$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/0526730C2C4811EEAC2E4D46C4F9AE02.roa File: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (raw, json) Hash identifier: lG8i+f47XPMSDaBCmERX0JHOMdgM5oAy1rXkRgeNonA= Subject key identifier: 3C:58:84:0F:DA:12:87:B5:D8:F8:1D:EE:16:D9:53:8A:0B:22:BA:53 Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100 Certificate serial: 7E19 Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/0526730C2C4811EEAC2E4D46C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:06:41 +0000 ROA not before: Tue 02 Sep 2025 17:36:18 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 139760 IP address blocks: 118.127.67.0/29 maxlen: 29 118.127.72.32/29 maxlen: 29 118.127.89.112/29 maxlen: 29 202.9.114.12/30 maxlen: 30 202.9.114.28/30 maxlen: 30 202.9.114.32/28 maxlen: 28 202.9.114.48/28 maxlen: 28 202.9.114.96/28 maxlen: 28 202.9.114.112/29 maxlen: 29 202.9.114.128/27 maxlen: 27 202.9.114.160/29 maxlen: 29 202.9.114.168/29 maxlen: 29 202.9.114.176/28 maxlen: 28 202.9.114.192/27 maxlen: 27 202.9.114.224/28 maxlen: 28 202.9.114.240/29 maxlen: 29 202.9.115.32/28 maxlen: 28 202.9.115.96/27 maxlen: 27 202.9.115.240/28 maxlen: 28 203.4.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32281 (0x7e19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100 Validity Not Before: Sep 2 17:36:18 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a48031-cdf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:82:3e:1c:e0:0d:bc:30:c9:72:bb:9c:5f:3b: 7d:61:08:51:28:93:ba:8a:18:ee:bb:39:f2:fb:75: 08:c9:6e:15:71:0d:b4:3d:73:c8:fe:a9:af:c2:a4: 7a:10:66:79:a6:8a:ec:46:a4:28:f0:43:bb:5d:91: 2e:2a:e9:c5:4f:70:5a:eb:75:c2:08:9a:92:31:18: 10:d4:1d:c2:d7:e4:5c:2d:c5:3e:26:e5:f4:cd:5a: 6e:30:aa:9c:7a:23:65:ba:ea:9e:47:95:1f:ca:03: 88:ca:43:85:73:80:c6:0f:90:45:57:b6:e0:9e:a4: 40:35:4d:21:9b:a8:90:1d:28:6f:ca:24:7d:65:65: 89:ba:f3:f8:4c:22:ae:99:2c:4e:a4:9c:b6:23:5f: 06:ee:9e:f8:44:1d:e7:93:f3:77:b0:7e:b3:f4:3d: 4f:53:53:16:37:d6:89:8a:8b:71:cd:40:7e:4a:dd: 70:bc:92:e2:cf:1c:f9:0b:c4:8e:87:83:ce:a0:fc: 5e:92:81:71:90:d9:3a:93:e4:6e:5c:66:e4:fd:f2: d6:28:29:b6:4f:39:70:83:34:ab:6f:9c:5b:e9:db: 01:49:25:ca:39:f3:f2:f6:40:af:29:19:a0:bc:5a: a7:94:5a:e7:92:d9:7d:91:34:ea:26:c0:ad:c5:d7: ad:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:58:84:0F:DA:12:87:B5:D8:F8:1D:EE:16:D9:53:8A:0B:22:BA:53 X509v3 Authority Key Identifier: keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/0526730C2C4811EEAC2E4D46C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 118.127.67.0/29 118.127.72.32/29 118.127.89.112/29 202.9.114.12/30 202.9.114.28-202.9.114.63 202.9.114.96-202.9.114.119 202.9.114.128-202.9.114.247 202.9.115.32/28 