$ rpki-client -vvvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/4B8D8F5EC93B11F18B257F854711F970.roa File: 4B8D8F5EC93B11F18B257F854711F970.roa (raw, json) Hash identifier: J+lL2buFCVYXjkgY8Zd2AFwSRkbiWNTmbEsX/RBAP/s= Subject key identifier: ED:7B:24:96:5F:98:BC:82:C5:B3:A0:75:52:EF:AA:5E:B6:B2:ED:32 Certificate issuer: /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Certificate serial: 3603 Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/4B8D8F5EC93B11F18B257F854711F970.roa Signing time: Fri 16 Oct 2026 08:26:33 +0000 ROA not before: Fri 16 Oct 2026 08:26:33 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 131178 IP address blocks: 43.252.16.0/22 maxlen: 24 58.97.192.0/19 maxlen: 24 58.97.224.0/21 maxlen: 24 103.12.160.0/22 maxlen: 24 202.58.96.0/22 maxlen: 24 2400:4880::/32 maxlen: 32 2400:4880:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 14:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13827 (0x3603) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913621A, serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40 Validity Not Before: Oct 16 08:26:33 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6ad1dfb9-662a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bd:e3:94:aa:4a:50:46:9a:18:c5:62:15:a7: 36:bc:36:96:42:0e:76:75:77:a2:e1:e9:ee:09:0b: 1a:23:6d:c4:0b:76:66:df:52:c6:7f:09:5d:dd:48: 89:bf:ad:b6:f0:d5:52:c9:ac:bd:8d:ec:5a:70:bd: 59:a2:ee:cb:df:ab:4b:24:92:18:0b:b4:b6:68:d1: 29:46:90:4d:68:9f:6f:2a:ad:1b:c8:fd:5d:bb:41: 43:15:4a:d2:c3:a1:62:a5:40:52:ee:9f:69:58:7e: 88:ff:1f:45:84:1b:c6:71:11:24:32:72:a8:05:55: db:a7:d5:45:cd:a4:f4:74:2d:f1:76:d7:84:77:ce: 38:89:12:90:dc:56:ac:8d:09:f1:b9:0f:3d:69:da: e3:2b:19:09:99:79:11:9e:bb:2b:29:f8:86:87:f9: d6:b4:ef:9c:4b:79:7d:40:c0:4f:29:5a:21:24:7f: c3:ad:0f:35:b5:35:3f:5d:90:0f:32:c0:ee:67:b2: 39:66:df:d7:0f:49:93:ba:d2:2c:c9:21:09:94:0f: 85:72:c5:48:dc:3d:91:4d:d6:fa:d1:fc:9f:25:43: e5:ab:54:a3:29:4f:4e:2d:68:a5:df:0d:f3:6f:5e: 88:30:e9:02:68:09:c8:51:85:6d:23:10:1e:b4:3d: 68:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7B:24:96:5F:98:BC:82:C5:B3:A0:75:52:EF:AA:5E:B6:B2:ED:32 X509v3 Authority Key Identifier: keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/4B8D8F5EC93B11F18B257F854711F970.roa sbgp-ipAddrBlock: critical IPv4: 43.252.16.0/22 58.97.192.0-58.97.231.255 103.12.160.0/22 202.58.96.0/22 IPv6: 2400:4880::/32 Signature Algorithm: sha256WithRSAEncryption 32:f0:27:6b:93:e5:5e:f2:7d:82:6a:e0:b0:9d:ab:cb:fe:92: 