$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CED50B14C09711F1868D6E7C5811F970.roa File: CED50B14C09711F1868D6E7C5811F970.roa (raw, json) Hash identifier: u8JNuu6Rh7ZY7jcKfx0WQc/c/Xn3Y7Qm+sG0+vAoykg= Subject key identifier: 8E:F4:74:67:FA:41:0C:4C:F2:D9:34:2E:71:F4:5E:FF:F7:62:44:D8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: FDC8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CED50B14C09711F1868D6E7C5811F970.roa Signing time: Mon 05 Oct 2026 08:36:07 +0000 ROA not before: Mon 05 Oct 2026 08:36:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133283 IP address blocks: 45.114.36.0/22 maxlen: 24 103.252.240.0/23 maxlen: 23 103.252.240.0/24 maxlen: 24 2401:4aa0::/36 maxlen: 36 2401:4aa0:1000::/36 maxlen: 36 2401:4aa0:2000::/36 maxlen: 36 2401:4aa0:3000::/36 maxlen: 36 2401:4aa0:4000::/36 maxlen: 36 2401:4aa0:5000::/36 maxlen: 36 2401:4aa0:6000::/36 maxlen: 36 2401:4aa0:7000::/36 maxlen: 36 2401:4aa0:8000::/36 maxlen: 36 2401:4aa0:9000::/36 maxlen: 36 2401:4aa0:a000::/36 maxlen: 36 2401:4aa0:b000::/36 maxlen: 36 2401:4aa0:c000::/36 maxlen: 36 2401:4aa0:d000::/36 maxlen: 36 2401:4aa0:e000::/36 maxlen: 36 2401:4aa0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 15:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64968 (0xfdc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 5 08:36:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ac36177-9f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d5:62:54:b9:73:1a:da:f3:40:4e:2f:e1:64: 14:a8:21:51:d9:5f:46:c9:76:97:d8:2a:80:a9:20: 25:b4:30:61:5b:33:70:97:e8:5e:c4:f6:b2:4a:c8: 42:ad:16:44:0b:1f:9c:90:6c:a6:31:ea:7a:2c:b8: 8d:97:3c:ff:0d:44:88:c8:f5:dd:76:e1:16:25:2b: a4:b1:af:c8:5c:0d:a7:08:bc:97:51:bc:f3:98:9e: 3a:c9:19:0c:4a:ab:ee:d2:f4:29:b3:d4:01:34:c7: bd:59:fe:4f:ab:07:e0:75:13:95:63:21:1a:8c:c7: d6:c6:aa:3c:a6:d9:31:b0:ee:5d:fb:ca:21:17:84: 6d:0d:af:47:49:61:bd:d0:51:3e:76:46:be:58:5f: 9c:34:f9:f9:de:15:1a:4d:9a:78:81:ad:ff:f4:85: 62:9a:9d:c2:a0:b8:02:4c:51:e7:4d:73:e0:a0:b6: 48:42:08:fd:6a:11:16:62:1b:d8:ed:6e:91:7e:a5: 0e:01:d9:17:86:89:71:58:54:c8:e9:9d:df:64:9e: 67:e4:70:8b:88:39:d6:f4:f3:12:36:de:fb:63:dd: 33:c4:a5:19:33:ce:6d:c8:4c:6d:e7:49:dc:9b:fb: d6:ec:90:e2:f6:8a:27:d3:45:71:19:f8:4d:a4:80: