$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/311C485C237911EDA2EAD419C4F9AE02.roa File: 311C485C237911EDA2EAD419C4F9AE02.roa (raw, json) Hash identifier: oKZ/fp6We4e67rZFe/9XMZ1//BhZVHeVbnuwPfv8RhA= Subject key identifier: E7:D8:DB:58:1C:2C:AA:85:DB:15:D6:55:3B:7E:65:FD:4B:80:CC:74 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E1FC Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/311C485C237911EDA2EAD419C4F9AE02.roa Signing time: Sun 31 May 2026 16:33:28 +0000 ROA not before: Sun 31 May 2026 16:33:28 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 132779 IP address blocks: 43.254.28.0/22 maxlen: 22 43.254.28.0/24 maxlen: 24 43.254.29.0/24 maxlen: 24 43.254.30.0/24 maxlen: 24 43.254.31.0/24 maxlen: 24 103.27.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57852 (0xe1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 16:33:28 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c62d8-a462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c6:fb:a2:8c:48:19:23:b0:df:47:75:69:43: fd:be:a5:93:6e:ca:a8:a9:41:22:80:8a:29:d2:60: 3b:fe:dd:16:fd:f1:63:4d:9c:62:f2:23:3d:a6:72: ba:62:b1:d2:20:22:c9:64:22:37:fc:a0:c3:f0:a5: 76:5e:0a:bb:d2:5f:82:d8:9a:63:c8:55:a6:32:76: 2e:40:1c:bd:f4:8f:50:7c:11:df:b3:c1:2e:81:f5: 71:c2:2a:18:f0:22:1d:2c:68:3f:bb:20:47:3b:bc: 30:e1:49:16:a9:7d:b2:8b:ac:96:74:7f:ea:8b:a7: 5b:50:f7:3a:15:8a:78:54:04:a3:d1:81:71:6b:87: fd:43:13:c1:28:5b:5f:bc:9e:e9:87:1b:d3:f0:e1: aa:1a:e6:34:09:0f:12:96:64:ce:96:4f:29:b0:92: 16:4b:57:94:f1:6d:79:13:36:7a:fe:f5:06:78:07: 57:4f:e7:d0:ca:c5:65:14:72:ef:af:98:49:e6:60: 53:89:40:59:72:e4:97:0b:8a:1d:22:c9:20:44:97: 28:70:8f:4d:c0:56:52:fe:e7:f2:84:47:3b:6b:86: 72:89:1b:96:8b:74:a6:75:d5:c3:d0:a7:d6:96:0a: a0:9d:b6:97:a2:4e:dd:cd:0b:fb:15:0c:7f:fc:a1: 4d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D8:DB:58:1C:2C:AA:85:DB:15:D6:55:3B:7E:65:FD:4B:80:CC:74 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/311C485C237911EDA2EAD419C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.254.28.0/22 103.27.232.0/22 Signature Algorithm: sha256WithRSAEncryption 84:26:d4:72:05:63:e5:3a:91:1b:61:50:6b:dc:42:4b:a3:91: d0:d4:87:fe:36:dd:05:af:ad:5e:32:8e:2c:d4:91:ef:6f:3c: 0f:05:ba:54:2c:97:7a:1d:de:e8:58:08:74:42:f3:2c:93:e3: 23:69:5e:75:d2:46:0c:03:90:5d:46:8b:59:6f:17:c6:9b:67: 73:99:84:d0:75:b4:37:0e:c0:cf:14:6d:6a:7b:fe:76:c8:ed: e8:34:d7:86:55:99:43:fb:9b:ba:e9:04:29:0b:9a:73:f1:79: af:7e:5c:d7:d1:f5:e6:c4:ef:3b:60:00:2c:3e:16:fd:3a:36: 29:8c:a9:61:1e:a2:35:25:a9:9a:92:99:31:d0:09:d5:4f:51: 85:b7:89:7e:c9:1d:45:d1:21:c7:4f:bd:f1:cd:84:42:16:ec: da:b2:2e:b8:5a:fc:50:2d:43:cd:e9:d2:2b:5e:d3:46:5b:fc: fd:1e:54:14:08:ed:b7:6f:46:91:15:be:7d:0b:82:84:b8:e8: 82:3b:97:0c:8d:c8:a6:43:b2:fb:67:a4:15:e3:cc:89:41:42: 3a:25:16:90:0f:34:38:4c:e9:74:21:08:ba:8e:95:15:14:c4: bb:0d:f0:0e:0c:a9:d4:48:76:52:f4:a5:b2:ed:1e:65:5a:4b: 55:b9:58:b5 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIDAOH8MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE2MzMyOFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzYyZDgtYTQ2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHG+6KMSBkjsN9HdWlD/b6lk27KqKlBIoCKKdJgO/7dFv3xY02cYvIjPaZy umKx0iAiyWQiN/ygw/Cldl4Ku9JfgtiaY8hVpjJ2LkAcvfSPUHwR37PBLoH1ccIq GPAiHSxoP7sgRzu8MOFJFql9souslnR/6ounW1D3OhWKeFQEo9GBcWuH/UMTwShb X7ye6Ycb0/DhqhrmNAkPEpZkzpZPKbCSFktXlPFteRM2ev71BngHV0/n0MrFZRRy 76+YSeZgU4lAWXLklwuKHSLJIESXKHCPTcBWUv7n8oRHO2uGcokblot0pnXVw9Cn 1pYKoJ22l6JO3c0L+xUMf/yhTRcCAwEAAaOCAmYwggJiMB0GA1UdDgQWBBTn2NtY HCyqhdsV1lU7fmX9S4DMdDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMxMUM0ODVD MjM3OTExRURBMkVBRDQxOUM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAiv+HAMEAmcb6DANBgkqhkiG9w0BAQsFAAOCAQEAhCbUcgVj5TqR G2FQa9xCS6OR0NSH/jbdBa+tXjKOLNSR7288DwW6VCyXeh3e6FgIdELzLJPjI2le ddJGDAOQXUaLWW8Xxptnc5mE0HW0Nw7AzxRtanv+dsjt6DTXhlWZQ/ubuukEKQua c/F5r35c19H15sTvO2AALD4W/To2KYypYR6iNSWpmpKZMdAJ1U9RhbeJfskdRdEh x0+98c2EQhbs2rIuuFr8UC1DzenSK17TRlv8/R5UFAjtt29GkRW+fQuChLjogjuX DI3IpkOy+2ekFePMiUFCOiUWkA80OEzpdCEIuo6VFRTEuw3wDgyp1Eh2UvSlsu0e ZVpLVblYtQ== -----END CERTIFICATE-----Generated at Thu Jun 4 09:07:50 2026 by rpki-client