$ rpki-client -vvvf rpki.apnic.net/member_repository/A919B7F7/A88E8C0AA6A711F1A0B6D5203811F970/FDA07E56A6A711F1BB23BA9A3811F970.roa File: FDA07E56A6A711F1BB23BA9A3811F970.roa (raw, json) Hash identifier: jZsj6REmCguThaGYpbr8i0ORTeXH0I3L+SklubXql44= Subject key identifier: BB:08:9B:E5:9A:86:38:3F:FD:D0:53:55:82:6F:71:B0:F7:E8:4F:94 Certificate issuer: /CN=A919B7F7/serialNumber=D238A26C587DAADCB17A821B05124C2338203DD6 Certificate serial: 02 Authority key identifier: D2:38:A2:6C:58:7D:AA:DC:B1:7A:82:1B:05:12:4C:23:38:20:3D:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jiibFh9qtyxeoIbBRJMIzggPdY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B7F7/A88E8C0AA6A711F1A0B6D5203811F970/FDA07E56A6A711F1BB23BA9A3811F970.roa Signing time: Wed 02 Sep 2026 08:26:27 +0000 ROA not before: Wed 02 Sep 2026 08:26:27 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 4646 IP address blocks: 45.126.4.0/24 maxlen: 24 103.236.136.0/24 maxlen: 24 103.236.137.0/24 maxlen: 24 103.236.138.0/24 maxlen: 24 103.236.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B7F7/A88E8C0AA6A711F1A0B6D5203811F970/0jiibFh9qtyxeoIbBRJMIzggPdY.crl rsync://rpki.apnic.net/member_repository/A919B7F7/A88E8C0AA6A711F1A0B6D5203811F970/0jiibFh9qtyxeoIbBRJMIzggPdY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jiibFh9qtyxeoIbBRJMIzggPdY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 09:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B7F7, serialNumber=D238A26C587DAADCB17A821B05124C2338203DD6 Validity Not Before: Sep 2 08:26:27 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a97ddb3-f908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c2:b2:c4:3b:22:2e:e2:73:9f:67:27:f6:cd: be:56:06:34:fc:35:b2:f0:65:12:5d:8d:9d:80:25: 53:ef:dc:aa:b4:48:c5:8e:ed:51:a5:f1:51:eb:80: db:18:91:c0:4f:db:ed:e3:86:08:e2:08:dc:de:ba: d1:25:c4:81:37:d4:83:99:1e:70:d9:75:12:d3:4b: 3e:81:26:cf:94:88:25:23:96:4d:0a:e1:67:fd:45: 44:9e:e9:5d:9d:c3:20:b6:6f:30:d7:68:79:9f:37: 3e:6d:58:5e:b3:be:bf:33:35:a7:6f:1c:a7:13:7f: df:6e:da:b0:27:04:69:0a:0c:63:0c:46:26:d3:40: c1:7b:8a:c8:37:38:95:c0:ce:1b:3d:6c:90:26:45: 8c:90:97:6c:3c:5d:c2:e1:b6:14:05:7c:b0:61:3b: 89:00:9a:24:42:3f:df:31:03:89:ce:aa:03:ee:8a: 9e:5f:6a:a2:91:17:36:99:9a:c7:99:6a:6c:22:9b: 4e:44:7d:ca:e2:c8:09:cb:b4:63:62:2e:80:24:c0: 5c:e8:47:1a:d6:44:6a:fa:a8:e3:6a:5e:ae:0f:59: 88:9c:ad:59:d5:ae:91:8d:e6:bd:3a:d0:f6:48:15: 81:bb:b9:86:dc:03:c6:27:81:82:47:27:41:d7:83: e8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:08:9B:E5:9A:86:38:3F:FD:D0:53:55:82:6F:71:B0:F7:E8:4F:94 X509v3 Authority Key Identifier: keyid:D2:38:A2:6C:58:7D:AA:DC:B1:7A:82:1B:05:12:4C:23:38:20:3D:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B7F7/A88E8C0AA6A711F1A0B6D5203811F970/0jiibFh9qtyxeoIbBRJMIzggPdY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jiibFh9qtyxeoIbBRJMIzggPdY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B7F7/A88E8C0AA6A711F1A0B6D5203811F970/FDA07E56A6A711F1BB23BA9A3811F970.roa sbgp-ipAddrBlock: critical IPv4: 45.126.4.0/24 103.236.136.