$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa File: 1E4ABC8C50C111EFA64C2437C4F9AE02.roa (raw, json) Hash identifier: F5ysDSxfiLu7xBsfuCvzkAhLbVLDxfKz/bTT7Bt46ok= Subject key identifier: E1:29:E1:EE:70:D2:2D:13:99:08:BA:54:E9:23:BB:50:83:BD:0D:E5 Certificate issuer: /CN=A918E4B7/serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB Certificate serial: 0246 Authority key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa Signing time: Sun 04 Oct 2026 23:44:08 +0000 ROA not before: Sun 04 Oct 2026 23:44:07 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 36007 IP address blocks: 45.130.164.0/24 maxlen: 24 45.130.165.0/24 maxlen: 24 45.130.166.0/24 maxlen: 24 45.130.167.0/24 maxlen: 24 45.151.152.0/24 maxlen: 24 45.151.153.0/24 maxlen: 24 45.151.154.0/24 maxlen: 24 45.151.155.0/24 maxlen: 24 74.113.232.0/24 maxlen: 24 74.113.233.0/24 maxlen: 24 74.113.234.0/24 maxlen: 24 74.113.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB Validity Not Before: Oct 4 23:44:07 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac2e4c7-3c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a5:51:77:20:4f:80:b3:80:3f:73:82:02:36: 64:4e:aa:e6:0c:9b:af:e3:14:c2:57:81:b4:c0:77: 92:df:6f:e9:1c:08:36:f4:bf:c2:aa:8a:ad:b8:01: 74:91:0b:47:cd:30:d0:1d:f4:ec:a0:5f:f0:71:6a: a7:2b:06:5a:de:65:4d:d1:c3:27:e3:74:5d:5b:c5: e9:d4:1f:e3:9b:37:b4:62:ad:8e:f9:01:11:b8:28: 89:82:5e:8b:87:63:de:df:88:a9:0e:09:7c:19:ab: 64:f3:d0:de:3f:29:bf:53:97:b8:47:c8:90:e0:56: a8:f6:c6:0f:50:b4:cd:b4:a3:a0:6f:28:4e:3b:82: 69:b1:eb:c4:d6:37:8d:84:66:52:72:78:d3:01:23: 2a:af:4c:76:a4:ba:a5:30:78:61:10:5a:75:45:c5: 8b:57:8c:f5:9f:cc:f8:fa:6d:74:51:5d:fa:84:e0: 65:81:af:c0:cb:59:bb:7e:86:c4:a3:56:7c:11:c6: 67:9a:60:cc:11:08:0a:87:f3:e5:92:2b:e1:c0:2a: 14:5f:28:f3:de:de:71:7c:26:2e:2b:b6:b1:f4:d8: 51:ac:90:4b:df:23:cc:4c:1d:fd:94:a9:7e:f8:2f: d3:08:ba:bd:70:b4:3c:b9:bb:b3:c7:c0:4f:c2:9f: f1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:29:E1:EE:70:D2:2D:13:99:08:BA:54:E9:23:BB:50:83:BD:0D:E5 X509v3 Authority Key Identifier: keyid:E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.130.164.0/22 45.151.152.0/22 74.113.232.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:e8:a7:3a:cb:d8:c0:f6:22:9a:c6:d6:55:5a:49:f1:55:95: 33:1e:99:60:75:9e:e2:f3:d7:98:1c:30:da:1c:4f:47:4c:6d: 1f:18:b0:3b:d8:c3:ba:68:73:dd:65:6d:ea:4c:bf:21:9b:fe: db:b1:83:70:14:d5:5b:e0:9f:4b:4e:3a:cf:2a:9d:8d:7b:3b: ed:e1:c7:fa:f4:e5:05:4f:01:71:b1:ab:bb:a5:82:1f:3c:7e: 1e:fb:18:c8:90:20:d4:ff:b7:ee:cd:ea:5c:4b:55:4e:05:4e: 7c:45:7a:80:1b:1a:7c:ba:73:9c:4d:eb:cf:8d:2c:22:46:c0: 1b:45:07:e2:38:ef:bb:6f:2e:c4:b3:2c:5a:cf:3f:d2:6a:ed: 90:cf:ca:7c:78:04:9b:dd:fa:4b:2d:86:43:ee:e7:93:93:7e: e0:c8:7f:aa:c7:cf:85:41:d5:92:02:4b:25:55:40:32:70:cc: d5:55:1b:6f:1c:50:6e:28:2a:a2:5a:40:d0:39:ae:bc:fa:fe: 30:d2:c4:fb:ef:14:1b:59:8c:19:2b:8b:e5:a8:74:98:8b:80: 6d:98:65:47:87:26:8c:0c:71:2e:15:29:0a:fd:18:74:5f:87: ac:63:b3:c5:d2:f3:ec:0b:e0:bd:58:ad:63:ed:5a:39:d1:1a: 70:22:2f:bb -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKEUzNEI0RjgwRDlFM0Y3MDBCQ0FDNEM1MkM1QUIyM0VC NUI3RURGQkIwHhcNMjYxMDA0MjM0NDA3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyZTRjNy0zYzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaVRdyBPgLOAP3OCAjZkTqrmDJuv4xTCV4G0wHeS32/pHAg29L/CqoqtuAF0 kQtHzTDQHfTsoF/wcWqnKwZa3mVN0cMn43RdW8Xp1B/jmze0Yq2O+QERuCiJgl6L h2Pe34ipDgl8Gatk89DePym/U5e4R8iQ4Fao9sYPULTNtKOgbyhOO4JpsevE1jeN hGZScnjTASMqr0x2pLqlMHhhEFp1RcWLV4z1n8z4+m10UV36hOBlga/Ay1m7fobE o1Z8EcZnmmDMEQgKh/PlkivhwCoUXyjz3t5xfCYuK7ax9NhRrJBL3yPMTB39lKl+ +C/TCLq9cLQ8ubuzx8BPwp/xFwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFOEp4e5w 0i0TmQi6VOkju1CDvQ3lMB8GA1UdIwQYMBaAFONLT4DZ4/cAvKxMUsWrI+tbft+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy85NkU2Njc1QTc4 NEUxMUVFQjE5QUQzNERDNEY5QUUwMi80MHRQZ05uajl3QzhyRXhTeGFzajYxdC0z N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQwdFBnTm5qOXdDOHJFeFN4YXNqNjF0LTM3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU0QjcvOTZFNjY3NUE3ODRFMTFFRUIxOUFEMzREQzRGOUFFMDIvMUU0QUJDOEM1 MEMxMTFFRkE2NEMyNDM3QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCLYKkAwQCLZeYAwQCSnHoMA0GCSqGSIb3DQEBCwUAA4IBAQB86Kc6 y9jA9iKaxtZVWknxVZUzHplgdZ7i89eYHDDaHE9HTG0fGLA72MO6aHPdZW3qTL8h m/7bsYNwFNVb4J9LTjrPKp2Nezvt4cf69OUFTwFxsau7pYIfPH4e+xjIkCDU/7fu zepcS1VOBU58RXqAGxp8unOcTevPjSwiRsAbRQfiOO+7by7Esyxazz/Sau2Qz8p8 eASb3fpLLYZD7ueTk37gyH+qx8+FQdWSAkslVUAycMzVVRtvHFBuKCqiWkDQOa68 +v4w0sT77xQbWYwZK4vlqHSYi4BtmGVHhyaMDHEuFSkK/Rh0X4esY7PF0vPsC+C9 WK1j7Vo50RpwIi+7 -----END CERTIFICATE-----Generated at Sat Oct 31 20:44:03 2026 by rpki-client