$ rpki-client -vvvf rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/FF46137EA51C11EC8394365BC4F9AE02.roa File: FF46137EA51C11EC8394365BC4F9AE02.roa (raw, json) Hash identifier: K4UHqorQ7vT/9+G1YW5IA3vR3W3W1iTSHPhBzip8BH4= Subject key identifier: 62:B1:51:98:99:55:85:D6:CA:93:D2:92:5D:B5:0B:93:19:CD:0A:73 Certificate issuer: /CN=A9114DDF/serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F Certificate serial: 0490 Authority key identifier: E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/FF46137EA51C11EC8394365BC4F9AE02.roa Signing time: Mon 05 Oct 2026 00:48:31 +0000 ROA not before: Mon 05 Oct 2026 00:48:31 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 134553 IP address blocks: 45.126.88.0/22 maxlen: 22 45.126.88.0/24 maxlen: 24 45.126.89.0/24 maxlen: 24 45.126.90.0/24 maxlen: 24 45.126.91.0/24 maxlen: 24 103.236.228.0/22 maxlen: 22 103.236.228.0/24 maxlen: 24 103.236.229.0/24 maxlen: 24 103.236.230.0/24 maxlen: 24 103.236.231.0/24 maxlen: 24 2001:df1:2a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 00:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1168 (0x490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114DDF, serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F Validity Not Before: Oct 5 00:48:31 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac2f3df-982c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b2:5c:61:73:5c:51:a7:c9:81:d5:73:ee:4a: c8:3f:a4:dc:15:c4:d3:de:b9:a8:76:bf:5f:c5:9b: 7c:f7:71:ac:2f:81:a6:4f:8a:29:5e:6b:83:e9:0f: 51:db:1d:b9:42:96:72:8f:d0:22:7f:65:40:f0:2d: 3d:50:72:c2:86:3d:a2:99:35:aa:30:56:84:23:b2: a4:26:c4:0c:22:b8:dd:9d:01:f9:fa:c4:1a:6d:db: d9:e4:dd:ff:89:cd:3d:49:f1:9d:f5:90:9c:ac:d2: 6d:cd:40:7f:3c:98:e2:c6:46:32:91:af:dd:fe:89: 03:b9:e0:d8:ec:46:d2:54:7c:16:83:67:33:7d:12: 28:95:7e:48:4c:bb:81:48:db:d3:bb:df:cf:dc:6e: 1c:19:8a:1b:77:25:47:fe:6a:98:ea:28:66:14:d2: 31:37:ba:59:0c:a9:49:ef:fd:83:65:d1:5a:aa:2b: fb:c5:ac:b4:6f:3a:9b:bf:14:4b:9e:35:d8:4b:d7: 12:22:3a:f9:26:c3:40:9f:66:79:37:a3:56:13:7e: d2:70:e0:0f:0d:e1:1a:5d:b1:11:55:82:1a:42:7c: c6:a5:75:64:28:93:0e:0e:c0:94:28:43:44:fb:57: e6:7c:00:cf:93:67:76:94:15:6a:03:14:61:89:83: 32:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B1:51:98:99:55:85:D6:CA:93:D2:92:5D:B5:0B:93:19:CD:0A:73 X509v3 Authority Key Identifier: keyid:E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/FF46137EA51C11EC8394365BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.126.88.0/22 103.236.228.0/22 IPv6: 2001:df1:2a00::/48 Signature