$ rpki-client -vvvf rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/129F73D4A0B311F1BD8641945E11F970.roa File: 129F73D4A0B311F1BD8641945E11F970.roa (raw, json) Hash identifier: xtVZEwpB9qp5L5kEyugagMNaUS1YYcporleEnmwtj/k= Subject key identifier: B3:18:E8:FB:A0:0F:03:0C:17:50:22:44:5B:79:91:2B:EB:53:40:30 Certificate issuer: /CN=A918897A/serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Certificate serial: 01F6 Authority key identifier: B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/129F73D4A0B311F1BD8641945E11F970.roa Signing time: Thu 27 Aug 2026 15:04:24 +0000 ROA not before: Thu 27 Aug 2026 15:04:24 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 54113 IP address blocks: 43.249.72.0/24 maxlen: 24 43.249.73.0/24 maxlen: 24 43.249.74.0/24 maxlen: 24 43.249.75.0/24 maxlen: 24 103.244.50.0/24 maxlen: 24 103.245.222.0/24 maxlen: 24 103.245.223.0/24 maxlen: 24 103.245.224.0/24 maxlen: 24 2001:df0:45f::/48 maxlen: 48 2001:df0:460::/48 maxlen: 48 2001:df0:461::/48 maxlen: 48 2001:df0:462::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918897A, serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Validity Not Before: Aug 27 15:04:24 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a9051f8-9a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ae:81:76:27:09:aa:73:77:15:6e:a6:23:13: 46:cc:5c:20:80:73:7a:d6:06:9c:af:43:56:d0:9c: e0:c7:39:1c:cf:e2:8e:09:b5:bd:b7:f4:04:cc:94: 8e:f1:14:b9:db:a3:cf:2c:70:c5:04:76:c3:13:30: 70:59:85:ab:fd:63:ea:7d:3d:14:98:f0:ee:ed:87: 8b:8e:d9:22:10:9a:83:a2:76:7a:bf:13:b9:66:f8: f7:0a:09:f7:07:43:1d:06:89:cb:88:e4:35:d2:f0: 7c:51:74:d6:99:9e:5f:ef:9d:d6:0f:30:42:a3:c1: 3e:6e:0d:f1:3b:98:2b:41:a6:82:e7:a5:1f:50:a8: 5b:9f:56:27:fa:38:44:44:8c:6f:b1:35:85:b7:eb: 60:67:81:1c:f1:4d:e8:a5:7d:15:87:15:99:18:5a: 85:6d:bd:8c:77:35:4d:af:27:21:6e:92:a8:ee:c1: ff:9f:f9:2d:65:ca:4a:22:21:8f:9b:a3:cf:a8:61: a4:dd:ee:63:c1:17:97:09:c3:c1:ee:4e:d2:69:ab: 7c:da:f5:d2:5f:46:0a:f8:d4:d2:ba:d8:d7:8b:a8: 60:c4:18:b9:ad:a5:4c:ea:79:2f:65:04:15:75:97: 9d:54:34:38:f0:01:1b:6f:34:fe:8d:a2:35:40:28: e4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:18:E8:FB:A0:0F:03:0C:17:50:22:44:5B:79:91:2B:EB:53:40:30 X509v3 Authority Key Identifier: keyid:B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/129F73D4A0B311F1BD8641945E11F970.roa sbgp-ipAddrBlock: critical IPv4: 43.249.72.0/22 103.244.50.0/24 103.245.222.0-103.245.224.255 IPv6: 2001:df0:45f::-2001:df0:462:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 