$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/5B7F22440AF811ECB423A671C4F9AE02.roa File: 5B7F22440AF811ECB423A671C4F9AE02.roa (raw, json) Hash identifier: A8up1k/6bggmZqRZ+TAm+ciF2HAECa0kg6iDR6rMm8c= Subject key identifier: D6:8F:01:A6:60:1F:2F:FB:E3:F8:3A:18:D5:75:F1:9A:22:36:5D:2E Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Certificate serial: 28E6 Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/5B7F22440AF811ECB423A671C4F9AE02.roa Signing time: Tue 28 Jul 2026 08:22:34 +0000 ROA not before: Tue 28 Jul 2026 08:22:34 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 17470 IP address blocks: 43.252.12.0/22 maxlen: 22 43.252.12.0/24 maxlen: 24 43.252.13.0/24 maxlen: 24 43.252.14.0/24 maxlen: 24 43.252.15.0/24 maxlen: 24 103.247.48.0/22 maxlen: 22 103.247.48.0/24 maxlen: 24 103.247.49.0/24 maxlen: 24 103.247.50.0/24 maxlen: 24 103.247.51.0/24 maxlen: 24 203.81.104.0/24 maxlen: 24 203.189.184.0/21 maxlen: 21 203.189.184.0/24 maxlen: 24 203.189.185.0/24 maxlen: 24 203.189.186.0/24 maxlen: 24 203.189.187.0/24 maxlen: 24 203.189.188.0/24 maxlen: 24 203.189.189.0/24 maxlen: 24 203.189.190.0/24 maxlen: 24 203.189.191.0/24 maxlen: 24 2404:8a00::/48 maxlen: 48 2404:8a00:64::/48 maxlen: 48 2404:8a00:65::/48 maxlen: 48 2404:8a00:66::/48 maxlen: 48 2404:8a00:67::/48 maxlen: 48 2404:8a00:68::/48 maxlen: 48 2404:8a00:69::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 15:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10470 (0x28e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Validity Not Before: Jul 28 08:22:34 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a6866ca-3248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:24:26:37:ad:02:f4:a4:89:2d:11:26:c5:aa: 77:6c:29:ad:93:d3:e1:ab:c8:e8:f4:ed:cb:7f:d6: 3e:5b:73:4a:39:2c:70:1a:01:19:ca:70:cf:71:43: 98:fa:94:f0:e1:77:de:c5:06:68:84:f0:4f:a5:14: e0:c4:6b:bd:61:89:75:63:80:3d:7f:45:5e:5e:2e: 76:1d:1b:db:4f:e6:ee:1b:ed:d8:ef:bd:8a:c0:a8: 31:a8:c9:82:de:06:ae:f5:0c:cc:ee:20:05:92:f1: d6:d0:10:27:9b:5e:41:2f:66:62:cf:63:40:4a:95: e7:99:14:ee:79:bc:68:2c:60:79:3e:f7:a1:49:ee: a7:24:c8:6d:12:a9:55:07:08:20:e0:c5:82:e7:a9: 14:c7:f6:5d:22:13:64:79:80:9e:8b:9d:79:7e:a3: 2d:c0:3a:90:02:45:f3:86:0e:7f:c5:d1:cd:91:a3: a2:39:ef:c6:dd:7c:47:f1:a0:b2:6b:4e:f3:46:80: 58:1e:e8:61:54:5c:ab:01:76:38:37:40:00:8b:1a: 59:05:c1:6b:b0:47:fb:ac:37:53:4a:03:fa:aa:95: 52:7e:25:a4:6a:e4:af:ba:f2:af:52:db:e1:b4:6b: ad:9f:f5:16:60:4a:fe:21:90:f1:2f:f2:ff:2d:9a: 3c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:8F:01:A6:60:1F:2F:FB:E3:F8:3A:18:D5:75:F1:9A:22:36:5D:2E