$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/2884888A717011E99BA2FB3DC4F9AE02.roa File: 2884888A717011E99BA2FB3DC4F9AE02.roa (raw, json) Hash identifier: RR/eqocgsXINt0cqzGJ2sJs49kSB0zMw//mx4cbn+PE= Subject key identifier: 5D:4E:38:02:9D:BF:53:B8:D8:A0:CE:B8:6F:6B:95:D7:09:79:F9:6C Certificate issuer: /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686 Certificate serial: 1195 Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/2884888A717011E99BA2FB3DC4F9AE02.roa Signing time: Mon 02 Nov 2026 17:31:53 +0000 ROA not before: Mon 02 Nov 2026 17:31:53 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 0 IP address blocks: 103.116.193.0/24 maxlen: 24 103.116.194.0/24 maxlen: 24 2001:df3:1300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 17:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4501 (0x1195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D3A9, serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686 Validity Not Before: Nov 2 17:31:53 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6ae8c909-a773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b3:b5:c6:bb:e9:1f:89:e9:30:35:50:8e:9b: b3:dd:94:79:b6:bb:3c:f1:79:2a:23:83:86:30:93: 0e:8f:83:f5:5b:92:24:65:d6:a3:8e:35:01:07:dc: 53:0e:cc:94:6a:c9:fc:af:c8:8a:7f:66:a4:ed:42: ef:0c:e8:ad:df:15:ae:ad:97:f1:df:92:c9:fd:e7: 47:5c:94:c4:39:de:31:42:50:40:45:8f:ba:ac:03: 3f:4c:00:e2:09:85:ca:9c:d1:2d:55:1e:3c:65:da: d3:3d:03:b4:de:50:5b:46:b7:1a:ed:e1:69:c4:63: f8:ea:4d:12:7c:7f:7a:db:01:50:7b:4e:01:6d:3e: 0f:cf:69:1d:fd:53:ec:9f:0a:01:63:12:5f:14:6e: 58:e9:e2:0f:26:88:9a:df:7e:de:b7:86:c0:3a:e1: 43:33:38:ad:e7:78:2c:a2:ee:7f:c1:12:65:37:02: c3:9e:fc:33:60:68:1e:e1:d6:6d:d0:52:db:96:26: 7c:24:b3:74:dc:c4:47:91:9a:6c:08:7d:17:23:6c: 8c:55:1a:3d:ca:d9:97:4c:c7:ff:fb:6e:fe:4c:e4: cd:46:71:0b:f9:4b:ab:ba:ff:b7:ed:9d:e2:57:42: 37:6c:94:bc:0f:23:bf:3e:d1:23:26:13:a6:80:97: 73:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4E:38:02:9D:BF:53:B8:D8:A0:CE:B8:6F:6B:95:D7:09:79:F9:6C X509v3 Authority Key Identifier: keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/2884888A717011E99BA2FB3DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.116.193.0-103.116.194.255 IPv6: 2001:df3:1300::/48 Signature Algorithm: sha256WithRSAEncryption 25:b9:60:2b:5b:72:8a:76:96:13:a3:2b:a9:d9:dc:2e:2e:09: 88:42:0e:de:24:05:cc:0c:8b:3a:d4:36:61:7d:58:ea:54:9b: 