$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/4A6D188450EA11EC8FF55B24C4F9AE02.roa File: 4A6D188450EA11EC8FF55B24C4F9AE02.roa (raw, json) Hash identifier: u+OE92KeExG7I6GhxPypiPeStuTv8Vqe48CTLfDMRps= Subject key identifier: CE:19:36:2B:DC:73:0B:5E:A4:68:D4:35:44:30:69:1D:B6:89:77:15 Certificate issuer: /CN=A9178EB0/serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761 Certificate serial: 0973 Authority key identifier: AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/4A6D188450EA11EC8FF55B24C4F9AE02.roa Signing time: Mon 02 Nov 2026 20:39:57 +0000 ROA not before: Mon 02 Nov 2026 20:39:57 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 9744 IP address blocks: 103.1.224.0/22 maxlen: 24 103.199.104.0/22 maxlen: 24 112.121.160.0/19 maxlen: 24 137.59.20.0/22 maxlen: 24 180.178.32.0/19 maxlen: 24 182.16.0.0/17 maxlen: 24 2406:8680::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2419 (0x973) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EB0, serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761 Validity Not Before: Nov 2 20:39:57 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6ae8f51d-7566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:b4:db:44:4d:57:55:c6:ea:0b:f1:6c:4d: ce:f8:db:da:d1:dc:03:84:a0:22:70:f4:2b:08:e8: af:ed:9f:ba:ce:3b:2c:d1:24:5d:8c:09:00:b0:b8: cc:af:4c:b7:07:89:91:dd:f1:0e:ae:84:1b:e9:80: 54:24:88:16:15:2d:b2:52:9f:f7:7d:f2:8e:8d:57: 0b:09:9e:37:9b:b3:3b:72:14:64:81:17:4b:f3:e5: d3:fd:ae:50:e9:85:52:82:1f:4c:42:1e:18:0e:7f: 12:21:5c:a8:ed:8d:75:0b:8d:a6:f9:c0:a5:83:ac: 38:5e:33:08:95:64:f5:24:ec:7e:88:33:40:85:c8: 7d:4c:ed:75:54:58:15:c8:4f:5f:c4:05:48:4f:9b: 91:24:05:15:83:86:b8:3c:2f:1d:76:f1:20:e8:b5: da:07:1b:34:39:30:3d:03:93:2f:41:16:35:6c:69: b8:6c:20:60:0b:b7:62:25:d3:3f:2b:cf:fb:af:85: 5e:50:91:19:65:26:40:39:0b:18:9a:2b:c4:46:78: cb:16:15:74:3c:a9:65:3b:85:df:1b:c7:64:3f:38: 67:92:e8:de:98:7f:b2:61:ef:d7:2a:11:d4:f3:2b: 09:4e:ad:58:e1:77:16:a6:c5:9b:de:f3:e5:51:26: 54:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:19:36:2B:DC:73:0B:5E:A4:68:D4:35:44:30:69:1D:B6:89:77:15 X509v3 Authority Key Identifier: keyid:AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/4A6D188450EA11EC8FF55B24C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.1.224.0/22 103.199.104.0/22 112.121.160.0/19 137.59.20.0/22 180.178.32.0/19 182.16.0.0/17 IPv6: 2406:8680::/32 Signature Algorithm: sha256WithRSAEncryption c8:f4:96:ff:1c:0c:83:9d:58:03:13:ae:06:42:01:3e:24:c5: 