$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F58900A09C5611F0B2522F43C4F9AE02.roa File: F58900A09C5611F0B2522F43C4F9AE02.roa (raw, json) Hash identifier: S/h7/Twt2aNq1qLPa2RcRukX05WAqVvjCBgbjYcR8dw= Subject key identifier: EB:C5:75:19:1D:C6:D1:86:15:36:59:FE:18:D3:F2:96:88:1B:6A:D3 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: FDCA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F58900A09C5611F0B2522F43C4F9AE02.roa Signing time: Mon 05 Oct 2026 08:42:56 +0000 ROA not before: Mon 05 Oct 2026 08:42:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151712 IP address blocks: 43.248.58.0/24 maxlen: 24 43.248.59.0/24 maxlen: 24 45.114.36.0/24 maxlen: 24 45.114.37.0/24 maxlen: 24 45.114.38.0/24 maxlen: 24 45.114.39.0/24 maxlen: 24 103.44.156.0/22 maxlen: 24 103.252.241.0/24 maxlen: 24 2001:df3:1ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 15:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64970 (0xfdca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 5 08:42:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ac36310-a475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:a1:af:eb:b2:af:28:57:0f:6e:68:1c:df: 7a:24:d5:55:62:ce:65:db:c0:95:f7:20:53:db:a9: da:e1:42:be:d1:42:67:53:03:15:7b:77:cf:8b:93: a5:a5:59:b8:74:78:11:fc:24:d4:3b:59:07:fb:22: bc:34:61:f0:52:5c:a4:77:1e:97:21:38:e3:08:05: 52:83:f0:9c:0f:23:ee:3c:c1:dd:76:99:51:1f:61: 49:60:c5:5b:7e:da:10:98:ae:d4:c7:97:19:9e:69: d5:60:8f:7f:79:68:1c:09:9a:9b:81:6a:2c:d8:ed: db:6d:e9:72:45:07:42:69:ea:8c:11:c9:05:ad:09: 18:2a:9b:0e:e3:ec:47:5e:78:4f:6f:a4:16:97:de: ff:00:2d:95:00:3e:96:6c:d9:a7:73:12:6b:d1:83: fc:09:3a:44:39:d0:da:71:9c:3f:26:42:ae:59:81: 02:34:8a:1b:4e:0c:4f:d4:b1:f2:a9:2b:e7:3c:37: 9a:ff:f2:27:54:f2:e3:6e:66:ac:74:0e:82:94:67: 78:2d:f5:b4:f4:50:fb:84:12:d5:78:9e:ef:14:35: 80:15:9e:81:53:f8:a4:80:97:3b:2e:ad:1d:33:fd: b5:d7:0f:ca:8f:96:97:fa:fc:c6:3c:f9:79:06:1f: 88:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C5:75:19:1D:C6:D1:86:15:36:59:FE:18:D3:F2:96:88:1B:6A:D3 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F58900A09C5611F0B2522F43C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.248.58.0/23 45.114.36.0/22 103.44.156.0/22 103.252.241.0/24 IPv6: 2001:df3:1ac0::/48 Signature Algorithm: sha256WithRSAEncryption 3a:4f:1e:63:da:84:af:5f:8e:46:ff:bf:48:c6:46:4a:2c:cd: 08:ac:e0:5b:1a:bd:6d:5b:59:70:0e:06:a5:84:16:fb:4e:74: d4:88:77:d4:12:7b:39:dc:2d:bb:80:dd:88:a8:5b:ed:fa:91: 43:85:df:59:56:84:fb:08:04:33:10:be:ad:3f:1d:44:cc:c3: b6:7f:4a:d2:5d:d6:b2:1a:d5:cd:fd:2d:6b:f7:9a:b3:02:66: 41:9c:de:c3:03:14:19:fd:b8:67:f5:30:4e:76:12:7a:36:05: 53:6d:d5:fc:dc:98:02:b0:fa:ba:49:f7:5d:a1:1b:a2:10:10: e6:a5:a4:ac:86:8a:c0:90:d6:f7:ef:22:2b:cf:51:f2:44:e2: 31:33:57:dc:64:b0:87:b4:e1:e6:86:b1:61:2a:0a:ee:eb:c7: d2:46:1a:d4:37:87:ba:be:27:81:d1:ba:1c:bb:ab:ce:c4:27: dd:db:fb:3f:43:e3:80:60:d9:16:e1:4d:b0:c4:3a:08:05:19: f2:87:0f:d2:cb:2d:71:f0:49:00:32:eb:79:8a:ab:92:5d:fd: 59:65:8a:54:f9:d1:67:35:5e:e4:f9:b2:01:9e:9d:ef:31:0d: 98:f4:d8:59:6a:52:b6:26:a4:39:02:ff:81:78:6d:7d:77:fe: 73:08:68:4b -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIDAP3KMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MTAwNTA4NDI1NloXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmFjMzYzMTAtYTQ3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcCoa/rsq8oVw9uaBzfeiTVVWLOZdvAlfcgU9up2uFCvtFCZ1MDFXt3z4uT paVZuHR4Efwk1DtZB/sivDRh8FJcpHcelyE44wgFUoPwnA8j7jzB3XaZUR9hSWDF W37aEJiu1MeXGZ5p1WCPf3loHAmam4FqLNjt223pckUHQmnqjBHJBa0JGCqbDuPs R154T2+kFpfe/wAtlQA+lmzZp3MSa9GD/Ak6RDnQ2nGcPyZCrlmBAjSKG04MT9Sx 8qkr5zw3mv/yJ1Ty425mrHQOgpRneC31tPRQ+4QS1Xie7xQ1gBWegVP4pICXOy6t HTP9tdcPyo+Wl/r8xjz5eQYfiBsCAwEAAaOCAoMwggJ/MB0GA1UdDgQWBBTrxXUZ HcbRhhU2Wf4Y0/KWiBtq0zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y1ODkwMEEw OUM1NjExRjBCMjUyMkY0M0M0RjlBRTAyLnJvYTBCBggrBgEFBQcBBwEB/wQzMDEw HgQCAAEwGAMEASv4OgMEAi1yJAMEAmcsnAMEAGf88TAPBAIAAjAJAwcAIAEN8xrA MA0GCSqGSIb3DQEBCwUAA4IBAQA6Tx5j2oSvX45G/79IxkZKLM0IrOBbGr1tW1lw DgalhBb7TnTUiHfUEns53C27gN2IqFvt+pFDhd9ZVoT7CAQzEL6tPx1EzMO2f0rS XdayGtXN/S1r95qzAmZBnN7DAxQZ/bhn9TBOdhJ6NgVTbdX83JgCsPq6SfddoRui EBDmpaSshorAkNb37yIrz1HyROIxM1fcZLCHtOHmhrFhKgru68fSRhrUN4e6vieB 0bocu6vOxCfd2/s/Q+OAYNkW4U2wxDoIBRnyhw/Syy1x8EkAMut5iquSXf1ZZYpU +dFnNV7k+bIBnp3vMQ2Y9NhZalK2JqQ5Av+BeG19d/5zCGhL -----END CERTIFICATE-----Generated at Mon Oct 12 00:13:00 2026 by rpki-client