9f:df:60:81:41:49:e0:21:8f:43:c9:20:ef:a5:20:5d:46:21: 3c:13:cd:92:b4:38:95:bc:04:75:97:58:28:5e:e3:ce:d5:a6: d0:9d:3b:2a:4c:6f:4c:03:74:f4:2b:32:d4:16:0a:f6:c2:4c: 5a:4c:d4:87:a3:e4:4c:46:0a:a8:d7:ea:95:98:e4:23:80:31: 75:8c:f7:e5:17:ae:5f:2e:89:d0:0f:22:2a:65:d2:8a:e5:71: 2e:78:29:ac:b1:a7:b4:8c:f2:60:cb:6d:01:cf:d9:3f:7e:de: b0:b0:e7:8a:71:dc:f5:62:cd:b0:4a:66:ad:50:9a:b5:62:a5: 74:1f:67:db:c4:07:e8:c0:8f:b3:ea:fa:d5:b3:3e:b4:36:64: 51:cb:ec:37:7b:7f:ab:85:d1:5e:95:a4:f5:73:6d:70:7d:2c: ed:75:77:07:f4:fe:68:2e:6c:5e:98:c6:9e:b8:4e:5e:6b:55: b0:d2:06:8d:e0:ab:bb:d5:cf:ed:4f:6a:d8:fd:e2:fa:f9:87: 7b:60:94:00:c7:16:8e:1d:7e:ba:24:53:75:52:c2:01:ed:c9: 5b:08:4a:48:09:13:9b:8b:94:50:42:7e:ec:8c:1b:b0:78:32: 82:23:90:5b -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgICNgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYyMUExMTAvBgNVBAUTKEY4MzczMEZEMzkxQjZGOEY3NkZFRjMxNzZFREI5RkM2 RjU1NDFFNDAwHhcNMjYxMDE2MDgyNjMzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQxZGZiOS02NjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAur3jlKpKUEaaGMViFac2vDaWQg52dXei4enuCQsaI23EC3Zm31LGfwld3UiJ v6228NVSyay9jexacL1Zou7L36tLJJIYC7S2aNEpRpBNaJ9vKq0byP1du0FDFUrS w6FipUBS7p9pWH6I/x9FhBvGcREkMnKoBVXbp9VFzaT0dC3xdteEd844iRKQ3Fas jQnxuQ89adrjKxkJmXkRnrsrKfiGh/nWtO+cS3l9QMBPKVohJH/DrQ81tTU/XZAP MsDuZ7I5Zt/XD0mTutIsySEJlA+FcsVI3D2RTdb60fyfJUPlq1SjKU9OLWil3w3z b16IMOkCaAnIUYVtIxAetD1o4wIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFO17JJZf mLyCxbOgdVLvql62su0yMB8GA1UdIwQYMBaAFPg3MP05G2+Pdv7zF27bn8b1VB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjIxQS8yODIyNDJGMDFE NkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0OTJfdk1YYnR1Znh2VlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EY3dfVGtiYjQ5Ml92TVhidHVmeHZWVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzYyMUEvMjgyMjQyRjAxRDZEMTFFMkI0QzBFNkFEMDhCMDJDRDIvNEI4RDhGNUVD OTNCMTFGMThCMjU3Rjg1NDcxMUY5NzAucm9hMEgGCCsGAQUFBwEHAQH/BDkwNzAm BAIAATAgAwQCK/wQMAwDBAY6YcADBAM6YeADBAJnDKADBALKOmAwDQQCAAIwBwMF ACQASIAwDQYJKoZIhvcNAQELBQADggEBADLwJ2uT5V7yfYJq4LCdq8v+kp/fYIFB SeAhj0PJIO+lIF1GITwTzZK0OJW8BHWXWChe487VptCdOypMb0wDdPQrMtQWCvbC TFpM1Iej5ExGCqjX6pWY5COAMXWM9+UXrl8uidAPIipl0orlcS54Kayxp7SM8mDL bQHP2T9+3rCw54px3PVizbBKZq1QmrVipXQfZ9vEB+jAj7Pq+tWzPrQ2ZFHL7Dd7 f6uF0V6VpPVzbXB9LO11dwf0/mgubF6Yxp64Tl5rVbDSBo3gq7vVz+1Patj94vr5 h3tglADHFo4dfrokU3VSwgHtyVsISkgJE5uLlFBCfuyMG7B4MoIjkFs= -----END CERTIFICATE-----Generated at Tue Oct 20 22:20:41 2026 by rpki-client