Algorithm: sha256WithRSAEncryption 43:14:5e:15:a0:58:83:70:26:0a:60:3c:ea:18:f2:56:7e:f3: c2:51:5d:26:e7:bd:df:0f:5e:42:ae:82:e3:4d:52:da:3e:b1: dd:85:45:ff:4f:c2:c6:21:50:59:51:b3:17:0f:33:20:9c:8a: b1:b0:b8:29:3a:38:30:a5:5a:99:7d:f0:95:e7:a4:3c:97:04: 6c:b7:16:5b:06:a2:57:88:f5:c5:b5:2a:fd:2b:7f:b9:5d:d9: 68:26:ba:02:84:04:f5:61:3a:d1:65:e7:eb:35:1f:94:7e:6f: 2c:de:f9:d1:72:5d:4a:a5:6f:83:9a:f7:5e:88:33:97:63:d7: 4b:4a:a5:f6:73:37:6f:52:35:e5:0f:87:48:13:d6:2c:64:56: 88:f4:80:57:41:19:84:30:b7:81:dd:02:a0:36:11:ec:15:bd: bf:f3:d5:9e:c1:b4:ba:fd:ff:15:d1:33:36:4c:04:93:21:ea: 0d:bd:65:96:49:e4:bd:8a:07:3d:04:5f:5c:e5:d0:de:34:a2: d9:70:e6:4d:41:b4:6a:cb:f8:3b:0e:69:61:86:1e:e9:1f:57: 41:7b:65:2c:c3:54:7f:a1:ca:2a:e7:8e:c0:55:81:09:d1:49: a4:9f:61:51:3a:50:46:82:f7:5f:70:d7:5f:d6:ce:8e:63:18: fd:f3:86:d1 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICBJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREREYxMTAvBgNVBAUTKEU4NjcxNzUwMzQ0RjE4QzJBRjc0N0ZGQUYyNTU4NTBF QkM3OUQwMUYwHhcNMjYxMDA1MDA0ODMxWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyZjNkZi05ODJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrJcYXNcUafJgdVz7krIP6TcFcTT3rmodr9fxZt893GsL4GmT4opXmuD6Q9R 2x25QpZyj9Aif2VA8C09UHLChj2imTWqMFaEI7KkJsQMIrjdnQH5+sQabdvZ5N3/ ic09SfGd9ZCcrNJtzUB/PJjixkYyka/d/okDueDY7EbSVHwWg2czfRIolX5ITLuB SNvTu9/P3G4cGYobdyVH/mqY6ihmFNIxN7pZDKlJ7/2DZdFaqiv7xay0bzqbvxRL njXYS9cSIjr5JsNAn2Z5N6NWE37ScOAPDeEaXbERVYIaQnzGpXVkKJMODsCUKENE +1fmfADPk2d2lBVqAxRhiYMyTQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFGKxUZiZ VYXWypPSkl21C5MZzQpzMB8GA1UdIwQYMBaAFOhnF1A0TxjCr3R/+vJVhQ68edAf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNERERi81QjA2RkVGMkE1 MEExMUVDQjI3NzhENUNDNEY5QUUwMi82R2NYVURSUEdNS3ZkSF82OGxXRkRyeDUw QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZHY1hVRFJQR01LdmRIXzY4bFdGRHJ4NTBCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTREREYvNUIwNkZFRjJBNTBBMTFFQ0IyNzc4RDVDQzRGOUFFMDIvRkY0NjEzN0VB NTFDMTFFQzgzOTQzNjVCQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQCLX5YAwQCZ+zkMA8EAgACMAkDBwAgAQ3xKgAwDQYJKoZIhvcNAQEL BQADggEBAEMUXhWgWINwJgpgPOoY8lZ+88JRXSbnvd8PXkKuguNNUto+sd2FRf9P wsYhUFlRsxcPMyCcirGwuCk6ODClWpl98JXnpDyXBGy3FlsGoleI9cW1Kv0rf7ld 2WgmugKEBPVhOtFl5+s1H5R+byze+dFyXUqlb4Oa916IM5dj10tKpfZzN29SNeUP h0gT1ixkVoj0gFdBGYQwt4HdAqA2EewVvb/z1Z7BtLr9/xXRMzZMBJMh6g29ZZZJ 5L2KBz0EX1zl0N40otlw5k1BtGrL+DsOaWGGHukfV0F7ZSzDVH+hyirnjsBVgQnR SaSfYVE6UEaC919w11/Wzo5jGP3zhtE= -----END CERTIFICATE-----Generated at Tue Oct 6 07:47:25 2026 by rpki-client