$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/4AF4D966419711F1B231ABB69F833773.roa File: 4AF4D966419711F1B231ABB69F833773.roa (raw, json) Hash identifier: gnhlfN/UV7lg95BNdf661VaRtI2IHUWJRO8GV+aX7mQ= Subject key identifier: 21:99:E2:C1:6C:6E:5F:93:4D:AF:1D:CB:70:42:75:97:C3:38:98:06 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 104F Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/4AF4D966419711F1B231ABB69F833773.roa Signing time: Sun 26 Apr 2026 17:42:28 +0000 ROA not before: Sun 26 Apr 2026 17:42:28 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 133933 IP address blocks: 14.192.128.0/19 maxlen: 19 14.192.128.0/24 maxlen: 24 14.192.129.0/24 maxlen: 24 14.192.130.0/24 maxlen: 24 14.192.132.0/24 maxlen: 24 14.192.136.0/24 maxlen: 24 14.192.139.0/24 maxlen: 24 14.192.140.0/24 maxlen: 24 14.192.141.0/24 maxlen: 24 14.192.142.0/24 maxlen: 24 14.192.146.0/24 maxlen: 24 14.192.147.0/24 maxlen: 24 14.192.148.0/24 maxlen: 24 14.192.152.0/24 maxlen: 24 14.192.153.0/24 maxlen: 24 14.192.157.0/24 maxlen: 24 14.192.159.0/24 maxlen: 24 43.247.120.0/24 maxlen: 24 43.247.122.0/24 maxlen: 24 43.247.123.0/24 maxlen: 24 103.20.132.0/24 maxlen: 24 103.20.134.0/24 maxlen: 24 103.20.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 19:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4175 (0x104f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Apr 26 17:42:28 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69ee4e84-a6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:05:47:f9:c4:f2:88:8b:ca:20:01:b5:60:a8: d4:bc:ac:3d:aa:a8:a4:bf:d0:32:8d:31:85:32:c8: 6a:ed:ad:08:b5:b7:e9:c2:74:25:83:01:70:93:86: 4e:82:bc:d5:6d:85:16:66:42:6c:0c:30:cd:c9:03: 65:31:4e:9d:e1:b8:fe:b5:fd:8c:03:4b:37:e9:65: 91:1e:38:e2:71:85:ad:a4:6a:68:f5:82:e4:6e:24: cd:7b:ff:f8:e7:73:9b:dc:f2:f7:39:ac:1d:e0:3d: 66:c2:98:5f:fc:88:03:a8:5b:de:31:aa:64:62:db: 82:f0:9e:fb:c5:5a:f7:9c:b5:45:d4:42:3b:60:40: 1b:3a:42:36:ce:c1:4a:7c:26:24:7c:54:59:a0:a8: bc:0b:92:51:0c:36:ab:dc:fd:dd:b5:b7:e7:b8:da: 9f:8f:4d:e8:af:e2:ef:3a:37:e7:c3:da:7c:ee:27: ff:4d:12:91:4e:f6:32:93:a1:0b:c6:3f:34:16:70: 47:5d:91:ae:0c:c5:4f:3e:63:43:46:3f:3e:24:76: d9:d7:25:86:b6:4c:2d:a5:73:21:9b:19:28:88:a2: d5:ad:23:34:19:e4:94:9a:42:42:3f:0d:33:86:bd: 24:bb:ec:d8:07:d6:79:93:e1:78:14:8f:7f:79:07: 10:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:99:E2:C1:6C:6E:5F:93:4D:AF:1D:CB:70:42:75:97:C3:38:98:06 