$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/4EB814BA8F6711E6A509C92DC4F9AE02.roa File: 4EB814BA8F6711E6A509C92DC4F9AE02.roa (raw, json) Hash identifier: qeMPXbch432wl/+6juWOQAEyaC1zRaKSmP/WPoP80k0= Subject key identifier: 42:E2:25:5F:74:9A:A1:E9:3E:2A:5F:9F:EE:02:A9:56:78:7E:51:1A Certificate issuer: /CN=A911ABDD/serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48 Certificate serial: 1F32 Authority key identifier: 42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/4EB814BA8F6711E6A509C92DC4F9AE02.roa Signing time: Fri 28 Aug 2026 16:26:53 +0000 ROA not before: Fri 28 Aug 2026 16:26:53 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 17887 IP address blocks: 180.128.252.0/22 maxlen: 22 180.128.252.0/23 maxlen: 23 180.128.252.0/24 maxlen: 24 180.128.253.0/24 maxlen: 24 180.128.254.0/23 maxlen: 23 180.128.254.0/24 maxlen: 24 180.128.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 15:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7986 (0x1f32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABDD, serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48 Validity Not Before: Aug 28 16:26:53 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a91b6cd-a069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:62:52:eb:80:02:7d:77:8c:3c:48:da:0a:22: f9:e7:0a:86:7c:6f:88:6b:14:b4:08:20:b3:40:1a: f1:fc:c7:80:b8:9f:87:f6:48:ab:51:33:74:36:1b: 5b:64:9d:6c:99:e0:e9:28:c3:28:4e:86:b3:f0:f8: 0c:11:07:3c:35:56:b6:f1:f4:e6:c7:0c:1c:99:f2: c0:47:e0:56:fb:26:94:f2:7d:fb:c5:46:98:14:14: fb:8b:74:17:88:b1:71:48:06:4e:98:9d:33:fa:0f: e3:49:0e:4b:ec:19:7e:09:54:59:33:df:43:74:46: 04:db:a9:71:02:24:11:95:fc:3e:43:ff:ac:7f:44: fa:4d:46:01:2b:ec:1f:aa:63:78:d5:58:7b:c8:90: 58:dd:f1:ef:22:95:d6:72:bd:24:cf:04:2b:c4:40: c1:fe:c8:21:a4:b1:f1:3a:cd:d1:f9:ad:e7:4c:06: 95:03:03:01:1c:3d:42:00:af:26:6f:02:a9:0d:44: 63:c0:f1:48:9f:07:01:da:88:cf:a2:a7:5a:75:e3: 27:39:ca:5e:95:5f:8f:d7:6b:70:d2:79:01:c0:a4: 59:c8:0e:8e:99:15:4c:76:18:5a:51:b7:36:2f:df: c6:63:96:98:26:24:d0:68:63:b3:4f:78:94:79:bd: 9d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E2:25:5F:74:9A:A1:E9:3E:2A:5F:9F:EE:02:A9:56:78:7E:51:1A X509v3 Authority Key Identifier: keyid:42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/4EB814BA8F6711E6A509C92DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 180.128.252.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:a9:6b:9f:77:4f:f0:44:1d:df:9c:83:26:8d:3d:da:21:68: 8d:32:e6:01:44:cc:f3:76:42:31:1d:86:03:d0:4f:9a:7b:47: 6f:6f:6f:82:09:d8:c3:6a:17:24:11:67:7a:3b:b7:20:f0:f4: f5:5b:9a:2f:41:b2:88:5a:b1:94:1a:3b:c1:25:1f:43:91:8a: fe:3a:e6:08:0b:c1:dc:3d:21:62:45:fd:ba:b9:66:cd:7f:c6: 90:c0:2b:e4:23:67:a2:e6:31:56:77:7c:ba:5e:ff:f5:1f:85: 0c:3a:b6:d8:4b:b8:e5:4d:ac:dc:d4:b9:0f:30:71:58:79:c9: 90:8e:b0:bc:9a:30:a8:7e:65:82:f2:ab:da:90:0c:7b:a4:ee: c0:f8:5d:5a:5a:74:6d:96:b1:9a:4e:10:b3:0a:e2:37:87:68: ff:00:fe:7d:f3:22:cd:b6:a2:36:85:6f:98:50:ca:37:5c:e3: 19:cc:cf:50:d0:d5:e8:20:13:20:46:88:38:32:55:85:5c:4c: 95:09:90:80:42:d7:0a:61:01:cd:e1:61:94:10:71:24:3b:29: d5:c0:c6:73:98:a7:c4:d8:bc:35:c5:8a:aa:f8:3f:31:b5:98: 3f:2f:ae:8f:b1:87:92:00:38:f4:b0:f3:27:d4:c4:1e:d3:6d: 7d:9b:f7:cb -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICHzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCREQxMTAvBgNVBAUTKDQyODdCMzMzMjE3NkRCNDg2QTJDQkM0MjU0MDJGQTlD ODZCNkRDNDgwHhcNMjYwODI4MTYyNjUzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTkxYjZjZC1hMDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7WJS64ACfXeMPEjaCiL55wqGfG+IaxS0CCCzQBrx/MeAuJ+H9kirUTN0Nhtb ZJ1smeDpKMMoToaz8PgMEQc8NVa28fTmxwwcmfLAR+BW+yaU8n37xUaYFBT7i3QX iLFxSAZOmJ0z+g/jSQ5L7Bl+CVRZM99DdEYE26lxAiQRlfw+Q/+sf0T6TUYBK+wf qmN41Vh7yJBY3fHvIpXWcr0kzwQrxEDB/sghpLHxOs3R+a3nTAaVAwMBHD1CAK8m bwKpDURjwPFInwcB2ojPoqdadeMnOcpelV+P12tw0nkBwKRZyA6OmRVMdhhaUbc2 L9/GY5aYJiTQaGOzT3iUeb2dAQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFELiJV90 mqHpPipfn+4CqVZ4flEaMB8GA1UdIwQYMBaAFEKHszMhdttIaiy8QlQC+pyGttxI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJERC8zQUUwMDRCNEQ3 NzgxMUU0QjM3NzhCNzJDNEY5QUUwMi9Rb2V6TXlGMjIwaHFMTHhDVkFMNm5JYTIz RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FvZXpNeUYyMjBocUxMeENWQUw2bklhMjNFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUFCREQvM0FFMDA0QjRENzc4MTFFNEIzNzc4QjcyQzRGOUFFMDIvNEVCODE0QkE4 RjY3MTFFNkE1MDlDOTJEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCtID8MA0GCSqGSIb3DQEBCwUAA4IBAQAqqWufd0/wRB3fnIMmjT3a IWiNMuYBRMzzdkIxHYYD0E+ae0dvb2+CCdjDahckEWd6O7cg8PT1W5ovQbKIWrGU GjvBJR9DkYr+OuYIC8HcPSFiRf26uWbNf8aQwCvkI2ei5jFWd3y6Xv/1H4UMOrbY S7jlTazc1LkPMHFYecmQjrC8mjCofmWC8qvakAx7pO7A+F1aWnRtlrGaThCzCuI3 h2j/AP598yLNtqI2hW+YUMo3XOMZzM9Q0NXoIBMgRog4MlWFXEyVCZCAQtcKYQHN 4WGUEHEkOynVwMZzmKfE2Lw1xYqq+D8xtZg/L66PsYeSADj0sPMn1MQe0219m/fL -----END CERTIFICATE-----Generated at Sun Sep 27 06:35:22 2026 by rpki-client