$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/4AA9F8CC75B511F18A3D446262A30FBC.roa File: 4AA9F8CC75B511F18A3D446262A30FBC.roa (raw, json) Hash identifier: MSBf0iBfpnkN8OR9PwqpSLdIh53j/55U/eb6DNv2y94= Subject key identifier: 5B:38:A5:73:56:DB:26:40:41:83:BD:E2:58:E4:D0:75:72:CD:33:58 Certificate issuer: /CN=A9161A58/serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8 Certificate serial: 0A3D Authority key identifier: B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/4AA9F8CC75B511F18A3D446262A30FBC.roa Signing time: Mon 26 Oct 2026 04:41:19 +0000 ROA not before: Mon 26 Oct 2026 04:41:19 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 135386 IP address blocks: 43.230.204.0/22 maxlen: 22 43.230.204.0/24 maxlen: 24 43.230.205.0/24 maxlen: 24 43.230.206.0/24 maxlen: 24 43.230.207.0/24 maxlen: 24 103.50.16.0/22 maxlen: 24 103.56.44.0/22 maxlen: 24 103.79.240.0/22 maxlen: 22 103.79.240.0/24 maxlen: 24 103.79.241.0/24 maxlen: 24 103.79.242.0/24 maxlen: 24 103.79.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2621 (0xa3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A58, serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8 Validity Not Before: Oct 26 04:41:19 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6aded9ef-9a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:da:41:77:84:ed:e1:db:47:f1:75:af:38: d3:fe:6c:27:1b:6b:ed:83:3c:04:af:26:e6:bc:03: 6b:ff:cb:dd:1f:b6:b9:7c:cd:06:6c:92:b6:8a:89: 54:a8:88:e8:43:96:5c:10:ad:fc:c3:00:80:59:7e: 84:84:36:75:0c:5a:cd:ba:cc:28:ad:03:e7:a9:ea: f1:6a:d7:1d:bf:d4:ff:7f:19:87:d6:5f:10:cc:77: b2:6f:ac:bd:92:75:f0:63:d2:01:8c:29:09:57:8f: a1:eb:22:27:28:25:5b:a7:e2:4e:fe:95:8c:28:ef: 10:30:ef:2d:72:53:91:3e:b3:2b:f5:0d:85:3c:fb: 48:2d:cd:81:3e:1a:ad:de:56:5d:a6:46:e6:c6:ba: 01:24:85:a2:30:4d:37:85:d1:79:9d:86:48:2a:2a: da:5a:a8:03:ca:af:95:11:c5:73:b6:e9:1f:97:f6: 38:56:ad:82:97:fb:9b:d0:71:3d:b8:de:8d:d9:28: 47:f0:e7:c5:9c:c7:7b:41:d5:2b:2b:a7:b2:54:82: 30:70:2c:9a:78:b5:a2:99:65:8b:a4:99:c0:9a:a7: 09:2b:11:67:1a:56:2a:1a:59:ec:56:c6:45:f0:96: 9b:95:84:b1:7f:88:20:a0:fb:3e:23:36:9e:4e:cb: 53:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:38:A5:73:56:DB:26:40:41:83:BD:E2:58:E4:D0:75:72:CD:33:58 X509v3 Authority Key Identifier: keyid:B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/4AA9F8CC75B511F18A3D446262A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 43.230.204.0/22 103.50.16.0/22 103.56.44.0/22 103.79.240.0/22 Signature Algorithm: sha256WithRSAEncryption 