$ rpki-client -vvvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/9FCAD654781E11EB808A544BC4F9AE02.roa File: 9FCAD654781E11EB808A544BC4F9AE02.roa (raw, json) Hash identifier: Q8Dw0nOFQkliPbcwFzRrinH8y/mmTbLGc4WI/8vPvqg= Subject key identifier: 67:65:E9:C5:2A:8E:4F:F1:E7:C9:F1:B5:DB:65:75:F4:2D:F6:15:D3 Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Certificate serial: 09E8 Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/9FCAD654781E11EB808A544BC4F9AE02.roa Signing time: Wed 02 Sep 2026 20:40:05 +0000 ROA not before: Wed 02 Sep 2026 20:40:05 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 141742 IP address blocks: 43.246.216.0/22 maxlen: 22 43.246.216.0/24 maxlen: 24 43.246.217.0/24 maxlen: 24 43.246.218.0/24 maxlen: 24 43.246.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 20:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2536 (0x9e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Validity Not Before: Sep 2 20:40:05 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a9889a5-3e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:74:76:8c:90:0d:2e:11:32:4d:98:5e:ae:a2: 3f:37:56:f7:c0:42:46:41:0a:ec:37:4b:c4:5c:47: 90:14:ca:0b:28:43:34:0d:e3:5f:f2:13:5f:5a:f8: 77:bf:5c:dd:96:9f:ff:0d:e3:d9:38:33:9d:49:91: c7:05:82:9d:06:99:86:1b:3e:d1:ce:e8:65:d7:08: 8f:ec:59:47:73:39:2d:39:62:84:eb:be:0e:f4:cd: 29:11:2e:91:87:fb:c7:09:fe:7e:b0:a0:11:c2:fd: c7:47:3c:cc:91:4a:38:10:2f:6a:c5:b5:fe:a1:43: e3:f6:20:85:f9:64:f1:46:69:ac:1a:0a:76:f2:6c: a4:35:c7:db:f5:40:a8:af:58:af:e0:2b:6a:f9:10: 72:c8:7c:44:a5:2c:7c:e6:62:e8:d1:e0:99:99:35: 5a:35:86:fc:06:ed:8c:c9:33:90:9a:41:af:bb:a4: bc:b2:f3:ca:62:8c:5a:13:a7:1f:07:f1:b0:ef:0b: e0:e8:6c:3a:41:01:8d:3e:a1:dc:e4:32:89:51:1a: 9e:21:a6:bc:62:4c:02:c6:a7:8a:42:f2:1f:45:6f: a1:fb:7a:86:4a:b6:b4:a3:64:d1:5a:66:ef:3a:d6: f7:74:0b:a9:66:a3:b2:f9:19:a8:e3:bd:13:25:ef: 75:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:65:E9:C5:2A:8E:4F:F1:E7:C9:F1:B5:DB:65:75:F4:2D:F6:15:D3 X509v3 Authority Key Identifier: keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/9FCAD654781E11EB808A544BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.246.216.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:30:8f:7a:90:14:f8:0e:d9:6a:24:ff:18:4e:ba:57:1e:e1: e6:6d:d9:dd:7b:ed:91:ed:22:0e:e9:85:11:9b:c1:ff:af:f9: 53:72:b1:08:46:11:db:54:37:4c:47:59:2c:73:e4:c7:f1:1b: 22:77:f4:48:52:f0:47:e9:87:19:0a:f6:4c:31:38:7a:0f:56: ac:76:44:bf:e2:23:f6:65:94:0a:8d:77:c8:07:6b:df:0e:51: ee:6f:b2:31:36:ed:d0:17:6f:e4:75:4d:3d:89:c9:d1:bc:ec: 8f:00:7b:d7:67:b6:ec:46:71:f6:48:eb:97:86:ed:af:1e:3b: 64:14:be:b2:a2:56:ed:47:ff:20:07:b6:5f:1b:d8:68:65:c3: 4d:4d:31:37:aa:13:32:25:82:43:e8:ac:ce:b6:72:d0:ff:50: fd:d6:7b:66:b4:c2:8c:d4:eb:08:20:5e:83:f4:03:79:7c:5c: 8c:ad:fa:bb:c2:08:a1:60:c0:1e:91:86:99:d9:fc:2a:2f:cb: 75:2c:1b:3c:00:38:c7:df:33:e1:fe:8f:27:bb:4c:b9:32:b0: 30:ff:5b:c0:19:47:12:30:4d:52:48:71:b7:3c:fe:92:e0:a9: b1:72:15:6d:77:aa:10:99:82:41:f8:21:f4:1b:27:57:63:48: 4a:b5:2d:84 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB RDBBRkMzMDUwHhcNMjYwOTAyMjA0MDA1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4ODlhNS0zZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunR2jJANLhEyTZherqI/N1b3wEJGQQrsN0vEXEeQFMoLKEM0DeNf8hNfWvh3 v1zdlp//DePZODOdSZHHBYKdBpmGGz7Rzuhl1wiP7FlHczktOWKE674O9M0pES6R h/vHCf5+sKARwv3HRzzMkUo4EC9qxbX+oUPj9iCF+WTxRmmsGgp28mykNcfb9UCo r1iv4Ctq+RByyHxEpSx85mLo0eCZmTVaNYb8Bu2MyTOQmkGvu6S8svPKYoxaE6cf B/Gw7wvg6Gw6QQGNPqHc5DKJURqeIaa8YkwCxqeKQvIfRW+h+3qGSra0o2TRWmbv Otb3dAupZqOy+Rmo470TJe917wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGdl6cUq jk/x58nxtdtldfQt9hXTMB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0 NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUxMkYvNEI4QkZGRUNCNDY5MTFFQUFCQTcxQzc1QzRGOUFFMDIvOUZDQUQ2NTQ3 ODFFMTFFQjgwOEE1NDRCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK/bYMA0GCSqGSIb3DQEBCwUAA4IBAQAdMI96kBT4DtlqJP8YTrpX HuHmbdnde+2R7SIO6YURm8H/r/lTcrEIRhHbVDdMR1ksc+TH8Rsid/RIUvBH6YcZ CvZMMTh6D1asdkS/4iP2ZZQKjXfIB2vfDlHub7IxNu3QF2/kdU09icnRvOyPAHvX Z7bsRnH2SOuXhu2vHjtkFL6yolbtR/8gB7ZfG9hoZcNNTTE3qhMyJYJD6KzOtnLQ /1D91ntmtMKM1OsIIF6D9AN5fFyMrfq7wgihYMAekYaZ2fwqL8t1LBs8ADjH3zPh /o8nu0y5MrAw/1vAGUcSME1SSHG3PP6S4KmxchVtd6oQmYJB+CH0GydXY0hKtS2E -----END CERTIFICATE-----Generated at Fri Oct 9 16:46:21 2026 by rpki-client