$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/D0279B7AD10A11ECA78C081CC4F9AE02.roa File: D0279B7AD10A11ECA78C081CC4F9AE02.roa (raw, json) Hash identifier: avFO8GhdcQ/I7XQBZSh6xF50OkQnNEa+8F0jXD1gLoY= Subject key identifier: 95:05:4F:24:4E:B3:0A:DE:93:B9:81:5F:D7:10:82:46:65:1D:DD:26 Certificate issuer: /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Certificate serial: 0411 Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/D0279B7AD10A11ECA78C081CC4F9AE02.roa Signing time: Sat 19 Sep 2026 00:49:37 +0000 ROA not before: Sat 19 Sep 2026 00:49:37 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 55769 IP address blocks: 45.250.236.0/22 maxlen: 24 103.242.56.0/22 maxlen: 24 144.48.136.0/22 maxlen: 24 144.48.228.0/22 maxlen: 24 157.119.96.0/22 maxlen: 24 202.53.144.0/22 maxlen: 24 2405:e280:2080::/48 maxlen: 48 2405:e280:2180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1041 (0x411) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Validity Not Before: Sep 19 00:49:37 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aaddc21-18a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:85:55:50:38:7d:23:1f:80:d4:d6:7a:86: 78:8c:a1:05:99:2d:32:f2:38:37:d5:fc:8a:00:c6: a1:b3:f2:40:b6:c3:ec:55:33:b3:98:1a:e3:2a:0b: a0:86:87:5b:20:16:0a:50:05:23:44:b2:b5:9a:b7: 15:75:c8:09:b1:33:90:e4:a1:f4:0f:0c:45:6b:bd: 79:d3:3b:1e:e3:1d:a2:b3:a3:bb:32:cc:66:ca:26: 54:1f:b7:fa:c9:91:76:1d:2d:aa:38:74:48:d8:5f: 70:de:34:2c:7e:e8:79:48:76:87:23:23:2f:9c:eb: 96:9b:49:25:66:84:b7:73:cb:77:67:ab:c6:90:c4: 09:66:88:f3:47:66:32:5f:e9:ed:9b:c8:23:ca:bc: 0d:25:03:b9:2f:6b:87:c8:0f:2b:99:41:53:70:71: 08:ba:4e:69:82:5d:5d:67:8e:7f:59:08:92:71:48: 3c:f9:54:67:8a:0e:b5:9e:9c:65:1a:7a:50:b2:2f: 83:6d:b8:2c:9f:d9:5d:b0:29:c2:b4:47:0d:5c:c3: 27:4d:4e:95:6f:8a:ed:e4:2a:f6:4a:c2:50:d2:67: 95:76:6a:5e:33:e5:f0:d2:f2:85:f8:af:05:b1:b1: b6:54:8c:4d:13:93:5a:32:d5:14:79:04:69:58:5b: d4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:05:4F:24:4E:B3:0A:DE:93:B9:81:5F:D7:10:82:46:65:1D:DD:26 X509v3 Authority Key Identifier: keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/D0279B7AD10A11ECA78C081CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.250.236.0/22 103.242.56.0/22 144.48.136.0/22 144.48.228.0/22 157.119.96.0/22 202.53.144.0/22 IPv6: 2405:e280:2080::/48 2405:e280:2180::/48 Signature Algorithm: sha256WithRSAEncryption 85:e8:84:69:51:ef:da:eb:d7:8e:a2:26:ca:d7:c2:94:94:46: 