$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/4293FC541D4111F1A6DCED961B3D8C67.roa File: 4293FC541D4111F1A6DCED961B3D8C67.roa (raw, json) Hash identifier: S8ABWozGMREyqBjfaZEiVtg7ucv4wNVjuxX/Eia8iC4= Subject key identifier: E7:42:15:DE:B6:AE:8C:29:F4:27:F8:1F:CB:8E:5F:E8:06:5D:01:90 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0FCD Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/4293FC541D4111F1A6DCED961B3D8C67.roa Signing time: Wed 11 Mar 2026 11:59:19 +0000 ROA not before: Wed 11 Mar 2026 11:59:19 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 9260 IP address blocks: 111.92.128.0/24 maxlen: 24 111.92.129.0/24 maxlen: 24 111.92.132.0/24 maxlen: 24 111.92.133.0/24 maxlen: 24 111.92.135.0/24 maxlen: 24 111.92.136.0/24 maxlen: 24 111.92.140.0/24 maxlen: 24 111.92.142.0/24 maxlen: 24 111.92.143.0/24 maxlen: 24 111.92.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4045 (0xfcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Mar 11 11:59:19 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69b15917-9b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b0:cc:6e:3f:67:ac:a0:72:02:94:b2:81:02: 37:b8:1f:07:80:be:a3:09:94:9a:84:0f:61:de:6e: f6:13:58:89:be:55:dd:bd:a2:19:7f:a8:2f:b4:47: 98:df:45:b4:45:d8:da:44:92:65:be:26:05:c4:ae: 62:24:2a:d1:e2:f9:24:7a:b1:77:e4:1d:dd:62:1b: 0b:cc:57:9c:35:f3:5a:b7:0a:c2:55:77:67:18:22: da:83:7e:1b:ba:04:d6:fc:61:fe:85:69:c8:f2:12: 51:4b:ed:cd:6c:af:15:be:1e:83:32:41:b1:f6:28: 98:53:e3:75:5b:ec:d8:0e:45:64:ea:ce:65:cd:d2: b8:e7:d1:12:22:57:5f:a4:29:67:59:75:4e:47:52: 35:81:63:91:47:f5:70:31:40:96:36:b9:78:20:82: 3a:0b:22:a8:10:d3:15:35:cf:67:34:29:0c:d6:4f: ac:2a:b7:eb:07:03:5f:07:8b:7e:a7:1e:c5:99:6c: 03:11:33:a3:89:85:30:79:de:ff:b0:89:3a:f1:96: 76:2d:c2:ad:b7:77:a2:01:ca:f4:84:d8:00:fe:a2: 02:6b:a2:33:f6:08:96:c9:15:9d:b2:6a:d6:67:dd: 96:f8:72:6f:2c:c8:58:fb:14:92:e8:37:f0:bc:c4: 61:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:42:15:DE:B6:AE:8C:29:F4:27:F8:1F:CB:8E:5F:E8:06:5D:01:90 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/4293FC541D4111F1A6DCED961B3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 111.92.128.0/23 111.92.132.0/23 111.92.135.0-111.92.136.255 111.92.140.0/24 111.92.142.0-111.92.144.255 Signature Algorithm: sha256WithRSAEncryption 0d:b8:8b:18:be:fd:c6:2f:73:56:ef:83:15:b9:7c:9f:59:66: f2:20:a4:5c:94:2f:c1:c5:58:fe:18:ac:c3:33:93:b9:b2:18: f0:17:62:66:f6:84:1c:e9:86:94:69:b8:34:0d:8c:55:50:17: 25:0d:69:e4:52:2e:cf:0a:ce:61:87:59:cc:e8:b2:a8:ff:2a: b7:00:34:99:12:02:a9:1f:95:70:a6:e9:a8:f0:3c:b3:b7:e3: 52:03:d2:1c:50:78:9c:ee:da:f0:15:b7:06:a9:6e:e6:36:b6: 82:80:18:e2:9a:ba:12:81:a1:8c:74:5e:13:06:75:0b:93:11: aa:f6:63:fa:ed:3e:13:c5:d3:48:6f:2d:81:f0:29:cf:4d:a4: b6:d6:c9:76:6e:28:d5:7d:a2:2c:65:aa:f8:1e:90:60:73:1a: 4a:4a:4b:38:c4:d0:b3:f2:4e:e1:d3:b7:6f:d6:6c:28:33:f8: 7f:e1:43:25:9c:4b:60:3e:ac:1b:d5:28:15:c5:31:c5:c3:25: 97:28:cc:5b:2c:a4:d4:18:4d:56:77:82:c6:d5:e1:52:57:f3: e6:56:c3:45:a6:8f:6c:83:5e:98:59:54:72:42:61:8f:e0:7a: 61:35:49:0d:87:33:32:77:1b:a6:01:9f:ea:73:a7:4a:4b:3b: 79:7c:0d:bb -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgICD80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjYwMzExMTE1OTE5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWIxNTkxNy05YjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLDMbj9nrKByApSygQI3uB8HgL6jCZSahA9h3m72E1iJvlXdvaIZf6gvtEeY 30W0RdjaRJJlviYFxK5iJCrR4vkkerF35B3dYhsLzFecNfNatwrCVXdnGCLag34b ugTW/GH+hWnI8hJRS+3NbK8Vvh6DMkGx9iiYU+N1W+zYDkVk6s5lzdK459ESIldf pClnWXVOR1I1gWORR/VwMUCWNrl4III6CyKoENMVNc9nNCkM1k+sKrfrBwNfB4t+ px7FmWwDETOjiYUwed7/sIk68ZZ2LcKtt3eiAcr0hNgA/qICa6Iz9giWyRWdsmrW Z92W+HJvLMhY+xSS6DfwvMRhCQIDAQABo4ICiDCCAoQwHQYDVR0OBBYEFOdCFd62 rowp9Cf4H8uOX+gGXQGQMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvNDI5M0ZDNTQx RDQxMTFGMUE2RENFRDk2MUIzRDhDNjcucm9hMEcGCCsGAQUFBwEHAQH/BDgwNjA0 BAIAATAuAwQBb1yAAwQBb1yEMAwDBABvXIcDBABvXIgDBABvXIwwDAMEAW9cjgME AG9ckDANBgkqhkiG9w0BAQsFAAOCAQEADbiLGL79xi9zVu+DFbl8n1lm8iCkXJQv wcVY/hiswzOTubIY8BdiZvaEHOmGlGm4NA2MVVAXJQ1p5FIuzwrOYYdZzOiyqP8q twA0mRICqR+VcKbpqPA8s7fjUgPSHFB4nO7a8BW3Bqlu5ja2goAY4pq6EoGhjHRe EwZ1C5MRqvZj+u0+E8XTSG8tgfApz02kttbJdm4o1X2iLGWq+B6QYHMaSkpLOMTQ s/JO4dO3b9ZsKDP4f+FDJZxLYD6sG9UoFcUxxcMllyjMWyyk1BhNVneCxtXhUlfz 5lbDRaaPbINemFlUckJhj+B6YTVJDYczMncbpgGf6nOnSks7eXwNuw== -----END CERTIFICATE-----Generated at Fri Mar 13 22:12:07 2026 by rpki-client