$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/A98F7960A41F11F0A133244EC4F9AE02.roa File: A98F7960A41F11F0A133244EC4F9AE02.roa (raw, json) Hash identifier: Fkicx7CSwAUsnDPdfHvB6HsA9q0BYXagiCWHfaLV4Bg= Subject key identifier: 81:D6:84:C7:B8:22:89:61:78:07:63:94:4F:8E:DD:73:CF:24:52:D7 Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 09C4 Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/A98F7960A41F11F0A133244EC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:16:02 +0000 ROA not before: Sat 20 Dec 2025 10:09:11 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 6453 IP address blocks: 45.117.203.0/24 maxlen: 24 45.126.163.0/24 maxlen: 24 150.107.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2500 (0x9c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Validity Not Before: Dec 20 10:09:11 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a48262-8cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7f:cd:41:11:29:e8:d0:fc:3c:04:d8:78:93: f5:b4:e8:b5:cb:33:c3:1c:2b:12:cd:b2:28:46:cc: b6:97:32:18:26:6b:13:35:bb:78:ba:85:14:77:fc: c1:99:01:4e:9f:9a:2f:ad:1f:04:dc:73:b0:3d:04: af:0c:51:8e:73:98:06:d4:19:38:ee:7d:f0:ce:c2: f0:c5:b2:42:61:79:b2:d5:f5:64:2d:0d:c1:fa:b8: 24:ab:d9:d3:ec:20:7a:e6:d0:cc:ce:99:e8:3a:32: ed:fd:77:2b:bf:c3:75:a7:5e:3f:78:29:69:1e:72: 57:93:7e:14:87:31:90:87:f1:87:aa:06:0f:f0:3d: 82:d2:87:c6:38:d9:f9:81:4d:91:49:5c:78:b1:db: 90:99:53:70:c9:87:2a:b9:17:84:10:b0:51:7e:af: ab:04:b5:00:28:ad:f4:15:76:8d:06:54:0e:89:f3: 5a:7f:1f:47:85:a1:a9:15:0e:76:d0:7c:f2:a9:ec: c3:e1:d2:f0:ea:a8:56:a7:5f:53:1f:50:0d:ed:6b: 24:d5:29:8a:fd:b4:a8:a0:21:4b:65:00:10:a7:e8: 03:b9:0a:d4:29:d4:77:79:58:09:30:9c:1a:b9:12: 82:5d:bb:a5:10:90:92:f5:87:33:b3:af:7c:39:ca: 7c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D6:84:C7:B8:22:89:61:78:07:63:94:4F:8E:DD:73:CF:24:52:D7 X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/A98F7960A41F11F0A133244EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.117.203.0/24 45.126.163.0/24 150.107.10.0/24 Signature Algorithm: sha256WithRSAEncryption 27:c9:4a:e2:48:d5:f1:a1:6a:c3:07:ab:87:82:c5:f6:4c:4a: 85:b0:77:32:37:83:25:7d:cd:67:80:c1:06:d2:57:6f:f7:6e: 56:69:30:f7:4e:88:8c:eb:c5:bd:df:19:83:a3:b4:ba:85:40: 09:49:bf:6f:49:b4:25:94:b3:dc:73:13:61:d6:4c:57:fa:b1: d7:31:23:d7:0b:e5:3d:8d:b0:f3:27:73:31:17:3a:a7:30:d0: ba:af:74:c5:6a:a9:4a:5d:df:1c:71:c5:3c:26:cd:e4:3a:2c: e8:d7:eb:75:16:68:30:96:3b:51:41:15:90:1d:01:bc:d4:a3: 1d:b3:af:1e:27:1a:c1:c3:7f:4f:26:1c:14:ba:e1:46:2b:19: 91:9f:c4:9e:06:e2:3c:99:a4:d4:61:56:f4:27:d8:09:a0:d3: b0:87:90:b8:84:c3:5d:39:79:ab:e6:1c:c6:31:08:de:68:2a: b8:7d:db:2f:d3:a4:42:37:89:07:e0:17:b0:4c:da:bf:0b:41: ed:61:38:b3:19:47:7a:a6:64:12:38:e2:bc:79:dc:e7:7a:b7: c5:78:ae:b9:f9:98:cb:cd:f7:58:b0:d4:6b:c1:22:45:8e:59: 04:3c:42:ce:23:e3:f6:bc:10:b1:e5:ab:d5:8d:d7:78:22:82: 69:76:dc:29 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjUxMjIwMTAwOTExWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODI2Mi04Y2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqn/NQREp6ND8PATYeJP1tOi1yzPDHCsSzbIoRsy2lzIYJmsTNbt4uoUUd/zB mQFOn5ovrR8E3HOwPQSvDFGOc5gG1Bk47n3wzsLwxbJCYXmy1fVkLQ3B+rgkq9nT 7CB65tDMzpnoOjLt/Xcrv8N1p14/eClpHnJXk34UhzGQh/GHqgYP8D2C0ofGONn5 gU2RSVx4sduQmVNwyYcquReEELBRfq+rBLUAKK30FXaNBlQOifNafx9HhaGpFQ52 0HzyqezD4dLw6qhWp19TH1AN7Wsk1SmK/bSooCFLZQAQp+gDuQrUKdR3eVgJMJwa uRKCXbulEJCS9Yczs698Ocp8NQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFIHWhMe4 IolheAdjlE+O3XPPJFLXMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODQwNEUvQkMwMzBDNzZGMURBMTFFQUFGQzZDNzBBQzRGOUFFMDIvQTk4Rjc5NjBB NDFGMTFGMEExMzMyNDRFQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQALXXLAwQALX6jAwQAlmsKMA0GCSqGSIb3DQEBCwUAA4IBAQAnyUri SNXxoWrDB6uHgsX2TEqFsHcyN4Mlfc1ngMEG0ldv925WaTD3ToiM68W93xmDo7S6 hUAJSb9vSbQllLPccxNh1kxX+rHXMSPXC+U9jbDzJ3MxFzqnMNC6r3TFaqlKXd8c ccU8Js3kOizo1+t1FmgwljtRQRWQHQG81KMds68eJxrBw39PJhwUuuFGKxmRn8Se BuI8maTUYVb0J9gJoNOwh5C4hMNdOXmr5hzGMQjeaCq4fdsv06RCN4kH4BewTNq/ C0HtYTizGUd6pmQSOOK8edznerfFeK65+ZjLzfdYsNRrwSJFjlkEPELOI+P2vBCx 5avVjdd4IoJpdtwp -----END CERTIFICATE-----Generated at Mon Mar 2 03:59:01 2026 by rpki-client