$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/83EC44C8134C11EF81B18276C4F9AE02.roa File: 83EC44C8134C11EF81B18276C4F9AE02.roa (raw, json) Hash identifier: DqMgTQ6HHHZ9ZRSuLgmKK6RQXDATVOlu1rKu42xpSz4= Subject key identifier: C4:19:3C:A6:AC:E3:83:68:DD:29:0A:11:A0:09:F5:D6:BB:B6:44:50 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 08D2 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/83EC44C8134C11EF81B18276C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:53:39 +0000 ROA not before: Wed 08 Oct 2025 22:54:00 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132825 IP address blocks: 43.252.208.0/24 maxlen: 24 103.228.65.0/24 maxlen: 24 103.234.52.0/24 maxlen: 24 103.234.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Mar 2026 22:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2258 (0x8d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 8 22:54:00 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a48b33-0065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e4:62:23:07:06:89:29:15:b7:08:e9:bc:61: 84:29:c6:b1:a5:57:a3:20:57:9d:05:d7:c0:17:00: c0:dd:54:0f:5c:70:7c:62:39:79:eb:ec:90:51:6b: 6a:ca:47:45:2a:f5:b6:40:ef:01:0d:47:e6:38:29: 68:d3:49:95:46:20:f9:a3:97:df:2e:c2:44:24:2c: a3:7c:ce:61:0a:7f:78:1d:0f:02:cb:16:63:1a:5b: c5:f8:1a:b8:37:56:b9:41:50:f4:14:2a:1c:39:98: 58:fa:6b:1b:f0:93:82:71:50:fe:98:36:1c:61:7f: be:a9:53:15:3c:55:fe:39:60:23:93:30:b8:36:ab: 85:49:9a:20:49:4f:7b:ce:6c:ed:f6:f3:b0:ec:ac: f2:fa:52:5b:28:86:cd:6d:4d:5c:52:5e:21:68:d7: b6:45:31:fc:7d:04:9e:96:b2:ba:14:83:91:54:b6: 57:a4:08:40:64:be:ad:1e:1f:83:92:4a:74:45:4b: 96:8b:73:83:b8:5b:8f:a3:a7:42:38:81:6d:b2:27: 51:be:60:85:f2:8c:8c:0c:17:fc:04:00:06:a2:ec: 3c:08:14:85:96:29:c5:6c:be:3b:35:21:bd:0b:c3: 26:a7:a7:d4:da:df:f2:77:80:aa:45:e9:aa:77:eb: 22:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:19:3C:A6:AC:E3:83:68:DD:29:0A:11:A0:09:F5:D6:BB:B6:44:50 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/83EC44C8134C11EF81B18276C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.252.208.0/24 103.228.65.0/24 103.234.52.0/24 103.234.55.0/24 Signature Algorithm: sha256WithRSAEncryption a3:9c:7e:02:95:d9:76:f1:58:c0:45:4c:aa:06:c7:ee:05:30: fe:71:f9:e1:6b:95:2b:70:ce:d1:42:3d:dd:75:8c:78:f3:6d: db:e7:8f:48:3a:9c:ed:03:3e:0b:35:b2:75:38:a5:10:d2:10: 8b:24:2a:f6:e5:c1:a8:55:c9:97:96:d2:67:ef:13:da:9d:2a: 95:1e:4f:af:23:d0:48:bd:ab:b3:b1:c7:fa:a9:21:3a:27:11: 8b:e9:c9:25:4d:8a:78:18:bc:13:2e:b0:78:07:01:7b:a2:1f: 74:a5:71:f9:7c:f9:30:ae:fa:cd:05:54:3c:1e:7e:e1:e4:1e: 9b:76:2c:6a:18:49:52:d9:0c:04:c6:c5:d3:21:cb:a7:85:31: 0d:1f:87:33:14:fd:77:0c:00:db:d8:90:17:51:fc:b5:24:7d: 62:0a:6a:d5:1b:b7:df:86:43:f9:a0:a3:27:bf:88:29:fa:14: 6a:e5:9a:ea:d4:92:fa:80:7c:e2:4c:95:c7:70:6d:55:7e:0d: b2:6a:72:cc:08:67:0a:3b:30:7f:72:d3:82:b4:44:6f:38:ae: c3:e6:fc:43:69:df:6d:1b:8e:54:87:6a:d6:eb:84:1c:a2:c7: f7:d8:10:92:f2:30:fe:3a:c0:dc:4c:29:14:4a:aa:e9:20:15: fe:35:5f:4f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICCNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUxMDA4MjI1NDAwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGIzMy0wMDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAneRiIwcGiSkVtwjpvGGEKcaxpVejIFedBdfAFwDA3VQPXHB8Yjl56+yQUWtq ykdFKvW2QO8BDUfmOClo00mVRiD5o5ffLsJEJCyjfM5hCn94HQ8CyxZjGlvF+Bq4 N1a5QVD0FCocOZhY+msb8JOCcVD+mDYcYX++qVMVPFX+OWAjkzC4NquFSZogSU97 zmzt9vOw7Kzy+lJbKIbNbU1cUl4haNe2RTH8fQSelrK6FIORVLZXpAhAZL6tHh+D kkp0RUuWi3ODuFuPo6dCOIFtsidRvmCF8oyMDBf8BAAGouw8CBSFlinFbL47NSG9 C8Mmp6fU2t/yd4CqRemqd+siPwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFMQZPKas 44No3SkKEaAJ9da7tkRQMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvODNFQzQ0Qzgx MzRDMTFFRjgxQjE4Mjc2QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAK/zQAwQAZ+RBAwQAZ+o0AwQAZ+o3MA0GCSqGSIb3DQEBCwUAA4IB AQCjnH4Cldl28VjARUyqBsfuBTD+cfnha5UrcM7RQj3ddYx4823b549IOpztAz4L NbJ1OKUQ0hCLJCr25cGoVcmXltJn7xPanSqVHk+vI9BIvauzscf6qSE6JxGL6ckl TYp4GLwTLrB4BwF7oh90pXH5fPkwrvrNBVQ8Hn7h5B6bdixqGElS2QwExsXTIcun hTENH4czFP13DADb2JAXUfy1JH1iCmrVG7ffhkP5oKMnv4gp+hRq5Zrq1JL6gHzi TJXHcG1Vfg2yanLMCGcKOzB/ctOCtERvOK7D5vxDad9tG45Uh2rW64Qcosf32BCS 8jD+OsDcTCkUSqrpIBX+NV9P -----END CERTIFICATE-----Generated at Fri Mar 6 02:38:17 2026 by rpki-client