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/4AF4D966419711F1B231ABB69F833773.roa sbgp-ipAddrBlock: critical IPv4: 14.192.128.0/19 43.247.120.0/24 43.247.122.0/23 103.20.132.0/24 103.20.134.0/23 Signature Algorithm: sha256WithRSAEncryption 76:3e:9f:52:01:35:44:74:4d:89:fd:40:65:fc:af:f8:01:7d: 83:7f:5d:aa:d0:3a:53:ca:9e:45:b5:f6:88:d2:0b:73:11:3d: 12:2d:ff:ae:57:bb:70:2e:11:0f:ec:66:f1:64:8c:69:28:3d: 19:1f:7c:71:ae:6d:b8:31:a2:d6:a7:e5:44:74:e0:20:e9:14: 7a:43:c5:dc:e2:9b:5a:65:f3:1e:65:20:db:a7:7e:96:0a:19: 84:c6:b6:06:d8:4c:4f:23:ec:e8:a6:e2:24:7c:e9:ae:dc:6f: f6:d1:3c:2c:19:bd:fc:76:01:e3:f4:3f:f4:f8:a1:7a:cc:66: 9c:dd:9c:fd:56:fd:54:d7:f2:0e:02:3d:1c:f5:88:3f:4e:ea: a3:22:96:df:5e:93:c9:b2:c3:15:f9:87:82:8a:cf:97:d1:8d: 11:15:fe:be:19:22:5b:30:4e:09:00:df:de:7d:ae:8c:3a:6f: bb:ba:d6:45:fb:94:fc:3d:ac:7d:e5:9f:ee:8a:18:48:ef:f8: ed:b4:2e:b9:4b:a6:b6:a8:21:5a:89:e8:9b:86:79:2c:16:8b: f1:8a:e6:41:0b:a8:36:38:a9:2e:5b:5f:ce:b6:56:a5:05:b8: 9e:4e:d3:1a:05:aa:cd:c6:1b:52:b0:49:c7:6a:c5:9c:70:5c: f9:67:98:1c -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICEE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjYwNDI2MTc0MjI4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWVlNGU4NC1hNmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAVH+cTyiIvKIAG1YKjUvKw9qqikv9AyjTGFMshq7a0ItbfpwnQlgwFwk4ZO grzVbYUWZkJsDDDNyQNlMU6d4bj+tf2MA0s36WWRHjjicYWtpGpo9YLkbiTNe//4 53Ob3PL3Oawd4D1mwphf/IgDqFveMapkYtuC8J77xVr3nLVF1EI7YEAbOkI2zsFK fCYkfFRZoKi8C5JRDDar3P3dtbfnuNqfj03or+LvOjfnw9p87if/TRKRTvYyk6EL xj80FnBHXZGuDMVPPmNDRj8+JHbZ1yWGtkwtpXMhmxkoiKLVrSM0GeSUmkJCPw0z hr0ku+zYB9Z5k+F4FI9/eQcQ3wIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFCGZ4sFs bl+TTa8dy3BCdZfDOJgGMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvNEFGNEQ5NjY0 MTk3MTFGMUIyMzFBQkI2OUY4MzM3NzMucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQFDsCAAwQAK/d4AwQBK/d6AwQAZxSEAwQBZxSGMA0GCSqGSIb3DQEB CwUAA4IBAQB2Pp9SATVEdE2J/UBl/K/4AX2Df12q0DpTyp5FtfaI0gtzET0SLf+u V7twLhEP7GbxZIxpKD0ZH3xxrm24MaLWp+VEdOAg6RR6Q8Xc4ptaZfMeZSDbp36W ChmExrYG2ExPI+zopuIkfOmu3G/20TwsGb38dgHj9D/0+KF6zGac3Zz9Vv1U1/IO Aj0c9Yg/TuqjIpbfXpPJssMV+YeCis+X0Y0RFf6+GSJbME4JAN/efa6MOm+7utZF +5T8Pax95Z/uihhI7/jttC65S6a2qCFaieibhnksFovxiuZBC6g2OKkuW1/Otlal BbieTtMaBarNxhtSsEnHasWccFz5Z5gc -----END CERTIFICATE-----Generated at Tue Apr 28 05:24:17 2026 by rpki-client