6c:a0:17:42:ab:67:50:23:a7:36:c3:78:49:85:45:2b:49:9a: bb:38:c7:5e:af:b4:5d:c3:b4:c4:6d:8b:2e:e0:18:43:73:c1: 66:1b:60:82:36:2d:80:66:7e:dd:36:cc:2a:9c:07:4a:87:a9: 9a:a6:8c:cb:7f:40:54:cd:3b:92:da:2e:14:43:51:e0:1c:b1: c0:a4:7d:7f:08:b5:fb:06:74:44:01:a6:56:c0:44:6a:52:00: d5:53:6e:4d:5f:cc:62:ee:6f:50:7c:59:26:a6:2f:68:ce:14: 1b:0a:31:c1:8d:5f:2b:a6:06:b0:ed:9e:47:0f:f6:fe:2c:cd: 7c:2c:bc:31:7e:a2:1c:0b:ff:c3:09:79:6c:1b:94:0c:99:9c: 0a:16:f6:83:51:1f:0f:2a:69:c3:c2:8c:6d:61:69:cb:7e:06: ff:fc:58:ba:3e:2f:21:ac:7f:9c:c6:bc:3e:8f:a0:ba:f5:6e: 93:a9:f0:c2:26:d7:8f:cd:bc:40:62:7d:e7:f8:17:42:62:32: e7:7b:64:5b:08:b6:54:44:8b:fb:7b:26:f0:ed:9b:32:ce:38: dd:e1:80:35:c4:56:97:1f:d6:7b:c8:c1:55:3d:01:86:6f:fc: 66:f9:21:c8:a6:66:2b:2d:87:88:7a:e7:01:67:52:11:7d:ee: 0a:43:32:4b -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5N0ExMTAvBgNVBAUTKEI3RkE1MTIxNUJCNUMxRUY4OEVBRTE1RjAzNDMxM0Qx QjcxQjhENDQwHhcNMjYwODI3MTUwNDI0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTkwNTFmOC05YTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAna6BdicJqnN3FW6mIxNGzFwggHN61gacr0NW0Jzgxzkcz+KOCbW9t/QEzJSO 8RS526PPLHDFBHbDEzBwWYWr/WPqfT0UmPDu7YeLjtkiEJqDonZ6vxO5Zvj3Cgn3 B0MdBonLiOQ10vB8UXTWmZ5f753WDzBCo8E+bg3xO5grQaaC56UfUKhbn1Yn+jhE RIxvsTWFt+tgZ4Ec8U3opX0VhxWZGFqFbb2MdzVNrychbpKo7sH/n/ktZcpKIiGP m6PPqGGk3e5jwReXCcPB7k7Saat82vXSX0YK+NTSutjXi6hgxBi5raVM6nkvZQQV dZedVDQ48AEbbzT+jaI1QCjkywIDAQABo4ICkDCCAowwHQYDVR0OBBYEFLMY6Pug DwMMF1AiRFt5kSvrU0AwMB8GA1UdIwQYMBaAFLf6USFbtcHviOrhXwNDE9G3G41E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODk3QS81MzNFMjQ2MkI1 NTExMUVFQkI0QzU3M0JDNEY5QUUwMi90X3BSSVZ1MXdlLUk2dUZmQTBNVDBiY2Jq VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RfcFJJVnUxd2UtSTZ1RmZBME1UMGJjYmpVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODg5N0EvNTMzRTI0NjJCNTUxMTFFRUJCNEM1NzNCQzRGOUFFMDIvMTI5RjczRDRB MEIzMTFGMUJEODY0MTk0NUUxMUY5NzAucm9hME8GCCsGAQUFBwEHAQH/BEAwPjAg BAIAATAaAwQCK/lIAwQAZ/QyMAwDBAFn9d4DBABn9eAwGgQCAAIwFDASAwcAIAEN 8ARfAwcAIAEN8ARiMA0GCSqGSIb3DQEBCwUAA4IBAQBsoBdCq2dQI6c2w3hJhUUr SZq7OMder7Rdw7TEbYsu4BhDc8FmG2CCNi2AZn7dNswqnAdKh6mapozLf0BUzTuS 2i4UQ1HgHLHApH1/CLX7BnREAaZWwERqUgDVU25NX8xi7m9QfFkmpi9ozhQbCjHB jV8rpgaw7Z5HD/b+LM18LLwxfqIcC//DCXlsG5QMmZwKFvaDUR8PKmnDwoxtYWnL fgb//Fi6Pi8hrH+cxrw+j6C69W6TqfDCJtePzbxAYn3n+BdCYjLne2RbCLZURIv7 eybw7Zsyzjjd4YA1xFaXH9Z7yMFVPQGGb/xm+SHIpmYrLYeIeucBZ1IRfe4KQzJL -----END CERTIFICATE-----Generated at Sat Sep 26 06:24:12 2026 by rpki-client