$ rpki-client -vvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/C12ACE6AC17E11EE95D6821CC4F9AE02.roa File: C12ACE6AC17E11EE95D6821CC4F9AE02.roa (raw, json) Hash identifier: k/wrk+71dTC2xpAfXzlheReLA9aT4ZuDhkK6xEFQumE= Subject key identifier: 92:2C:AA:03:92:23:52:F9:F3:C0:7C:1D:41:88:C8:07:16:70:54:3E Certificate issuer: /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Certificate serial: 0234 Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/C12ACE6AC17E11EE95D6821CC4F9AE02.roa Signing time: Sun 21 Jun 2026 23:21:24 +0000 ROA not before: Sun 21 Jun 2026 23:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24459 IP address blocks: 43.239.96.0/23 maxlen: 23 43.239.99.0/24 maxlen: 24 103.248.176.0/24 maxlen: 24 103.248.177.0/24 maxlen: 24 103.248.178.0/24 maxlen: 24 202.37.129.0/24 maxlen: 24 2403:4f00:6000::/36 maxlen: 36 2406:fd00:100::/40 maxlen: 40 2406:fd00:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E623, serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Validity Not Before: Jun 21 23:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a3871f4-1f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:29:d3:39:40:a9:70:a7:e9:42:f7:f7:56:dc: 7d:22:66:e0:a1:90:f8:ef:42:49:ef:15:34:09:55: 67:7b:e0:6b:80:81:72:69:2b:17:bb:1b:93:1c:a2: 38:a2:7c:77:d5:98:ff:92:a0:ac:97:b0:e5:16:64: 3e:a1:0f:c1:c7:9b:f7:21:69:7a:7b:2e:65:a6:52: c0:53:a9:41:04:fd:b0:7a:5b:3a:7c:52:f3:e6:72: 7b:65:95:e5:97:65:53:01:13:67:d4:f4:eb:55:23: ae:d8:d9:2d:95:ee:8b:a0:95:85:10:20:9e:38:c3: 31:93:44:7a:40:cd:8f:98:c8:35:91:4e:b9:0c:9e: f9:fc:14:a2:82:94:e7:0e:3d:ef:31:74:ef:6a:d7: 2b:e8:2d:1f:7a:d3:0f:29:bc:05:81:9b:21:57:79: 6d:1f:74:60:27:25:11:63:ce:9f:1f:ac:73:7a:85: aa:9a:df:2d:3b:6a:ae:4c:d0:f0:40:c6:d0:76:ec: 99:ca:21:4a:b5:e5:15:57:00:71:f7:b1:f9:47:6a: 4b:2b:df:c7:43:54:25:79:f4:20:5f:8f:79:a2:7a: 17:93:0a:2c:73:fd:35:5d:20:41:c6:f9:0d:83:d3: 51:d6:1d:d2:8e:f2:99:6a:7e:57:39:e3:e4:82:d1: 58:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2C:AA:03:92:23:52:F9:F3:C0:7C:1D:41:88:C8:07:16:70:54:3E X509v3 Authority Key Identifier: keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/C12ACE6AC17E11EE95D6821CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.96.0/23 43.239.99.0/24 103.248.176.0-103.248.178.255 202.37.129.0/24 IPv6: 2403:4f00:6000::/36 2406:fd00:100::/40 2406:fd00:800::/40 Signature Algorithm: sha256WithRSAEncryption 98:9f:7c:ce:7d:ed:90:0c:eb:fe:54:18:da:aa:a8:b0:05:cf: