c3:54:de:ce:a5:9e: 68:37:de:f5:0a:b7:cc:a2:71:7d:94:d4:d2:6c:be:ee:42:96: 01:c0:3a:28:3d:61:59:1a:df:92:28:a4:91:31:41:9c:91:67: 8a:0a:84:61:ec:d8:37:11:07:93:a1:dc:dc:81:1f:28:3b:ac: 56:b3:f9:8b:e1:e4:86:2f:2c:e2:0a:05:ca:6f:61:2a:ff:df: ff:ba:37:08:0d:0d:0a:13:b5:4a:e0:90:5f:15:28:15:4a:65: 1f:d6:24:76:1c:14:68:86:48:69:fd:f2:19:db:fd:6d:14:61: 23:e3:32:99 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgICEWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQzQTkxMTAvBgNVBAUTKDE5Njg0MjNFRDZEMjQ5NTg4MEE1NkE2REIwMkJDNjcy OThDNUU2ODYwHhcNMjYwODAyMTczNDAzWhcNMjYxMjAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTZmN2Y4Yi04MjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvANyv7w0U6fkE08PwOLegu5XrR1MUOcEaGoP4H+a5BizbQ1gDnXLDWAGYUpH 68qHMn5eQuZmdKuB4MZM8YV7SW2YpigTY4Cqe9ICH5BSspMz65ReoxWo1acTsV0n kuB5jFgIqKscTNX9sAg8+8jR60cMHxBAxWDTuiuuweuJOHui6zsgR5KelyKuzTjk qVIE4ECqlG73DqrXhcld+yLVoDkxjmdzsukq/r4/L0UnZ++GdLsW2s5B3uz1FsJJ WVx3Jk14Pmtko8CSFp6KP8pEEQhcV9+l7Lr2SyGmULUYnQ6hcNk1RbkdFaB8bOaK GbmVtq4IUJF/pllV4FZgzOXaOwIDAQABo4ICeTCCAnUwHQYDVR0OBBYEFIatgndF uaNfga/7LUZwChDQw/dMMB8GA1UdIwQYMBaAFBloQj7W0klYgKVqbbArxnKYxeaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDNBOS9CQjdGRkI4RTNB OTIxMUU5QjUyRENGNTNDNEY5QUUwMi9HV2hDUHRiU1NWaUFwV3B0c0N2R2NwakY1 b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dXaENQdGJTU1ZpQXBXcHRzQ3ZHY3BqRjVvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQzQTkvQkI3RkZCOEUzQTkyMTFFOUI1MkRDRjUzQzRGOUFFMDIvMjg4NDg4OEE3 MTcwMTFFOTlCQTJGQjNEQzRGOUFFMDIucm9hMDgGCCsGAQUFBwEHAQH/BCkwJzAU BAIAATAOMAwDBABndMEDBABndMIwDwQCAAIwCQMHACABDfMTADANBgkqhkiG9w0B AQsFAAOCAQEAJMH6/Nu9AZZMO5rmluMxKNhXrL35sN9/MEQcoLRiO6kbKoMzlxA6 A+Tm7vPaZAJk1Y7+u0cANULf6ReBjSxzVnZ9Cpzk0dlS1fg5xJwcgSeKxCbIRrs2 iN4+9T0rDHUtDYc+6jFnxVtgr4rlRAmWsDviOTjPvk71bxd82rfG3iQi2svaZMot DNsrw1TezqWeaDfe9Qq3zKJxfZTU0my+7kKWAcA6KD1hWRrfkiikkTFBnJFnigqE YezYNxEHk6Hc3IEfKDusVrP5i+Hkhi8s4goFym9hKv/f/7o3CA0NChO1SuCQXxUo FUplH9YkdhwUaIZIaf3yGdv9bRRhI+MymQ== -----END CERTIFICATE-----Generated at Fri Aug 21 22:27:39 2026 by rpki-client