X509v3 Authority Key Identifier: keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/5B7F22440AF811ECB423A671C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.252.12.0/22 103.247.48.0/22 203.81.104.0/24 203.189.184.0/21 IPv6: 2404:8a00::/48 2404:8a00:64::-2404:8a00:69:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 9f:a7:b9:bc:55:ad:5c:2d:cb:97:8a:85:4d:70:ad:7a:4e:5e: 53:0f:bf:85:48:4c:cb:e8:a1:5d:79:ed:0a:79:c6:d9:e0:2e: 8a:3f:fc:bb:33:32:6d:f3:36:5a:be:41:69:43:46:dc:96:ef: f0:38:f6:8a:f7:69:09:63:dd:7e:73:c5:6a:a6:2c:46:6e:2a: cd:8a:91:cd:5b:ec:30:f4:5d:56:5c:96:df:20:d2:98:ca:94: f0:d0:d0:29:c6:e4:8f:ae:a6:a1:a2:8b:70:fe:85:5b:c5:56: 98:bd:62:bf:bd:71:56:c9:ac:c7:f5:d7:81:1a:43:5e:c0:df: 44:48:b6:c8:20:44:b5:a0:93:98:a4:f5:bc:f9:bc:2a:bb:fd: 37:ad:ff:c1:47:a1:b9:ad:3f:4c:4d:5d:a7:a7:2c:77:f4:af: db:8d:69:68:84:5d:c9:f4:bb:b5:fb:35:4b:78:bf:35:7b:08: 85:bd:89:c9:70:c1:6c:77:8d:7a:e0:41:ae:ad:62:9d:7c:d9: ce:5c:52:82:27:87:8c:08:b4:89:c4:6e:c7:3e:5b:cd:fe:da: 99:e8:a5:80:74:e2:34:5c:5b:5b:4b:5f:c9:d5:54:7c:2d:c1: f3:46:a0:b4:75:e7:15:dc:5e:cb:67:7c:c8:53:3a:29:61:b5: 17:6e:b1:77 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICKOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2 QzdDMjA2NTAwHhcNMjYwNzI4MDgyMjM0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY4NjZjYS0zMjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiQmN60C9KSJLREmxap3bCmtk9Phq8jo9O3Lf9Y+W3NKOSxwGgEZynDPcUOY +pTw4XfexQZohPBPpRTgxGu9YYl1Y4A9f0VeXi52HRvbT+buG+3Y772KwKgxqMmC 3gau9QzM7iAFkvHW0BAnm15BL2Ziz2NASpXnmRTuebxoLGB5PvehSe6nJMhtEqlV Bwgg4MWC56kUx/ZdIhNkeYCei515fqMtwDqQAkXzhg5/xdHNkaOiOe/G3XxH8aCy a07zRoBYHuhhVFyrAXY4N0AAixpZBcFrsEf7rDdTSgP6qpVSfiWkauSvuvKvUtvh tGutn/UWYEr+IZDxL/L/LZo8ywIDAQABo4IClzCCApMwHQYDVR0OBBYEFNaPAaZg Hy/74/g6GNV18ZoiNl0uMB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRBNkIvNzUyNDRCNjJBMTYzMTFFNEI5NjZERDBGQzRGOUFFMDIvNUI3RjIyNDQw QUY4MTFFQ0I0MjNBNjcxQzRGOUFFMDIucm9hMFYGCCsGAQUFBwEHAQH/BEcwRTAe BAIAATAYAwQCK/wMAwQCZ/cwAwQAy1FoAwQDy724MCMEAgACMB0DBwAkBIoAAAAw EgMHAiQEigAAZAMHASQEigAAaDANBgkqhkiG9w0BAQsFAAOCAQEAn6e5vFWtXC3L l4qFTXCtek5eUw+/hUhMy+ihXXntCnnG2eAuij/8uzMybfM2Wr5BaUNG3Jbv8Dj2 ivdpCWPdfnPFaqYsRm4qzYqRzVvsMPRdVlyW3yDSmMqU8NDQKcbkj66moaKLcP6F W8VWmL1iv71xVsmsx/XXgRpDXsDfREi2yCBEtaCTmKT1vPm8Krv9N63/wUehua0/ TE1dp6csd/Sv241paIRdyfS7tfs1S3i/NXsIhb2JyXDBbHeNeuBBrq1inXzZzlxS gieHjAi0icRuxz5bzf7ameilgHTiNFxbW0tfydVUfC3B80agtHXnFdxey2d8yFM6 KWG1F26xdw== -----END CERTIFICATE-----Generated at Thu Aug 13 08:03:30 2026 by rpki-client