$ rpki-client -vvvf rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/C3FEC56C855711EB871D267FC4F9AE02.roa File: C3FEC56C855711EB871D267FC4F9AE02.roa (raw, json) Hash identifier: TDDvgZZ4I0alVxXiwARu73k8A5lzI4gYjfjIrRII8lo= Subject key identifier: B4:CD:FA:4B:34:BC:D3:D4:18:62:29:A1:92:09:3B:14:2A:95:CA:22 Certificate issuer: /CN=A911902E/serialNumber=521B06C29110284AAAFE0875AA6186B0006D2767 Certificate serial: 075E Authority key identifier: 52:1B:06:C2:91:10:28:4A:AA:FE:08:75:AA:61:86:B0:00:6D:27:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhsGwpEQKEqq_gh1qmGGsABtJ2c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/C3FEC56C855711EB871D267FC4F9AE02.roa Signing time: Wed 16 Sep 2026 22:43:22 +0000 ROA not before: Wed 16 Sep 2026 22:43:22 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 58505 IP address blocks: 43.245.176.0/24 maxlen: 24 43.245.177.0/24 maxlen: 24 43.245.178.0/23 maxlen: 23 103.4.172.0/24 maxlen: 24 103.4.173.0/24 maxlen: 24 103.13.84.0/24 maxlen: 24 103.13.85.0/24 maxlen: 24 2001:df0:26b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.crl rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhsGwpEQKEqq_gh1qmGGsABtJ2c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 21:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1886 (0x75e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911902E, serialNumber=521B06C29110284AAAFE0875AA6186B0006D2767 Validity Not Before: Sep 16 22:43:22 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aab1b8a-375a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:26:41:ec:17:e6:f5:12:b2:57:8e:18:ac:81: 2d:15:fa:9a:f3:56:0f:b8:4d:74:cf:85:27:78:51: f5:3f:3a:51:1c:b7:fb:62:72:8f:fb:eb:e2:22:cd: fc:a7:59:bf:5e:3a:20:f1:38:25:a0:50:38:d9:8b: d4:2d:dc:36:13:0b:51:a9:59:81:02:f2:7a:eb:50: 92:cc:10:8a:a7:d4:d3:64:53:04:fa:5d:a7:bf:61: 9a:82:b2:9f:cf:60:76:76:ef:aa:15:cd:fd:f0:27: bc:1e:3d:6e:f1:c7:f2:f5:90:14:73:0b:c1:e0:50: 73:d0:43:b5:a3:83:da:4d:a3:97:b9:6b:3e:b0:b0: 8d:9f:d9:8e:aa:68:bc:8e:83:3f:96:5f:a5:0e:50: 1e:08:fa:4a:d1:0e:53:e0:5d:f6:2b:ad:e3:e5:1d: 74:9f:40:da:06:ce:bc:0d:97:00:2a:5a:40:83:93: ab:fa:ad:45:67:59:88:72:ab:4e:c6:77:c2:fc:1e: 15:42:c2:97:b7:44:42:ba:32:dd:7f:f4:14:46:4b: f5:03:b5:26:3a:c4:e8:c3:c2:5e:9a:fd:2f:76:66: eb:e0:01:fd:4e:a3:8f:93:14:2b:66:4e:3a:9a:b5: 6e:88:84:fa:5b:8f:13:ba:af:30:43:be:00:16:12: 55:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CD:FA:4B:34:BC:D3:D4:18:62:29:A1:92:09:3B:14:2A:95:CA:22 X509v3 Authority Key Identifier: keyid:52:1B:06:C2:91:10:28:4A:AA:FE:08:75:AA:61:86:B0:00:6D:27:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhsGwpEQKEqq_gh1qmGGsABtJ2c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/C3FEC56C855711EB871D267FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.176.0/22 