$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D931AD927E0F11EE97A4761DC4F9AE02.roa File: D931AD927E0F11EE97A4761DC4F9AE02.roa (raw, json) Hash identifier: iQ8l28E2oJiEafgUQdAqtVhrTZpTkNp4FP73nFLRVbw= Subject key identifier: 12:A3:BD:3C:73:50:A3:1C:FB:34:DD:C3:48:4F:7F:63:C1:B8:62:1E Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 2108 Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D931AD927E0F11EE97A4761DC4F9AE02.roa Signing time: Wed 30 Sep 2026 16:31:17 +0000 ROA not before: Wed 30 Sep 2026 16:31:17 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 151397 IP address blocks: 203.86.116.0/24 maxlen: 24 240e:983:2010::/48 maxlen: 48 240e:983:2020::/48 maxlen: 48 240e:983:2030::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 16:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8456 (0x2108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Sep 30 16:31:17 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd3954-971a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:16:a4:d5:ff:29:86:a1:cd:92:3f:59:19:c3: e5:d0:07:1a:95:79:1d:78:cc:33:ea:71:af:8c:3a: 8f:0b:33:32:a0:40:37:2a:56:92:d1:b4:f2:9d:60: a8:63:2a:eb:d2:22:c3:e1:ca:53:b6:17:31:a0:d5: 8a:c6:5c:02:e0:77:c0:87:23:9c:5b:4a:62:25:8c: bf:7c:2b:02:50:f8:aa:b2:bd:64:53:1a:dd:e9:52: 13:12:ff:bb:72:86:89:b9:ca:f8:09:b3:d0:20:71: b9:2a:4d:3e:7d:5c:c7:a7:92:9e:bf:cd:5e:6b:43: 7a:0e:5d:75:8a:4d:9f:c5:6b:48:73:17:b0:21:ed: cf:06:da:8d:ef:f3:f9:10:47:72:e1:e1:a5:d6:b2: ba:04:67:aa:c6:47:df:93:e5:bd:83:b2:90:79:b7: 2c:9d:03:da:1e:37:29:aa:e4:76:bc:c8:d2:e0:8b: 16:10:33:7a:c3:a8:66:98:c6:a8:2f:cf:bb:d5:6c: aa:1e:08:ac:e9:79:1e:af:0f:62:67:13:be:0e:07: 85:0a:18:e7:7b:25:5c:f0:9a:3c:8c:bb:b2:d7:ca: f7:06:74:b5:40:db:b4:f6:a1:c7:75:29:d1:08:5a: 50:d1:56:1b:99:aa:47:10:b3:b8:f5:49:b5:ba:e6: e1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A3:BD:3C:73:50:A3:1C:FB:34:DD:C3:48:4F:7F:63:C1:B8:62:1E X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D931AD927E0F11EE97A4761DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.86.116.0/24 IPv6: 240e:983:2010::/48 240e:983:2020::/48 240e:983:2030::/48 Signature Algorithm: sha256WithRSAEncryption 71:34:12:ef:b4:75:69:ae:d2:e3:73:c4:0b:e7:5b:b2:b6:bf: 49:11:79:57:d1:c6:57:8d:4a:95:13:51:76:0e:48:83:88:b0: 5d:76:16:16:d0:32:1b:3d:36:37:99:95:2a:c7:5a:ca:61:65: d1:7b:a2:9b:13:42:5e:27:7d:43:ff:0a:d4:4f:35:7d:4f:a7: b7:7d:8b:c4:40:bb:d0:45:ff:92:1d:d9:b5:0c:38:05:0f:76: cf:77:42:75:d0:55:26:e6:ec:64:9a:9a:35:97:b0:c1:ad:58: 74:91:f9:eb:66:9d:c5:11:43:a2:8d:77:e3:56:29:56:53:1c: 07:9f:eb:1e:ec:1e:34:15:e0:77:99:b2:46:85:e4:db:a5:7e: 7a:a7:76:2e:8f:bb:1c:91:13:03:08:3e:2f:e6:e3:93:9f:c0: 29:42:29:df:dc:01:12:3b:26:31:49:31:4e:26:ec:8b:f4:51: a0:2d:cf:33:3c:64:b6:da:39:bf:6a:f6:66:17:10:57:eb:09: 2f:79:eb:ce:5a:53:2d:c9:88:f2:b1:1b:32:15:4f:cc:a6:b0: 82:e1:e9:6a:d4:95:00:1f:7c:c7:d2:44:3d:a2:0e:1a:6b:b5: e3:57:db:b0:e2:9c:3a:73:07:4b:76:72:cb:84:7c:3a:33:83: 73:4c:3e:9a -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgICIQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjYwOTMwMTYzMTE3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkMzk1NC05NzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBak1f8phqHNkj9ZGcPl0AcalXkdeMwz6nGvjDqPCzMyoEA3KlaS0bTynWCo Yyrr0iLD4cpTthcxoNWKxlwC4HfAhyOcW0piJYy/fCsCUPiqsr1kUxrd6VITEv+7 coaJucr4CbPQIHG5Kk0+fVzHp5Kev81ea0N6Dl11ik2fxWtIcxewIe3PBtqN7/P5 EEdy4eGl1rK6BGeqxkffk+W9g7KQebcsnQPaHjcpquR2vMjS4IsWEDN6w6hmmMao L8+71WyqHgis6Xkerw9iZxO+DgeFChjneyVc8Jo8jLuy18r3BnS1QNu09qHHdSnR CFpQ0VYbmapHELO49Um1uubhjQIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFBKjvTxz UKMc+zTdw0hPf2PBuGIeMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvRDkzMUFEOTI3 RTBGMTFFRTk3QTQ3NjFEQzRGOUFFMDIucm9hMEIGCCsGAQUFBwEHAQH/BDMwMTAM BAIAATAGAwQAy1Z0MCEEAgACMBsDBwAkDgmDIBADBwAkDgmDICADBwAkDgmDIDAw DQYJKoZIhvcNAQELBQADggEBAHE0Eu+0dWmu0uNzxAvnW7K2v0kReVfRxleNSpUT UXYOSIOIsF12FhbQMhs9NjeZlSrHWsphZdF7opsTQl4nfUP/CtRPNX1Pp7d9i8RA u9BF/5Id2bUMOAUPds93QnXQVSbm7GSamjWXsMGtWHSR+etmncURQ6KNd+NWKVZT HAef6x7sHjQV4HeZskaF5Nulfnqndi6PuxyREwMIPi/m45OfwClCKd/cARI7JjFJ MU4m7Iv0UaAtzzM8ZLbaOb9q9mYXEFfrCS95685aUy3JiPKxGzIVT8ymsILh6WrU lQAffMfSRD2iDhprteNX27DinDpzB0t2csuEfDozg3NMPpo= -----END CERTIFICATE-----Generated at Thu Oct 1 12:31:36 2026 by rpki-client