$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/3E1C881E841E11F1807C19845FA30FBC.roa File: 3E1C881E841E11F1807C19845FA30FBC.roa (raw, json) Hash identifier: Z3Drs1krPdarIfTl1vlof7LIzPwGyPRsMoJWefojANA= Subject key identifier: B6:C0:11:A3:96:C2:99:13:84:86:56:6C:1E:00:AF:F7:6A:3D:9C:A9 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 0965 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/3E1C881E841E11F1807C19845FA30FBC.roa Signing time: Mon 20 Jul 2026 09:34:45 +0000 ROA not before: Mon 20 Jul 2026 09:34:45 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 206916 IP address blocks: 43.229.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 23:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2405 (0x965) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Jul 20 09:34:45 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a5debb5-4333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4c:45:ac:fe:84:d5:d3:12:29:36:19:b6:db: 19:26:c8:09:ed:b5:f8:c4:40:37:68:b7:c0:60:67: c5:a8:e4:f7:c4:8c:48:6b:2f:2e:b5:c8:87:18:ec: c1:eb:ff:67:a7:e6:49:3f:56:19:0e:ce:08:ed:d5: 12:13:63:83:ce:c6:c8:ff:8e:0f:fb:6f:1e:6f:48: 74:c8:e3:77:4e:c9:17:9f:06:5a:98:c3:78:bc:9b: f0:f9:0e:e4:ed:c7:94:a5:81:1c:6f:0d:85:6a:51: 15:36:71:bc:b6:dd:59:e0:a7:f1:09:4c:62:af:05: 8f:0a:d5:a7:62:4a:d7:05:df:1b:12:2a:76:c1:e6: c6:42:70:8c:44:32:6c:41:71:63:e7:5c:ee:17:45: 07:cc:e9:d3:23:ce:55:8a:43:73:7d:d7:8a:89:aa: 1b:e8:9e:1d:a7:93:f1:3d:d7:ba:38:48:e3:e7:36: cc:fb:27:5e:41:f9:cf:77:0c:67:6a:17:41:48:35: 67:3c:1f:b9:b8:47:9c:20:7d:2d:df:3b:73:da:52: 4c:39:d5:b9:4e:3d:1f:86:b3:72:37:e1:45:9b:2f: ef:ce:29:b7:4d:ef:b2:26:cb:77:35:e9:c3:80:89: dc:02:24:0b:34:4d:a2:96:86:71:01:63:46:79:7f: 85:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C0:11:A3:96:C2:99:13:84:86:56:6C:1E:00:AF:F7:6A:3D:9C:A9 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/3E1C881E841E11F1807C19845FA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 43.229.154.0/24 Signature Algorithm: sha256WithRSAEncryption 94:7d:4f:23:76:a4:22:e8:11:e8:cb:4b:37:f7:a3:b0:7c:b7: 59:02:21:6f:39:27:44:b7:4e:e9:59:56:bc:7c:9c:0b:b7:bc: ab:30:95:06:e4:d0:cb:4b:24:f9:90:05:09:d2:20:b8:a5:db: b3:43:0f:19:8a:b8:27:49:4b:3a:64:98:15:1c:a7:34:80:e2: 48:65:0b:6d:bc:3a:7f:62:a1:dd:fd:d8:9f:e7:4b:89:04:e3: af:d9:91:9c:73:e0:b0:35:18:37:a7:1e:24:33:f6:14:1e:6d: b2:ee:a7:cb:a1:1b:25:47:1f:ae:c3:ba:28:b0:e7:92:59:c5: 4b:22:fa:f4:9d:58:47:2d:24:d9:0c:91:62:35:51:0c:bb:83: b4:c2:38:c8:bc:a5:83:12:b4:9e:c5:45:d0:29:8f:15:53:9c: 53:16:9b:b4:49:36:9b:56:7a:b1:c6:f2:a3:55:df:c6:a6:f0: 6f:ed:b4:9c:e5:96:fa:0c:7f:a4:7b:75:72:bf:bd:23:14:4e: 57:55:ec:90:dd:0a:c8:13:70:d5:73:b6:8d:25:ee:b0:0c:05: f1:df:8b:62:9f:eb:95:16:98:9e:70:2c:c3:15:bc:ae:14:fd: 0b:f0:47:b0:4d:32:c4:ba:4d:7a:e9:83:3b:c7:8b:18:62:69: 34:0f:66:68 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjYwNzIwMDkzNDQ1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTVkZWJiNS00MzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA50xFrP6E1dMSKTYZttsZJsgJ7bX4xEA3aLfAYGfFqOT3xIxIay8utciHGOzB 6/9np+ZJP1YZDs4I7dUSE2ODzsbI/44P+28eb0h0yON3TskXnwZamMN4vJvw+Q7k 7ceUpYEcbw2FalEVNnG8tt1Z4KfxCUxirwWPCtWnYkrXBd8bEip2webGQnCMRDJs QXFj51zuF0UHzOnTI85VikNzfdeKiaob6J4dp5PxPde6OEjj5zbM+ydeQfnPdwxn ahdBSDVnPB+5uEecIH0t3ztz2lJMOdW5Tj0fhrNyN+FFmy/vzim3Te+yJst3NenD gIncAiQLNE2iloZxAWNGeX+FXQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLbAEaOW wpkThIZWbB4Ar/dqPZypMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvM0UxQzg4MUU4 NDFFMTFGMTgwN0MxOTg0NUZBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK+WaMA0GCSqGSIb3DQEBCwUAA4IBAQCUfU8jdqQi6BHoy0s396Ow fLdZAiFvOSdEt07pWVa8fJwLt7yrMJUG5NDLSyT5kAUJ0iC4pduzQw8ZirgnSUs6 ZJgVHKc0gOJIZQttvDp/YqHd/dif50uJBOOv2ZGcc+CwNRg3px4kM/YUHm2y7qfL oRslRx+uw7oosOeSWcVLIvr0nVhHLSTZDJFiNVEMu4O0wjjIvKWDErSexUXQKY8V U5xTFpu0STabVnqxxvKjVd/GpvBv7bSc5Zb6DH+ke3Vyv70jFE5XVeyQ3QrIE3DV c7aNJe6wDAXx34tin+uVFpiecCzDFbyuFP0L8EewTTLEuk166YM7x4sYYmk0D2Zo -----END CERTIFICATE-----Generated at Tue Jul 21 14:33:29 2026 by rpki-client