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:3e:b3:cd:70:b7:81:a3:9b:82:8f:9c:b3:fd:ee:10:f8:a1: 3d:a9:9b:10:9f:37:f7:26:a6:52:2d:15:1c:d9:39:de:a7:0b: 77:d5:3a:4e:56:af:d5:57:b8:82:ee:b4:73:e7:89:06:e6:02: ec:3a:95:45:20:60:9f:c7:20:ec:3d:3e:70:3f:e7:a6:d2:4c: 7e:e2:ab:b8:2e:0a:ad:f1:b4:80:d3:4a:84:e7:b2:a4:b9:4e: e7:e0:14:09:07:6f:2f:de:c3:00:b9:a3:a0:ff:7c:fa:43:48: 56:6a:e1:fe:c1:98:34:0a:b7:75:16:27:84:48:45:aa:ce:0f: 43:31:f0:a9:86:ba:9f:9d:48:fd:55:d9:19:ce:9d:7f:5d:62: 0f:ef:ae:84:51:3b:be:98:17:8a:25:0d:f9:b4:0a:28:3f:ee: 8c:26:71:25:44:4d:ab:d7:80:ca:88:0a:e2:5d:16:6d:97:2f: 7f:ee:86:ee:5a:ed:a2:a8:44:95:d6:b1:dd:ba:8a:7a:1e:9a: d8:95:4b:9f:f0:6e:07:cf:b8:89:33:7b:b1:9d:78:b1:55:22: 70:e2:67:0c:e9:f8:f7:c3:59:4f:b1:ef:b8:b4:1e:d9:73:59: ac:7a:c6:5f:29:bc:a7:b9:89:48:e4:2a:dd:81:24:d0:25:33: 59:ed:df:15 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QjdGNzExMC8GA1UEBRMoRDIzOEEyNkM1ODdEQUFEQ0IxN0E4MjFCMDUxMjRDMjMz ODIwM0RENjAeFw0yNjA5MDIwODI2MjdaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOTdkZGIzLWY5MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtwrLEOyIu4nOfZyf2zb5WBjT8NbLwZRJdjZ2AJVPv3Kq0SMWO7VGl8VHrgNsY kcBP2+3jhgjiCNzeutElxIE31IOZHnDZdRLTSz6BJs+UiCUjlk0K4Wf9RUSe6V2d wyC2bzDXaHmfNz5tWF6zvr8zNadvHKcTf99u2rAnBGkKDGMMRibTQMF7isg3OJXA zhs9bJAmRYyQl2w8XcLhthQFfLBhO4kAmiRCP98xA4nOqgPuip5faqKRFzaZmseZ amwim05EfcriyAnLtGNiLoAkwFzoRxrWRGr6qONqXq4PWYicrVnVrpGN5r060PZI FYG7uYbcA8YngYJHJ0HXg+gbAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUuwib5ZqG OD/90FNVgm9xsPfoT5QwHwYDVR0jBBgwFoAU0jiibFh9qtyxeoIbBRJMIzggPdYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlCN0Y3L0E4OEU4QzBBQTZB NzExRjFBMEI2RDUyMDM4MTFGOTcwLzBqaWliRmg5cXR5eGVvSWJCUkpNSXpnZ1Bk WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMGppaWJGaDlxdHl4ZW9JYkJSSk1JemdnUGRZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjdGNy9BODhFOEMwQUE2QTcxMUYxQTBCNkQ1MjAzODExRjk3MC9GREEwN0U1NkE2 QTcxMUYxQkIyM0JBOUEzODExRjk3MC5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAAtfgQDBAJn7IgwDQYJKoZIhvcNAQELBQADggEBAI0+s81wt4Gjm4KP nLP97hD4oT2pmxCfN/cmplItFRzZOd6nC3fVOk5Wr9VXuILutHPniQbmAuw6lUUg YJ/HIOw9PnA/56bSTH7iq7guCq3xtIDTSoTnsqS5TufgFAkHby/ewwC5o6D/fPpD SFZq4f7BmDQKt3UWJ4RIRarOD0Mx8KmGup+dSP1V2RnOnX9dYg/vroRRO76YF4ol Dfm0Cig/7owmcSVETavXgMqICuJdFm2XL3/uhu5a7aKoRJXWsd26inoemtiVS5/w bgfPuIkze7GdeLFVInDiZwzp+PfDWU+x77i0HtlzWax6xl8pvKe5iUjkKt2BJNAl M1nt3xU= -----END CERTIFICATE-----Generated at Sat Sep 26 06:25:13 2026 by rpki-client