cf:b9:13:0e:c0:90:cc:11:b7:9f:7e:e0:8e:6a:e4:4d:12:60: 74:7f:03:cb:b2:43:b7:1e:ef:f1:df:e5:8c:8c:88:71:95:78: 22:02:78:43:f9:2e:cb:b3:93:58:44:a5:1e:65:b7:3f:ec:87: f0:16:38:2c:c7:99:9d:fa:d8:d9:ac:01:33:93:a9:03:69:e6: 8d:9b:cd:97:b5:3e:eb:9c:a4:32:68:b3:3e:c8:cf:36:6a:ba: bd:0e:9a:4c:d0:de:f9:99:93:6a:be:42:2f:34:ec:be:ce:7d: f0:3a:98:20:fe:60:3d:9a:9f:45:78:cf:52:1e:51:05:e2:22: 10:cf:9c:56:0c:e8:45:a2:48:74:bb:65:e8:02:f7:9f:e8:fc: 09:44:8b:42:1d:50:63:1f:9b:18:3f:68:73:2b:b1:e9:0c:2e: d1:ee:72:3e:f9:ab:fb:1c:51:45:5f:46:b0:c4:59:d8:2a:b6: c2:b0:5b:17:43:33:6a:e9:83:35:e2:2e:16:2e:6e:ba:43:dd: 5c:c4:0d:0f:cd:a4:cd:8c:43:08:05:c4:8f:d6:8c:7a:99:05: a4:90:6f:d9:9c:f1:b3:62:bd:bd:8e:87:de:41:83:b1:80:10: 3b:20:25:8b -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2MjMxMTAvBgNVBAUTKERBNzM2OUI0OTcyMkJBMTM5QjdCNjBGMzlDODhCNDlC REJCMzVGM0QwHhcNMjYwNjIxMjMyMTI0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTM4NzFmNC0xZjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSnTOUCpcKfpQvf3Vtx9ImbgoZD470JJ7xU0CVVne+BrgIFyaSsXuxuTHKI4 onx31Zj/kqCsl7DlFmQ+oQ/Bx5v3IWl6ey5lplLAU6lBBP2wels6fFLz5nJ7ZZXl l2VTARNn1PTrVSOu2Nktle6LoJWFECCeOMMxk0R6QM2PmMg1kU65DJ75/BSigpTn Dj3vMXTvatcr6C0fetMPKbwFgZshV3ltH3RgJyURY86fH6xzeoWqmt8tO2quTNDw QMbQduyZyiFKteUVVwBx97H5R2pLK9/HQ1QlefQgX495onoXkwosc/01XSBBxvkN g9NR1h3SjvKZan5XOePkgtFY1QIDAQABo4ICmjCCApYwHQYDVR0OBBYEFJIsqgOS I1L588B8HUGIyAcWcFQ+MB8GA1UdIwQYMBaAFNpzabSXIroTm3tg85yItJvbs189 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTYyMy9BMjVENDg5RTUw NDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVoT2JlMkR6bklpMG05dXpY ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJuTnB0SmNpdWhPYmUyRHpuSWkwbTl1elh6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0U2MjMvQTI1RDQ4OUU1MDQ3MTFFRUI2NzczNjVEQzRGOUFFMDIvQzEyQUNFNkFD MTdFMTFFRTk1RDY4MjFDQzRGOUFFMDIucm9hMFkGCCsGAQUFBwEHAQH/BEowSDAm BAIAATAgAwQBK+9gAwQAK+9jMAwDBARn+LADBABn+LIDBADKJYEwHgQCAAIwGAMG BCQDTwBgAwYAJAb9AAEDBgAkBv0ACDANBgkqhkiG9w0BAQsFAAOCAQEAmJ98zn3t kAzr/lQY2qqosAXPz7kTDsCQzBG3n37gjmrkTRJgdH8Dy7JDtx7v8d/ljIyIcZV4 IgJ4Q/kuy7OTWESlHmW3P+yH8BY4LMeZnfrY2awBM5OpA2nmjZvNl7U+65ykMmiz PsjPNmq6vQ6aTNDe+ZmTar5CLzTsvs598DqYIP5gPZqfRXjPUh5RBeIiEM+cVgzo RaJIdLtl6AL3n+j8CUSLQh1QYx+bGD9ocyux6Qwu0e5yPvmr+xxRRV9GsMRZ2Cq2 wrBbF0MzaumDNeIuFi5uukPdXMQND82kzYxDCAXEj9aMepkFpJBv2Zzxs2K9vY6H 3kGDsYAQOyAliw== -----END CERTIFICATE-----Generated at Wed Jul 22 02:02:49 2026 by rpki-client