62:5e:18:2b:78:ed:4e:2f:1f:12:8f:9f:cb:56:7c:35:f0:35: 27:b7:84:8a:7a:5a:13:b5:2f:86:78:7a:66:a9:a8:2a:13:39: 5d:51:04:a3:c3:0e:8c:82:53:d7:49:9e:2f:b8:ec:8a:de:b6: eb:10:78:4b:72:17:d2:95:60:02:bc:c0:45:6e:8c:5f:e2:ae: 36:42:09:a2:b4:bf:c0:57:e0:35:84:06:c2:cb:a7:7a:68:5e: 3f:2e:07:10:da:4a:f5:fb:1f:40:fb:41:44:78:57:cd:86:df: 3c:cb:39:71:6d:11:9c:0b:c8:09:e5:a3:f2:e1:2a:ae:f5:18: b4:67:4e:a9:ca:a1:94:fa:3d:d8:b5:29:8e:5c:dc:66:c9:12: 33:7e:c4:e2:ea:8d:4c:a1:1c:b0:fe:1b:fe:d2:19:06:dd:d1: 85:39:6d:7b:bf:d1:21:88:fb:e8:15:23:65:2d:d8:52:f7:38: 06:ea:a3:b9:e4:08:89:09:b1:d2:86:02:f7:1a:0d:ac:0f:9d: 4d:62:f1:19:f0:87:8a:00:42:f7:d7:e0:7b:7e:fc:7c:21:f1: cc:60:18:2b -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgICEZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQzQTkxMTAvBgNVBAUTKDE5Njg0MjNFRDZEMjQ5NTg4MEE1NkE2REIwMkJDNjcy OThDNUU2ODYwHhcNMjYxMTAyMTczMTUzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YWU4YzkwOS1hNzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5LO1xrvpH4npMDVQjpuz3ZR5trs88XkqI4OGMJMOj4P1W5IkZdajjjUBB9xT DsyUasn8r8iKf2ak7ULvDOit3xWurZfx35LJ/edHXJTEOd4xQlBARY+6rAM/TADi CYXKnNEtVR48ZdrTPQO03lBbRrca7eFpxGP46k0SfH962wFQe04BbT4Pz2kd/VPs nwoBYxJfFG5Y6eIPJoia337et4bAOuFDMzit53gsou5/wRJlNwLDnvwzYGge4dZt 0FLbliZ8JLN03MRHkZpsCH0XI2yMVRo9ytmXTMf/+27+TOTNRnEL+Uuruv+37Z3i V0I3bJS8DyO/PtEjJhOmgJdz4wIDAQABo4ICeTCCAnUwHQYDVR0OBBYEFF1OOAKd v1O42KDOuG9rldcJeflsMB8GA1UdIwQYMBaAFBloQj7W0klYgKVqbbArxnKYxeaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDNBOS9CQjdGRkI4RTNB OTIxMUU5QjUyRENGNTNDNEY5QUUwMi9HV2hDUHRiU1NWaUFwV3B0c0N2R2NwakY1 b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dXaENQdGJTU1ZpQXBXcHRzQ3ZHY3BqRjVvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQzQTkvQkI3RkZCOEUzQTkyMTFFOUI1MkRDRjUzQzRGOUFFMDIvMjg4NDg4OEE3 MTcwMTFFOTlCQTJGQjNEQzRGOUFFMDIucm9hMDgGCCsGAQUFBwEHAQH/BCkwJzAU BAIAATAOMAwDBABndMEDBABndMIwDwQCAAIwCQMHACABDfMTADANBgkqhkiG9w0B AQsFAAOCAQEAJblgK1tyinaWE6MrqdncLi4JiEIO3iQFzAyLOtQ2YX1Y6lSbYl4Y K3jtTi8fEo+fy1Z8NfA1J7eEinpaE7Uvhnh6ZqmoKhM5XVEEo8MOjIJT10meL7js it626xB4S3IX0pVgArzARW6MX+KuNkIJorS/wFfgNYQGwsunemhePy4HENpK9fsf QPtBRHhXzYbfPMs5cW0RnAvICeWj8uEqrvUYtGdOqcqhlPo92LUpjlzcZskSM37E 4uqNTKEcsP4b/tIZBt3RhTlte7/RIYj76BUjZS3YUvc4BuqjueQIiQmx0oYC9xoN rA+dTWLxGfCHigBC99fge378fCHxzGAYKw== -----END CERTIFICATE-----Generated at Thu Nov 5 07:34:12 2026 by rpki-client