$ rpki-client -vvf rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/A2FA17E869FB11F1BD4359E86747A888.roa File: A2FA17E869FB11F1BD4359E86747A888.roa (raw, json) Hash identifier: blJC1sjX/fYPdavnQI7lFdMbrVpcmTngrVSd8n9nWvY= Subject key identifier: 15:64:C5:CF:5E:2A:C0:19:B8:8B:62:CD:BC:44:91:C2:09:EB:B1:6B Certificate issuer: /CN=A9154840/serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62 Certificate serial: 014F Authority key identifier: 9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/A2FA17E869FB11F1BD4359E86747A888.roa Signing time: Wed 17 Jun 2026 03:23:06 +0000 ROA not before: Wed 17 Jun 2026 03:23:06 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 63842 IP address blocks: 43.250.24.0/22 maxlen: 24 103.41.156.0/22 maxlen: 24 203.22.100.0/24 maxlen: 24 203.22.101.0/24 maxlen: 24 203.22.102.0/24 maxlen: 24 203.22.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 05:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154840, serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62 Validity Not Before: Jun 17 03:23:06 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6a32131a-1501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:75:79:7e:af:bb:bf:a9:eb:da:25:eb:ee:9e: 95:36:f7:eb:b2:b2:e4:40:2e:d6:56:77:62:f2:90: 3b:78:5f:97:56:cf:3a:c1:f8:a1:47:f7:e6:c9:97: 5e:09:21:aa:af:5e:ed:21:29:83:88:f8:7f:9b:40: 5b:33:2d:da:a8:7c:4f:6d:86:ff:da:06:2b:ef:66: 9e:c2:42:86:81:8a:9f:5c:57:e3:9e:47:b7:cb:8d: e8:2d:62:91:e6:08:d6:4f:92:65:cb:f6:42:d8:b0: ef:b4:f4:e0:7c:a4:83:ee:31:10:e5:eb:fc:4c:74: a6:1b:0c:4e:fc:a2:87:eb:ab:f5:2e:1b:31:1c:ef: 87:76:c3:70:67:ac:c2:c7:8b:5d:81:ef:49:1b:bb: 7a:8d:8c:2e:42:f9:66:eb:2c:00:b1:2c:68:b2:0e: 6f:8c:8d:96:22:4b:a3:00:29:da:8c:40:7a:1f:47: 97:0a:33:5d:5e:2b:ca:21:22:08:3e:16:7b:71:78: 4a:6a:77:55:cd:14:2e:bc:8d:15:4c:ea:5d:4e:7b: 52:53:c8:e8:d1:63:9d:69:91:68:b0:90:e8:ff:bc: 55:66:40:3f:05:6d:15:21:ac:4b:67:11:5f:7d:fc: f9:e9:30:30:43:3a:75:bd:a3:22:ee:da:12:84:02: c0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:64:C5:CF:5E:2A:C0:19:B8:8B:62:CD:BC:44:91:C2:09:EB:B1:6B X509v3 Authority Key Identifier: keyid:9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/A2FA17E869FB11F1BD4359E86747A888.roa sbgp-ipAddrBlock: critical IPv4: 43.250.24.0/22 103.41.156.0/22 203.22.100.