$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D6258FEC31111F1993D1F2E5D11F970.roa File: 3D6258FEC31111F1993D1F2E5D11F970.roa (raw, json) Hash identifier: 4djp+BAF5jRDrxY+N2mksw6uSBrSGENO0l8LJVjeQu4= Subject key identifier: D0:73:99:4A:C3:B9:84:35:E6:60:A1:5C:91:64:57:25:A4:78:6C:C9 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: FDFF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D6258FEC31111F1993D1F2E5D11F970.roa Signing time: Thu 08 Oct 2026 12:30:56 +0000 ROA not before: Thu 08 Oct 2026 12:30:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154934 IP address blocks: 43.228.254.0/24 maxlen: 24 43.228.255.0/24 maxlen: 24 2001:df7:8740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65023 (0xfdff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 8 12:30:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ac78d00-ac06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0c:e9:71:53:1d:e9:2e:e9:8b:10:c7:52:4a: 4e:67:7d:15:d1:c2:f5:ab:b2:e0:72:3e:5b:d0:de: a6:8c:49:f0:af:c8:57:1e:87:bc:14:ee:7c:2b:b4: 5a:b2:e6:09:6e:11:bd:33:8d:38:df:77:c4:6d:06: 37:4c:c1:cc:e0:26:a4:02:d8:a8:6e:ec:e9:d2:30: 14:25:85:c4:98:65:47:16:f5:1e:5a:77:5e:cb:ce: 92:00:d7:23:4f:cc:98:60:2b:30:97:09:88:f0:90: 3b:0a:10:b3:af:40:1f:fc:f6:05:dd:11:d9:4e:96: 43:9e:57:8e:77:31:db:83:aa:54:8b:c6:b5:55:ea: 2a:bf:83:5f:90:d4:9e:35:2f:67:b8:34:1c:95:70: 66:8a:bd:44:9d:e0:cd:23:d2:6d:56:3b:d4:94:a6: a1:b2:7c:92:e2:0e:a5:f1:a8:e3:93:23:d9:9b:be: 2f:9a:0e:93:12:c3:5b:50:bc:39:15:a0:e3:02:07: 77:63:f9:ce:08:17:d0:5f:47:92:ad:3a:b7:ca:82: bd:86:8a:b1:c8:f9:85:73:d9:4d:68:47:b0:5d:4a: c9:89:b7:d2:e4:df:1a:bb:aa:4c:5b:aa:27:8c:5d: 50:cd:92:45:99:4b:b6:bf:ff:1b:30:7b:92:a3:09: 1a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:73:99:4A:C3:B9:84:35:E6:60:A1:5C:91:64:57:25:A4:78:6C:C9 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D6258FEC31111F1993D1F2E5D11F970.roa sbgp-ipAddrBlock: critical IPv4: 43.228.254.0/23 IPv6: 2001:df7:8740::/48 Signature Algorithm: sha256WithRSAEncryption 56:68:75:0a:6b:14:84:b5:8a:62:b2:b0:cb:d0:56:11:6d:45: d2:27:2a:c9:f8:8a:b4:fa:75:c2:5c:32:f2:1c:c5:62:a0:6a: f9:46:ae:15:31:36:88:41:56:cf:ec:46:44:e6:2d:70:e6:e9: 5d:2a:a8:ad:bc:7e:4b:02:f4:35:aa:e4:18:98:2a:c8:ca:5b: e9:c6:77:8c:03:8b:d8:7e:7f:19:ae:87:e0:98:ec:04:c9:cc: 9f:f8:29:6d:ee:86:c4:50:f1:86:87:40:f8:d6:a5:c3:1c:12: a1:ce:d1:4d:9d:5f:de:99:20:68:0f:f3:05:2d:01:08:fa:8c: b0:75:bc:95:7c:34:11:7b:2f:88:cd:d1:dd:c8:e1:71:36:fe: 2d:50:8c:0a:6f:41:b9:42:f8:1c:2a:31:78:38:23:96:12:4b: 07:e1:07:1d:21:5a:67:2e:ac:7a:9c:95:c4:08:60:01:3d:cb: 92:b3:bc:cf:4d:81:b9:9c:7f:25:a8:84:d0:a8:18:60:5b:5d: b6:85:e3:a5:34:31:95:05:02:49:e0:60:9b:e2:cf:a0:3a:97: 2c:a0:53:b8:58:c7:7e:cc:8b:8c:1f:8a:9a:34:fa:70:3b:aa: 5a:94:7d:4a:30:f2:00:d3:78:55:58:3e:cc:9b:a0:a1:22:5a: 37:a5:0b:69 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDAP3/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MTAwODEyMzA1NloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmFjNzhkMDAtYWMwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOMM6XFTHeku6YsQx1JKTmd9FdHC9auy4HI+W9DepoxJ8K/IVx6HvBTufCu0 WrLmCW4RvTONON93xG0GN0zBzOAmpALYqG7s6dIwFCWFxJhlRxb1Hlp3XsvOkgDX I0/MmGArMJcJiPCQOwoQs69AH/z2Bd0R2U6WQ55Xjncx24OqVIvGtVXqKr+DX5DU njUvZ7g0HJVwZoq9RJ3gzSPSbVY71JSmobJ8kuIOpfGo45Mj2Zu+L5oOkxLDW1C8 ORWg4wIHd2P5zggX0F9Hkq06t8qCvYaKscj5hXPZTWhHsF1KyYm30uTfGruqTFuq J4xdUM2SRZlLtr//GzB7kqMJGsECAwEAAaOCAnEwggJtMB0GA1UdDgQWBBTQc5lK w7mENeZgoVyRZFclpHhsyTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNENjI1OEZF QzMxMTExRjE5OTNEMUYyRTVEMTFGOTcwLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEASvk/jAPBAIAAjAJAwcAIAEN94dAMA0GCSqGSIb3DQEBCwUAA4IB AQBWaHUKaxSEtYpisrDL0FYRbUXSJyrJ+Iq0+nXCXDLyHMVioGr5Rq4VMTaIQVbP 7EZE5i1w5uldKqitvH5LAvQ1quQYmCrIylvpxneMA4vYfn8ZrofgmOwEycyf+Clt 7obEUPGGh0D41qXDHBKhztFNnV/emSBoD/MFLQEI+oywdbyVfDQRey+IzdHdyOFx Nv4tUIwKb0G5QvgcKjF4OCOWEksH4QcdIVpnLqx6nJXECGABPcuSs7zPTYG5nH8l qITQqBhgW122heOlNDGVBQJJ4GCb4s+gOpcsoFO4WMd+zIuMH4qaNPpwO6palH1K MPIA03hVWD7Mm6ChIlo3pQtp -----END CERTIFICATE-----Generated at Wed Oct 21 19:44:03 2026 by rpki-client