$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa File: D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa (raw, json) Hash identifier: lnPQ2w10NKW0WuIVWYZy4lNGkmlblg9S7f5amDhOais= Subject key identifier: 16:80:08:9A:49:C2:64:02:17:17:30:0B:53:9F:B3:77:A1:CF:7D:6A Certificate issuer: /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686 Certificate serial: 1196 Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa Signing time: Mon 02 Nov 2026 17:31:55 +0000 ROA not before: Mon 02 Nov 2026 17:31:55 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 137955 IP address blocks: 103.103.194.0/24 maxlen: 24 103.116.192.0/24 maxlen: 24 2405:1340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 17:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4502 (0x1196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D3A9, serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686 Validity Not Before: Nov 2 17:31:55 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6ae8c90b-0647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:fc:61:04:1c:c1:89:9f:8d:de:b7:60:6b:66: 6d:3a:88:2a:fa:b6:40:d0:09:4e:21:c5:0f:84:94: 9d:5f:35:e9:ca:4f:b6:d7:cb:d2:b5:23:62:7f:fc: d1:0c:97:83:4d:b0:04:ba:43:5d:ca:30:70:d4:e4: d7:fe:b7:e4:d9:5b:dc:68:dd:7e:5f:f0:bf:0b:47: 70:66:90:e2:ad:3d:5b:10:a5:61:8b:61:28:48:0f: 79:78:e3:77:5e:18:e1:7a:6c:e1:3e:94:cf:3d:7a: 4a:ed:8c:47:cf:93:50:1e:a5:bd:c7:6a:ef:b7:3e: 10:4d:79:74:10:fc:04:c1:1c:1d:94:dc:f5:6a:5c: 0b:c5:fe:b5:a1:05:51:0b:f6:cc:c0:95:b7:42:60: 9c:8a:52:5b:dd:71:89:67:08:0b:c6:9e:ef:36:ca: 64:3c:41:ac:30:4d:f3:45:ca:67:9c:50:b6:e0:1e: b3:56:26:62:6b:e0:a6:12:8b:4d:3b:bb:da:72:ce: ca:d3:b7:bf:3b:43:b2:ab:a7:a8:59:f4:28:25:ff: 00:65:ff:64:69:73:dd:e6:c5:33:c8:63:6d:b0:96: 09:e9:36:50:6b:6e:bb:48:a2:ae:81:3f:46:dd:41: cc:fb:01:28:42:9b:9a:0b:ba:bf:ab:ad:f8:0d:ec: da:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:80:08:9A:49:C2:64:02:17:17:30:0B:53:9F:B3:77:A1:CF:7D:6A X509v3 Authority Key Identifier: keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.103.194.0/24 103.116.192.0/24 IPv6: 2405:1340::/32 Signature Algorithm: sha256WithRSAEncryption 2d:40:d2:34:97:66:fd:c5:d9:b4:f6:36:da:a2:1f:dc:2d:53: e5:b1:73:2e:13:12:36:d1:fe:93:17:26:cd:a0:47:8a:bd:69: 98:0e:48:dd:39:c8:3e:42:a1:e5:cd:a1:8d:9f:c1:f2:3e:6b: a3:3f:32:44:00:84:c5:ff:1d:57:ad:a5:c3:54:3d:d3:9a:b8: f4:a9:3d:ee:29:e5:5a:b7:8b:e3:d1:ee:fe:e3:7b:74:23:83: c9:64:61:79:02:4b:99:32:1f:44:96:04:41:43:98:4a:eb:99: 2c:28:29:c7:b8:9f:88:e2:0d:85:40:17:37:c2:a9:dd:8d:b2: 8f:9b:2e:8e:d0:8a:8f:a7:cc:98:a9:f7:c5:a4:49:56:9a:57: 6b:aa:74:f7:61:e3:90:7d:f1:5e:2e:d5:04:a7:04:b1:24:13: a1:f7:65:6a:32:5f:ac:0b:d5:e5:a8:ea:7c:87:bb:91:fc:fb: c3:3e:ae:b7:a4:99:14:07:75:55:e2:12:bb:eb:64:f8:43:b9: c6:97:37:5b:f0:ab:06:e2:80:6c:f9:12:72:62:c6:ba:66:c0: e8:30:f2:a9:b0:dc:e1:95:72:86:0b:0d:93:6b:12:da:e0:42: f5:c0:56:94:74:5a:b8:95:81:84:80:b8:37:56:0a:77:59:66: ca:a8:3b:95 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICEZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQzQTkxMTAvBgNVBAUTKDE5Njg0MjNFRDZEMjQ5NTg4MEE1NkE2REIwMkJDNjcy OThDNUU2ODYwHhcNMjYxMTAyMTczMTU1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YWU4YzkwYi0wNjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/fxhBBzBiZ+N3rdga2ZtOogq+rZA0AlOIcUPhJSdXzXpyk+218vStSNif/zR DJeDTbAEukNdyjBw1OTX/rfk2VvcaN1+X/C/C0dwZpDirT1bEKVhi2EoSA95eON3 XhjhemzhPpTPPXpK7YxHz5NQHqW9x2rvtz4QTXl0EPwEwRwdlNz1alwLxf61oQVR C/bMwJW3QmCcilJb3XGJZwgLxp7vNspkPEGsME3zRcpnnFC24B6zViZia+CmEotN O7vacs7K07e/O0Oyq6eoWfQoJf8AZf9kaXPd5sUzyGNtsJYJ6TZQa267SKKugT9G 3UHM+wEoQpuaC7q/q634DezaawIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFBaACJpJ wmQCFxcwC1Ofs3ehz31qMB8GA1UdIwQYMBaAFBloQj7W0klYgKVqbbArxnKYxeaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDNBOS9CQjdGRkI4RTNB OTIxMUU5QjUyRENGNTNDNEY5QUUwMi9HV2hDUHRiU1NWaUFwV3B0c0N2R2NwakY1 b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dXaENQdGJTU1ZpQXBXcHRzQ3ZHY3BqRjVvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQzQTkvQkI3RkZCOEUzQTkyMTFFOUI1MkRDRjUzQzRGOUFFMDIvRDRGM0EyQjRE QkNEMTFFRTlCNkY0NjY5QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQAZ2fCAwQAZ3TAMA0EAgACMAcDBQAkBRNAMA0GCSqGSIb3DQEBCwUA A4IBAQAtQNI0l2b9xdm09jbaoh/cLVPlsXMuExI20f6TFybNoEeKvWmYDkjdOcg+ QqHlzaGNn8HyPmujPzJEAITF/x1XraXDVD3Tmrj0qT3uKeVat4vj0e7+43t0I4PJ ZGF5AkuZMh9ElgRBQ5hK65ksKCnHuJ+I4g2FQBc3wqndjbKPmy6O0IqPp8yYqffF pElWmldrqnT3YeOQffFeLtUEpwSxJBOh92VqMl+sC9XlqOp8h7uR/PvDPq63pJkU B3VV4hK762T4Q7nGlzdb8KsG4oBs+RJyYsa6ZsDoMPKpsNzhlXKGCw2TaxLa4EL1 wFaUdFq4lYGEgLg3Vgp3WWbKqDuV -----END CERTIFICATE-----Generated at Sun Nov 15 21:11:36 2026 by rpki-client