$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/83EC44C8134C11EF81B18276C4F9AE02.roa File: 83EC44C8134C11EF81B18276C4F9AE02.roa (raw, json) Hash identifier: R8J13N3HbBaZrpNfd0dDpPDxtE06NzUUaHlAuRV5t2c= Subject key identifier: 0F:74:6F:3C:9B:CF:0C:83:CD:AD:26:5A:B4:1E:FF:B4:EE:A3:10:AE Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 0997 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/83EC44C8134C11EF81B18276C4F9AE02.roa Signing time: Sat 10 Oct 2026 22:43:43 +0000 ROA not before: Sat 10 Oct 2026 22:43:43 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 132825 IP address blocks: 43.252.208.0/24 maxlen: 24 103.228.65.0/24 maxlen: 24 103.234.52.0/24 maxlen: 24 103.234.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 22:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2455 (0x997) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 10 22:43:43 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acabf9f-5e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5f:1f:cb:57:22:bf:c1:4f:60:86:74:cd:3c: 75:a3:72:5a:2d:93:bc:11:60:f3:25:f2:ca:99:27: 0e:f4:f3:88:55:8a:13:70:e3:be:5c:e9:df:68:f7: 1f:53:32:a9:34:dc:83:94:d2:80:bb:96:46:c7:8e: 73:86:f4:6a:01:e4:f2:38:8f:89:c9:b7:35:f3:54: df:f2:37:2b:bd:df:1b:9b:c7:00:9b:bd:c9:76:43: 62:78:a9:77:69:af:5e:40:67:f8:42:dd:84:62:4a: 21:55:0f:54:7a:a6:28:13:17:78:da:21:d5:84:6d: 1b:8c:32:c0:e2:36:8f:f1:ca:11:c1:84:52:8f:32: ef:ff:2f:61:26:74:0b:82:66:b8:fe:2c:a9:13:56: ee:68:66:54:2f:c7:26:b1:64:fd:60:b2:dd:26:0f: ca:e2:ff:3a:82:e5:88:cb:c3:e6:cb:61:f1:ff:51: 7e:bb:bc:52:d5:60:dd:ba:d9:46:c5:9a:a4:95:63: 7f:71:96:6b:d6:e2:7e:3a:af:d2:c8:1c:2c:3b:be: 3b:49:e5:38:c3:fe:a4:6a:44:2c:a7:36:58:6f:0c: 7f:68:89:8e:da:99:ac:8a:d4:40:29:5d:32:6b:f4: f4:0e:d0:60:e5:4a:4a:72:b4:f7:4b:5e:7f:26:7d: 97:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:74:6F:3C:9B:CF:0C:83:CD:AD:26:5A:B4:1E:FF:B4:EE:A3:10:AE X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/83EC44C8134C11EF81B18276C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.252.208.0/24 103.228.65.0/24 103.234.52.0/24 103.234.55.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:59:d7:17:03:e7:25:aa:d6:16:02:8b:c7:50:f4:26:8f:d8: 3e:da:0f:e6:f6:88:d3:af:74:80:e0:2b:47:78:94:7b:58:18: 82:8b:95:51:81:0a:cb:07:c5:b3:45:f4:89:53:05:70:f3:d7: c0:02:61:8d:ca:17:eb:7f:72:23:99:09:65:4b:be:82:9f:79: 9d:ae:41:c7:5d:f9:37:cb:0b:21:81:f6:17:74:6a:ef:71:5f: 9c:7a:ae:0a:b8:21:ac:db:53:c6:fc:fd:62:6c:25:a0:21:3b: de:34:9e:a3:1a:b9:3f:45:17:1c:4f:2d:7e:c0:36:40:33:2b: 10:b3:98:2b:24:03:1c:c7:1d:85:43:b2:c5:ac:ba:d3:a4:24: d9:73:e3:74:7e:8d:be:04:f2:8c:70:ed:8a:59:b6:1d:41:dd: cf:3c:0d:b8:45:ff:48:ae:2c:e5:b2:03:54:ab:f7:98:00:3f: 89:fc:0e:f4:49:fd:71:2e:79:6a:c4:8c:b4:e2:ee:3b:60:72: 3b:66:d1:f1:dc:18:73:e4:90:e0:77:6c:db:60:ca:b4:60:aa: ae:38:d6:d4:7c:b3:90:a0:03:12:06:7e:61:f7:19:c9:6c:db: 39:36:5b:73:8a:ad:59:4e:85:c6:71:27:c2:63:c1:7e:5e:ab: 0b:72:d8:e7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICCZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjYxMDEwMjI0MzQzWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNhYmY5Zi01ZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzl8fy1civ8FPYIZ0zTx1o3JaLZO8EWDzJfLKmScO9POIVYoTcOO+XOnfaPcf UzKpNNyDlNKAu5ZGx45zhvRqAeTyOI+Jybc181Tf8jcrvd8bm8cAm73JdkNieKl3 aa9eQGf4Qt2EYkohVQ9UeqYoExd42iHVhG0bjDLA4jaP8coRwYRSjzLv/y9hJnQL gma4/iypE1buaGZUL8cmsWT9YLLdJg/K4v86guWIy8Pmy2Hx/1F+u7xS1WDdutlG xZqklWN/cZZr1uJ+Oq/SyBwsO747SeU4w/6kakQspzZYbwx/aImO2pmsitRAKV0y a/T0DtBg5UpKcrT3S15/Jn2XDQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFA90bzyb zwyDza0mWrQe/7TuoxCuMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvODNFQzQ0Qzgx MzRDMTFFRjgxQjE4Mjc2QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAK/zQAwQAZ+RBAwQAZ+o0AwQAZ+o3MA0GCSqGSIb3DQEBCwUAA4IB AQAfWdcXA+clqtYWAovHUPQmj9g+2g/m9ojTr3SA4CtHeJR7WBiCi5VRgQrLB8Wz RfSJUwVw89fAAmGNyhfrf3IjmQllS76Cn3mdrkHHXfk3ywshgfYXdGrvcV+ceq4K uCGs21PG/P1ibCWgITveNJ6jGrk/RRccTy1+wDZAMysQs5grJAMcxx2FQ7LFrLrT pCTZc+N0fo2+BPKMcO2KWbYdQd3PPA24Rf9IrizlsgNUq/eYAD+J/A70Sf1xLnlq xIy04u47YHI7ZtHx3Bhz5JDgd2zbYMq0YKquONbUfLOQoAMSBn5h9xnJbNs5Nltz iq1ZToXGcSfCY8F+XqsLctjn -----END CERTIFICATE-----Generated at Fri Oct 23 11:23:57 2026 by rpki-client