$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/DF1733D8A9C411F19B888AE56E11F970.roa File: DF1733D8A9C411F19B888AE56E11F970.roa (raw, json) Hash identifier: bpFa5fTmur708cOVcV2AQHkyMDdSCS88Rji9UEjFKko= Subject key identifier: 79:33:4D:B6:1C:BF:DB:A4:1A:C5:46:4A:F8:4E:7C:F6:8C:74:44:C5 Certificate issuer: /CN=A911BEC0/serialNumber=17A80866788ECADCE1F6D0AC6182D10C39D77F89 Certificate serial: 0D Authority key identifier: 17:A8:08:66:78:8E:CA:DC:E1:F6:D0:AC:61:82:D1:0C:39:D7:7F:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6gIZniOytzh9tCsYYLRDDnXf4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/DF1733D8A9C411F19B888AE56E11F970.roa Signing time: Sun 13 Sep 2026 06:44:32 +0000 ROA not before: Sun 13 Sep 2026 06:44:32 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 11179 IP address blocks: 45.126.244.0/24 maxlen: 24 45.126.245.0/24 maxlen: 24 45.126.246.0/24 maxlen: 24 45.126.247.0/24 maxlen: 24 103.29.32.0/24 maxlen: 24 103.29.33.0/24 maxlen: 24 103.29.34.0/24 maxlen: 24 103.29.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.crl rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6gIZniOytzh9tCsYYLRDDnXf4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BEC0, serialNumber=17A80866788ECADCE1F6D0AC6182D10C39D77F89 Validity Not Before: Sep 13 06:44:32 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6aa64650-559c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:11:0b:46:79:1e:d1:1e:b2:73:b0:da:ad: d9:dc:33:99:ab:77:e8:43:b7:95:86:e1:8f:f7:09: 1a:ee:25:21:f3:04:f8:ab:b8:81:07:64:61:f6:62: fb:83:ba:73:80:04:a2:f5:87:3d:f0:4a:19:76:38: a5:9b:94:a4:17:25:d0:3a:05:5e:21:cc:2e:e8:1b: ad:fb:ad:ff:46:78:1a:3c:81:0b:16:1f:2f:66:f0: 2f:01:73:c0:1f:48:ee:51:66:3c:f2:28:57:21:37: 7d:dc:92:e2:ff:d8:1f:ac:a4:33:58:74:05:3b:e3: c3:7b:5d:a1:8a:89:04:83:16:b2:f9:06:f5:e1:ca: 5a:26:64:80:06:ff:d1:39:d7:e2:b1:c6:d5:b7:cf: 51:9b:e9:7f:79:8c:e6:4f:5c:fc:5d:04:a8:d6:b3: ac:3e:cf:24:d1:bf:1a:85:ae:a3:98:b1:57:f0:82: 8b:08:f6:1b:d5:8c:5f:ac:5a:44:4d:55:22:50:e5: 89:90:b5:85:cc:68:5e:b6:5d:d2:d4:ec:be:d3:8a: 23:9b:89:8a:38:aa:51:9f:4e:eb:19:6b:e0:6c:ed: ec:fc:05:e8:3a:09:2c:ee:36:70:88:92:bc:dd:8a: bc:c8:50:1f:a3:e7:58:26:1f:39:15:35:8c:9f:d0: b3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:33:4D:B6:1C:BF:DB:A4:1A:C5:46:4A:F8:4E:7C:F6:8C:74:44:C5 X509v3 Authority Key Identifier: keyid:17:A8:08:66:78:8E:CA:DC:E1:F6:D0:AC:61:82:D1:0C:39:D7:7F:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/F6gIZniOytzh9tCsYYLRDDnXf4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6gIZniOytzh9tCsYYLRDDnXf4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BEC0/88448ECAA9C411F1BAD43F9D6E11F970/DF1733D8A9C411F19B888AE56E11F970.roa