$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7E08719E390311EF9DD1A882C4F9AE02.roa File: 7E08719E390311EF9DD1A882C4F9AE02.roa (raw, json) Hash identifier: xOVCUi4wDk4f67M33MXCeGdqVlkhSkGVDTufh41ZJmA= Subject key identifier: DA:99:88:09:7C:A8:97:3E:0A:49:FF:4F:35:3D:C4:D5:94:BF:1F:1D Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 0996 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7E08719E390311EF9DD1A882C4F9AE02.roa Signing time: Sat 10 Oct 2026 22:43:41 +0000 ROA not before: Sat 10 Oct 2026 22:43:41 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 131646 IP address blocks: 36.255.192.0/24 maxlen: 24 43.229.155.0/24 maxlen: 24 43.252.209.0/24 maxlen: 24 103.225.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 22:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2454 (0x996) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 10 22:43:41 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acabf9c-4716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:30:9a:de:dc:71:bd:29:28:0f:99:8b:9f:e8: f5:4b:59:c1:7d:67:98:05:3a:06:06:6e:18:2e:4c: 8f:3e:1a:f9:8e:67:24:10:ec:b1:3a:4d:9d:5d:aa: d4:05:4f:8f:9a:f9:5f:59:22:23:4a:50:cf:30:64: c6:f9:79:4d:0c:d3:11:ed:f7:02:be:49:55:50:ce: e5:45:35:51:9a:64:94:e4:a5:c8:cf:59:b5:4a:be: 24:4f:a7:72:35:8d:05:28:ca:15:5a:9c:33:0e:79: 19:f4:cf:1c:1d:07:2d:bc:0b:8e:e7:e4:cf:d1:7f: ab:d4:99:0c:f2:0f:b9:4b:60:a9:5b:85:4a:4e:5f: 47:02:90:b6:90:6a:a7:68:a0:d1:90:de:31:f7:e5: 52:65:fe:6e:e6:c3:27:7b:45:fb:b2:87:20:91:4b: e9:ed:0d:52:65:de:49:57:63:a6:62:1b:ca:42:24: a0:85:3c:72:11:2b:b6:7b:16:45:7e:1e:7a:62:f3: 8e:f8:08:98:c5:82:63:4e:f0:4f:e3:9e:0e:e9:94: d6:53:bc:52:73:b3:c0:28:b3:41:ec:9d:42:cd:e0: 20:74:15:cd:15:59:33:38:88:1c:bf:33:66:88:72: c5:98:38:f4:29:89:a4:a8:18:e4:96:09:d6:f5:e0: 8e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:99:88:09:7C:A8:97:3E:0A:49:FF:4F:35:3D:C4:D5:94:BF:1F:1D X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7E08719E390311EF9DD1A882C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.255.192.0/24 43.229.155.0/24 43.252.209.0/24 103.225.196.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:91:a9:82:cf:8d:1a:63:ba:54:19:cc:a8:b1:a6:21:77:34: 44:c2:51:7b:56:a4:85:c6:87:a9:ab:da:2b:53:8c:5e:4f:3a: 7b:23:4d:87:bb:ea:70:c7:8f:fb:ff:6d:c5:81:b9:b0:dd:88: 38:40:6c:27:88:9d:b0:fe:2d:d3:18:48:8b:de:d4:b6:6d:f5: fc:42:1e:9d:ea:96:31:47:8b:e7:d4:fd:e6:2e:b3:8c:21:33: f3:3b:6b:b2:66:4c:ab:71:3d:a5:ee:37:59:98:5f:52:ca:79: 75:da:5e:df:04:1b:a0:27:40:3c:ff:98:85:32:b8:f9:37:f4: ab:23:e1:6e:55:db:85:99:df:09:a0:d3:5e:54:de:06:ae:30: 50:5e:50:b7:1d:c7:d9:c7:a9:da:d3:ef:ad:c5:3a:84:17:52: 77:71:30:a7:3a:18:ef:7f:01:e3:2d:07:ea:82:ee:c9:d4:cb: 9b:72:74:3f:0f:bd:b9:12:eb:f7:bc:1b:49:44:c7:bd:b2:36: 67:55:c0:36:51:8f:c4:2b:af:3e:4a:3f:06:7f:77:01:24:39: 5e:68:59:b0:2e:7b:ae:ad:e0:6b:58:11:21:5f:1b:6d:1c:d6: 01:8b:2b:b4:83:d4:1b:a5:4a:a0:e5:21:f1:40:92:c7:77:14: 9a:35:9f:4f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICCZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjYxMDEwMjI0MzQxWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNhYmY5Yy00NzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDCa3txxvSkoD5mLn+j1S1nBfWeYBToGBm4YLkyPPhr5jmckEOyxOk2dXarU BU+PmvlfWSIjSlDPMGTG+XlNDNMR7fcCvklVUM7lRTVRmmSU5KXIz1m1Sr4kT6dy NY0FKMoVWpwzDnkZ9M8cHQctvAuO5+TP0X+r1JkM8g+5S2CpW4VKTl9HApC2kGqn aKDRkN4x9+VSZf5u5sMne0X7socgkUvp7Q1SZd5JV2OmYhvKQiSghTxyESu2exZF fh56YvOO+AiYxYJjTvBP454O6ZTWU7xSc7PAKLNB7J1CzeAgdBXNFVkzOIgcvzNm iHLFmDj0KYmkqBjklgnW9eCOGwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFNqZiAl8 qJc+Ckn/TzU9xNWUvx8dMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvN0UwODcxOUUz OTAzMTFFRjlERDFBODgyQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAJP/AAwQAK+WbAwQAK/zRAwQAZ+HEMA0GCSqGSIb3DQEBCwUAA4IB AQBtkamCz40aY7pUGcyosaYhdzREwlF7VqSFxoepq9orU4xeTzp7I02Hu+pwx4/7 /23Fgbmw3Yg4QGwniJ2w/i3TGEiL3tS2bfX8Qh6d6pYxR4vn1P3mLrOMITPzO2uy ZkyrcT2l7jdZmF9Synl12l7fBBugJ0A8/5iFMrj5N/SrI+FuVduFmd8JoNNeVN4G rjBQXlC3HcfZx6na0++txTqEF1J3cTCnOhjvfwHjLQfqgu7J1MubcnQ/D725Euv3 vBtJRMe9sjZnVcA2UY/EK68+Sj8Gf3cBJDleaFmwLnuureBrWBEhXxttHNYBiyu0 g9QbpUqg5SHxQJLHdxSaNZ9P -----END CERTIFICATE-----Generated at Sun Oct 25 20:06:46 2026 by rpki-client