$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/A8EB70C0C52D11F09789F47BC4F9AE02.roa File: A8EB70C0C52D11F09789F47BC4F9AE02.roa (raw, json) Hash identifier: 9OTaeXdaTZPqCV756z5HWqZ/zRVxSyJJvaSBvdg7Ej4= Subject key identifier: B8:84:80:0B:C4:4C:64:38:96:D0:A3:20:BF:BF:A6:8D:6E:3C:08:84 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 063C Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/A8EB70C0C52D11F09789F47BC4F9AE02.roa Signing time: Sun 04 Oct 2026 23:44:19 +0000 ROA not before: Sun 04 Oct 2026 23:44:19 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 64022 IP address blocks: 45.126.124.0/24 maxlen: 24 45.126.125.0/24 maxlen: 24 45.126.126.0/24 maxlen: 24 45.126.127.0/24 maxlen: 24 103.102.44.0/24 maxlen: 24 103.102.45.0/24 maxlen: 24 103.102.47.0/24 maxlen: 24 103.195.4.0/24 maxlen: 24 103.195.5.0/24 maxlen: 24 103.195.6.0/24 maxlen: 24 103.195.7.0/24 maxlen: 24 103.252.116.0/24 maxlen: 24 103.252.117.0/24 maxlen: 24 103.252.118.0/24 maxlen: 24 103.252.119.0/24 maxlen: 24 114.29.236.0/24 maxlen: 24 114.29.237.0/24 maxlen: 24 114.29.238.0/24 maxlen: 24 2401:df40:1::/48 maxlen: 48 2402:da80:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 23:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1596 (0x63c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Oct 4 23:44:19 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac2e4d3-e6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:62:95:20:70:79:fe:28:94:16:34:3a:fa:89: 28:27:3f:54:d6:e7:5f:47:8a:9b:16:42:a3:db:07: 05:73:e3:19:09:cc:55:44:dc:18:02:3f:db:24:f2: cd:ed:31:98:69:49:ad:e9:70:dd:fb:bc:55:33:6e: 3f:dd:00:40:fd:7d:8c:97:bc:c8:56:d7:b4:88:3b: ad:89:2d:fe:55:0e:4d:c6:ee:4e:6a:58:07:39:9f: b0:f8:35:0c:47:bf:2e:bf:a7:4f:39:8b:64:11:ea: c6:d4:97:82:99:0a:c6:ff:dd:3d:c2:27:76:ee:b2: 83:ef:06:83:fc:8a:3a:2c:24:d7:d4:bb:25:20:58: 16:82:9a:10:97:0b:ce:28:b5:50:b6:5c:3a:7d:11: 12:4b:a1:50:cf:52:77:91:c8:03:fe:ad:78:eb:7d: 5e:6b:00:b0:02:d5:4f:b5:1e:67:95:be:54:d8:a7: 7e:cc:80:db:45:69:45:5c:9d:0a:06:94:3a:e9:f3: 25:0d:7d:30:93:19:9e:f2:de:b7:bd:c8:ee:83:6d: 93:56:10:98:31:a2:ad:dd:d4:94:e9:9c:6f:79:bd: b6:d8:a6:07:43:d2:b3:24:d3:99:f8:bd:e1:f8:9b: cc:82:79:3d:dc:19:e2:37:28:a6:8f:8e:b3:39:0d: 19:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:84:80:0B:C4:4C:64:38:96:D0:A3:20:BF:BF:A6:8D:6E:3C:08:84 X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/A8EB70C0C52D11F09789F47BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.126.124.0/22 