89:89:bf:b0:10:27:80:a3:56:fc:9d:2c:e2:98:4c:d6:ff:0a: 24:3a:64:c6:c8:19:d0:22:b7:35:88:84:93:ac:55:a8:eb:25: f4:ea:35:e0:fa:8f:c0:2f:3d:23:50:71:a8:2d:cb:da:a8:bf: b1:a5:62:92:ff:dd:d5:f8:78:c4:3d:75:89:c3:0a:a7:d5:ea: 08:33:09:44:de:6e:e3:27:6a:fa:91:38:01:95:c1:24:cd:68: d5:bf:43:69:ff:38:fe:1c:28:74:c1:68:7a:26:93:4c:e6:47: 57:e4:8b:2c:8b:ad:52:14:20:03:fb:79:a5:43:b3:44:ad:7a: 38:f9:13:14:d7:71:02:42:ec:db:d2:fc:d6:8b:81:04:e5:49: 5f:54:94:8a:c4:b4:ab:fc:8c:ac:1a:da:97:ca:cd:94:1c:32: 5e:4e:e8:d1:93:2b:3d:8c:a8:48:ee:49:7a:f6:02:9e:92:c9: 30:f3:20:92:6a:b0:c7:c0:03:8d:c5:f6:7b:42:d1:a7:65:88: af:d6:a3:f1:df:60:54:1a:fd:36:c4:31:36:db:c2:d4:2f:5c: 8d:71:13:0b:7d:3f:2a:4d:4c:3c:0a:65:ac:d5:c9:99:bd:80: dc:a4:d3:c6:46:68:b7:1d:67:f6:5e:47:ae:7c:4b:88:c2:b8: ab:11:29:b6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICCj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFBNTgxMTAvBgNVBAUTKEI0NjY5RDMwRDIxMEU0OTA3Q0QyODg4QkU3NEI4OUE2 REQzQ0I2QzgwHhcNMjYxMDI2MDQ0MTE5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWRlZDllZi05YTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZraQXeE7eHbR/F1rzjT/mwnG2vtgzwErybmvANr/8vdH7a5fM0GbJK2iolU qIjoQ5ZcEK38wwCAWX6EhDZ1DFrNusworQPnqerxatcdv9T/fxmH1l8QzHeyb6y9 knXwY9IBjCkJV4+h6yInKCVbp+JO/pWMKO8QMO8tclORPrMr9Q2FPPtILc2BPhqt 3lZdpkbmxroBJIWiME03hdF5nYZIKiraWqgDyq+VEcVztukfl/Y4Vq2Cl/ub0HE9 uN6N2ShH8OfFnMd7QdUrK6eyVIIwcCyaeLWimWWLpJnAmqcJKxFnGlYqGlnsVsZF 8JablYSxf4ggoPs+IzaeTstTawIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFFs4pXNW 2yZAQYO94ljk0HVyzTNYMB8GA1UdIwQYMBaAFLRmnTDSEOSQfNKIi+dLiabdPLbI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE1OC9CMzg5MzA0RUE3 RUMxMUVBODA0ODU4NjRDNEY5QUUwMi90R2FkTU5JUTVKQjgwb2lMNTB1SnB0MDh0 c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RHYWRNTklRNUpCODBvaUw1MHVKcHQwOHRzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjFBNTgvQjM4OTMwNEVBN0VDMTFFQTgwNDg1ODY0QzRGOUFFMDIvNEFBOUY4Q0M3 NUI1MTFGMThBM0Q0NDYyNjJBMzBGQkMucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQCK+bMAwQCZzIQAwQCZzgsAwQCZ0/wMA0GCSqGSIb3DQEBCwUAA4IB AQCJib+wECeAo1b8nSzimEzW/wokOmTGyBnQIrc1iISTrFWo6yX06jXg+o/ALz0j UHGoLcvaqL+xpWKS/93V+HjEPXWJwwqn1eoIMwlE3m7jJ2r6kTgBlcEkzWjVv0Np /zj+HCh0wWh6JpNM5kdX5Issi61SFCAD+3mlQ7NErXo4+RMU13ECQuzb0vzWi4EE 5UlfVJSKxLSr/IysGtqXys2UHDJeTujRkys9jKhI7kl69gKekskw8yCSarDHwAON xfZ7QtGnZYiv1qPx32BUGv02xDE228LUL1yNcRMLfT8qTUw8CmWs1cmZvYDcpNPG Rmi3HWf2XkeufEuIwrirESm2 -----END CERTIFICATE-----Generated at Tue Oct 27 22:37:17 2026 by rpki-client