$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa File: 8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa (raw, json) Hash identifier: azpIitGefSlvlMwJupckHpHUM74PuPNEm5zYnaQUVWk= Subject key identifier: 89:FE:7D:E6:66:BF:D2:BC:98:29:9C:B9:0F:C6:43:A3:59:47:A5:81 Certificate issuer: /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Certificate serial: 0812 Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:47:56 +0000 ROA not before: Fri 28 Nov 2025 20:24:16 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133525 IP address blocks: 103.29.84.0/23 maxlen: 23 103.42.224.0/23 maxlen: 23 114.142.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2066 (0x812) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B871, serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Validity Not Before: Nov 28 20:24:16 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a47bcc-892e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e7:a4:cc:7d:dd:0a:99:d0:a3:6f:9b:e5:c2: b1:c0:9c:4e:c3:bc:c1:f9:08:5b:60:35:5a:b5:66: cb:b6:98:8f:1a:a3:7b:33:a6:dd:20:a9:86:84:89: 32:d5:e3:11:1e:b7:30:fc:c8:a0:f7:ef:08:e4:9e: a5:61:86:d3:e8:b0:93:41:2c:8d:90:99:7f:1c:3d: cd:d2:e5:fe:5e:12:ff:d0:fe:4e:73:3b:5f:c7:e2: 50:39:0f:bc:e0:b6:44:a3:1f:9d:81:0a:f5:da:78: 5e:f0:92:92:ee:1f:2b:bd:c0:1a:8f:d7:68:5b:a1: 7b:0e:9a:90:73:bb:70:46:16:06:36:9f:e8:95:42: 1d:47:b6:0e:df:4f:b1:9e:9e:8b:ee:91:e9:97:35: 96:37:c6:ae:e0:37:25:18:fa:6e:1d:b1:fa:44:c4: bb:2c:89:67:67:45:cf:22:0b:0c:d3:68:89:f0:75: 40:62:56:03:bb:9b:42:8e:25:4f:9d:d2:f6:e7:31: 32:bd:7c:6f:69:bb:f4:45:6e:42:6d:d5:cb:5e:1f: 74:bf:7b:85:fb:0b:b3:1d:92:e7:d4:05:03:6f:fb: 89:19:38:47:1d:7d:80:c3:75:a7:24:d4:f4:dd:81: 0a:25:fb:94:fe:f3:f8:75:d9:da:10:ef:25:a4:33: 5e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FE:7D:E6:66:BF:D2:BC:98:29:9C:B9:0F:C6:43:A3:59:47:A5:81 X509v3 Authority Key Identifier: keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.29.84.0/23 103.42.224.0/23 114.142.160.0/24 Signature Algorithm: sha256WithRSAEncryption aa:d2:6e:09:ea:4b:18:5a:ff:a3:f9:fe:0a:2b:16:73:31:fc: f5:28:60:b9:4d:0b:b1:e9:d6:bd:8f:53:dc:8c:50:dd:a4:62: 0b:6b:de:41:df:36:a0:82:8d:c6:b5:af:3f:10:53:c0:29:3c: af:cb:c6:f9:07:05:8f:bb:ab:a8:75:b6:23:b7:91:f9:b0:68: 90:1d:67:cf:a1:a5:2b:50:6c:09:29:06:bb:15:78:a0:cf:22: ee:61:81:0f:da:0b:32:50:89:9e:ad:23:1e:07:1d:44:b6:90: 21:fb:93:ae:27:0d:a9:54:a2:54:fc:97:97:bb:0c:6d:94:ba: 15:fb:8e:67:39:08:46:b1:68:51:c6:2e:bb:05:82:c7:f2:9d: 56:21:5c:1d:82:5f:f8:28:f7:cb:7a:a2:b9:7e:84:c6:d4:58: d1:fe:a7:e2:84:1a:79:03:d7:ef:4d:18:ce:ca:98:6b:cd:3f: e8:0e:6a:96:a2:c1:73:11:69:60:9f:de:f5:ac:05:da:05:17: 93:8b:41:ad:b6:5b:12:d4:5e:31:8c:76:06:c4:87:01:e6:95: ca:79:1f:98:7b:95:4f:df:ec:e5:c1:3c:9e:a8:63:f1:d9:8f: 1f:7d:05:4a:3f:16:5f:09:e4:42:67:c2:14:06:94:88:28:e5: 7d:09:6b:50 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4NzExMTAvBgNVBAUTKDJCMTUxRUQ0OTY2Q0I2NTY5MENEOUFBODI2MkI4QTZB RUQwNkU0NDMwHhcNMjUxMTI4MjAyNDE2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2JjYy04OTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquekzH3dCpnQo2+b5cKxwJxOw7zB+QhbYDVatWbLtpiPGqN7M6bdIKmGhIky 1eMRHrcw/Mig9+8I5J6lYYbT6LCTQSyNkJl/HD3N0uX+XhL/0P5Ocztfx+JQOQ+8 4LZEox+dgQr12nhe8JKS7h8rvcAaj9doW6F7DpqQc7twRhYGNp/olUIdR7YO30+x np6L7pHplzWWN8au4DclGPpuHbH6RMS7LIlnZ0XPIgsM02iJ8HVAYlYDu5tCjiVP ndL25zEyvXxvabv0RW5CbdXLXh90v3uF+wuzHZLn1AUDb/uJGThHHX2Aw3WnJNT0 3YEKJfuU/vP4ddnaEO8lpDNecQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFIn+feZm v9K8mCmcuQ/GQ6NZR6WBMB8GA1UdIwQYMBaAFCsVHtSWbLZWkM2aqCYrimrtBuRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjg3MS84QTJEQUJFMDFE QTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3RsYVF6WnFvSml1S2F1MEc1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t4VWUxSlpzdGxhUXpacW9KaXVLYXUwRzVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI4NzEvOEEyREFCRTAxREE3MTFFQjgwNzEyQTRGQzRGOUFFMDIvOEEwMUJDREMx REE4MTFFQkFGQTVCNDRGQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBZx1UAwQBZyrgAwQAco6gMA0GCSqGSIb3DQEBCwUAA4IBAQCq0m4J 6ksYWv+j+f4KKxZzMfz1KGC5TQux6da9j1PcjFDdpGILa95B3zaggo3Gta8/EFPA KTyvy8b5BwWPu6uodbYjt5H5sGiQHWfPoaUrUGwJKQa7FXigzyLuYYEP2gsyUIme rSMeBx1EtpAh+5OuJw2pVKJU/JeXuwxtlLoV+45nOQhGsWhRxi67BYLH8p1WIVwd gl/4KPfLeqK5foTG1FjR/qfihBp5A9fvTRjOyphrzT/oDmqWosFzEWlgn971rAXa BReTi0GttlsS1F4xjHYGxIcB5pXKeR+Ye5VP3+zlwTyeqGPx2Y8ffQVKPxZfCeRC Z8IUBpSIKOV9CWtQ -----END CERTIFICATE-----Generated at Sun Mar 22 15:00:13 2026 by rpki-client