e2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F4:74:67:FA:41:0C:4C:F2:D9:34:2E:71:F4:5E:FF:F7:62:44:D8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CED50B14C09711F1868D6E7C5811F970.roa sbgp-ipAddrBlock: critical IPv4: 45.114.36.0/22 103.252.240.0/23 IPv6: 2401:4aa0::/32 Signature Algorithm: sha256WithRSAEncryption ab:9c:5a:70:23:34:eb:a1:e2:21:61:76:ba:80:99:ba:bc:1e: c1:28:9a:ed:40:89:51:45:08:9c:27:fa:c4:9e:22:58:71:62: b0:59:0b:c5:4a:c7:4d:30:06:3b:26:2a:9e:1a:1d:e5:9d:eb: b6:a5:5f:40:68:e1:b7:1e:68:37:f9:f2:c7:df:a1:a6:f2:2d: f7:54:6f:ed:56:49:4d:90:4e:95:3b:44:99:5a:72:d0:6d:e7: ab:1e:3f:20:ec:72:e3:53:d2:ce:78:14:0c:9c:35:9a:05:d3: ec:d0:5d:d0:5a:03:84:11:85:14:34:c8:0f:e1:25:df:a9:a8: 10:d3:1c:34:f5:ea:b4:38:68:3c:83:66:a4:45:67:48:78:7a: ba:29:a9:38:1b:f8:3e:ec:8a:39:f4:74:1e:84:68:0e:66:c8: 02:3d:aa:11:8e:62:27:c0:9d:7e:50:f1:bc:a4:df:1d:5a:3c: 86:7f:e7:b9:7a:6c:65:14:93:c0:78:db:75:d0:ab:87:d4:dc: b8:c0:47:aa:22:9f:c6:a5:7b:d8:21:35:3b:82:fb:b4:77:11: 32:ce:42:fd:2e:b3:bc:48:8a:a2:23:c6:c9:87:95:91:20:6a: 5e:db:6f:9d:d0:53:d4:a6:59:01:4e:fd:c8:50:d4:36:28:0c: c9:69:32:11 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAP3IMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MTAwNTA4MzYwN1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmFjMzYxNzctOWYxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJDVYlS5cxra80BOL+FkFKghUdlfRsl2l9gqgKkgJbQwYVszcJfoXsT2skrI Qq0WRAsfnJBspjHqeiy4jZc8/w1EiMj13XbhFiUrpLGvyFwNpwi8l1G885ieOskZ DEqr7tL0KbPUATTHvVn+T6sH4HUTlWMhGozH1saqPKbZMbDuXfvKIReEbQ2vR0lh vdBRPnZGvlhfnDT5+d4VGk2aeIGt//SFYpqdwqC4AkxR501z4KC2SEII/WoRFmIb 2O1ukX6lDgHZF4aJcVhUyOmd32SeZ+Rwi4g51vTzEjbe+2PdM8SlGTPObchMbedJ 3Jv71uyQ4vaKJ9NFcRn4TaSA4sECAwEAAaOCAnUwggJxMB0GA1UdDgQWBBSO9HRn +kEMTPLZNC5x9F7/92JE2DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NFRDUwQjE0 QzA5NzExRjE4NjhENkU3QzU4MTFGOTcwLnJvYTA0BggrBgEFBQcBBwEB/wQlMCMw EgQCAAEwDAMEAi1yJAMEAWf88DANBAIAAjAHAwUAJAFKoDANBgkqhkiG9w0BAQsF AAOCAQEAq5xacCM066HiIWF2uoCZurwewSia7UCJUUUInCf6xJ4iWHFisFkLxUrH TTAGOyYqnhod5Z3rtqVfQGjhtx5oN/nyx9+hpvIt91Rv7VZJTZBOlTtEmVpy0G3n qx4/IOxy41PSzngUDJw1mgXT7NBd0FoDhBGFFDTID+El36moENMcNPXqtDhoPINm pEVnSHh6uimpOBv4PuyKOfR0HoRoDmbIAj2qEY5iJ8CdflDxvKTfHVo8hn/nuXps ZRSTwHjbddCrh9TcuMBHqiKfxqV72CE1O4L7tHcRMs5C/S6zvEiKoiPGyYeVkSBq XttvndBT1KZZAU79yFDUNigMyWkyEQ== -----END CERTIFICATE-----Generated at Sun Oct 11 20:56:29 2026 by rpki-client