$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/3B4FFDCA227911F1A65F03CCA4833773.roa File: 3B4FFDCA227911F1A65F03CCA4833773.roa (raw, json) Hash identifier: oOpue8jwqPkvyXvRm8J+VOhgGAqd3K+A9l8OHo6x11g= Subject key identifier: D5:9E:E5:05:E9:89:9E:7E:85:2C:50:3F:2A:39:DE:93:D8:C9:95:B5 Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 082E Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/3B4FFDCA227911F1A65F03CCA4833773.roa Signing time: Wed 08 Jul 2026 04:43:17 +0000 ROA not before: Wed 08 Jul 2026 04:43:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 42960 IP address blocks: 43.247.132.0/22 maxlen: 24 43.254.164.0/22 maxlen: 24 43.255.120.0/22 maxlen: 24 43.255.156.0/23 maxlen: 24 43.255.159.0/24 maxlen: 24 103.24.216.0/22 maxlen: 24 103.30.76.0/22 maxlen: 24 103.145.60.0/23 maxlen: 24 103.171.34.0/23 maxlen: 24 103.231.56.0/22 maxlen: 24 103.240.196.0/22 maxlen: 24 2001:df7:3480::/48 maxlen: 48 2401:2660::/36 maxlen: 36 2401:2660:1000::/36 maxlen: 36 2401:2660:1001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 23:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2094 (0x82e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Jul 8 04:43:17 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a4dd565-493a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:e3:6f:a2:96:71:b1:36:73:20:77:b5:2e: e3:6d:54:31:5c:38:a0:41:a9:a3:0b:89:ae:61:7e: a9:41:a9:0f:61:c6:54:d8:2e:c1:83:d9:22:28:8c: 5c:db:40:94:06:35:35:1d:4c:d7:65:68:aa:35:d1: 98:cb:01:c4:94:cc:d1:f4:48:7c:9e:4d:89:6f:b7: 4f:71:54:f3:02:0d:83:e1:46:5a:8b:eb:22:19:77: 88:7b:5a:a0:c4:d4:2d:4d:ac:f8:c4:16:f8:38:c6: ce:3a:93:bb:0a:73:0f:c5:1d:dd:f8:94:a6:99:8f: d8:7b:5f:d2:9e:84:cc:07:39:5d:6e:2e:f8:eb:ca: 36:4e:f3:18:6c:c1:92:7a:d4:95:19:41:d0:f0:b0: 17:88:6b:2f:88:48:71:0a:39:05:d7:db:0f:f7:f7: c8:dd:38:30:65:bc:0a:e7:db:5d:fd:13:49:9d:60: af:9d:9d:86:14:35:20:67:21:79:62:c6:91:3a:87: 2f:03:86:34:a2:7f:79:ef:f6:a7:c5:f2:f4:b5:56: 10:8a:30:a1:41:c9:74:83:97:14:92:fb:61:27:96: be:4d:a4:0c:c7:eb:eb:d8:e3:10:d5:ae:14:68:bd: 48:ec:1d:41:a1:6b:72:d0:d6:8b:f2:0e:a1:b5:32: d2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9E:E5:05:E9:89:9E:7E:85:2C:50:3F:2A:39:DE:93:D8:C9:95:B5 X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/3B4FFDCA227911F1A65F03CCA4833773.roa sbgp-ipAddrBlock: critical IPv4: 43.247.132.0/22 43.254.164.0/22 43.255.120.0/22 