77:33:84:e4:c9:f1:39:6e:c6:42:09:4e:c1:b3:2d:fd:5e:98: af:bd:ff:9f:cd:34:ae:17:cd:95:10:f6:bc:79:f1:61:b8:f1: ae:5a:d0:93:01:99:89:e8:9a:c4:45:be:49:31:24:c2:85:3a: 4f:2e:7e:e4:62:8a:9f:1e:d0:8c:e9:8f:1a:a5:73:5f:cc:74: 4b:d7:18:16:a9:b5:70:ed:ff:1b:af:ad:be:5d:e9:1f:37:6e: e8:71:90:31:75:e6:80:f6:ab:61:55:82:03:9d:b6:4b:fe:8d: 98:9a:75:11:a0:f0:4b:7a:1e:2b:4e:9f:45:f9:bd:bf:28:dd: af:9f:1e:4a:01:bd:cb:cc:f6:8c:c5:ac:0e:1f:a7:09:9e:48: ac:d0:21:21:19:78:c5:6c:b4:88:49:d9:83:ed:65:d0:8f:c0: 02:a3:fc:ee:e3:1d:03:8c:2c:2a:8f:b5:1b:7b:3f:7c:0a:88: 25:e9:ff:8a:76:4a:5a:7a:8c:f7:ca:b3:9c:de:3f:be:99:0e: fe:e0:8c:59:59:45:85:88:ad:da:bf:26:b1:1b:52:5c:a4:d9: 3a:3b:58:be:3b:e8:ab:8d:90:1f:47:a6:16:75:ef:f1:06:5b: c9:7e:e2:c0 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgICCXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQjAxMTAvBgNVBAUTKEFBQTYyREI0N0YwMTJCMjZERDg2OThFMkNDMzVERThG Mjk0Mzc3NjEwHhcNMjYxMTAyMjAzOTU3WhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWU4ZjUxZC03NTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGC020RNV1XG6gvxbE3O+Nva0dwDhKAicPQrCOiv7Z+6zjss0SRdjAkAsLjM r0y3B4mR3fEOroQb6YBUJIgWFS2yUp/3ffKOjVcLCZ43m7M7chRkgRdL8+XT/a5Q 6YVSgh9MQh4YDn8SIVyo7Y11C42m+cClg6w4XjMIlWT1JOx+iDNAhch9TO11VFgV yE9fxAVIT5uRJAUVg4a4PC8ddvEg6LXaBxs0OTA9A5MvQRY1bGm4bCBgC7diJdM/ K8/7r4VeUJEZZSZAOQsYmivERnjLFhV0PKllO4XfG8dkPzhnkujemH+yYe/XKhHU 8ysJTq1Y4XcWpsWb3vPlUSZUFwIDAQABo4ICjTCCAokwHQYDVR0OBBYEFM4ZNivc cwtepGjUNUQwaR22iXcVMB8GA1UdIwQYMBaAFKqmLbR/ASsm3YaY4sw13o8pQ3dh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC82NUQxREIyQ0RB RUExMUVBOTU4RUIzNUJDNEY5QUUwMi9xcVl0dEg4Qkt5YmRocGppekRYZWp5bERk MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FxWXR0SDhCS3liZGhwaml6RFhlanlsRGQyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhFQjAvNjVEMURCMkNEQUVBMTFFQTk1OEVCMzVCQzRGOUFFMDIvNEE2RDE4ODQ1 MEVBMTFFQzhGRjU1QjI0QzRGOUFFMDIucm9hMEwGCCsGAQUFBwEHAQH/BD0wOzAq BAIAATAkAwQCZwHgAwQCZ8doAwQFcHmgAwQCiTsUAwQFtLIgAwQHthAAMA0EAgAC MAcDBQAkBoaAMA0GCSqGSIb3DQEBCwUAA4IBAQDI9Jb/HAyDnVgDE64GQgE+JMV3 M4TkyfE5bsZCCU7Bsy39Xpivvf+fzTSuF82VEPa8efFhuPGuWtCTAZmJ6JrERb5J MSTChTpPLn7kYoqfHtCM6Y8apXNfzHRL1xgWqbVw7f8br62+XekfN27ocZAxdeaA 9qthVYIDnbZL/o2YmnURoPBLeh4rTp9F+b2/KN2vnx5KAb3LzPaMxawOH6cJnkis 0CEhGXjFbLSISdmD7WXQj8ACo/zu4x0DjCwqj7Ubez98Cogl6f+Kdkpaeoz3yrOc 3j++mQ7+4IxZWUWFiK3avyaxG1JcpNk6O1i+O+irjZAfR6YWde/xBlvJfuLA -----END CERTIFICATE-----Generated at Sun Nov 15 16:37:36 2026 by rpki-client