$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9ABEAFE6649A11F1A997716E8547A888.roa File: 9ABEAFE6649A11F1A997716E8547A888.roa (raw, json) Hash identifier: sTPiNsSz7pHBmg/iuC8Q0o2L9KsnG38yrn5p74RgoE0= Subject key identifier: 01:D3:88:67:14:F4:14:B2:2F:69:A1:E6:0B:B2:59:7C:0E:4A:D2:D7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: FBA3 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9ABEAFE6649A11F1A997716E8547A888.roa Signing time: Thu 03 Sep 2026 10:29:09 +0000 ROA not before: Thu 03 Sep 2026 10:29:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 147224 IP address blocks: 27.0.144.0/24 maxlen: 24 103.98.194.0/24 maxlen: 24 103.108.45.0/24 maxlen: 24 103.137.45.0/24 maxlen: 24 103.148.6.0/24 maxlen: 24 103.174.247.0/24 maxlen: 24 103.178.0.0/24 maxlen: 24 103.178.1.0/24 maxlen: 24 103.207.176.0/24 maxlen: 24 103.207.177.0/24 maxlen: 24 103.207.178.0/24 maxlen: 24 103.207.179.0/24 maxlen: 24 103.207.180.0/24 maxlen: 24 103.207.181.0/24 maxlen: 24 103.207.182.0/24 maxlen: 24 202.47.174.0/24 maxlen: 24 2001:df0:f740::/48 maxlen: 48 2001:df1:e40::/48 maxlen: 48 2001:df2:16c0::/48 maxlen: 48 2001:df3:93c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 15:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64419 (0xfba3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 3 10:29:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a994bf5-b3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:91:87:04:38:93:9c:d3:0a:60:3c:82:8e:81: 7b:62:ba:71:9e:91:82:c6:50:0a:14:0b:f9:2c:39: 27:c1:8f:3e:5d:62:45:56:a6:3f:e0:2b:7a:e2:47: 4d:ba:cd:1e:5d:9d:06:e6:73:e4:57:ac:54:ee:2b: 00:71:ea:60:c5:05:fb:68:4e:1a:9a:04:9b:cc:a8: 37:b0:8c:ba:3d:c4:fe:4d:c7:ce:51:7a:21:b5:04: 74:a3:b3:0b:b9:21:7c:d1:79:aa:20:bd:f0:7f:91: 3f:06:8d:73:2f:03:9e:9f:73:a7:e7:5b:2a:1e:e8: f2:7c:f9:cd:43:ad:df:44:72:1c:e3:15:b0:09:71: 56:03:76:4d:cb:7d:38:fd:67:8c:e6:af:e3:3f:d8: 44:13:b7:50:2d:70:95:c4:29:3c:54:ba:27:9a:bf: 24:34:dd:df:ec:97:a9:08:95:5e:54:d6:8a:57:86: 23:6a:23:d2:b6:1d:7f:18:62:cc:49:10:24:4f:9e: ba:ba:1a:3a:a6:f5:ae:aa:3a:15:af:bd:32:a3:9d: 13:ac:08:64:78:3f:9f:60:30:ce:88:71:00:6d:d2: 04:e4:5c:d1:54:cc:8a:db:f5:53:fb:67:f9:d1:bb: 44:53:12:78:64:03:b9:1f:b0:3b:2f:7e:c1:02:31: a3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D3:88:67:14:F4:14:B2:2F:69:A1:E6:0B:B2:59:7C:0E:4A:D2:D7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9ABEAFE6649A11F1A997716E8547A888.roa sbgp-ipAddrBlock: critical IPv4: 