103.102.44.0/23 103.102.47.0/24 103.195.4.0/22 103.252.116.0/22 114.29.236.0-114.29.238.255 IPv6: 2401:df40:1::/48 2402:da80:100::/48 Signature Algorithm: sha256WithRSAEncryption b5:e3:cb:24:b5:2f:5f:37:b7:a5:62:51:df:d3:16:76:77:da: 56:72:9e:3f:c4:a5:83:be:fb:d6:c0:10:60:7a:fd:00:e8:d3: 53:90:e3:1f:49:3a:cf:a7:94:b1:70:57:b1:e6:58:09:85:66: 5b:3e:04:94:c5:16:29:0f:0e:72:dc:cf:47:1f:d9:db:ee:2b: f5:40:99:62:c3:77:4e:a9:13:c2:e1:04:cd:71:24:e3:db:8b: f3:81:55:65:9e:ed:61:88:3d:fa:ff:fb:8e:04:37:7d:62:69: 07:4f:29:d3:21:96:c5:e5:32:64:d6:43:a5:0d:db:50:f0:d4: c2:82:1e:8e:4e:d2:88:06:7e:ee:b3:b5:b7:ee:23:56:bf:69: 49:7f:05:f5:3b:90:77:82:11:f1:6c:09:a6:c7:60:c8:fa:dc: 32:34:8b:88:19:04:c0:41:13:55:4e:5c:1f:a2:0d:02:27:2b: a9:29:ab:35:6c:35:7f:5d:db:98:94:a8:ec:67:2a:2b:98:55: d1:34:bb:94:8d:4c:1b:ac:42:c7:0b:31:6b:71:18:ba:3d:a1: 28:01:ff:cc:2d:8f:1a:ac:37:b4:80:7d:14:ab:a9:db:e6:ca: 9e:d4:74:ce:22:e9:cb:69:70:83:f8:37:92:e6:76:12:0c:4b: eb:55:72:fe -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgICBjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjYxMDA0MjM0NDE5WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyZTRkMy1lNmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02KVIHB5/iiUFjQ6+okoJz9U1udfR4qbFkKj2wcFc+MZCcxVRNwYAj/bJPLN 7TGYaUmt6XDd+7xVM24/3QBA/X2Ml7zIVte0iDutiS3+VQ5Nxu5OalgHOZ+w+DUM R78uv6dPOYtkEerG1JeCmQrG/909wid27rKD7waD/Io6LCTX1LslIFgWgpoQlwvO KLVQtlw6fRESS6FQz1J3kcgD/q14631eawCwAtVPtR5nlb5U2Kd+zIDbRWlFXJ0K BpQ66fMlDX0wkxme8t63vcjug22TVhCYMaKt3dSU6Zxveb222KYHQ9KzJNOZ+L3h +JvMgnk93BniNyimj46zOQ0ZWwIDAQABo4ICoDCCApwwHQYDVR0OBBYEFLiEgAvE TGQ4ltCjIL+/po1uPAiEMB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU0QjcvRUIzMTJGMDIxRUFBMTFFQ0I3NTZCRjMwQzRGOUFFMDIvQThFQjcwQzBD NTJEMTFGMDk3ODlGNDdCQzRGOUFFMDIucm9hMF8GCCsGAQUFBwEHAQH/BFAwTjAy BAIAATAsAwQCLX58AwQBZ2YsAwQAZ2YvAwQCZ8MEAwQCZ/x0MAwDBAJyHewDBABy He4wGAQCAAIwEgMHACQB30AAAQMHACQC2oABADANBgkqhkiG9w0BAQsFAAOCAQEA tePLJLUvXze3pWJR39MWdnfaVnKeP8Slg7771sAQYHr9AOjTU5DjH0k6z6eUsXBX seZYCYVmWz4ElMUWKQ8OctzPRx/Z2+4r9UCZYsN3TqkTwuEEzXEk49uL84FVZZ7t YYg9+v/7jgQ3fWJpB08p0yGWxeUyZNZDpQ3bUPDUwoIejk7SiAZ+7rO1t+4jVr9p SX8F9TuQd4IR8WwJpsdgyPrcMjSLiBkEwEETVU5cH6INAicrqSmrNWw1f13bmJSo 7GcqK5hV0TS7lI1MG6xCxwsxa3EYuj2hKAH/zC2PGqw3tIB9FKup2+bKntR0ziLp y2lwg/g3kuZ2EgxL61Vy/g== -----END CERTIFICATE-----Generated at Fri Oct 30 09:29:29 2026 by rpki-client