$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/2A3B0CECF89E11EFBEB09C18C4F9AE02.roa File: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (raw, json) Hash identifier: fh4USdqimlZSTAlz3RmBqZ+p5/Bn2203e/pYKP4GkQ4= Subject key identifier: 6B:58:10:D8:99:D0:24:54:5E:A8:3B:48:CC:C1:2E:D5:E1:8C:DE:D2 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 09B0 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/2A3B0CECF89E11EFBEB09C18C4F9AE02.roa Signing time: Sat 10 Oct 2026 22:44:32 +0000 ROA not before: Sat 10 Oct 2026 22:44:32 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 62610 IP address blocks: 36.255.195.0/24 maxlen: 24 43.252.210.0/24 maxlen: 24 103.225.197.0/24 maxlen: 24 103.225.198.0/24 maxlen: 24 150.107.0.0/24 maxlen: 24 150.107.3.0/24 maxlen: 24 150.129.40.0/24 maxlen: 24 150.129.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 22:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2480 (0x9b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 10 22:44:32 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acabfd0-0de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d8:4e:9e:11:51:4b:90:7a:98:ed:25:6d:75: 04:57:43:c8:07:df:96:f7:d7:b9:6f:c4:8a:29:7a: ff:ff:64:56:c6:9e:3e:5b:84:d1:da:8f:a6:2f:0b: 81:ce:57:17:e9:b4:fe:88:29:f3:0f:05:b6:99:69: 92:16:fc:17:72:72:4c:aa:da:08:a4:35:7a:61:4c: 99:c6:5d:c2:17:5b:26:9a:3d:78:fe:af:1b:5d:54: b3:ad:49:00:35:33:96:c9:63:be:a4:8f:7f:d3:44: 16:c1:fd:e2:79:4b:5e:70:63:32:24:5e:80:69:36: 2d:0f:5c:e2:48:ba:94:20:e6:b7:85:93:21:62:72: f4:be:2a:88:88:f4:eb:52:97:e6:13:87:ab:77:8f: fc:34:39:1c:7f:1c:42:aa:5e:0d:2b:5c:a1:05:15: 10:3e:a6:5b:ea:60:7a:29:fa:be:e6:85:31:c4:d9: ba:8b:4b:eb:4a:49:85:2a:70:8a:be:d8:25:ef:aa: b0:29:02:f9:6f:fd:21:2a:97:72:9f:17:6b:2b:27: 18:8d:7f:91:bd:17:28:5a:e0:24:9f:23:f2:1a:0e: f5:f7:67:0c:9e:92:e6:78:92:d9:6a:78:a8:b7:bb: fc:a6:ad:f6:91:15:a5:5e:ca:4b:e8:9b:ce:a8:e2: 86:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:58:10:D8:99:D0:24:54:5E:A8:3B:48:CC:C1:2E:D5:E1:8C:DE:D2 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/2A3B0CECF89E11EFBEB09C18C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.255.195.0/24 43.252.210.0/24 103.225.197.0-103.225.198.255 150.107.0.0/24 150.107.3.0/24 150.129.40.0/24 150.129.42.0/24 Signature Algorithm: sha256WithRSAEncryption 55:af:7a:93:98:d1:49:df:b6:97:aa:b4:3f:f6:84:c6:67:c3: aa:86:cb:ec:f8:60:52:3f:84:de:ab:e3:2b:1c:c8:f4:ec:59: 9a:77:32:15:02:da:d7:a6:ba:01:b8:c8:71:b7:2d:d8:1a:a6: 1a:cd:13:dd:34:fe:02:98:14:19:67:1c:a9:58:02:55:c9:f1: 95:40:9b:fc:c7:e6:06:b4:d2:ab:81:f8:c0:99:23:03:6b:6a: 7d:87:53:37:f0:24:ad:3c:81:68:c8:3e:28:37:a9:b6:90:3f: 8d:72:e2:9e:69:ee:b1:08:9b:dd:2a:3b:ef:f5:f4:8b:21:9f: aa:0f:50:7e:a3:10:c3:27:26:74:dd:69:a7:b8:ed:a2:26:ca: 70:8b:e3:19:9f:fd:a0:24:d2:c0:4f:c9:dc:0b:0f:1e:3f:2e: 7f:4c:e4:6b:65:57:c6:ad:fc:3d:01:9d:9e:68:68:e3:2f:3b: 07:e7:2b:cb:51:95:20:4a:09:b2:6b:23:6e:f4:de:af:b7:ab: 62:ad:79:c0:18:38:55:14:87:8a:29:0c:97:21:85:61:8d:ab: a4:c1:25:bf:71:80:91:fc:31:b8:66:3e:da:af:be:d0:bf:03: 9a:83:b5:35:e4:3e:f5:9b:7c:72:ab:0b:9d:d9:68:bf:ca:b6: b3:b0:16:e7 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgICCbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjYxMDEwMjI0NDMyWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNhYmZkMC0wZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmNhOnhFRS5B6mO0lbXUEV0PIB9+W99e5b8SKKXr//2RWxp4+W4TR2o+mLwuB zlcX6bT+iCnzDwW2mWmSFvwXcnJMqtoIpDV6YUyZxl3CF1smmj14/q8bXVSzrUkA NTOWyWO+pI9/00QWwf3ieUtecGMyJF6AaTYtD1ziSLqUIOa3hZMhYnL0viqIiPTr UpfmE4erd4/8NDkcfxxCql4NK1yhBRUQPqZb6mB6Kfq+5oUxxNm6i0vrSkmFKnCK vtgl76qwKQL5b/0hKpdynxdrKycYjX+RvRcoWuAknyPyGg7192cMnpLmeJLZanio t7v8pq32kRWlXspL6JvOqOKGnQIDAQABo4ICjDCCAogwHQYDVR0OBBYEFGtYENiZ 0CRUXqg7SMzBLtXhjN7SMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvMkEzQjBDRUNG ODlFMTFFRkJFQjA5QzE4QzRGOUFFMDIucm9hMEsGCCsGAQUFBwEHAQH/BDwwOjA4 BAIAATAyAwQAJP/DAwQAK/zSMAwDBABn4cUDBABn4cYDBACWawADBACWawMDBACW gSgDBACWgSowDQYJKoZIhvcNAQELBQADggEBAFWvepOY0UnftpeqtD/2hMZnw6qG y+z4YFI/hN6r4yscyPTsWZp3MhUC2temugG4yHG3LdgaphrNE900/gKYFBlnHKlY AlXJ8ZVAm/zH5ga00quB+MCZIwNran2HUzfwJK08gWjIPig3qbaQP41y4p5p7rEI m90qO+/19Ishn6oPUH6jEMMnJnTdaae47aImynCL4xmf/aAk0sBPydwLDx4/Ln9M 5GtlV8at/D0BnZ5oaOMvOwfnK8tRlSBKCbJrI2703q+3q2KtecAYOFUUh4opDJch hWGNq6TBJb9xgJH8MbhmPtqvvtC/A5qDtTXkPvWbfHKrC53ZaL/KtrOwFuc= -----END CERTIFICATE-----Generated at Fri Oct 23 06:09:43 2026 by rpki-client