sbgp-ipAddrBlock: critical IPv4: 45.126.244.0/22 103.29.32.0/22 Signature Algorithm: sha256WithRSAEncryption 33:5c:16:19:ee:be:94:11:91:ca:cc:58:d2:ee:b3:0d:70:be: d8:25:ea:53:cc:b9:7d:2a:9a:02:94:1e:53:a6:70:e3:e5:11: 87:7d:e7:2c:67:54:bb:82:b1:e0:3b:06:de:00:fa:31:ce:98: 21:30:2f:1b:90:fe:16:70:90:df:35:8d:47:a2:30:15:b0:24: aa:2b:72:9a:eb:01:69:76:fd:21:b0:8a:a5:f0:14:46:da:e7: 7f:69:45:59:f6:6c:41:9c:9d:f5:15:5a:60:a8:a2:1a:79:80: 9b:d9:ab:68:24:ee:d7:fe:19:09:7b:d3:e0:df:df:28:e0:c3: 5e:4b:0c:cc:71:69:12:da:c2:43:e3:fe:61:42:2d:0d:17:6a: 3b:e6:21:ff:64:f9:62:aa:37:d7:83:9d:b1:b1:92:82:c9:05: 19:54:02:8a:5c:90:ca:57:2e:b0:cf:24:a7:dd:a8:46:dd:dd: 39:45:90:f8:63:97:c0:3a:02:27:19:d9:e0:aa:88:49:fd:6c: f6:1e:62:c8:59:99:fb:60:ff:57:fe:32:db:95:8a:4c:2e:23: 41:70:82:27:da:0c:88:32:21:47:c6:72:96:a7:54:89:b6:a6: 9c:f6:e2:96:59:6c:51:5a:5c:41:7f:b5:03:ce:57:92:04:53: f8:29:9e:2b -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkVDMDExMC8GA1UEBRMoMTdBODA4NjY3ODhFQ0FEQ0UxRjZEMEFDNjE4MkQxMEMz OUQ3N0Y4OTAeFw0yNjA5MTMwNjQ0MzJaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYTY0NjUwLTU1OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1qhELRnke0R6yc7DardncM5mrd+hDt5WG4Y/3CRruJSHzBPiruIEHZGH2YvuD unOABKL1hz3wShl2OKWblKQXJdA6BV4hzC7oG637rf9GeBo8gQsWHy9m8C8Bc8Af SO5RZjzyKFchN33ckuL/2B+spDNYdAU748N7XaGKiQSDFrL5BvXhylomZIAG/9E5 1+KxxtW3z1Gb6X95jOZPXPxdBKjWs6w+zyTRvxqFrqOYsVfwgosI9hvVjF+sWkRN VSJQ5YmQtYXMaF62XdLU7L7TiiObiYo4qlGfTusZa+Bs7ez8Beg6CSzuNnCIkrzd irzIUB+j51gmHzkVNYyf0LMrAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUeTNNthy/ 26QaxUZK+E589ox0RMUwHwYDVR0jBBgwFoAUF6gIZniOytzh9tCsYYLRDDnXf4kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRUMwLzg4NDQ4RUNBQTlD NDExRjFCQUQ0M0Y5RDZFMTFGOTcwL0Y2Z0labmlPeXR6aDl0Q3NZWUxSRERuWGY0 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRjZnSVpuaU95dHpoOXRDc1lZTFJERG5YZjRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkVDMC84ODQ0OEVDQUE5QzQxMUYxQkFENDNGOUQ2RTExRjk3MC9ERjE3MzNEOEE5 QzQxMUYxOUI4ODhBRTU2RTExRjk3MC5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAItfvQDBAJnHSAwDQYJKoZIhvcNAQELBQADggEBADNcFhnuvpQRkcrM WNLusw1wvtgl6lPMuX0qmgKUHlOmcOPlEYd95yxnVLuCseA7Bt4A+jHOmCEwLxuQ /hZwkN81jUeiMBWwJKorcprrAWl2/SGwiqXwFEba539pRVn2bEGcnfUVWmCoohp5 gJvZq2gk7tf+GQl70+Df3yjgw15LDMxxaRLawkPj/mFCLQ0XajvmIf9k+WKqN9eD nbGxkoLJBRlUAopckMpXLrDPJKfdqEbd3TlFkPhjl8A6AicZ2eCqiEn9bPYeYshZ mftg/1f+MtuVikwuI0FwgifaDIgyIUfGcpanVIm2ppz24pZZbFFaXEF/tQPOV5IE U/gpnis= -----END CERTIFICATE-----Generated at Mon Sep 21 23:59:50 2026 by rpki-client