$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/5EF938889E9E11EE80C94682C4F9AE02.roa File: 5EF938889E9E11EE80C94682C4F9AE02.roa (raw, json) Hash identifier: uIJkvttWMkZhU4XV9PA9AL24zwtpGwhtH/b+Ih3eTEY= Subject key identifier: 42:0A:21:54:A0:78:68:D6:72:C6:15:31:74:21:DD:E3:74:DA:F9:AA Certificate issuer: /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Certificate serial: 026B Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/5EF938889E9E11EE80C94682C4F9AE02.roa Signing time: Thu 29 Oct 2026 03:51:42 +0000 ROA not before: Thu 29 Oct 2026 03:51:42 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 5650 IP address blocks: 43.239.250.0/24 maxlen: 24 114.31.208.0/22 maxlen: 22 2404:3600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 03:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 619 (0x26b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Validity Not Before: Oct 29 03:51:42 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ae2c2ce-a241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:89:a4:41:38:4c:6a:57:24:ea:75:09:43: 5f:84:2e:d4:ad:7b:ca:d7:1a:fb:a1:fd:c3:b3:7a: 04:5a:8a:8e:f7:57:22:24:70:41:88:0d:78:99:8c: 69:e4:27:57:48:3f:72:63:39:7e:1f:d7:63:dd:45: 5e:dc:09:33:a4:2a:63:50:22:a3:a0:ca:64:46:6b: a7:5a:09:9e:07:a1:39:fe:ed:58:ae:b7:f8:d9:d3: a0:27:82:74:2a:19:df:ba:be:4c:f0:ac:ce:09:15: a4:6f:88:a5:e0:5f:f6:e8:33:11:34:83:27:38:01: 82:77:74:6f:ad:72:47:68:bd:cd:25:3d:77:9b:0f: a3:7a:8f:c4:3a:b6:8b:5e:24:c7:3d:e7:55:cf:ba: 4e:ce:da:d4:7f:06:d2:6c:e2:9f:cd:47:2c:67:73: b6:30:b9:7f:57:76:e3:42:48:66:9f:df:c4:a6:49: c0:27:42:dd:ea:f4:f3:53:2d:60:41:ed:13:7e:d9: 7f:b6:b8:5b:e6:5a:2d:d2:fd:08:46:72:d3:6a:31: 86:6c:0b:2c:5f:09:3f:d9:62:0c:37:28:ac:b8:89: af:56:83:8f:0f:48:c7:b4:6a:bf:f4:50:e9:0c:78: 42:e8:73:43:cf:27:f9:79:50:0d:98:12:0b:cf:d1: 17:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0A:21:54:A0:78:68:D6:72:C6:15:31:74:21:DD:E3:74:DA:F9:AA X509v3 Authority Key Identifier: keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/5EF938889E9E11EE80C94682C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.250.0/24 114.31.208.0/22 IPv6: 2404:3600::/32 Signature Algorithm: sha256WithRSAEncryption aa:c0:f6:0d:aa:6c:20:35:f6:6b:de:cf:6f:4e:e6:83:52:fb: 14:49:87:bb:65:96:2c:ba:c9:37:1b:aa:f8:8d:50:2f:55:6d: ed:c1:a7:b4:ab:ca:58:0a:60:bc:e7:6c:f1:89:f0:d5:82:41: f6:1a:80:53:36:aa:3f:d7:53:cf:b4:34:08:d4:f2:5d:6c:eb: dc:e5:78:27:d5:67:14:ec:3a:6a:73:0d:95:94:49:d6:47:5a: 65:fb:f4:cc:e8:7d:9d:ee:ba:0d:2d:e0:45:39:ab:91:a9:23: df:00:52:4d:65:62:d3:e6:b5:a9:be:a4:26:6e:1b:2f:1e:c0: 06:14:c1:67:5a:63:42:9e:f0:da:33:e8:cd:93:0d:eb:d5:94: cb:11:e4:ba:06:79:36:4f:12:bb:ee:60:31:f6:ed:2e:c9:c5: 91:d8:76:e4:d8:03:03:f2:d9:33:59:4e:6f:be:db:f2:1b:58: ba:09:8b:41:9f:a3:39:b0:95:29:d7:26:66:0b:61:99:48:eb: c5:06:9a:cb:dc:5f:11:ed:75:bf:94:49:60:e3:0f:b0:46:fa: 9b:38:04:1b:53:57:b9:7d:b1:4f:c2:a4:d6:84:01:3a:91:a0: d5:d4:5d:1a:98:36:b9:0e:85:ce:fe:c3:96:27:18:18:f9:ea: a6:91:5a:36 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICAmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCQ0UxMTAvBgNVBAUTKDMwMDc0MkU0QUQ1NDdBRTQ5REQ4MkM4MkY3RUNFQjA5 NUI5MDJBMjAwHhcNMjYxMDI5MDM1MTQyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWUyYzJjZS1hMjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtimJpEE4TGpXJOp1CUNfhC7UrXvK1xr7of3Ds3oEWoqO91ciJHBBiA14mYxp 5CdXSD9yYzl+H9dj3UVe3AkzpCpjUCKjoMpkRmunWgmeB6E5/u1Yrrf42dOgJ4J0 Khnfur5M8KzOCRWkb4il4F/26DMRNIMnOAGCd3RvrXJHaL3NJT13mw+jeo/EOraL XiTHPedVz7pOztrUfwbSbOKfzUcsZ3O2MLl/V3bjQkhmn9/EpknAJ0Ld6vTzUy1g Qe0Tftl/trhb5lot0v0IRnLTajGGbAssXwk/2WIMNyisuImvVoOPD0jHtGq/9FDp DHhC6HNDzyf5eVANmBILz9EXMQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFEIKIVSg eGjWcsYVMXQh3eN02vmqMB8GA1UdIwQYMBaAFDAHQuStVHrkndgsgvfs6wlbkCog MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJDRS85MDA5OUM0MDU3 REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1U2QyQ3lDOS16ckNWdVFL aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01BZEM1SzFVZXVTZDJDeUM5LXpyQ1Z1UUtpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUFCQ0UvOTAwOTlDNDA1N0REMTFFRUJBRkZFNDJEQzRGOUFFMDIvNUVGOTM4ODg5 RTlFMTFFRTgwQzk0NjgyQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQAK+/6AwQCch/QMA0EAgACMAcDBQAkBDYAMA0GCSqGSIb3DQEBCwUA A4IBAQCqwPYNqmwgNfZr3s9vTuaDUvsUSYe7ZZYsusk3G6r4jVAvVW3twae0q8pY CmC852zxifDVgkH2GoBTNqo/11PPtDQI1PJdbOvc5Xgn1WcU7Dpqcw2VlEnWR1pl +/TM6H2d7roNLeBFOauRqSPfAFJNZWLT5rWpvqQmbhsvHsAGFMFnWmNCnvDaM+jN kw3r1ZTLEeS6Bnk2TxK77mAx9u0uycWR2Hbk2AMD8tkzWU5vvtvyG1i6CYtBn6M5 sJUp1yZmC2GZSOvFBprL3F8R7XW/lElg4w+wRvqbOAQbU1e5fbFPwqTWhAE6kaDV 1F0amDa5DoXO/sOWJxgY+eqmkVo2 -----END CERTIFICATE-----Generated at Thu Nov 5 03:45:37 2026 by rpki-client