202.9.115.96/27 202.9.115.240/28 203.4.212.0/22 Signature Algorithm: sha256WithRSAEncryption 46:91:60:0e:3c:0b:f1:49:57:a9:05:ad:d8:06:b7:cc:a9:a6: 75:7c:2e:f4:b6:7f:b3:63:b3:42:74:0f:39:45:cb:11:37:0d: 7c:a8:50:8e:ee:25:8c:11:c3:a6:f3:4f:a2:1a:ad:f2:c5:6e: 67:b7:3e:82:0d:98:83:c6:d7:0a:d6:ef:04:a8:4c:e4:2a:8f: c1:81:4a:8f:57:13:31:a2:46:af:64:ee:c5:99:62:00:b9:d6: 1a:6c:ea:5c:b5:d4:22:d7:0a:3e:5f:2a:31:92:9d:e6:b5:b6: 9d:c0:8b:e2:08:d1:3c:68:73:10:5b:1f:e7:a9:c2:70:ec:f2: a1:5e:21:34:ee:bd:ef:3d:1e:f1:22:53:56:8c:73:e0:3b:24: e6:2e:8e:6b:d6:c3:18:bc:eb:5d:98:d1:18:1a:e3:50:01:93: 38:84:82:12:45:9a:6e:ad:4a:a6:eb:44:5f:f4:db:83:fc:53: bd:bb:fc:57:a3:a2:af:f5:aa:b0:a3:cd:e7:54:37:a0:d2:2e: 7e:eb:40:24:1b:29:e9:01:60:51:79:6f:5e:e6:03:52:07:19: dc:c1:0c:97:45:fe:46:dc:3f:31:1c:51:f2:82:60:82:ca:65: 87:6e:7a:9c:63:3f:20:c6:b6:89:cf:de:b4:15:b2:cb:d7:19: 2b:20:06:68 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICfhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwMEQxMTAvBgNVBAUTKEM2MDM3ODZENTVBOTA0MTI0RTc1OTJFRUQyODk5RUY1 Nzg5MjExMDAwHhcNMjUwOTAyMTczNjE4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODAzMS1jZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYI+HOANvDDJcrucXzt9YQhRKJO6ihjuuzny+3UIyW4VcQ20PXPI/qmvwqR6 EGZ5porsRqQo8EO7XZEuKunFT3Ba63XCCJqSMRgQ1B3C1+RcLcU+JuX0zVpuMKqc eiNluuqeR5UfygOIykOFc4DGD5BFV7bgnqRANU0hm6iQHShvyiR9ZWWJuvP4TCKu mSxOpJy2I18G7p74RB3nk/N3sH6z9D1PU1MWN9aJiotxzUB+St1wvJLizxz5C8SO h4POoPxekoFxkNk6k+RuXGbk/fLWKCm2TzlwgzSrb5xb6dsBSSXKOfPy9kCvKRmg vFqnlFrnktl9kTTqJsCtxdetuQIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFDxYhA/a Eoe12Pgd7hbZU4oLIrpTMB8GA1UdIwQYMBaAFMYDeG1VqQQSTnWS7tKJnvV4khEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTAwRC9GQ0RDRDNBMEFD OUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJCSk9kWkx1MG9tZTlYaVNF UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnTjRiVldwQkJKT2RaTHUwb21lOVhpU0VRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkwMEQvRkNEQ0QzQTBBQzlEMTFFODkyQ0RBRDBEQzRGOUFFMDIvMDUyNjczMEMy QzQ4MTFFRUFDMkU0RDQ2QzRGOUFFMDIucm9hMIGABggrBgEFBQcBBwEB/wRxMG8w bQQCAAEwZwMFA3Z/QwADBQN2f0ggAwUDdn9ZcAMFAsoJcgwwDgMFAsoJchwDBQbK CXIAMA4DBQXKCXJgAwUDyglycDAOAwUHyglygAMFA8oJcvADBQTKCXMgAwUFyglz YAMFBMoJc/ADBALLBNQwDQYJKoZIhvcNAQELBQADggEBAEaRYA48C/FJV6kFrdgG t8yppnV8LvS2f7Njs0J0DzlFyxE3DXyoUI7uJYwRw6bzT6IarfLFbme3PoINmIPG 1wrW7wSoTOQqj8GBSo9XEzGiRq9k7sWZYgC51hps6ly11CLXCj5fKjGSnea1tp3A i+II0TxocxBbH+epwnDs8qFeITTuve89HvEiU1aMc+A7JOYujmvWwxi8612Y0Rga 41ABkziEghJFmm6tSqbrRF/024P8U727/Fejoq/1qrCjzedUN6DSLn7rQCQbKekB YFF5b17mA1IHGdzBDJdF/kbcPzEcUfKCYILKZYduepxjPyDGtonP3rQVssvXGSsg Bmg= -----END CERTIFICATE-----Generated at Mon Mar 2 07:37:48 2026 by rpki-client