103.4.172.0/23 103.13.84.0/23 IPv6: 2001:df0:26b::/48 Signature Algorithm: sha256WithRSAEncryption 18:f2:61:3e:92:ff:42:45:55:37:be:5a:cd:68:ca:b6:bd:b1: 0d:09:11:5e:7e:56:45:54:4f:4c:f7:a1:0f:d6:75:85:73:54: b1:91:55:c1:8b:59:f0:2a:ca:5e:72:9e:d5:12:26:b4:f1:87: bd:58:bf:72:ee:6d:5f:8e:2e:5b:8b:09:12:9b:f4:b0:fb:1e: 3d:4a:91:0d:6d:e3:81:4f:93:1b:0d:b6:14:8e:2f:ec:26:06: 08:f9:83:c5:46:ef:43:3c:73:37:21:8c:b8:46:60:e7:82:be: ee:07:16:19:c0:8f:55:58:73:d2:73:d2:4d:5c:c6:cc:b6:45: ff:65:2c:c2:04:ad:4f:cb:e0:2f:f2:6d:14:ef:d0:3b:16:71: 18:77:f3:69:40:19:02:ff:8d:3f:cb:6f:6b:32:ab:a6:81:f0: 8f:7b:e2:a3:4e:00:07:bf:7e:66:a6:d0:02:1f:1d:11:48:fa: b7:5a:3e:a1:2d:60:d1:ed:ee:1e:34:1b:ec:eb:0e:df:12:93: 9c:fd:fa:1b:46:77:cc:0f:0d:06:2a:8f:78:5e:23:c2:eb:b4: b2:a8:d6:a9:1c:d6:53:c4:c7:81:22:75:f4:98:81:b7:7c:b5: fe:c7:5b:d3:b5:6e:5b:dd:e9:a0:a0:2f:36:63:1c:13:44:dd: db:95:d1:d5 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICB14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwMkUxMTAvBgNVBAUTKDUyMUIwNkMyOTExMDI4NEFBQUZFMDg3NUFBNjE4NkIw MDA2RDI3NjcwHhcNMjYwOTE2MjI0MzIyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFiMWI4YS0zNzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5CZB7Bfm9RKyV44YrIEtFfqa81YPuE10z4UneFH1PzpRHLf7YnKP++viIs38 p1m/Xjog8TgloFA42YvULdw2EwtRqVmBAvJ661CSzBCKp9TTZFME+l2nv2GagrKf z2B2du+qFc398Ce8Hj1u8cfy9ZAUcwvB4FBz0EO1o4PaTaOXuWs+sLCNn9mOqmi8 joM/ll+lDlAeCPpK0Q5T4F32K63j5R10n0DaBs68DZcAKlpAg5Or+q1FZ1mIcqtO xnfC/B4VQsKXt0RCujLdf/QURkv1A7UmOsTow8Jemv0vdmbr4AH9TqOPkxQrZk46 mrVuiIT6W48Tuq8wQ74AFhJV6QIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFLTN+ks0 vNPUGGIpoZIJOxQqlcoiMB8GA1UdIwQYMBaAFFIbBsKREChKqv4IdaphhrAAbSdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTAyRS81N0FGREIyODg1 NTUxMUVCOTRDMjIxNUZDNEY5QUUwMi9VaHNHd3BFUUtFcXFfZ2gxcW1HR3NBQnRK MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Voc0d3cEVRS0VxcV9naDFxbUdHc0FCdEoyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTkwMkUvNTdBRkRCMjg4NTU1MTFFQjk0QzIyMTVGQzRGOUFFMDIvQzNGRUM1NkM4 NTU3MTFFQjg3MUQyNjdGQzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAY BAIAATASAwQCK/WwAwQBZwSsAwQBZw1UMA8EAgACMAkDBwAgAQ3wAmswDQYJKoZI hvcNAQELBQADggEBABjyYT6S/0JFVTe+Ws1oyra9sQ0JEV5+VkVUT0z3oQ/WdYVz VLGRVcGLWfAqyl5yntUSJrTxh71Yv3LubV+OLluLCRKb9LD7Hj1KkQ1t44FPkxsN thSOL+wmBgj5g8VG70M8czchjLhGYOeCvu4HFhnAj1VYc9Jz0k1cxsy2Rf9lLMIE rU/L4C/ybRTv0DsWcRh382lAGQL/jT/Lb2syq6aB8I974qNOAAe/fmam0AIfHRFI +rdaPqEtYNHt7h40G+zrDt8Sk5z9+htGd8wPDQYqj3heI8LrtLKo1qkc1lPEx4Ei dfSYgbd8tf7HW9O1blvd6aCgLzZjHBNE3duV0dU= -----END CERTIFICATE-----Generated at Fri Sep 25 00:16:21 2026 by rpki-client