$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/4AA9F8CC75B511F18A3D446262A30FBC.roa File: 4AA9F8CC75B511F18A3D446262A30FBC.roa (raw, json) Hash identifier: a8REmHCWm+jSLUiYkfwW5npJYFrJiobn6pD3SgbZbKk= Subject key identifier: 1B:31:65:4C:AC:C6:BB:D1:46:FE:8B:76:11:71:23:81:4A:6A:03:8A Certificate issuer: /CN=A9161A58/serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8 Certificate serial: 0A00 Authority key identifier: B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/4AA9F8CC75B511F18A3D446262A30FBC.roa Signing time: Thu 02 Jul 2026 01:28:13 +0000 ROA not before: Thu 02 Jul 2026 01:28:13 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 135386 IP address blocks: 43.230.204.0/22 maxlen: 22 43.230.204.0/24 maxlen: 24 43.230.205.0/24 maxlen: 24 43.230.206.0/24 maxlen: 24 43.230.207.0/24 maxlen: 24 103.50.16.0/22 maxlen: 24 103.56.44.0/22 maxlen: 24 103.79.240.0/24 maxlen: 24 103.79.241.0/24 maxlen: 24 103.79.242.0/24 maxlen: 24 103.79.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 20:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2560 (0xa00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A58, serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8 Validity Not Before: Jul 2 01:28:13 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a45bead-7dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:ae:88:55:31:37:b4:53:33:bd:a2:67:31: b3:28:7f:92:c5:88:f7:3a:a2:6b:e4:68:0d:34:18: 75:5b:26:77:e8:10:f0:8b:1d:fb:a7:d2:aa:95:de: c2:fc:07:58:f5:4d:3a:8d:f5:aa:01:84:fa:86:6a: 35:79:ce:16:c7:d4:e6:32:da:f5:2d:1b:ab:19:10: 86:0b:01:50:d3:fd:ed:8b:6e:77:21:8c:74:de:2b: 17:e6:c6:07:fb:90:61:dd:83:42:ce:11:40:35:85: b3:d9:fa:65:a3:c5:14:44:59:dd:4d:1a:be:29:36: fd:be:8f:5e:16:6d:88:f0:c4:b6:ca:7d:0c:62:72: d9:62:c3:db:b3:5b:b3:30:f3:52:4d:d2:c3:34:68: 06:16:37:a1:fc:b9:9a:36:27:ed:67:f3:a6:fb:81: 63:fe:a4:5f:e2:8c:ab:8f:31:49:87:69:43:cb:1e: b4:73:69:df:79:cb:b4:91:c0:1b:05:3e:f4:88:10: 5d:b6:12:2a:bb:63:da:21:3e:6e:e2:c6:a4:17:8d: 7f:34:8b:16:57:b3:40:7e:dd:39:08:3d:b7:18:38: 37:dc:f9:ea:d1:07:df:41:7c:42:de:75:5c:65:e3: 0e:fe:2f:af:8e:41:f0:02:ab:ad:f6:9b:64:cf:cc: ff:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:31:65:4C:AC:C6:BB:D1:46:FE:8B:76:11:71:23:81:4A:6A:03:8A X509v3 Authority Key Identifier: keyid:B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/4AA9F8CC75B511F18A3D446262A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 43.230.204.0/22 103.50.16.0/22 103.56.44.0/22 103.79.240.0/22 Signature Algorithm: sha256WithRSAEncryption cc:e8:06:09:f2:9e:3b:4f:16:37:0b:a5:39:b2:81:ee:7f:88: 50:a1:6b:0c:c7:ca:f4:9c:f7:b4:71:7f:8f:18:c0:e5:bd:2e: 28:4e:ef:8e:e7:71:25:b1:20:26:be:d8:f3:50:09:d9:a9:6e: 31:75:a5:d7:98:fe:83:9a:40:10:29:ae:d3:d4:c3:a4:2b:4a: 6c:64:44:2c:39:9e:fa:5a:be:1e:89:85:10:3d:9d:1d:3b:cf: 07:55:37:e3:0e:c9:64:ea:6d:48:89:d1:d4:db:b7:17:8f:5f: e9:bb:75:7b:b2:bf:96:ab:e2:e8:29:91:da:87:49:0d:a5:06: 6e:7e:20:b0:79:d0:c6:53:fa:04:6b:c0:26:da:dd:fb:3c:53: a7:d4:0a:fa:08:97:cf:84:cb:c8:90:64:db:f6:02:9a:63:cd: a4:a5:26:3d:df:42:2a:5c:79:d8:7a:7f:63:d7:0f:c6:3b:11: 9f:5d:ff:73:00:1d:f4:5d:82:e8:a9:a8:09:a4:ec:79:2a:62: f6:dd:7d:dc:75:81:64:68:a3:50:3f:15:0b:97:fe:8d:81:4f: 5c:99:c8:61:60:f5:c6:ae:f6:e2:b0:b4:e2:8c:b1:15:d2:3f: 7f:0e:1e:e2:18:56:71:f4:35:84:f3:f2:00:82:9c:c9:66:06: 19:46:86:9f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICCgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFBNTgxMTAvBgNVBAUTKEI0NjY5RDMwRDIxMEU0OTA3Q0QyODg4QkU3NEI4OUE2 REQzQ0I2QzgwHhcNMjYwNzAyMDEyODEzWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ1YmVhZC03ZGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApD6uiFUxN7RTM72iZzGzKH+SxYj3OqJr5GgNNBh1WyZ36BDwix37p9Kqld7C /AdY9U06jfWqAYT6hmo1ec4Wx9TmMtr1LRurGRCGCwFQ0/3ti253IYx03isX5sYH +5Bh3YNCzhFANYWz2fplo8UURFndTRq+KTb9vo9eFm2I8MS2yn0MYnLZYsPbs1uz MPNSTdLDNGgGFjeh/LmaNiftZ/Om+4Fj/qRf4oyrjzFJh2lDyx60c2nfecu0kcAb BT70iBBdthIqu2PaIT5u4sakF41/NIsWV7NAft05CD23GDg33Pnq0QffQXxC3nVc ZeMO/i+vjkHwAqut9ptkz8z/RQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFBsxZUys xrvRRv6LdhFxI4FKagOKMB8GA1UdIwQYMBaAFLRmnTDSEOSQfNKIi+dLiabdPLbI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE1OC9CMzg5MzA0RUE3 RUMxMUVBODA0ODU4NjRDNEY5QUUwMi90R2FkTU5JUTVKQjgwb2lMNTB1SnB0MDh0 c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RHYWRNTklRNUpCODBvaUw1MHVKcHQwOHRzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjFBNTgvQjM4OTMwNEVBN0VDMTFFQTgwNDg1ODY0QzRGOUFFMDIvNEFBOUY4Q0M3 NUI1MTFGMThBM0Q0NDYyNjJBMzBGQkMucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQCK+bMAwQCZzIQAwQCZzgsAwQCZ0/wMA0GCSqGSIb3DQEBCwUAA4IB AQDM6AYJ8p47TxY3C6U5soHuf4hQoWsMx8r0nPe0cX+PGMDlvS4oTu+O53ElsSAm vtjzUAnZqW4xdaXXmP6DmkAQKa7T1MOkK0psZEQsOZ76Wr4eiYUQPZ0dO88HVTfj Dslk6m1IidHU27cXj1/pu3V7sr+Wq+LoKZHah0kNpQZufiCwedDGU/oEa8Am2t37 PFOn1Ar6CJfPhMvIkGTb9gKaY82kpSY930IqXHnYen9j1w/GOxGfXf9zAB30XYLo qagJpOx5KmL23X3cdYFkaKNQPxULl/6NgU9cmchhYPXGrvbisLTijLEV0j9/Dh7i GFZx9DWE8/IAgpzJZgYZRoaf -----END CERTIFICATE-----Generated at Tue Jul 21 16:48:37 2026 by rpki-client