$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/CC166DAC0A0811EFBE7E465EC4F9AE02.roa File: CC166DAC0A0811EFBE7E465EC4F9AE02.roa (raw, json) Hash identifier: y7jb6cwIzoJ+j87zu0EqC/c/p/EowwP9+XVDIVZhy6M= Subject key identifier: 9E:C4:3F:13:76:1E:C9:10:9F:0A:46:01:B9:69:9F:E1:73:A4:3A:37 Certificate issuer: /CN=A918D323/serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A Certificate serial: 01CA Authority key identifier: C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/CC166DAC0A0811EFBE7E465EC4F9AE02.roa Signing time: Thu 03 Sep 2026 04:54:54 +0000 ROA not before: Thu 03 Sep 2026 04:54:54 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 131299 IP address blocks: 103.68.112.0/24 maxlen: 24 103.68.113.0/24 maxlen: 24 103.68.114.0/24 maxlen: 24 103.68.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 04:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D323, serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A Validity Not Before: Sep 3 04:54:54 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a98fd9e-46dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7a:b7:3d:3d:97:51:e7:99:27:f7:29:7d:bb: 4a:7d:47:88:12:0b:d7:d2:2f:4d:03:5b:35:f3:c5: ac:ae:2c:79:b7:96:70:e9:fc:03:39:bb:df:87:07: c1:91:a7:9a:17:31:b9:e2:46:7c:4e:0f:68:d0:de: e3:e8:1f:41:1a:53:4d:4c:39:f1:b6:9a:5c:e9:4d: cc:a3:1b:76:90:52:27:55:64:ca:be:94:fe:01:8e: 5c:30:ac:97:11:1e:cc:1d:4b:32:29:99:0a:0f:63: 7e:93:00:fc:fa:15:d8:c7:9a:93:2f:c1:ed:a7:96: 87:8e:25:c8:ca:4e:f0:1e:aa:bf:e4:1d:69:d8:5a: 9c:6f:2a:1e:ab:dc:7d:8e:28:df:94:77:0f:5e:f1: a5:da:61:25:a1:6e:1f:ad:46:8d:72:b8:99:ac:62: 38:2b:92:4d:ef:42:5b:e3:fd:f7:91:0e:f3:1b:6a: 54:0e:11:9a:10:18:5d:75:79:35:1a:a7:04:f4:7f: 53:38:82:a9:55:0d:70:92:b6:30:87:1a:1c:8a:24: b2:30:c8:3d:f3:ad:da:5c:f7:6f:c4:14:b0:32:0e: 05:8c:1d:bd:ac:a2:d5:6b:a5:62:a8:57:87:00:ed: f5:19:06:02:e4:e3:3d:d1:7b:4f:04:50:a8:23:da: 19:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C4:3F:13:76:1E:C9:10:9F:0A:46:01:B9:69:9F:E1:73:A4:3A:37 X509v3 Authority Key Identifier: keyid:C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/CC166DAC0A0811EFBE7E465EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.68.112.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:f8:e5:bc:78:82:79:1d:3b:06:b8:d4:ec:38:26:f4:e4:9f: 81:14:75:5f:d9:8b:98:3a:87:02:88:a0:7d:46:f5:da:04:5a: 78:fd:db:15:bd:cc:80:46:d2:58:58:97:83:79:69:4f:e6:6e: de:a6:bb:a1:80:5b:d0:de:10:3e:27:f5:a4:00:8f:26:e7:4b: ce:43:2a:83:27:b0:41:61:22:27:87:a6:5f:b3:26:02:e7:40: d0:1c:01:3c:cc:c2:00:0b:a2:6d:89:6c:ab:ff:31:45:43:c6: 28:24:25:73:bf:d3:03:9c:19:db:5a:6a:0f:99:25:8b:1b:0a: 24:14:db:c1:eb:56:c3:d8:4e:28:bd:aa:07:c8:5c:73:07:2b: 0c:61:95:1b:fd:27:83:76:d4:a8:1a:39:3e:93:5b:8f:30:46: a8:2a:19:88:95:5e:dc:ff:28:20:51:f7:24:40:41:70:69:86: 66:4e:98:31:f0:1c:45:80:b2:7f:a7:c9:3f:1a:cd:8f:da:b8: 6f:86:43:a1:b8:21:74:00:3b:74:9c:29:2a:ad:92:ab:96:01: 9e:c4:77:50:c6:29:19:81:4c:a0:71:f9:46:2a:58:da:bf:2e: 19:b9:bd:8e:6f:04:2a:3f:6f:5b:c9:b8:fb:ef:9c:2e:5d:4f: c7:10:ed:6b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQzMjMxMTAvBgNVBAUTKEM3MERFMjc4QUI3NzI2RDI5Q0EzQThDMDI0MDdBQTVC QUUxMkVDMEEwHhcNMjYwOTAzMDQ1NDU0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4ZmQ5ZS00NmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03q3PT2XUeeZJ/cpfbtKfUeIEgvX0i9NA1s188Wsrix5t5Zw6fwDObvfhwfB kaeaFzG54kZ8Tg9o0N7j6B9BGlNNTDnxtppc6U3Moxt2kFInVWTKvpT+AY5cMKyX ER7MHUsyKZkKD2N+kwD8+hXYx5qTL8Htp5aHjiXIyk7wHqq/5B1p2Fqcbyoeq9x9 jijflHcPXvGl2mEloW4frUaNcriZrGI4K5JN70Jb4/33kQ7zG2pUDhGaEBhddXk1 GqcE9H9TOIKpVQ1wkrYwhxociiSyMMg9863aXPdvxBSwMg4FjB29rKLVa6ViqFeH AO31GQYC5OM90XtPBFCoI9oZSQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJ7EPxN2 HskQnwpGAblpn+FzpDo3MB8GA1UdIwQYMBaAFMcN4nirdybSnKOowCQHqluuEuwK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDMyMy8yMjBBMUZEODA5 RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0S2NvNmpBSkFlcVc2NFM3 QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3M2llS3QzSnRLY282akFKQWVxVzY0UzdBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQzMjMvMjIwQTFGRDgwOUVCMTFFRkJDNEQxNTM0QzRGOUFFMDIvQ0MxNjZEQUMw QTA4MTFFRkJFN0U0NjVFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ0RwMA0GCSqGSIb3DQEBCwUAA4IBAQAa+OW8eIJ5HTsGuNTsOCb0 5J+BFHVf2YuYOocCiKB9RvXaBFp4/dsVvcyARtJYWJeDeWlP5m7epruhgFvQ3hA+ J/WkAI8m50vOQyqDJ7BBYSInh6ZfsyYC50DQHAE8zMIAC6JtiWyr/zFFQ8YoJCVz v9MDnBnbWmoPmSWLGwokFNvB61bD2E4ovaoHyFxzBysMYZUb/SeDdtSoGjk+k1uP MEaoKhmIlV7c/yggUfckQEFwaYZmTpgx8BxFgLJ/p8k/Gs2P2rhvhkOhuCF0ADt0 nCkqrZKrlgGexHdQxikZgUygcflGKljavy4Zub2ObwQqP29bybj775wuXU/HEO1r -----END CERTIFICATE-----Generated at Sun Oct 4 08:34:16 2026 by rpki-client