$ rpki-client -vvf rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/43A759B0C82811F0B893BE0BC4F9AE02.roa File: 43A759B0C82811F0B893BE0BC4F9AE02.roa (raw, json) Hash identifier: KULiokLKjpXc0pp9Pep/euPdtbUiF2v7Pq95R/P+7Q8= Subject key identifier: 34:12:71:70:EF:7C:EC:0C:32:6C:58:28:59:75:27:33:A6:0B:EA:57 Certificate issuer: /CN=A911FAC3/serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Certificate serial: 143F Authority key identifier: 77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/43A759B0C82811F0B893BE0BC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:56:03 +0000 ROA not before: Sun 23 Nov 2025 04:52:51 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 63932 IP address blocks: 43.229.12.0/22 maxlen: 22 103.48.16.0/22 maxlen: 22 114.130.240.0/21 maxlen: 21 114.130.240.0/23 maxlen: 23 114.130.242.0/24 maxlen: 24 114.130.252.0/22 maxlen: 22 2401:ed80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 16:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5183 (0x143f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FAC3, serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Validity Not Before: Nov 23 04:52:51 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a46192-2b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b6:36:2f:6e:91:85:11:60:be:53:bf:ac:5f: 52:40:39:db:ad:91:99:03:f2:5c:73:ae:ad:2f:68: e7:8e:db:0a:04:24:79:c1:6f:90:5b:c4:24:01:b5: 83:09:78:77:ed:e2:87:2a:4f:41:fd:f4:bd:65:ed: bc:2c:86:40:76:c1:41:e7:50:8f:62:bb:1e:fa:18: 17:2b:02:95:86:a5:28:d9:f4:e1:b1:e4:4c:ad:76: 2e:7c:de:3a:57:3b:d9:c2:24:67:2d:44:a8:c9:59: 5a:f2:f9:53:1e:fe:80:ee:45:66:92:c4:23:a6:57: a5:d0:9b:ce:71:ef:3c:7d:d9:8a:c9:80:7a:f6:de: 48:51:e1:a2:64:1d:32:df:76:84:29:15:80:9f:cd: f0:29:cf:25:14:e6:dc:ca:33:2b:86:0e:fc:ac:2c: 19:3d:f2:2d:97:96:f2:b7:32:7d:b9:06:7c:1f:c7: 92:e2:95:2d:a3:27:17:1a:1b:78:51:cf:6c:47:26: f4:2b:ea:28:8e:ef:91:44:c8:87:bc:83:54:60:c2: d0:9c:a5:0e:1c:78:d2:c5:95:da:33:1d:68:50:cf: 24:d4:12:25:19:df:e0:ce:9d:47:cf:dc:1f:2a:e9: 80:bc:a7:7b:06:f4:27:95:43:5c:39:11:ba:39:06: fb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:12:71:70:EF:7C:EC:0C:32:6C:58:28:59:75:27:33:A6:0B:EA:57 X509v3 Authority Key Identifier: keyid:77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/43A759B0C82811F0B893BE0BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.229.12.0/22 103.48.16.0/22 114.130.240.0/21 114.130.252.0/22 IPv6: 2401:ed80::/32 Signature Algorithm: sha256WithRSAEncryption 5a:9a:41:37:59:70:cc:f9:27:d7:8e:83:27:c1:fb:8b:99:53: d7:f1:2e:0b:b2:48:2c:b8:d5:04:92:45:2b:e7:16:06:ae:26: f1:88:e4:76:68:6f:83:45:4d:2a:80:e7:f3:5e:36:15:bf:e5: 41:70:c1:f6:b2:8b:aa:f1:cd:04:50:b3:5b:12:44:b4:00:78: 19:f3:c8:77:ec:df:5c:9d:0a:6a:09:32:05:f0:20:f7:9c:30: 61:8e:7a:1a:ef:a7:45:4f:3d:85:c1:ee:88:a4:22:88:f7:8b: 12:98:27:6b:ab:73:c3:ff:5b:25:e5:d6:7c:c8:06:78:b9:ed: 42:a0:7a:6f:72:a3:f8:74:8f:4f:aa:8a:2a:34:c1:79:de:29: f6:9b:19:a8:2f:48:ac:1e:32:06:4c:0d:a5:e9:34:c2:cd:e3: d5:bb:b4:7c:39:5d:65:0d:dc:81:9b:9e:fc:0e:7e:4e:60:d2: 00:0e:9d:92:dc:b1:b0:6e:3d:b7:e5:4c:e0:3f:a4:61:80:33: 26:36:be:75:c8:30:76:c8:f0:df:7d:24:fa:1e:11:ad:6d:66: ca:f8:4f:c5:ac:16:c8:8a:4f:9b:92:ac:95:65:d9:d3:c6:b1: c1:6c:8c:58:60:47:2a:91:6d:39:74:ed:24:51:a7:3f:bb:23: d9:18:13:ab -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICFD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQzMxMTAvBgNVBAUTKDc3NjJBQTgyNzcwMjBEMEJCNUM3NTk5N0RFNUY3RDhB NTE0MkRGMTQwHhcNMjUxMTIzMDQ1MjUxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjE5Mi0yYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurY2L26RhRFgvlO/rF9SQDnbrZGZA/Jcc66tL2jnjtsKBCR5wW+QW8QkAbWD CXh37eKHKk9B/fS9Ze28LIZAdsFB51CPYrse+hgXKwKVhqUo2fThseRMrXYufN46 VzvZwiRnLUSoyVla8vlTHv6A7kVmksQjplel0JvOce88fdmKyYB69t5IUeGiZB0y 33aEKRWAn83wKc8lFObcyjMrhg78rCwZPfItl5bytzJ9uQZ8H8eS4pUtoycXGht4 Uc9sRyb0K+ooju+RRMiHvINUYMLQnKUOHHjSxZXaMx1oUM8k1BIlGd/gzp1Hz9wf KumAvKd7BvQnlUNcORG6OQb74wIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFDQScXDv fOwMMmxYKFl1JzOmC+pXMB8GA1UdIwQYMBaAFHdiqoJ3Ag0LtcdZl95ffYpRQt8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFDMy83Qjg2OEMwODlE RjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RRdTF4MW1YM2w5OWlsRkMz eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QyS3FnbmNDRFF1MXgxbVgzbDk5aWxGQzN4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUZBQzMvN0I4NjhDMDg5REY1MTFFODk1N0FCNDE2QzRGOUFFMDIvNDNBNzU5QjBD ODI4MTFGMEI4OTNCRTBCQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCK+UMAwQCZzAQAwQDcoLwAwQCcoL8MA0EAgACMAcDBQAkAe2AMA0G CSqGSIb3DQEBCwUAA4IBAQBamkE3WXDM+SfXjoMnwfuLmVPX8S4LskgsuNUEkkUr 5xYGribxiOR2aG+DRU0qgOfzXjYVv+VBcMH2souq8c0EULNbEkS0AHgZ88h37N9c nQpqCTIF8CD3nDBhjnoa76dFTz2Fwe6IpCKI94sSmCdrq3PD/1sl5dZ8yAZ4ue1C oHpvcqP4dI9PqooqNMF53in2mxmoL0isHjIGTA2l6TTCzePVu7R8OV1lDdyBm578 Dn5OYNIADp2S3LGwbj235UzgP6RhgDMmNr51yDB2yPDffST6HhGtbWbK+E/FrBbI ik+bkqyVZdnTxrHBbIxYYEcqkW05dO0kUac/uyPZGBOr -----END CERTIFICATE-----Generated at Sat Mar 14 01:23:57 2026 by rpki-client