43.255.156.0/23 43.255.159.0/24 103.24.216.0/22 103.30.76.0/22 103.145.60.0/23 103.171.34.0/23 103.231.56.0/22 103.240.196.0/22 IPv6: 2001:df7:3480::/48 2401:2660::/35 Signature Algorithm: sha256WithRSAEncryption 36:58:ca:31:c8:38:53:5b:1c:5e:bb:75:33:3d:37:42:4e:5b: 3c:7e:cf:68:b5:80:60:00:13:b3:da:b4:90:eb:09:4d:73:e0: ca:47:24:d8:73:df:77:5c:4d:7b:6b:d2:ac:47:c1:cc:b8:47: 8e:a3:f3:f2:d2:d6:0e:88:35:e2:cb:bb:73:01:ee:3d:7a:b4: f3:11:d8:cf:94:c0:b5:ae:17:9c:78:b2:6e:2f:22:b8:6b:eb: 23:58:ae:da:cc:0d:2e:8e:0c:87:81:02:7a:a7:01:ec:17:c8: 14:41:95:2d:31:cc:0b:1c:bf:70:5a:0e:96:67:45:5c:b7:72: 77:8d:84:00:03:bc:e5:df:dd:9f:11:e6:63:c5:57:9d:0d:72: 3e:28:e0:cd:d9:49:7b:a9:d6:e9:7c:85:2d:ff:0b:2b:40:b0: e7:fd:6a:3c:f5:34:b2:d6:48:34:e2:be:c8:53:0e:34:75:f0: 2d:0c:11:09:48:50:14:72:94:4b:b3:e7:6f:d6:c0:f6:e7:ce: 6f:3f:47:57:47:af:5d:87:2c:8b:60:19:f0:ec:e2:74:d7:b4: 58:b5:37:2b:dd:97:55:54:6d:11:5c:50:61:7f:48:83:91:d2: 55:e2:95:24:0f:0f:3e:a4:58:71:a0:9e:58:a2:f4:77:46:e1: 97:b3:e4:6c -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICCC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjYwNzA4MDQ0MzE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRkZDU2NS00OTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCjjb6KWcbE2cyB3tS7jbVQxXDigQamjC4muYX6pQakPYcZU2C7Bg9kiKIxc 20CUBjU1HUzXZWiqNdGYywHElMzR9Eh8nk2Jb7dPcVTzAg2D4UZai+siGXeIe1qg xNQtTaz4xBb4OMbOOpO7CnMPxR3d+JSmmY/Ye1/SnoTMBzldbi7468o2TvMYbMGS etSVGUHQ8LAXiGsviEhxCjkF19sP9/fI3TgwZbwK59td/RNJnWCvnZ2GFDUgZyF5 YsaROocvA4Y0on957/anxfL0tVYQijChQcl0g5cUkvthJ5a+TaQMx+vr2OMQ1a4U aL1I7B1BoWty0NaL8g6htTLSxwIDAQABo4ICtTCCArEwHQYDVR0OBBYEFNWe5QXp iZ5+hSxQPyo53pPYyZW1MB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvM0I0RkZEQ0Ey Mjc5MTFGMUE2NUYwM0NDQTQ4MzM3NzMucm9hMHQGCCsGAQUFBwEHAQH/BGUwYzBI BAIAATBCAwQCK/eEAwQCK/6kAwQCK/94AwQBK/+cAwQAK/+fAwQCZxjYAwQCZx5M AwQBZ5E8AwQBZ6siAwQCZ+c4AwQCZ/DEMBcEAgACMBEDBwAgAQ33NIADBgUkASZg ADANBgkqhkiG9w0BAQsFAAOCAQEANljKMcg4U1scXrt1Mz03Qk5bPH7PaLWAYAAT s9q0kOsJTXPgykck2HPfd1xNe2vSrEfBzLhHjqPz8tLWDog14su7cwHuPXq08xHY z5TAta4XnHiybi8iuGvrI1iu2swNLo4Mh4ECeqcB7BfIFEGVLTHMCxy/cFoOlmdF XLdyd42EAAO85d/dnxHmY8VXnQ1yPijgzdlJe6nW6XyFLf8LK0Cw5/1qPPU0stZI NOK+yFMONHXwLQwRCUhQFHKUS7Pnb9bA9ufObz9HV0evXYcsi2AZ8OzidNe0WLU3 K92XVVRtEVxQYX9Ig5HSVeKVJA8PPqRYcaCeWKL0d0bhl7PkbA== -----END CERTIFICATE-----Generated at Tue Jul 21 15:41:37 2026 by rpki-client