27.0.144.0/24 103.98.194.0/24 103.108.45.0/24 103.137.45.0/24 103.148.6.0/24 103.174.247.0/24 103.178.0.0/23 103.207.176.0-103.207.182.255 202.47.174.0/24 IPv6: 2001:df0:f740::/48 2001:df1:e40::/48 2001:df2:16c0::/48 2001:df3:93c0::/48 Signature Algorithm: sha256WithRSAEncryption 96:94:e2:6d:07:86:7f:2f:42:64:cc:a8:a4:ad:24:2c:40:42: c0:a5:94:7f:eb:03:48:9b:3c:f8:d4:e5:2b:a2:c5:35:20:70: 7c:cd:16:fb:8d:ec:d9:f6:77:61:8d:77:1d:65:a5:03:71:63: 8c:a1:88:4b:59:53:eb:b2:33:d8:27:47:5c:25:41:d0:42:31: e6:4e:03:4b:ab:e9:4b:86:63:06:d6:7f:da:4c:ed:a4:18:91: af:8f:87:58:80:43:7e:de:f1:ff:26:6b:24:eb:78:5c:6f:d6: 27:c5:bc:e8:d2:86:59:6c:79:da:82:84:57:7e:e4:11:c1:5e: 06:cf:1c:6f:90:5e:6b:cc:91:be:bd:32:4c:ae:b5:1b:1c:f2: 74:d8:d0:9f:15:8f:cc:96:9d:47:7d:4c:9d:76:bd:e9:99:cd: 83:d7:88:a2:93:6a:1d:9f:5c:fb:1c:5c:42:2f:3a:00:f4:59: f8:7c:24:a2:b7:93:6e:a1:86:f6:ce:d1:2a:eb:8e:32:f8:d4: c6:a4:97:9d:b6:07:f6:3c:c5:0b:d1:33:10:5c:b1:e6:11:61: b8:ea:53:6c:e8:5b:ff:8f:a0:d0:2c:dd:37:81:11:42:78:9f: f9:4a:9c:3c:30:3b:89:99:55:5c:f8:ac:c8:ed:c3:ca:93:3c: b8:bb:8d:be -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIDAPujMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDkwMzEwMjkwOVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE5OTRiZjUtYjNiYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIuRhwQ4k5zTCmA8go6Be2K6cZ6RgsZQChQL+Sw5J8GPPl1iRVamP+AreuJH TbrNHl2dBuZz5FesVO4rAHHqYMUF+2hOGpoEm8yoN7CMuj3E/k3HzlF6IbUEdKOz C7khfNF5qiC98H+RPwaNcy8Dnp9zp+dbKh7o8nz5zUOt30RyHOMVsAlxVgN2Tct9 OP1njOav4z/YRBO3UC1wlcQpPFS6J5q/JDTd3+yXqQiVXlTWileGI2oj0rYdfxhi zEkQJE+euroaOqb1rqo6Fa+9MqOdE6wIZHg/n2AwzohxAG3SBORc0VTMitv1U/tn +dG7RFMSeGQDuR+wOy9+wQIxo88CAwEAAaOCAsUwggLBMB0GA1UdDgQWBBQB04hn FPQUsi9poeYLsll8DkrS1zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlBQkVBRkU2 NjQ5QTExRjFBOTk3NzE2RTg1NDdBODg4LnJvYTCBgwYIKwYBBQUHAQcBAf8EdDBy MEQEAgABMD4DBAAbAJADBABnYsIDBABnbC0DBABniS0DBABnlAYDBABnrvcDBAFn sgAwDAMEBGfPsAMEAGfPtgMEAMovrjAqBAIAAjAkAwcAIAEN8PdAAwcAIAEN8Q5A AwcAIAEN8hbAAwcAIAEN85PAMA0GCSqGSIb3DQEBCwUAA4IBAQCWlOJtB4Z/L0Jk zKikrSQsQELApZR/6wNImzz41OUrosU1IHB8zRb7jezZ9ndhjXcdZaUDcWOMoYhL WVPrsjPYJ0dcJUHQQjHmTgNLq+lLhmMG1n/aTO2kGJGvj4dYgEN+3vH/Jmsk63hc b9Ynxbzo0oZZbHnagoRXfuQRwV4GzxxvkF5rzJG+vTJMrrUbHPJ02NCfFY/Mlp1H fUyddr3pmc2D14iik2odn1z7HFxCLzoA9Fn4fCSit5NuoYb2ztEq644y+NTGpJed tgf2PMUL0TMQXLHmEWG46lNs6Fv/j6DQLN03gRFCeJ/5Spw8MDuJmVVc+KzI7cPK kzy4u42+ -----END CERTIFICATE-----Generated at Sat Sep 5 02:06:49 2026 by rpki-client