6a:22:e4:7c:17:7b:07:06:9f:c6:e0:da:bf:f2:da:b2:f1:8f: 06:53:1b:cf:79:7c:b0:d8:14:ca:9a:1e:5f:61:97:2c:d5:17: 9f:96:55:4c:0f:e3:ca:25:ff:f9:1e:eb:06:d1:39:66:ce:c9: c2:a7:12:c9:1f:d2:5c:e3:68:78:39:52:ae:58:89:6e:30:88: 03:96:f3:67:d7:a0:0f:95:50:cc:28:2e:29:2e:f5:22:30:a0: 4d:7d:25:31:ce:c7:54:7a:a3:8f:3c:6c:a7:50:17:10:73:9a: 87:99:df:d0:24:ab:bc:4c:01:a1:3c:a3:6c:70:eb:d7:35:9d: 22:23:77:bf:99:1b:2a:fd:b5:5d:30:4a:c8:f7:90:23:f8:ee: 60:ce:42:0b:0f:2a:ff:fd:5c:9b:48:9c:b4:06:92:36:ce:f7: b6:db:fd:b0:ba:69:ad:70:1e:d8:db:ab:3a:70:f8:a9:87:49: 20:29:96:a1:9e:16:62:85:82:8a:91:93:7f:8d:2d:9a:56:7f: 8b:a3:fc:25:d0:73:55:76:81:04:46:f5:c9:d6:62:30:aa:78: a1:97:8e:a9:af:49:39:97:22:3d:ad:8a:82:2c:12:f6:4b:52: 7f:dd:07:03 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0NTEwODExMDQw Njg3NUZFQzgwHhcNMjYwOTE5MDA0OTM3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFkZGMyMS0xOGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6eFVVA4fSMfgNTWeoZ4jKEFmS0y8jg31fyKAMahs/JAtsPsVTOzmBrjKgug hodbIBYKUAUjRLK1mrcVdcgJsTOQ5KH0DwxFa7150zse4x2is6O7MsxmyiZUH7f6 yZF2HS2qOHRI2F9w3jQsfuh5SHaHIyMvnOuWm0klZoS3c8t3Z6vGkMQJZojzR2Yy X+ntm8gjyrwNJQO5L2uHyA8rmUFTcHEIuk5pgl1dZ45/WQiScUg8+VRnig61npxl GnpQsi+Dbbgsn9ldsCnCtEcNXMMnTU6Vb4rt5Cr2SsJQ0meVdmpeM+Xw0vKF+K8F sbG2VIxNE5NaMtUUeQRpWFvUzQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFJUFTyRO swrek7mBX9cQgkZlHd0mMB8GA1UdIwQYMBaAFIAxiG5+YJ5PSjRqRRCBEEBodf7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy9GMzE2NEMyMEQx MDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25rOUtOR3BGRUlFUVFHaDFf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dER0libjVnbms5S05HcEZFSUVRUUdoMV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MURBOEMvRjMxNjRDMjBEMTA2MTFFQ0IxMjhGNDEzQzRGOUFFMDIvRDAyNzlCN0FE MTBBMTFFQ0E3OEMwODFDQzRGOUFFMDIucm9hMFcGCCsGAQUFBwEHAQH/BEgwRjAq BAIAATAkAwQCLfrsAwQCZ/I4AwQCkDCIAwQCkDDkAwQCnXdgAwQCyjWQMBgEAgAC MBIDBwAkBeKAIIADBwAkBeKAIYAwDQYJKoZIhvcNAQELBQADggEBAIXohGlR79rr 146iJsrXwpSURmoi5HwXewcGn8bg2r/y2rLxjwZTG895fLDYFMqaHl9hlyzVF5+W VUwP48ol//ke6wbROWbOycKnEskf0lzjaHg5Uq5YiW4wiAOW82fXoA+VUMwoLiku 9SIwoE19JTHOx1R6o488bKdQFxBzmoeZ39Akq7xMAaE8o2xw69c1nSIjd7+ZGyr9 tV0wSsj3kCP47mDOQgsPKv/9XJtInLQGkjbO97bb/bC6aa1wHtjbqzpw+KmHSSAp lqGeFmKFgoqRk3+NLZpWf4uj/CXQc1V2gQRG9cnWYjCqeKGXjqmvSTmXIj2tioIs EvZLUn/dBwM= -----END CERTIFICATE-----Generated at Tue Sep 22 08:33:40 2026 by rpki-client