$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/4A4A33C0661B11EFA314D413C4F9AE02.roa File: 4A4A33C0661B11EFA314D413C4F9AE02.roa (raw, json) Hash identifier: 2il00FZ739DZVGescfv8Cug49vMrwp9IblZJ0ZC/DoY= Subject key identifier: 10:0A:FD:FF:64:88:54:59:D8:1F:6C:94:36:76:6D:C2:09:DF:C6:26 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 099C Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/4A4A33C0661B11EFA314D413C4F9AE02.roa Signing time: Sat 10 Oct 2026 22:43:53 +0000 ROA not before: Sat 10 Oct 2026 22:43:53 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 142132 IP address blocks: 43.252.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 22:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2460 (0x99c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 10 22:43:53 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acabfa9-6689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1b:b8:b8:54:33:a8:f5:e3:9f:44:4c:ac:84: 0a:7c:79:61:0c:d5:96:f9:0f:6a:c3:ac:c1:50:30: af:f3:c3:0f:56:45:c8:c5:28:4e:1f:9a:fe:65:09: d1:00:70:c2:93:0f:60:57:0c:bf:58:4c:43:4a:5f: 06:c3:2c:2d:58:39:9b:66:32:78:1d:c2:51:79:40: e9:e1:7c:3d:f1:d1:1e:e7:eb:63:af:02:29:d4:a9: da:e6:29:61:9b:ac:84:98:f8:d5:d3:33:c7:b4:7a: e6:ea:4f:44:41:a1:0d:d6:00:85:14:79:d7:bd:dc: d4:12:14:53:ec:53:bc:f8:99:c6:a1:18:f4:38:8b: cb:f0:56:9f:eb:cd:70:c1:9f:bb:80:34:8a:40:69: 7a:13:48:c2:f9:e5:e3:97:61:d7:41:b6:be:cd:f1: 3a:13:c9:38:36:ae:a5:da:45:cc:2c:4c:ac:67:6a: e7:72:52:4c:fe:43:77:78:8a:7a:e4:30:c9:88:98: 41:f7:78:c7:45:7e:a7:7b:fd:c0:ea:9c:ba:85:97: e3:55:b6:5a:d2:25:5d:82:0a:98:93:1c:42:04:2f: 5a:f1:c6:3d:13:05:bf:98:af:77:6e:89:83:3b:50: af:d3:93:24:2d:9c:1e:83:30:29:13:ec:96:e3:82: e1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0A:FD:FF:64:88:54:59:D8:1F:6C:94:36:76:6D:C2:09:DF:C6:26 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/4A4A33C0661B11EFA314D413C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.252.211.0/24 Signature Algorithm: sha256WithRSAEncryption 88:02:67:02:ea:94:20:6e:fc:a1:e3:49:77:0a:05:dd:44:b5: 14:5b:32:04:0b:25:f3:bd:72:6f:ba:57:e6:74:72:5f:97:c7: 3b:c1:ec:8e:88:fa:c4:69:f5:20:ad:86:29:91:fe:a1:7a:0f: 0f:98:ce:13:2f:d2:67:c5:76:58:7a:97:aa:4b:54:24:1d:8d: 9b:f1:3d:8c:f5:6a:67:47:e3:ba:71:b8:44:49:c8:1e:13:12: bf:26:2f:2e:93:ad:85:f7:52:df:3b:c3:4e:02:7b:f4:0c:1d: 98:02:c6:28:14:c3:b5:fb:50:f9:15:81:a0:91:03:e5:2b:80: f2:d6:93:6d:45:fa:47:a8:c4:ef:75:f7:12:ec:d7:09:dd:3a: 3b:8c:2a:9c:9c:92:f2:66:43:e2:f9:b2:cb:2f:49:88:b1:be: 20:23:ff:1c:4f:e1:1f:27:63:14:a4:45:ba:88:06:32:f1:aa: e1:fc:b2:22:0b:12:57:e0:e2:dc:8b:a8:95:5a:74:a1:9e:34: 5c:ea:f1:8c:d2:8e:00:a0:2f:fb:44:67:74:be:13:d6:38:4b: 5f:a8:1b:de:35:c7:ab:7a:f2:93:ac:62:fa:70:ff:c8:6d:dc: dd:61:f1:b7:76:8d:36:19:f1:64:69:9a:55:13:27:18:ef:65: 2d:87:a6:21 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjYxMDEwMjI0MzUzWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNhYmZhOS02Njg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkhu4uFQzqPXjn0RMrIQKfHlhDNWW+Q9qw6zBUDCv88MPVkXIxShOH5r+ZQnR AHDCkw9gVwy/WExDSl8GwywtWDmbZjJ4HcJReUDp4Xw98dEe5+tjrwIp1Kna5ilh m6yEmPjV0zPHtHrm6k9EQaEN1gCFFHnXvdzUEhRT7FO8+JnGoRj0OIvL8Faf681w wZ+7gDSKQGl6E0jC+eXjl2HXQba+zfE6E8k4Nq6l2kXMLEysZ2rnclJM/kN3eIp6 5DDJiJhB93jHRX6ne/3A6py6hZfjVbZa0iVdggqYkxxCBC9a8cY9EwW/mK93bomD O1Cv05MkLZwegzApE+yW44LhfwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBAK/f9k iFRZ2B9slDZ2bcIJ38YmMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvNEE0QTMzQzA2 NjFCMTFFRkEzMTRENDEzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK/zTMA0GCSqGSIb3DQEBCwUAA4IBAQCIAmcC6pQgbvyh40l3CgXd RLUUWzIECyXzvXJvulfmdHJfl8c7weyOiPrEafUgrYYpkf6heg8PmM4TL9JnxXZY epeqS1QkHY2b8T2M9WpnR+O6cbhEScgeExK/Ji8uk62F91LfO8NOAnv0DB2YAsYo FMO1+1D5FYGgkQPlK4Dy1pNtRfpHqMTvdfcS7NcJ3To7jCqcnJLyZkPi+bLLL0mI sb4gI/8cT+EfJ2MUpEW6iAYy8arh/LIiCxJX4OLci6iVWnShnjRc6vGM0o4AoC/7 RGd0vhPWOEtfqBveNcerevKTrGL6cP/IbdzdYfG3do02GfFkaZpVEycY72Uth6Yh -----END CERTIFICATE-----Generated at Thu Oct 22 16:42:47 2026 by rpki-client