$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/85E1EA3CBD2011F181CACAEB4C11F970.roa File: 85E1EA3CBD2011F181CACAEB4C11F970.roa (raw, json) Hash identifier: RYvFgW2BQXfzCIFCCMGnmkTlTXuzevdEpcNnHbIZfi8= Subject key identifier: 88:A4:1C:28:7B:82:7B:6F:E3:0C:F1:EE:89:EF:80:A5:43:A8:EE:3C Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 05F7 Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/85E1EA3CBD2011F181CACAEB4C11F970.roa Signing time: Wed 30 Sep 2026 22:44:41 +0000 ROA not before: Wed 30 Sep 2026 22:44:41 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 2914 IP address blocks: 113.20.40.0/22 maxlen: 22 113.20.60.0/22 maxlen: 22 223.29.164.0/22 maxlen: 22 223.29.168.0/22 maxlen: 22 223.29.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 00:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1527 (0x5f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Sep 30 22:44:41 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6abd90d9-4372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a3:f4:ca:2b:e6:10:b9:a0:5a:53:c4:ba:b9: b9:21:b6:dc:46:45:ed:6d:76:4f:48:e0:db:0e:c4: 2f:66:9f:71:79:50:95:ad:eb:d1:f3:09:77:05:ad: 88:35:c3:22:df:cf:d3:6d:b6:13:1f:03:24:43:ab: 55:e9:0b:de:a2:5c:60:84:72:f1:af:d7:3c:3f:96: fe:e0:ab:cd:de:58:59:14:6b:1f:c1:23:57:e6:be: a6:b2:e1:c9:53:1a:2e:e6:49:88:ad:6a:0c:0c:e4: ae:c9:4f:ea:9a:75:11:8f:f6:83:a5:b6:08:14:12: 87:bf:e3:b5:14:8e:3a:94:fc:4b:1b:e6:1d:14:6f: 7b:f0:b9:25:a5:9b:a7:3f:7d:1d:37:9c:ed:c4:3c: ca:18:f2:d6:0a:b8:89:4c:ea:5d:1a:f3:00:f3:37: b4:31:d3:6e:fe:0d:d7:6c:b5:fb:7d:5b:b3:cf:be: 6d:55:d6:52:b8:01:e2:45:35:3e:27:c2:f1:79:ca: f7:fb:4b:af:1b:63:62:56:c7:1d:0f:b3:a4:ae:e9: 7f:3d:69:9e:63:35:f8:0a:fe:e9:49:7f:0a:77:e4: 73:b3:0a:ea:c6:86:3c:40:3c:0c:0c:ec:8e:36:4f: c0:3b:ad:60:96:b5:22:f0:f0:79:7c:f9:6a:cc:5d: aa:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A4:1C:28:7B:82:7B:6F:E3:0C:F1:EE:89:EF:80:A5:43:A8:EE:3C X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/85E1EA3CBD2011F181CACAEB4C11F970.roa sbgp-ipAddrBlock: critical IPv4: 113.20.40.0/22 113.20.60.0/22 223.29.164.0-223.29.175.255 Signature Algorithm: sha256WithRSAEncryption 8d:b8:3a:1d:25:55:b6:09:b6:e5:2e:4f:69:e1:3a:4f:49:f5: 83:96:88:6e:ff:aa:b6:93:1e:a0:08:c4:3a:c3:dc:a8:cf:33: 92:62:62:fb:cb:ed:bf:4f:c6:67:2d:c1:ad:29:d9:de:01:b9: 63:83:2b:dc:bd:65:a0:b3:da:20:4c:c5:65:d6:b5:64:1a:97: 6b:f6:da:f1:38:25:68:e8:08:68:dc:4b:05:f2:89:93:2f:fd: a3:42:04:7c:d5:e0:e7:65:01:b9:37:7a:d7:82:94:ab:8a:1b: a3:bd:fb:22:66:85:ed:cc:cd:02:12:75:20:06:e2:f3:8e:86: ac:ed:3a:33:8f:fb:81:3a:b2:99:ec:e3:17:55:c1:e0:82:a7: 3f:89:c2:10:e2:bd:ab:28:ac:4a:4c:91:49:3b:4e:99:6e:0b: 2d:46:eb:97:59:c0:82:86:f3:99:61:75:99:7a:20:42:79:4b: b3:67:0b:1f:15:c2:d3:21:ab:ff:d5:d3:b1:a3:fe:e4:45:8b: ae:8a:00:e6:a3:1c:fb:f5:84:13:0f:52:de:00:70:2c:a1:12: 36:3f:84:5c:04:bb:46:37:af:5a:78:ec:be:51:cb:2a:2e:73: eb:b1:ae:d3:a8:52:33:21:31:e0:a4:54:e7:48:09:99:61:9e: 35:15:96:5d -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICBfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjYwOTMwMjI0NDQxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkOTBkOS00MzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKP0yivmELmgWlPEurm5IbbcRkXtbXZPSODbDsQvZp9xeVCVrevR8wl3Ba2I NcMi38/TbbYTHwMkQ6tV6QveolxghHLxr9c8P5b+4KvN3lhZFGsfwSNX5r6msuHJ Uxou5kmIrWoMDOSuyU/qmnURj/aDpbYIFBKHv+O1FI46lPxLG+YdFG978LklpZun P30dN5ztxDzKGPLWCriJTOpdGvMA8ze0MdNu/g3XbLX7fVuzz75tVdZSuAHiRTU+ J8Lxecr3+0uvG2NiVscdD7Okrul/PWmeYzX4Cv7pSX8Kd+RzswrqxoY8QDwMDOyO Nk/AO61glrUi8PB5fPlqzF2qJQIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFIikHCh7 gntv4wzx7onvgKVDqO48MB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvODVFMUVBM0NC RDIwMTFGMTgxQ0FDQUVCNEMxMUY5NzAucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaAwQCcRQoAwQCcRQ8MAwDBALfHaQDBATfHaAwDQYJKoZIhvcNAQELBQAD ggEBAI24Oh0lVbYJtuUuT2nhOk9J9YOWiG7/qraTHqAIxDrD3KjPM5JiYvvL7b9P xmctwa0p2d4BuWODK9y9ZaCz2iBMxWXWtWQal2v22vE4JWjoCGjcSwXyiZMv/aNC BHzV4OdlAbk3eteClKuKG6O9+yJmhe3MzQISdSAG4vOOhqztOjOP+4E6spns4xdV weCCpz+JwhDivasorEpMkUk7TpluCy1G65dZwIKG85lhdZl6IEJ5S7NnCx8VwtMh q//V07Gj/uRFi66KAOajHPv1hBMPUt4AcCyhEjY/hFwEu0Y3r1p47L5Ryyouc+ux rtOoUjMhMeCkVOdICZlhnjUVll0= -----END CERTIFICATE-----Generated at Tue Oct 6 20:24:38 2026 by rpki-client