$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F83786F4030011F0984B974FC4F9AE02.roa File: F83786F4030011F0984B974FC4F9AE02.roa (raw, json) Hash identifier: gihosof38728B4SPmV9PgL0Vu4gCAdVLJnu1WOeWjlg= Subject key identifier: 5A:86:B9:1D:E2:A3:E8:6A:1F:04:C7:BA:75:1F:6D:25:82:BC:49:D1 Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Certificate serial: 04EF Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F83786F4030011F0984B974FC4F9AE02.roa Signing time: Wed 20 May 2026 09:48:27 +0000 ROA not before: Wed 20 May 2026 09:48:27 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 62610 IP address blocks: 43.230.8.0/23 maxlen: 23 43.255.116.0/24 maxlen: 24 43.255.117.0/24 maxlen: 24 103.49.60.0/24 maxlen: 24 103.49.62.0/23 maxlen: 23 103.103.246.0/24 maxlen: 24 103.103.247.0/24 maxlen: 24 103.235.19.0/24 maxlen: 24 103.239.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1263 (0x4ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Validity Not Before: May 20 09:48:27 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a0d836b-84d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3b:cd:cc:8e:8b:39:a3:2b:76:46:42:e0:34: f5:76:87:36:cf:4c:2a:69:b3:8d:91:cd:a7:e8:08: ab:ec:8f:68:e1:42:d0:c8:0a:bf:9a:8a:0c:47:fc: b0:ae:08:51:c4:cc:d3:f7:56:88:c1:3a:97:c7:5e: f3:b2:9a:df:b4:fc:ba:50:4a:17:6b:ce:42:44:ab: 8f:76:67:35:94:0a:6e:db:fc:15:b2:6f:04:f6:f5: 00:59:16:e1:ae:19:e7:d9:4e:90:79:1e:25:23:f2: 77:ba:44:8f:df:e7:24:24:39:64:a7:cc:c1:22:fd: e8:a5:fa:26:9c:43:fa:f7:92:c7:e5:56:c7:d2:fa: 7b:4a:67:c4:65:f2:27:16:09:60:be:4b:ff:f9:da: 42:66:fa:15:49:ad:92:c2:35:12:f5:2c:dc:01:92: 0b:cd:74:d0:19:eb:e9:e8:a8:3b:f9:12:ca:ce:92: c8:f2:ea:04:c2:b8:08:bb:6f:76:6e:1b:8c:b1:e0: 93:3a:4e:04:33:b1:f3:d6:d1:39:e2:e7:8b:b4:08: 2f:ae:af:4f:7a:27:ae:a0:36:e0:6e:65:b3:29:e8: 22:8b:1e:35:6f:68:25:c8:cc:f1:b4:bc:82:58:60: 04:87:52:9d:9e:e4:0d:df:a9:f6:ea:e9:9b:26:22: d3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:86:B9:1D:E2:A3:E8:6A:1F:04:C7:BA:75:1F:6D:25:82:BC:49:D1 X509v3 Authority Key Identifier: keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F83786F4030011F0984B974FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.230.8.0/23 43.255.116.0/23 103.49.60.0/24 103.49.62.0/23 103.103.246.0/23 103.235.19.0/24 103.239.103.0/24 Signature Algorithm: sha256WithRSAEncryption a4:83:7e:9b:39:34:16:53:51:a8:e4:df:ab:be:93:73:a9:cb: e5:ed:05:82:d3:7c:62:f3:36:65:5d:f9:7e:0a:17:b8:96:77: d8:35:64:4c:66:7b:84:ad:b6:88:27:f6:f1:1e:83:66:7a:25: 92:f9:78:46:e1:57:88:7e:91:1a:03:d4:e1:46:b5:c3:47:20: 0a:b5:a1:bd:ab:81:1b:0f:cf:90:5f:bf:03:5a:85:13:ba:47: 8d:58:cf:f7:08:66:d8:6a:43:e6:f9:3c:23:35:fe:e4:4b:7c: a2:9d:94:b2:f1:3b:09:b0:47:55:a0:81:68:b7:f0:33:af:bc: 4b:d1:e5:5c:0b:16:81:8d:4c:21:7a:ed:b8:dd:1d:59:bc:ac: e3:13:bb:ba:2e:26:6b:af:c6:6b:9e:10:2b:8f:02:da:76:b7: 6f:02:f0:f0:6f:b0:82:73:84:2a:23:d5:88:9b:e9:05:38:be: c1:de:8c:55:47:0a:07:0d:98:32:76:f9:45:d1:b1:5a:0b:c9: 30:86:b3:20:4e:1c:44:e8:ac:0e:91:77:c5:5e:9b:71:26:bd: e2:92:0a:c3:2f:02:7a:29:a8:4e:4d:9e:8c:3e:0a:3a:36:18: b3:34:82:94:2e:3d:e2:10:f3:42:28:24:5d:49:fc:71:8d:8f: 3f:a5:de:65 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICBO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1MzEwRTY5QkZE MjYwQUE5NzgwHhcNMjYwNTIwMDk0ODI3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTBkODM2Yi04NGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDvNzI6LOaMrdkZC4DT1doc2z0wqabONkc2n6Air7I9o4ULQyAq/mooMR/yw rghRxMzT91aIwTqXx17zsprftPy6UEoXa85CRKuPdmc1lApu2/wVsm8E9vUAWRbh rhnn2U6QeR4lI/J3ukSP3+ckJDlkp8zBIv3opfomnEP695LH5VbH0vp7SmfEZfIn Fglgvkv/+dpCZvoVSa2SwjUS9SzcAZILzXTQGevp6Kg7+RLKzpLI8uoEwrgIu292 bhuMseCTOk4EM7Hz1tE54ueLtAgvrq9PeieuoDbgbmWzKegiix41b2glyMzxtLyC WGAEh1KdnuQN36n26umbJiLTOQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFFqGuR3i o+hqHwTHunUfbSWCvEnRMB8GA1UdIwQYMBaAFChTvaFjjFmahMMJUxDmm/0mCql4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU3Qi84REE3MjY0MEMx RkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVdacUV3d2xURU9hYl9TWUtx WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tGTzlvV09NV1pxRXd3bFRFT2FiX1NZS3FYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1N0IvOERBNzI2NDBDMUZBMTFFQ0IzMEVFMjFBQzRGOUFFMDIvRjgzNzg2RjQw MzAwMTFGMDk4NEI5NzRGQzRGOUFFMDIucm9hMEMGCCsGAQUFBwEHAQH/BDQwMjAw BAIAATAqAwQBK+YIAwQBK/90AwQAZzE8AwQBZzE+AwQBZ2f2AwQAZ+sTAwQAZ+9n MA0GCSqGSIb3DQEBCwUAA4IBAQCkg36bOTQWU1Go5N+rvpNzqcvl7QWC03xi8zZl Xfl+Che4lnfYNWRMZnuErbaIJ/bxHoNmeiWS+XhG4VeIfpEaA9ThRrXDRyAKtaG9 q4EbD8+QX78DWoUTukeNWM/3CGbYakPm+TwjNf7kS3yinZSy8TsJsEdVoIFot/Az r7xL0eVcCxaBjUwheu243R1ZvKzjE7u6LiZrr8ZrnhArjwLadrdvAvDwb7CCc4Qq I9WIm+kFOL7B3oxVRwoHDZgydvlF0bFaC8kwhrMgThxE6KwOkXfFXptxJr3ikgrD LwJ6KahOTZ6MPgo6NhizNIKULj3iEPNCKCRdSfxxjY8/pd5l -----END CERTIFICATE-----Generated at Thu Jun 11 19:05:06 2026 by rpki-client