$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A29C36F8A35F11F18863249F6D11F970.roa File: A29C36F8A35F11F18863249F6D11F970.roa (raw, json) Hash identifier: kSPyw8rHv6tuss+bdPwnXVDSTNEqgyHm46eoa3d9tpc= Subject key identifier: 4D:0E:69:7D:51:8F:DE:8A:C9:58:57:2A:65:BB:68:DA:08:C9:77:65 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: FB49 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A29C36F8A35F11F18863249F6D11F970.roa Signing time: Sat 29 Aug 2026 05:17:19 +0000 ROA not before: Sat 29 Aug 2026 05:17:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133647 IP address blocks: 43.230.156.0/22 maxlen: 22 43.230.156.0/24 maxlen: 24 43.230.157.0/24 maxlen: 24 43.230.158.0/24 maxlen: 24 43.230.159.0/24 maxlen: 24 103.43.4.0/22 maxlen: 22 103.43.4.0/24 maxlen: 24 103.43.5.0/24 maxlen: 24 103.43.6.0/24 maxlen: 24 103.43.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 15:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64329 (0xfb49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 29 05:17:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a926b5f-ba7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f8:4c:35:88:d0:a4:0d:0b:7e:a1:31:03:5c: 00:c0:e6:86:62:2e:29:84:56:07:99:ae:a3:bc:87: 76:4a:2a:84:3a:e2:41:cb:56:b8:50:82:c3:1a:77: 64:dd:0f:97:03:ba:cc:ac:53:22:30:69:c6:f9:32: 6f:c6:a7:13:b3:bb:24:a0:ac:74:04:d9:83:97:0d: 74:83:51:c8:1a:f6:0c:f4:4e:fe:6d:8c:a0:33:0d: eb:87:d3:ca:33:8a:38:a4:47:f2:db:bc:eb:63:90: c5:b3:52:bb:04:36:0f:95:fe:c5:cf:71:8d:50:db: fd:82:c0:cb:af:d5:1c:17:b9:dc:25:a7:76:fc:93: b1:7f:7f:2a:fe:15:a3:f7:b6:06:95:ef:d1:65:87: 27:77:5d:5c:f8:3b:19:4d:f1:6f:b3:37:19:76:43: c4:4c:2d:02:cf:b8:67:84:b5:4e:4e:ed:39:ac:05: 1a:c9:cf:f8:17:84:44:88:ec:b4:d7:ec:d2:78:91: bd:58:f5:23:6d:57:d8:d0:c2:bf:fc:cf:92:50:bd: 28:87:30:7f:3e:fb:71:b2:72:ce:11:39:ed:34:23: d3:79:08:5d:79:a8:9e:54:c3:36:75:d5:b1:7b:8c: 19:5c:ec:61:b3:03:72:cc:07:ec:74:c8:52:d0:c5: 98:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0E:69:7D:51:8F:DE:8A:C9:58:57:2A:65:BB:68:DA:08:C9:77:65 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A29C36F8A35F11F18863249F6D11F970.roa sbgp-ipAddrBlock: critical IPv4: 43.230.156.0/22 103.43.4.0/22 Signature Algorithm: sha256WithRSAEncryption 21:86:85:94:0f:11:87:d3:10:cd:19:ce:80:a7:59:eb:2e:09: a1:e1:73:77:96:6c:d0:0d:43:3d:65:08:33:e9:d7:56:95:d9: fd:42:b2:aa:31:b4:5b:a3:d5:1f:9b:48:0f:87:75:de:9b:a6: 8e:ad:47:67:1f:b3:a8:6e:84:13:8f:07:a4:96:28:f5:3a:88: bc:54:92:e0:42:bb:a7:df:a1:f3:47:cb:77:a5:c2:73:b4:84: ce:86:c3:56:73:fc:54:8d:cd:b4:22:57:24:7f:ce:ac:a2:f3: c1:26:01:86:b5:fc:d8:0d:7f:4f:53:38:42:c7:80:59:af:16: 22:18:a2:b4:26:ab:1d:34:93:d2:1e:5a:1a:ce:f2:0b:af:24: 3f:0e:ed:c5:74:50:b5:26:8e:ea:7b:a6:ae:7a:22:a2:9b:aa: 0f:df:17:91:09:ea:c5:84:89:61:5f:5b:0d:05:74:63:66:c8: 30:6c:c0:8f:7a:4e:dc:0e:d7:a4:aa:8f:3d:c6:ae:9e:e6:27: 1c:bb:fc:02:7c:9d:19:bb:94:9b:22:19:08:6b:fb:d4:62:31: e8:46:3a:28:cf:c4:c8:2f:ad:53:63:45:5e:9d:23:0e:68:0a: eb:d5:f7:fb:8c:5f:fa:58:be:8d:f8:59:9d:0e:50:81:0e:1a: 4f:2e:b8:1f -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIDAPtJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDgyOTA1MTcxOVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE5MjZiNWYtYmE3YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJX4TDWI0KQNC36hMQNcAMDmhmIuKYRWB5muo7yHdkoqhDriQctWuFCCwxp3 ZN0PlwO6zKxTIjBpxvkyb8anE7O7JKCsdATZg5cNdINRyBr2DPRO/m2MoDMN64fT yjOKOKRH8tu862OQxbNSuwQ2D5X+xc9xjVDb/YLAy6/VHBe53CWndvyTsX9/Kv4V o/e2BpXv0WWHJ3ddXPg7GU3xb7M3GXZDxEwtAs+4Z4S1Tk7tOawFGsnP+BeERIjs tNfs0niRvVj1I21X2NDCv/zPklC9KIcwfz77cbJyzhE57TQj03kIXXmonlTDNnXV sXuMGVzsYbMDcswH7HTIUtDFmP0CAwEAAaOCAmYwggJiMB0GA1UdDgQWBBRNDml9 UY/eislYVyplu2jaCMl3ZTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0EyOUMzNkY4 QTM1RjExRjE4ODYzMjQ5RjZEMTFGOTcwLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAivmnAMEAmcrBDANBgkqhkiG9w0BAQsFAAOCAQEAIYaFlA8Rh9MQ zRnOgKdZ6y4JoeFzd5Zs0A1DPWUIM+nXVpXZ/UKyqjG0W6PVH5tID4d13pumjq1H Zx+zqG6EE48HpJYo9TqIvFSS4EK7p9+h80fLd6XCc7SEzobDVnP8VI3NtCJXJH/O rKLzwSYBhrX82A1/T1M4QseAWa8WIhiitCarHTST0h5aGs7yC68kPw7txXRQtSaO 6numrnoiopuqD98XkQnqxYSJYV9bDQV0Y2bIMGzAj3pO3A7XpKqPPcaunuYnHLv8 AnydGbuUmyIZCGv71GIx6EY6KM/EyC+tU2NFXp0jDmgK69X3+4xf+li+jfhZnQ5Q gQ4aTy64Hw== -----END CERTIFICATE-----Generated at Fri Sep 4 20:55:16 2026 by rpki-client