$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/B70AE7D20C6B11EC82638A40C4F9AE02.roa File: B70AE7D20C6B11EC82638A40C4F9AE02.roa (raw, json) Hash identifier: FfIhVgOobJG4Dwk4yARQxeFwaeZwMJUebKyXm+2RqRM= Subject key identifier: 09:94:CD:65:F9:6B:FB:CF:F8:73:51:51:64:71:B7:8A:A8:34:C5:4C Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Certificate serial: 28F8 Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/B70AE7D20C6B11EC82638A40C4F9AE02.roa Signing time: Wed 26 Aug 2026 16:26:30 +0000 ROA not before: Wed 26 Aug 2026 16:26:30 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132447 IP address blocks: 45.121.88.0/22 maxlen: 22 45.121.88.0/24 maxlen: 24 45.121.89.0/24 maxlen: 24 45.121.90.0/24 maxlen: 24 45.121.91.0/24 maxlen: 24 103.21.164.0/22 maxlen: 22 103.21.164.0/24 maxlen: 24 103.21.165.0/24 maxlen: 24 103.21.166.0/24 maxlen: 24 103.21.167.0/24 maxlen: 24 119.235.0.0/24 maxlen: 24 2405:6b00::/48 maxlen: 48 2405:6b00:64::/48 maxlen: 48 2405:6b00:65::/48 maxlen: 48 2405:6b00:66::/48 maxlen: 48 2405:6b00:67::/48 maxlen: 48 2405:6b00:68::/48 maxlen: 48 2405:6b00:69::/48 maxlen: 48 2405:6b00:6a::/48 maxlen: 48 2405:6b00:6b::/48 maxlen: 48 2405:6b00:6c::/48 maxlen: 48 2405:6b00:6d::/48 maxlen: 48 2405:6b00:6e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10488 (0x28f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Validity Not Before: Aug 26 16:26:30 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a8f13b6-d845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d7:74:21:0a:e8:0a:8a:95:89:a8:d0:de:8f: 24:58:a0:0f:7e:3a:7b:91:5a:d5:41:e7:26:c3:8d: e3:52:e8:43:3f:45:de:33:8f:ee:09:0c:57:21:12: 4e:3d:56:e1:13:70:21:64:0c:ce:13:57:47:9e:c2: 93:db:fa:41:08:ec:63:8b:cc:ce:84:87:be:2c:6d: ab:4e:cf:bf:4a:7d:56:00:a1:3b:76:37:ae:bb:7d: 22:02:cc:34:02:19:f3:b7:a5:e9:aa:96:0e:e1:1a: cc:f6:d5:9a:00:cc:9f:10:43:3c:44:b5:a2:e8:bb: 9d:6c:c6:7d:44:84:0b:b0:6b:7f:90:67:1c:b0:96: 36:ca:c4:48:db:6e:03:84:49:32:95:61:03:a2:93: 57:18:6f:a0:da:45:1b:55:fb:b8:39:4f:aa:db:ef: 99:23:14:e5:31:3f:a4:42:f0:74:bb:3b:04:f3:9c: 15:30:2f:29:7b:0f:10:47:a8:44:3d:04:43:0c:7b: 59:2f:32:a0:a9:9f:97:22:5d:86:69:03:3f:c2:c8: d3:53:2e:b0:d7:23:9b:da:27:65:36:63:38:47:0d: 59:5a:f3:9d:81:38:35:54:8d:b2:79:90:96:66:f4: f9:da:1d:14:c4:a1:08:41:c0:12:80:a3:8f:b2:d7: 2d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:94:CD:65:F9:6B:FB:CF:F8:73:51:51:64:71:B7:8A:A8:34:C5:4C X509v3 Authority Key Identifier: keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/B70AE7D20C6B11EC82638A40C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.121.88.0/22 103.21.164.0/22 119.235.0.0/24 IPv6: 2405:6b00::/48 2405:6b00:64::-2405:6b00:6e:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 45:d3:09:58:35:45:d3:71:2f:6c:f6:8e:db:7d:af:e9:f2:a0: 4e:18:a9:32:96:29:55:b8:1d:00:3f:4d:40:5a:b6:e3:50:c0: 34:f7:88:02:b3:39:1b:b9:90:09:6a:f9:1b:e7:8a:95:d2:fe: 75:c8:75:41:e8:95:29:5f:5f:fe:e3:d4:c0:59:43:1f:10:c2: e1:fe:2b:fe:87:3d:cb:a0:a5:98:7e:d3:11:61:a3:1d:04:97: d2:c7:0c:5f:00:ef:19:07:7b:54:1d:44:d7:fa:bb:8d:20:17: cf:fc:11:66:71:5f:b3:d0:36:ab:79:c2:05:fb:e3:ed:03:d5: 85:dc:c4:11:46:ba:6a:c6:0c:33:9b:f7:56:00:fa:9d:b0:5d: c9:fc:a2:a1:50:c4:22:a4:71:ff:45:ea:b0:b4:7e:aa:50:66: e3:0f:09:f9:1b:67:f4:37:94:43:74:c2:7f:90:7e:47:ad:12: eb:e0:03:c8:0b:df:a8:24:e3:c2:7f:9e:dc:ef:31:f1:ec:d3: e5:19:31:51:c0:3a:da:e9:cb:58:d7:8c:06:b8:1d:f2:80:05: a0:75:38:c6:37:be:77:77:f1:55:cb:96:6e:f5:8c:21:8a:f6: 2d:bf:14:e0:5b:bb:c0:8a:4f:6a:47:b9:59:9f:97:ea:ad:0e: c5:1a:9e:36 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgICKPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2 QzdDMjA2NTAwHhcNMjYwODI2MTYyNjMwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YThmMTNiNi1kODQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAptd0IQroCoqViajQ3o8kWKAPfjp7kVrVQecmw43jUuhDP0XeM4/uCQxXIRJO PVbhE3AhZAzOE1dHnsKT2/pBCOxji8zOhIe+LG2rTs+/Sn1WAKE7djeuu30iAsw0 Ahnzt6XpqpYO4RrM9tWaAMyfEEM8RLWi6LudbMZ9RIQLsGt/kGccsJY2ysRI224D hEkylWEDopNXGG+g2kUbVfu4OU+q2++ZIxTlMT+kQvB0uzsE85wVMC8pew8QR6hE PQRDDHtZLzKgqZ+XIl2GaQM/wsjTUy6w1yOb2idlNmM4Rw1ZWvOdgTg1VI2yeZCW ZvT52h0UxKEIQcASgKOPstctBwIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFAmUzWX5 a/vP+HNRUWRxt4qoNMVMMB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRBNkIvNzUyNDRCNjJBMTYzMTFFNEI5NjZERDBGQzRGOUFFMDIvQjcwQUU3RDIw QzZCMTFFQzgyNjM4QTQwQzRGOUFFMDIucm9hMFAGCCsGAQUFBwEHAQH/BEEwPzAY BAIAATASAwQCLXlYAwQCZxWkAwQAd+sAMCMEAgACMB0DBwAkBWsAAAAwEgMHAiQF awAAZAMHACQFawAAbjANBgkqhkiG9w0BAQsFAAOCAQEARdMJWDVF03EvbPaO232v 6fKgThipMpYpVbgdAD9NQFq241DANPeIArM5G7mQCWr5G+eKldL+dch1QeiVKV9f /uPUwFlDHxDC4f4r/oc9y6ClmH7TEWGjHQSX0scMXwDvGQd7VB1E1/q7jSAXz/wR ZnFfs9A2q3nCBfvj7QPVhdzEEUa6asYMM5v3VgD6nbBdyfyioVDEIqRx/0XqsLR+ qlBm4w8J+Rtn9DeUQ3TCf5B+R60S6+ADyAvfqCTjwn+e3O8x8ezT5RkxUcA62unL WNeMBrgd8oAFoHU4xje+d3fxVcuWbvWMIYr2Lb8U4Fu7wIpPake5WZ+X6q0OxRqe Ng== -----END CERTIFICATE-----Generated at Sun Sep 20 13:54:12 2026 by rpki-client