$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/1D88BC36F8C711E6B6C42C6CC4F9AE02.roa File: 1D88BC36F8C711E6B6C42C6CC4F9AE02.roa (raw, json) Hash identifier: v4wEm0svqrtD1IjR5j2FxmAlp4879SAjK2pcYq+HNMQ= Subject key identifier: 82:D9:2E:F6:A5:16:C4:EF:FC:7A:5C:CD:D5:47:9B:2B:59:7B:08:77 Certificate issuer: /CN=A918FDBF/serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87 Certificate serial: 1CC8 Authority key identifier: 8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/1D88BC36F8C711E6B6C42C6CC4F9AE02.roa Signing time: Fri 04 Sep 2026 16:29:16 +0000 ROA not before: Fri 04 Sep 2026 16:29:16 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 131999 IP address blocks: 103.29.168.0/23 maxlen: 23 103.229.187.0/24 maxlen: 24 2401:b300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 16:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7368 (0x1cc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FDBF, serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87 Validity Not Before: Sep 4 16:29:16 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9af1dc-05c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8f:1d:b0:14:65:73:c1:3b:0d:8a:83:89:cc: 97:e7:fc:95:86:5f:cc:fc:98:c7:64:46:82:a4:d1: e6:2c:56:2f:3c:a5:5f:24:25:32:b2:07:85:8e:4d: 84:e1:62:21:9f:df:fa:e6:3c:12:4e:7b:c8:46:0e: 83:44:57:73:fe:07:65:e3:b2:39:81:f0:b7:bd:03: 9b:d6:5b:a5:27:d2:a0:00:2d:18:b3:bb:f5:7c:ca: fc:1f:52:d9:26:6d:e3:74:01:a0:99:89:f7:b3:e6: f7:c6:e7:98:54:2f:e4:c7:46:5b:21:c0:2c:4e:b2: bc:67:92:fb:ed:25:57:f0:b8:f1:3d:0a:5e:96:13: 86:4d:96:bc:04:2c:f5:a6:a8:7e:63:ee:46:14:1a: 7b:08:f1:18:79:7a:f6:16:5a:f4:a7:18:f0:44:72: 4e:a4:53:a5:c9:15:40:39:e9:6e:0c:9d:9c:e5:29: 6a:ec:f1:f0:50:81:ac:86:c2:69:4b:cf:41:14:26: c6:9f:38:60:a3:67:46:20:8f:ec:19:cb:1b:aa:ac: 97:54:39:2c:90:63:bb:13:85:34:1e:53:55:8c:ee: 00:16:59:2a:7d:22:84:71:35:1a:88:99:a0:3b:44: 84:91:ee:fd:eb:47:67:06:a6:34:8f:f0:f6:b5:e9: 85:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D9:2E:F6:A5:16:C4:EF:FC:7A:5C:CD:D5:47:9B:2B:59:7B:08:77 X509v3 Authority Key Identifier: keyid:8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/1D88BC36F8C711E6B6C42C6CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.29.168.0/23 103.229.187.0/24 IPv6: 2401:b300::/32 Signature Algorithm: sha256WithRSAEncryption 54:c8:cf:82:b1:67:85:53:27:a4:11:57:8a:37:68:e6:58:55: b4:51:41:02:f0:ba:a7:2d:b8:6d:85:d9:e1:4b:1b:a2:18:07: 09:65:24:cb:40:86:80:40:98:ac:66:95:e5:69:8f:f8:e0:72: 58:29:4b:0c:37:ce:6d:b5:96:cd:00:cf:7e:8c:17:a3:d6:93: 36:e7:ef:2b:5d:6e:50:e9:ff:23:ae:8d:2b:77:06:cb:d4:86: 32:0d:03:3d:36:8c:58:6f:d8:99:95:21:ca:d8:a1:e6:83:aa: c4:b8:3d:16:99:1b:20:c2:24:1b:26:54:6b:b2:b3:e8:87:a8: fb:4a:9d:1e:f3:89:85:da:6e:60:3b:81:c1:6f:71:29:4b:7e: 9e:07:8b:c2:a9:48:8a:e1:98:87:f6:99:56:8f:1b:24:c7:65: 67:14:a2:cd:46:b0:42:38:68:c0:5e:4a:bc:58:0c:2a:d2:9b: 77:81:f5:2f:5e:cc:9b:4b:15:6a:f2:52:28:a5:e7:da:d1:6c: 35:47:16:c2:f4:80:b1:a0:15:d7:fd:73:7a:11:f4:66:6d:58: 58:d0:00:84:e5:f6:2b:7e:bb:6a:82:f2:92:05:d4:2d:51:7e: eb:8a:e1:08:a1:6a:17:66:f9:a0:a5:0e:5e:b9:b1:67:97:b2: 5b:02:77:7c -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICHMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEQkYxMTAvBgNVBAUTKDhEOUEyMjhDQzUyRjgwMEVFNUE0MzIzMDdCMzQzMkM2 M0Q4QTlEODcwHhcNMjYwOTA0MTYyOTE2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTlhZjFkYy0wNWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA648dsBRlc8E7DYqDicyX5/yVhl/M/JjHZEaCpNHmLFYvPKVfJCUysgeFjk2E 4WIhn9/65jwSTnvIRg6DRFdz/gdl47I5gfC3vQOb1lulJ9KgAC0Ys7v1fMr8H1LZ Jm3jdAGgmYn3s+b3xueYVC/kx0ZbIcAsTrK8Z5L77SVX8LjxPQpelhOGTZa8BCz1 pqh+Y+5GFBp7CPEYeXr2Flr0pxjwRHJOpFOlyRVAOeluDJ2c5Slq7PHwUIGshsJp S89BFCbGnzhgo2dGII/sGcsbqqyXVDkskGO7E4U0HlNVjO4AFlkqfSKEcTUaiJmg O0SEke7960dnBqY0j/D2temFfwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFILZLval FsTv/HpczdVHmytZewh3MB8GA1UdIwQYMBaAFI2aIozFL4AO5aQyMHs0MsY9ip2H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkRCRi85OUEzMEFGOEY4 QzUxMUU2OUVCQzU1NkFDNEY5QUUwMi9qWm9pak1VdmdBN2xwREl3ZXpReXhqMktu WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pab2lqTVV2Z0E3bHBESXdlelF5eGoyS25ZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZEQkYvOTlBMzBBRjhGOEM1MTFFNjlFQkM1NTZBQzRGOUFFMDIvMUQ4OEJDMzZG OEM3MTFFNkI2QzQyQzZDQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBZx2oAwQAZ+W7MA0EAgACMAcDBQAkAbMAMA0GCSqGSIb3DQEBCwUA A4IBAQBUyM+CsWeFUyekEVeKN2jmWFW0UUEC8LqnLbhthdnhSxuiGAcJZSTLQIaA QJisZpXlaY/44HJYKUsMN85ttZbNAM9+jBej1pM25+8rXW5Q6f8jro0rdwbL1IYy DQM9NoxYb9iZlSHK2KHmg6rEuD0WmRsgwiQbJlRrsrPoh6j7Sp0e84mF2m5gO4HB b3EpS36eB4vCqUiK4ZiH9plWjxskx2VnFKLNRrBCOGjAXkq8WAwq0pt3gfUvXsyb SxVq8lIopefa0Ww1RxbC9ICxoBXX/XN6EfRmbVhY0ACE5fYrfrtqgvKSBdQtUX7r iuEIoWoXZvmgpQ5eubFnl7JbAnd8 -----END CERTIFICATE-----Generated at Tue Sep 22 16:36:44 2026 by rpki-client