$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/583F2920A6E611EF9BD0C728C4F9AE02.roa File: 583F2920A6E611EF9BD0C728C4F9AE02.roa (raw, json) Hash identifier: hdZcPdKFAT489GyojQEyzRuhICFQktXZMlSZFI4OK30= Subject key identifier: 51:A3:23:7C:5A:70:99:A7:AE:C3:A4:F4:F5:7C:67:BE:16:70:37:28 Certificate issuer: /CN=A918F978/serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32 Certificate serial: 1419 Authority key identifier: 68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/583F2920A6E611EF9BD0C728C4F9AE02.roa Signing time: Mon 12 Oct 2026 17:32:40 +0000 ROA not before: Mon 12 Oct 2026 17:32:40 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 138197 IP address blocks: 103.129.208.0/24 maxlen: 24 103.129.210.0/23 maxlen: 23 103.129.210.0/24 maxlen: 24 103.129.211.0/24 maxlen: 24 2403:8840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5145 (0x1419) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F978, serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32 Validity Not Before: Oct 12 17:32:40 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6acd19b8-e7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:be:f4:09:1f:2b:36:2f:d7:eb:d3:da:0a:96: 28:c8:cc:ce:ff:02:8c:a1:8d:12:44:5f:90:36:ab: 81:8b:25:8d:7e:e5:34:84:e6:72:8b:03:0a:ca:67: 95:16:a9:73:73:bf:7b:07:d0:61:2e:52:c4:42:57: d7:cc:5a:52:8a:1f:48:ae:24:c8:6f:09:63:d0:d9: da:a7:9c:25:67:e0:3d:e3:86:73:fc:af:9c:69:77: be:9a:b5:6b:53:ae:12:bb:21:b4:22:d7:e1:58:18: 1d:8b:ab:d0:09:35:a2:3c:49:7c:1e:be:11:8c:2d: 15:43:6d:1b:0c:b1:ec:58:d8:eb:e2:9e:08:32:78: 92:4d:f3:9a:07:9e:46:17:9e:46:5a:c7:aa:03:43: 32:9a:53:7d:be:54:9b:ed:0a:4b:4c:38:81:6f:9d: 3b:0a:ea:79:35:30:23:a0:17:13:76:00:8b:f4:8a: 73:e9:ea:4d:29:92:95:b5:47:89:aa:8b:37:c9:ef: 6a:a7:c5:4b:96:36:e6:e2:d5:e3:55:10:9e:37:84: 9e:8f:cc:43:7d:2a:9d:8b:fd:76:cb:42:52:e5:cd: 08:c2:0f:d3:bb:3c:c3:b3:3c:37:58:be:3e:1b:68: 1f:a3:3b:3a:38:13:00:00:a8:2d:4a:17:9b:9b:78: 76:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A3:23:7C:5A:70:99:A7:AE:C3:A4:F4:F5:7C:67:BE:16:70:37:28 X509v3 Authority Key Identifier: keyid:68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/583F2920A6E611EF9BD0C728C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.129.208.0/24 103.129.210.0/23 IPv6: 2403:8840::/32 Signature Algorithm: sha256WithRSAEncryption 74:d4:af:1a:35:b6:38:52:6f:d7:65:4e:94:9e:d8:48:bb:7e: 56:97:cd:97:e4:73:62:b4:d6:1d:68:f5:37:a7:e9:ab:19:fe: 4b:21:7a:f4:cb:92:17:7a:56:b4:53:e3:cc:73:9a:5b:1d:6c: 6b:23:47:6d:c3:a3:c4:c7:20:f3:a8:f0:73:3c:d6:0b:70:a6: 29:b3:f4:da:97:ec:1a:62:88:f7:8a:42:dd:c6:f9:88:b5:4e: 60:64:ad:93:17:f4:6a:58:64:75:c0:ed:6a:96:05:54:e8:94: 81:e9:b6:4d:7b:3f:3a:65:a4:b7:47:b2:58:06:d8:1a:07:45: 69:d0:3a:d1:15:37:64:fa:96:d1:50:b1:46:20:ea:f5:40:67: bc:5a:2b:91:c6:e9:cf:da:f3:6f:0c:11:0f:a6:8a:b3:08:20: 8f:ea:f6:0f:19:38:23:19:3a:90:63:5a:1e:7e:d7:f4:ec:c3: ca:69:35:ed:f8:ec:0b:51:6d:4d:1f:81:2b:d6:4f:dc:b8:90: bc:02:58:5b:7c:b7:9f:21:cf:6b:f1:f3:d9:32:38:00:80:1d: dd:95:cb:09:ac:2e:0c:b0:58:32:58:76:14:00:c1:c6:a8:ef: 95:90:a7:a8:53:48:04:fe:b0:cc:c8:79:ad:e6:48:a5:ea:f9: fd:07:b0:93 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICFBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY5NzgxMTAvBgNVBAUTKDY4NTBBQUJGOUJEQUJGMjZCRkEwOTI4MzAyMUZFOTEz RDY5NTZFMzIwHhcNMjYxMDEyMTczMjQwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNkMTliOC1lN2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx770CR8rNi/X69PaCpYoyMzO/wKMoY0SRF+QNquBiyWNfuU0hOZyiwMKymeV Fqlzc797B9BhLlLEQlfXzFpSih9IriTIbwlj0Nnap5wlZ+A944Zz/K+caXe+mrVr U64SuyG0ItfhWBgdi6vQCTWiPEl8Hr4RjC0VQ20bDLHsWNjr4p4IMniSTfOaB55G F55GWseqA0MymlN9vlSb7QpLTDiBb507Cup5NTAjoBcTdgCL9Ipz6epNKZKVtUeJ qos3ye9qp8VLljbm4tXjVRCeN4Sej8xDfSqdi/12y0JS5c0Iwg/TuzzDszw3WL4+ G2gfozs6OBMAAKgtShebm3h2iQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFFGjI3xa cJmnrsOk9PV8Z74WcDcoMB8GA1UdIwQYMBaAFGhQqr+b2r8mv6CSgwIf6RPWlW4y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjk3OC83RTIyQjM3NEI2 OUIxMUU4QUUwNkM2MTZDNEY5QUUwMi9hRkNxdjV2YXZ5YV9vSktEQWhfcEU5YVZi akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FGQ3F2NXZhdnlhX29KS0RBaF9wRTlhVmJqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY5NzgvN0UyMkIzNzRCNjlCMTFFOEFFMDZDNjE2QzRGOUFFMDIvNTgzRjI5MjBB NkU2MTFFRjlCRDBDNzI4QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQAZ4HQAwQBZ4HSMA0EAgACMAcDBQAkA4hAMA0GCSqGSIb3DQEBCwUA A4IBAQB01K8aNbY4Um/XZU6UnthIu35Wl82X5HNitNYdaPU3p+mrGf5LIXr0y5IX ela0U+PMc5pbHWxrI0dtw6PExyDzqPBzPNYLcKYps/Tal+waYoj3ikLdxvmItU5g ZK2TF/RqWGR1wO1qlgVU6JSB6bZNez86ZaS3R7JYBtgaB0Vp0DrRFTdk+pbRULFG IOr1QGe8WiuRxunP2vNvDBEPpoqzCCCP6vYPGTgjGTqQY1oeftf07MPKaTXt+OwL UW1NH4Er1k/cuJC8AlhbfLefIc9r8fPZMjgAgB3dlcsJrC4MsFgyWHYUAMHGqO+V kKeoU0gE/rDMyHmt5kil6vn9B7CT -----END CERTIFICATE-----Generated at Wed Oct 28 11:38:43 2026 by rpki-client