$ rpki-client -vvvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4B3A4250B46A11EAB5A01176C4F9AE02.roa File: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (raw, json) Hash identifier: NITUGIY3VUrXvrMgL7aqXfgZesSmrM25OMjQ5mv/ZQM= Subject key identifier: 89:31:DD:72:6E:41:82:F8:34:11:DC:58:BB:8A:54:DC:8D:A3:B9:43 Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Certificate serial: 09E7 Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4B3A4250B46A11EAB5A01176C4F9AE02.roa Signing time: Wed 02 Sep 2026 20:40:04 +0000 ROA not before: Wed 02 Sep 2026 20:40:04 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 135387 IP address blocks: 43.246.216.0/22 maxlen: 22 43.246.216.0/24 maxlen: 24 43.246.217.0/24 maxlen: 24 43.246.218.0/24 maxlen: 24 43.246.219.0/24 maxlen: 24 103.5.44.0/22 maxlen: 22 103.5.44.0/24 maxlen: 24 103.5.45.0/24 maxlen: 24 103.5.46.0/24 maxlen: 24 103.5.47.0/24 maxlen: 24 103.35.204.0/22 maxlen: 22 103.35.204.0/24 maxlen: 24 103.35.205.0/24 maxlen: 24 103.35.206.0/24 maxlen: 24 103.35.207.0/24 maxlen: 24 103.249.160.0/24 maxlen: 24 103.249.161.0/24 maxlen: 24 103.249.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 19:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2535 (0x9e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Validity Not Before: Sep 2 20:40:04 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a9889a4-c717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c0:42:7c:d7:4f:a7:6b:85:d5:8a:9c:ba:a1: 9f:43:db:28:d4:37:4a:41:70:71:3a:9b:5c:eb:13: d8:ec:b5:c0:b6:7b:ef:d4:c3:59:98:9e:05:23:21: 4d:d3:2d:0e:0b:35:43:ba:09:8c:7c:75:a1:0f:f9: f6:e2:4f:ee:c4:da:92:c0:c2:a1:c9:8d:42:0e:8d: 39:97:c2:b0:02:a5:cf:4f:16:e9:e2:f3:1c:7e:08: 77:43:cf:7b:86:6c:3d:f2:d9:ed:75:f9:5d:17:6f: d8:72:62:a3:a6:9f:71:bf:16:85:f2:96:34:a2:70: ba:5f:31:7e:10:45:ea:d7:f0:b2:89:bd:b7:d9:8a: af:d8:ab:90:e4:ef:c9:02:db:73:0f:95:67:ba:ae: a8:be:c5:54:f8:60:e2:6a:d6:99:8d:26:45:a0:12: 7b:81:e9:ea:88:e5:b8:52:56:20:02:39:36:cd:89: 0c:2d:cc:e5:53:69:4d:72:7a:3d:9f:ed:33:8f:23: 55:23:ee:5b:29:b7:0c:4c:2f:14:22:25:ff:78:e0: f3:54:07:3f:35:76:82:9e:53:3f:d3:b6:7a:e8:6a: 30:af:e4:13:77:c0:3d:70:c0:73:8f:11:49:06:b5: 03:9f:1b:95:20:dd:ef:fd:f3:36:4a:70:27:6e:21: e1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:31:DD:72:6E:41:82:F8:34:11:DC:58:BB:8A:54:DC:8D:A3:B9:43 X509v3 Authority Key Identifier: keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4B3A4250B46A11EAB5A01176C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.246.216.0/22 103.5.44.0/22 103.35.204.0/22 103.249.160.0-103.249.162.255 Signature Algorithm: sha256WithRSAEncryption b4:c1:3e:cf:44:a1:b1:d7:0d:8d:ea:42:59:a4:74:ad:03:9e: 2c:ee:87:e6:4c:76:e1:01:83:27:17:c1:b2:7b:78:0b:b5:bd: 72:fd:90:a6:b8:d6:58:99:f5:02:2e:e3:24:3e:7e:f2:73:af: 3c:df:41:0b:c0:c0:ed:18:48:b1:3a:0e:9d:42:59:9d:ef:eb: c3:80:70:cb:64:dd:e6:45:62:57:ba:5a:2d:be:98:38:34:e4: 49:54:f2:ee:95:b8:c4:4f:46:5e:10:c6:c4:55:93:c0:11:1f: d5:14:17:be:c2:2a:1a:5a:25:e7:e8:76:43:58:e0:e5:e7:55: 85:da:b8:2c:21:8e:c9:a1:08:26:5b:9b:a9:52:db:56:49:ae: 01:8b:d2:f5:de:52:c9:2f:ba:da:7d:ad:5b:a2:b8:6b:9d:5e: e8:86:bd:21:8c:03:46:70:e3:78:ba:22:16:8b:32:21:a5:79: 04:0c:ae:42:cb:12:81:65:1b:03:d5:c2:6c:c5:88:92:58:30: d1:7a:51:05:c2:a3:ad:88:43:04:1a:ab:64:c7:ec:1a:02:67: 0a:33:70:f8:6e:9a:4c:73:b8:26:43:91:f0:4a:7a:7c:e0:5c: 46:72:c5:38:f5:ba:a2:ce:2c:ae:5b:fa:11:01:b3:22:d9:9f: fc:6c:85:06 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICCecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB RDBBRkMzMDUwHhcNMjYwOTAyMjA0MDA0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4ODlhNC1jNzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8BCfNdPp2uF1YqcuqGfQ9so1DdKQXBxOptc6xPY7LXAtnvv1MNZmJ4FIyFN 0y0OCzVDugmMfHWhD/n24k/uxNqSwMKhyY1CDo05l8KwAqXPTxbp4vMcfgh3Q897 hmw98tntdfldF2/YcmKjpp9xvxaF8pY0onC6XzF+EEXq1/Cyib232Yqv2KuQ5O/J AttzD5Vnuq6ovsVU+GDiataZjSZFoBJ7genqiOW4UlYgAjk2zYkMLczlU2lNcno9 n+0zjyNVI+5bKbcMTC8UIiX/eODzVAc/NXaCnlM/07Z66Gowr+QTd8A9cMBzjxFJ BrUDnxuVIN3v/fM2SnAnbiHhZQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFIkx3XJu QYL4NBHcWLuKVNyNo7lDMB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0 NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUxMkYvNEI4QkZGRUNCNDY5MTFFQUFCQTcxQzc1QzRGOUFFMDIvNEIzQTQyNTBC NDZBMTFFQUI1QTAxMTc2QzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQCK/bYAwQCZwUsAwQCZyPMMAwDBAVn+aADBABn+aIwDQYJKoZIhvcN AQELBQADggEBALTBPs9EobHXDY3qQlmkdK0Dnizuh+ZMduEBgycXwbJ7eAu1vXL9 kKa41liZ9QIu4yQ+fvJzrzzfQQvAwO0YSLE6Dp1CWZ3v68OAcMtk3eZFYle6Wi2+ mDg05ElU8u6VuMRPRl4QxsRVk8ARH9UUF77CKhpaJefodkNY4OXnVYXauCwhjsmh CCZbm6lS21ZJrgGL0vXeUskvutp9rVuiuGudXuiGvSGMA0Zw43i6IhaLMiGleQQM rkLLEoFlGwPVwmzFiJJYMNF6UQXCo62IQwQaq2TH7BoCZwozcPhumkxzuCZDkfBK enzgXEZyxTj1uqLOLK5b+hEBsyLZn/xshQY= -----END CERTIFICATE-----Generated at Sun Oct 11 06:41:07 2026 by rpki-client