$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa File: D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa (raw, json) Hash identifier: BZooXvszRvtMaFmVKl2d5sopeKuY4pkRJ5VhSUZ3+4o= Subject key identifier: D6:2E:EC:64:5F:9B:05:AB:2D:A3:EA:E6:2C:4C:BA:D5:18:AC:30:8D Certificate issuer: /CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Certificate serial: 123C Authority key identifier: E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa Signing time: Sun 20 Sep 2026 17:33:55 +0000 ROA not before: Sun 20 Sep 2026 17:33:55 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 132372 IP address blocks: 103.28.90.0/24 maxlen: 24 103.28.91.0/24 maxlen: 24 103.72.162.0/23 maxlen: 24 103.91.194.0/24 maxlen: 24 103.117.20.0/24 maxlen: 24 103.122.164.0/24 maxlen: 24 2403:fd40:1001::/48 maxlen: 48 2403:fd40:1002::/48 maxlen: 48 2403:fd40:1003::/48 maxlen: 48 2403:fd40:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4668 (0x123c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F862, serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Validity Not Before: Sep 20 17:33:55 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab01903-659f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3f:89:10:89:2d:41:96:6a:5b:05:42:58:f5: 54:19:ce:41:79:96:68:5f:ce:db:b1:8b:c8:05:54: 1b:28:4d:bc:28:3e:ce:aa:b8:04:14:54:96:77:d3: 03:25:a1:94:c9:f2:30:a2:ac:b2:98:2d:90:4c:a1: 1e:c1:af:81:a2:f1:a5:63:dc:d3:f9:0b:cc:1c:44: 5e:75:53:83:d7:f7:21:4e:e5:41:58:c1:37:e7:12: ca:d5:1b:04:3b:3d:af:d6:ae:ca:26:ed:07:a3:0f: bc:c8:39:34:33:2c:a6:13:e9:3f:ab:4a:46:1c:5f: 59:84:7c:be:1f:fb:63:ce:63:7a:cb:64:29:a6:bc: d0:28:fd:6e:ec:7b:6c:3b:8c:69:3c:c0:ef:11:68: 5c:78:50:4d:a6:63:73:09:84:05:fe:3a:9b:78:a6: 01:fb:01:0a:e0:8f:69:a7:08:ce:25:46:9a:fc:23: 9c:6d:9a:b5:cf:02:88:cd:43:5d:68:5e:98:cd:54: f7:68:a4:15:45:63:48:da:3c:78:5c:e5:27:56:5f: 89:f8:a9:91:b5:f3:d1:7d:d2:4a:a2:aa:00:32:3b: 7a:ba:27:a0:0d:4b:af:dd:0d:b4:1d:67:a5:97:5c: 18:0c:e9:4b:81:e7:81:3b:9b:64:ed:c3:0b:e4:c1: 9d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2E:EC:64:5F:9B:05:AB:2D:A3:EA:E6:2C:4C:BA:D5:18:AC:30:8D X509v3 Authority Key Identifier: keyid:E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.28.90.0/23 103.72.162.0/23 103.91.194.0/24 103.117.20.0/24 103.122.164.0/24 IPv6: 2403:fd40:1001::-2403:fd40:1003:ffff:ffff:ffff:ffff:ffff 2403:fd40:a000::/48 Signature Algorithm: sha256WithRSAEncryption 4f:61:13:d1:b7:99:6b:fc:6d:ed:ef:ce:59:12:b5:7b:23:67: ce:5a:e4:d0:6e:a8:08:65:4a:4b:7c:a6:4f:5f:ad:c5:fb:bf: b8:aa:0c:54:1d:1f:9b:96:84:7a:ac:77:4a:30:5a:23:36:06: 35:ef:fa:dc:66:05:cc:ab:6d:93:6e:37:e3:42:2a:f5:12:b6: 63:7a:56:35:cf:99:4f:2e:d2:26:ef:b1:e1:76:90:ce:a7:70: 31:b4:59:1a:f1:b2:95:55:3c:2d:82:69:0d:5d:c9:4d:7a:03: a8:4d:47:67:bd:8b:06:1b:28:a1:11:31:99:70:44:a5:b8:e9: f3:91:84:a3:de:99:ed:af:8e:94:69:93:1a:7d:20:6c:40:92: 5b:ef:70:d5:f2:cb:12:5a:43:e8:ef:30:4d:d1:31:e9:83:15: a4:38:df:2b:39:71:c0:01:d1:24:a5:ba:89:1f:d2:c4:f2:89: 35:90:b6:9b:fb:5f:d6:e4:45:cd:06:07:54:5a:fa:2d:8d:63: 9c:31:2f:c8:cb:16:0c:7b:24:a0:20:f7:41:a6:65:05:cc:45: 03:31:d6:6f:17:76:be:e8:20:2c:61:44:bb:cf:d7:7c:95:72: f3:56:ae:fc:8c:dc:10:b1:8c:a1:76:65:1e:d9:f6:60:fa:e7: 23:be:c5:ea -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICEjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4NjIxMTAvBgNVBAUTKEU4NTJBNThERTg3MTlGOEJDNkJENjQ5NDk4NTRCNDc0 NDdCODlDREUwHhcNMjYwOTIwMTczMzU1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIwMTkwMy02NTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnj+JEIktQZZqWwVCWPVUGc5BeZZoX87bsYvIBVQbKE28KD7OqrgEFFSWd9MD JaGUyfIwoqyymC2QTKEewa+BovGlY9zT+QvMHERedVOD1/chTuVBWME35xLK1RsE Oz2v1q7KJu0How+8yDk0MyymE+k/q0pGHF9ZhHy+H/tjzmN6y2QpprzQKP1u7Hts O4xpPMDvEWhceFBNpmNzCYQF/jqbeKYB+wEK4I9ppwjOJUaa/COcbZq1zwKIzUNd aF6YzVT3aKQVRWNI2jx4XOUnVl+J+KmRtfPRfdJKoqoAMjt6uiegDUuv3Q20HWel l1wYDOlLgeeBO5tk7cML5MGdSQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFNYu7GRf mwWrLaPq5ixMutUYrDCNMB8GA1UdIwQYMBaAFOhSpY3ocZ+Lxr1klJhUtHRHuJze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg2Mi8xRTZGNkMxMjBG RjkxMUU5QTBEOTJCMEZDNEY5QUUwMi82RktsamVoeG40dkd2V1NVbUZTMGRFZTRu TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZGS2xqZWh4bjR2R3ZXU1VtRlMwZEVlNG5ONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY4NjIvMUU2RjZDMTIwRkY5MTFFOUEwRDkyQjBGQzRGOUFFMDIvRDFEN0Y5QUUw RkY5MTFFOUI0NUUzQjEwQzRGOUFFMDIucm9hMFwGCCsGAQUFBwEHAQH/BE0wSzAk BAIAATAeAwQBZxxaAwQBZ0iiAwQAZ1vCAwQAZ3UUAwQAZ3qkMCMEAgACMB0wEgMH ACQD/UAQAQMHAiQD/UAQAAMHACQD/UCgADANBgkqhkiG9w0BAQsFAAOCAQEAT2ET 0beZa/xt7e/OWRK1eyNnzlrk0G6oCGVKS3ymT1+txfu/uKoMVB0fm5aEeqx3SjBa IzYGNe/63GYFzKttk24340Iq9RK2Y3pWNc+ZTy7SJu+x4XaQzqdwMbRZGvGylVU8 LYJpDV3JTXoDqE1HZ72LBhsooRExmXBEpbjp85GEo96Z7a+OlGmTGn0gbECSW+9w 1fLLElpD6O8wTdEx6YMVpDjfKzlxwAHRJKW6iR/SxPKJNZC2m/tf1uRFzQYHVFr6 LY1jnDEvyMsWDHskoCD3QaZlBcxFAzHWbxd2vuggLGFEu8/XfJVy81au/IzcELGM oXZlHtn2YPrnI77F6g== -----END CERTIFICATE-----Generated at Thu Sep 24 22:34:17 2026 by rpki-client