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:ce:0e:22:dd:44:6b:d2:69:62:c0:0b:72:b9:d6:73:61:08: b4:b8:65:38:a0:e6:b8:94:55:02:d4:d6:bd:6c:2b:6f:8d:08: f0:b0:63:be:5c:c0:b6:2e:b0:d9:6a:ca:8b:c8:5f:ff:ee:81: 08:14:45:83:5d:28:b1:98:c8:f0:ad:c2:0c:d9:e0:b0:c1:b5: cd:b2:b2:72:70:23:36:55:c6:e0:4c:fa:4d:8f:bd:a3:61:49: 06:dd:c2:c7:0a:c2:ea:e5:b0:f3:d0:e8:6b:64:0a:8e:6d:84: 7c:b5:91:e0:bb:43:bd:25:d6:7e:51:f6:15:df:4d:0b:91:80: 42:7b:89:42:b9:33:ba:59:f7:26:62:41:01:fc:ab:74:cf:6b: 27:c4:97:66:a4:25:0f:0d:a2:fb:73:58:71:60:ce:5b:29:fe: 9b:0b:11:b4:84:ca:7b:97:69:09:a2:e4:00:fa:55:35:19:a0: b0:86:a3:d5:58:ac:06:60:1f:63:46:0c:c5:c1:79:d9:63:69: a5:00:5e:07:fb:ce:5a:3b:f4:3f:6a:e3:47:b5:c4:25:4f:9d: 0e:9b:f4:b3:70:f7:5e:7e:16:e4:61:31:25:b9:bf:95:76:e4: a4:db:e0:8b:7c:8d:5f:55:2c:6d:1c:17:ad:50:f0:31:a3:33: 1b:f1:d4:72 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ4NDAxMTAvBgNVBAUTKDlDRjcxNDc4QkY1OUIwMDhCMUI1NDJGQTkzQTdDMTBF RkI3RjRENjIwHhcNMjYwNjE3MDMyMzA2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTMyMTMxYS0xNTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHV5fq+7v6nr2iXr7p6VNvfrsrLkQC7WVndi8pA7eF+XVs86wfihR/fmyZde CSGqr17tISmDiPh/m0BbMy3aqHxPbYb/2gYr72aewkKGgYqfXFfjnke3y43oLWKR 5gjWT5Jly/ZC2LDvtPTgfKSD7jEQ5ev8THSmGwxO/KKH66v1LhsxHO+HdsNwZ6zC x4tdge9JG7t6jYwuQvlm6ywAsSxosg5vjI2WIkujACnajEB6H0eXCjNdXivKISII PhZ7cXhKandVzRQuvI0VTOpdTntSU8jo0WOdaZFosJDo/7xVZkA/BW0VIaxLZxFf ffz56TAwQzp1vaMi7toShALAZwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFBVkxc9e KsAZuItizbxEkcIJ67FrMB8GA1UdIwQYMBaAFJz3FHi/WbAIsbVC+pOnwQ77f01i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDg0MC8zNDJGODBEMDlG QzQxMUVGOTYzMUY4MzZDNEY5QUUwMi9uUGNVZUw5WnNBaXh0VUw2azZmQkR2dF9U V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QY1VlTDlac0FpeHRVTDZrNmZCRHZ0X1RXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTQ4NDAvMzQyRjgwRDA5RkM0MTFFRjk2MzFGODM2QzRGOUFFMDIvQTJGQTE3RTg2 OUZCMTFGMUJENDM1OUU4Njc0N0E4ODgucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCK/oYAwQCZymcAwQCyxZkMA0GCSqGSIb3DQEBCwUAA4IBAQB6zg4i 3URr0mliwAtyudZzYQi0uGU4oOa4lFUC1Na9bCtvjQjwsGO+XMC2LrDZasqLyF// 7oEIFEWDXSixmMjwrcIM2eCwwbXNsrJycCM2VcbgTPpNj72jYUkG3cLHCsLq5bDz 0OhrZAqObYR8tZHgu0O9JdZ+UfYV300LkYBCe4lCuTO6WfcmYkEB/Kt0z2snxJdm pCUPDaL7c1hxYM5bKf6bCxG0hMp7l2kJouQA+lU1GaCwhqPVWKwGYB9jRgzFwXnZ Y2mlAF4H+85aO/Q/auNHtcQlT50Om/SzcPdefhbkYTElub+VduSk2+CLfI1fVSxt HBetUPAxozMb8dRy -----END CERTIFICATE-----Generated at Wed Jun 24 12:31:22 2026 by rpki-client