$ rpki-client -vvf rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/802FBE707FEB11EB8B5E2817C4F9AE02.roa File: 802FBE707FEB11EB8B5E2817C4F9AE02.roa (raw, json) Hash identifier: Ark6XIxdIUBLArjzBf2MsBLpoMCRomNKWUG7vyC3bWg= Subject key identifier: AB:0E:4B:2B:D3:A3:57:22:B9:8A:0B:36:F2:50:CA:83:0B:E7:DB:35 Certificate issuer: /CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Certificate serial: 2732 Authority key identifier: 36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/802FBE707FEB11EB8B5E2817C4F9AE02.roa Signing time: Sat 04 Jul 2026 16:15:20 +0000 ROA not before: Sat 04 Jul 2026 16:15:20 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 58666 IP address blocks: 43.245.80.0/22 maxlen: 23 103.14.68.0/22 maxlen: 23 103.232.180.0/22 maxlen: 23 2404:5700::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10034 (0x2732) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911894F, serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Validity Not Before: Jul 4 16:15:20 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a493198-63b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:82:18:4b:e4:9b:77:4b:60:a8:d3:cc:c8:c0: 1d:b6:77:a9:4b:ff:68:f4:87:63:7f:6e:24:31:de: fc:af:59:12:e3:13:80:54:bb:39:06:86:fc:68:44: 98:06:fa:51:4e:85:d3:7a:fe:d6:f6:e2:02:bd:c6: 98:02:23:56:44:85:e0:3c:9f:5c:17:26:ad:d1:74: 6d:5e:2d:e3:a6:3e:f4:6c:c8:11:6c:66:a5:1c:e5: 80:15:30:8c:0a:e9:74:0c:1e:9c:e9:bb:47:ff:37: 3c:71:d4:f7:8b:00:b0:eb:4c:01:bb:9c:d2:e7:48: 3f:f7:a1:b7:37:6a:b4:bb:75:b1:71:45:77:14:84: 31:ae:3c:06:56:b9:c7:e3:3a:56:f2:6a:15:f8:1e: 40:9d:f5:7b:c9:4b:44:18:0e:81:58:97:6e:08:96: c1:51:b1:87:25:f8:97:57:ad:90:46:cd:b0:50:ff: 00:06:42:3a:0a:88:4d:5d:bf:dd:2a:f6:b8:f4:25: c9:f9:2a:0a:ea:da:3d:36:a0:e6:99:e8:bc:53:ac: 97:43:2a:8a:3b:ce:26:87:91:f7:23:bd:ac:b9:5e: d4:43:02:b6:7b:4a:c9:c0:05:92:4f:42:4c:0c:aa: 8e:cf:7d:08:f1:f9:01:61:31:97:3b:91:57:a4:71: 52:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0E:4B:2B:D3:A3:57:22:B9:8A:0B:36:F2:50:CA:83:0B:E7:DB:35 X509v3 Authority Key Identifier: keyid:36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/802FBE707FEB11EB8B5E2817C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.80.0/22 103.14.68.0/22 103.232.180.0/22 IPv6: 2404:5700::/32 Signature Algorithm: sha256WithRSAEncryption 30:83:5f:0d:99:a8:df:58:f6:7b:7c:78:05:9a:ca:bf:60:d2: ed:b8:32:f7:80:2e:51:39:f0:a3:ee:39:94:ba:c1:61:83:73: 5d:ac:b6:b6:4e:70:d6:21:53:c9:aa:ee:fc:34:7f:6d:7f:fe: c4:57:7b:aa:50:ba:ca:9b:e9:fb:e1:2b:4e:fa:37:17:a1:01: 6a:02:49:f1:f5:0a:a7:97:39:40:59:60:52:73:0b:87:49:28: 15:ee:eb:68:37:74:c9:ec:19:e7:12:71:c5:f5:a2:39:4e:e1: 08:04:f6:97:9c:c6:7d:11:20:82:33:98:90:50:ed:4c:0b:72: fa:07:eb:a7:20:30:d0:f4:5f:fc:6d:e7:8e:3c:e7:f7:0b:86: 60:f4:e0:23:64:d3:03:63:42:4b:d0:5c:d8:da:5a:3c:d1:30: b5:e2:d4:72:f3:02:91:b9:b6:9f:73:42:ad:85:51:0e:00:6f: 7f:ce:a1:d3:64:e8:6d:6d:f8:9d:4d:19:f6:0c:cd:83:93:e0: a5:59:99:7b:5a:cb:36:9b:67:7b:e8:a8:6e:4c:ea:1c:09:e8: 62:15:0e:91:d6:98:ba:45:f3:a0:42:f0:c3:ea:ec:6b:6a:45: 57:48:97:a1:14:e2:f7:5b:12:cd:3d:d1:1f:34:c7:4a:90:93: e3:7e:07:cc -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICJzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5NEYxMTAvBgNVBAUTKDM2MTI5MDY5Mjg5OTA4MkNERTIzRjUwNDUzQTQxNTVF MEFBQjc5NzgwHhcNMjYwNzA0MTYxNTIwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ5MzE5OC02M2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IIYS+Sbd0tgqNPMyMAdtnepS/9o9Idjf24kMd78r1kS4xOAVLs5Bob8aESY BvpRToXTev7W9uICvcaYAiNWRIXgPJ9cFyat0XRtXi3jpj70bMgRbGalHOWAFTCM Cul0DB6c6btH/zc8cdT3iwCw60wBu5zS50g/96G3N2q0u3WxcUV3FIQxrjwGVrnH 4zpW8moV+B5AnfV7yUtEGA6BWJduCJbBUbGHJfiXV62QRs2wUP8ABkI6CohNXb/d Kva49CXJ+SoK6to9NqDmmei8U6yXQyqKO84mh5H3I72suV7UQwK2e0rJwAWST0JM DKqOz30I8fkBYTGXO5FXpHFSGQIDAQABo4ICezCCAncwHQYDVR0OBBYEFKsOSyvT o1ciuYoLNvJQyoML59s1MB8GA1UdIwQYMBaAFDYSkGkomQgs3iP1BFOkFV4Kq3l4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk0Ri85NjNDRjBDRUVD NUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkNDemVJX1VFVTZRVlhncXJl WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oS1FhU2laQ0N6ZUlfVUVVNlFWWGdxcmVYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTg5NEYvOTYzQ0YwQ0VFQzVFMTFFNDhFN0QwMTE5QzRGOUFFMDIvODAyRkJFNzA3 RkVCMTFFQjhCNUUyODE3QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCK/VQAwQCZw5EAwQCZ+i0MA0EAgACMAcDBQAkBFcAMA0GCSqGSIb3 DQEBCwUAA4IBAQAwg18NmajfWPZ7fHgFmsq/YNLtuDL3gC5ROfCj7jmUusFhg3Nd rLa2TnDWIVPJqu78NH9tf/7EV3uqULrKm+n74StO+jcXoQFqAknx9QqnlzlAWWBS cwuHSSgV7utoN3TJ7BnnEnHF9aI5TuEIBPaXnMZ9ESCCM5iQUO1MC3L6B+unIDDQ 9F/8beeOPOf3C4Zg9OAjZNMDY0JL0FzY2lo80TC14tRy8wKRubafc0KthVEOAG9/ zqHTZOhtbfidTRn2DM2Dk+ClWZl7Wss2m2d76KhuTOocCehiFQ6R1pi6RfOgQvDD 6uxrakVXSJehFOL3WxLNPdEfNMdKkJPjfgfM -----END CERTIFICATE-----Generated at Fri Jul 24 01:24:32 2026 by rpki-client