$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/D9AD698C961211ECB515C474C4F9AE02.roa File: D9AD698C961211ECB515C474C4F9AE02.roa (raw, json) Hash identifier: 5C0/u4C53UqpaffmN8FC5wF2DCitwcKnVPAroKK+u3Y= Subject key identifier: 61:9C:F4:5D:88:2E:F9:99:76:06:80:57:AD:CD:4C:27:B3:EC:DA:D8 Certificate issuer: /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5 Certificate serial: 04AD Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/D9AD698C961211ECB515C474C4F9AE02.roa Signing time: Sat 22 Aug 2026 23:49:06 +0000 ROA not before: Sat 22 Aug 2026 23:49:06 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 133199 IP address blocks: 43.242.128.0/24 maxlen: 24 43.242.129.0/24 maxlen: 24 43.242.130.0/24 maxlen: 24 43.242.131.0/24 maxlen: 24 103.251.88.0/24 maxlen: 24 103.251.89.0/24 maxlen: 24 103.251.90.0/24 maxlen: 24 103.251.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1197 (0x4ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5 Validity Not Before: Aug 22 23:49:06 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a8a3572-8712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:40:2b:89:31:86:d1:1d:9b:fb:c2:05:2e:63: 79:49:e6:b5:8f:81:bd:5e:8f:e5:58:47:da:ea:30: 19:a7:03:70:78:e8:a2:3a:b3:f3:c8:7d:4d:c8:c5: a3:98:67:34:03:fd:07:67:ca:79:6f:e0:33:73:e7: 47:c7:03:70:f4:2a:9b:98:ef:09:a2:9e:de:fe:04: 55:33:b3:7d:e3:bb:d5:07:a7:3a:85:8e:65:d9:07: 8d:09:63:33:17:4b:31:61:00:8b:df:fa:87:79:b9: 33:e5:30:c4:fb:df:c1:04:dd:b3:9e:67:e2:b0:61: 41:ae:77:b9:6e:ba:2c:5e:c9:75:2b:71:c0:55:3e: 7c:9e:47:1e:2c:b5:16:2d:e8:ba:16:04:6b:09:26: a5:af:1e:02:f8:1a:e5:e6:a3:93:0e:0c:ae:59:52: 23:fe:68:8d:27:da:07:02:ef:a4:07:fd:26:7c:6d: 21:0b:5e:f5:f2:64:e7:4e:a5:85:07:c7:ba:35:71: c9:e0:c4:cc:4f:54:77:f5:5f:e0:51:13:23:5a:ea: 7e:1e:39:7d:de:d6:9a:30:4b:83:b8:59:fb:34:7d: 39:46:1a:7f:fe:ee:c9:68:38:14:7a:12:d2:c7:f3: 50:4e:f2:e2:d9:0d:ba:b0:43:e7:5d:49:c0:e4:8d: eb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9C:F4:5D:88:2E:F9:99:76:06:80:57:AD:CD:4C:27:B3:EC:DA:D8 X509v3 Authority Key Identifier: keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/D9AD698C961211ECB515C474C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.242.128.0/22 103.251.88.0/22 Signature Algorithm: sha256WithRSAEncryption 90:f0:8f:13:5e:ec:b3:8d:21:86:1b:bc:55:28:ed:d3:fd:0d: 89:02:cc:0c:ff:2c:29:5d:f3:b8:05:d5:64:08:09:c7:95:2e: 68:2f:9c:fa:9c:11:30:8b:b5:57:b8:88:e3:26:46:d9:9a:cb: d0:77:bf:77:14:a2:45:03:ea:18:c6:dc:8e:f1:a7:d8:21:03: dd:04:91:5b:c8:2f:b8:a8:fc:9b:d0:39:e3:96:fa:16:2b:86: 4d:8e:4e:dd:9f:0b:5c:23:20:e3:4b:61:8a:7e:e2:f4:2f:d5: 93:c9:96:7e:19:52:ca:6b:ec:5a:ab:1f:ba:e5:72:21:d5:07: af:b2:88:e9:9c:29:17:4b:7c:01:5f:d4:df:cd:a9:b8:25:8d: fb:54:d7:16:65:40:e1:b6:bb:bb:8e:e3:1c:38:02:96:ad:07: 4d:e9:f2:dd:db:ec:d0:d0:8f:e6:6d:07:06:20:1e:06:3d:51: 65:b6:90:51:ba:d1:1b:c8:1d:fe:0f:35:5b:09:e3:80:c7:84: 94:41:68:b3:32:5f:39:6f:78:e2:28:6e:d9:d4:03:15:27:62: 86:b7:fd:0a:0b:3b:96:69:26:64:4e:f0:05:59:cd:94:fd:86: a3:a1:c2:f5:b4:ff:49:c3:d1:62:d7:7e:22:62:9b:d8:07:ba: af:4f:eb:86 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYyMEIxMTAvBgNVBAUTKDc3MDNBNkQ1NkM3MTgwMjFCRDlDODlFQjNDNEJFRDgx N0VENTZBRTUwHhcNMjYwODIyMjM0OTA2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YThhMzU3Mi04NzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUAriTGG0R2b+8IFLmN5Sea1j4G9Xo/lWEfa6jAZpwNweOiiOrPzyH1NyMWj mGc0A/0HZ8p5b+Azc+dHxwNw9CqbmO8Jop7e/gRVM7N947vVB6c6hY5l2QeNCWMz F0sxYQCL3/qHebkz5TDE+9/BBN2znmfisGFBrne5brosXsl1K3HAVT58nkceLLUW Lei6FgRrCSalrx4C+Brl5qOTDgyuWVIj/miNJ9oHAu+kB/0mfG0hC1718mTnTqWF B8e6NXHJ4MTMT1R39V/gURMjWup+Hjl93taaMEuDuFn7NH05Rhp//u7JaDgUehLS x/NQTvLi2Q26sEPnXUnA5I3rbQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFGGc9F2I LvmZdgaAV63NTCez7NrYMB8GA1UdIwQYMBaAFHcDptVscYAhvZyJ6zxL7YF+1Wrl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjIwQi8xOUU0REJGNjk2 MEYxMUVDODkwQTQ0NkRDNEY5QUUwMi9kd09tMVd4eGdDRzluSW5yUEV2dGdYN1Zh dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3T20xV3h4Z0NHOW5JbnJQRXZ0Z1g3VmF1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEYyMEIvMTlFNERCRjY5NjBGMTFFQzg5MEE0NDZEQzRGOUFFMDIvRDlBRDY5OEM5 NjEyMTFFQ0I1MTVDNDc0QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/KAAwQCZ/tYMA0GCSqGSIb3DQEBCwUAA4IBAQCQ8I8TXuyzjSGG G7xVKO3T/Q2JAswM/ywpXfO4BdVkCAnHlS5oL5z6nBEwi7VXuIjjJkbZmsvQd793 FKJFA+oYxtyO8afYIQPdBJFbyC+4qPyb0DnjlvoWK4ZNjk7dnwtcIyDjS2GKfuL0 L9WTyZZ+GVLKa+xaqx+65XIh1QevsojpnCkXS3wBX9Tfzam4JY37VNcWZUDhtru7 juMcOAKWrQdN6fLd2+zQ0I/mbQcGIB4GPVFltpBRutEbyB3+DzVbCeOAx4SUQWiz Ml85b3jiKG7Z1AMVJ2KGt/0KCzuWaSZkTvAFWc2U/YajocL1tP9Jw9Fi134iYpvY B7qvT+uG -----END CERTIFICATE-----Generated at Sun Sep 20 16:19:45 2026 by rpki-client