$ rpki-client -vvvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/3DCC89FAC6CB11ECB185E43EC4F9AE02.roa File: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (raw, json) Hash identifier: Vcd5x/fVvDBKqPcwq34iJIthS5qA/m/NOUjjvWj1+mI= Subject key identifier: C1:7D:35:BA:B9:76:63:B7:4C:78:47:89:BB:99:F2:13:8D:6F:CF:17 Certificate issuer: /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Certificate serial: 043E Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/3DCC89FAC6CB11ECB185E43EC4F9AE02.roa Signing time: Sun 11 Oct 2026 00:49:38 +0000 ROA not before: Sun 11 Oct 2026 00:49:38 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 132742 IP address blocks: 43.243.208.0/22 maxlen: 24 103.39.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1086 (0x43e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Validity Not Before: Oct 11 00:49:38 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acadd22-62b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2b:76:a5:19:7e:a4:41:73:4b:c2:14:59:6b: 37:c5:6c:4c:b2:02:0c:76:ea:18:8e:a6:fd:1e:ec: 7b:04:80:60:f2:12:ae:51:af:5d:be:28:11:b4:41: 6c:3c:d2:d1:43:ba:83:84:58:27:79:36:65:f7:52: da:56:e3:98:34:df:a3:ba:31:1b:16:cb:7a:9d:4e: b4:66:b8:2a:c4:df:0f:bb:81:a4:cd:aa:f1:5f:2f: 4f:e8:48:64:77:9e:b6:02:d4:29:d1:df:36:df:b9: a8:10:9f:7b:38:13:d2:97:23:74:10:e5:5c:18:88: e6:c6:43:20:fe:5f:be:cd:76:5b:fb:a1:b8:34:84: c3:3e:be:0f:d4:60:33:c9:b8:37:4d:3e:ff:3e:e1: 90:df:4f:6e:1b:f6:4e:12:6a:c9:4d:84:a8:00:bf: 29:d0:7e:50:46:62:68:80:3c:a3:aa:2d:bb:94:a2: b5:65:56:ad:5f:d9:39:78:46:e0:89:03:09:7b:59: 4c:12:b0:b6:dd:87:9f:42:8c:f3:e4:15:49:70:49: 30:db:1f:f6:70:7e:48:18:3f:60:02:e0:5e:a5:aa: 39:d9:c8:3d:78:ec:3f:67:ae:b4:6d:a7:39:f7:b6: 31:3e:ff:b6:ff:8a:3b:a2:21:da:46:1f:36:84:4e: e1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7D:35:BA:B9:76:63:B7:4C:78:47:89:BB:99:F2:13:8D:6F:CF:17 X509v3 Authority Key Identifier: keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/3DCC89FAC6CB11ECB185E43EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.243.208.0/22 103.39.24.0/22 Signature Algorithm: sha256WithRSAEncryption a6:32:aa:fe:8b:01:08:09:46:71:71:26:ca:55:09:1d:51:eb: bd:f3:93:00:c5:1e:a4:9a:fa:1b:76:f7:55:98:c2:52:07:c8: fa:ed:90:0b:5e:b1:54:7b:4b:ea:65:8b:04:e9:b3:ed:a7:f6: ae:db:59:2e:47:63:40:a1:a8:04:26:9e:93:75:79:f6:4a:6d: ee:fc:55:8c:0c:46:18:65:3f:74:53:22:6f:63:3a:3c:ab:33: d1:6d:75:40:da:a3:4c:53:18:61:dc:bf:1f:00:ad:63:2d:7f: 5b:14:3c:d1:1c:80:bb:d9:f5:7c:ed:22:30:44:69:3d:14:5b: 91:a6:03:ed:70:c7:6b:d1:f3:6a:98:0f:70:4b:17:a2:f4:c9: 56:c4:50:91:40:bb:25:cb:87:60:0f:15:e8:24:b8:2c:56:c1: cf:7f:a7:03:84:cc:a6:88:f6:15:cd:19:85:94:dd:4e:46:fc: 18:2c:d5:3c:5a:a5:60:f8:5a:b5:71:03:7f:af:67:77:df:5d: 79:ca:2e:e1:90:bd:81:8c:91:0b:e7:4e:50:18:e6:e3:40:7d: fe:72:92:40:2f:ab:37:c9:90:82:10:29:34:d9:9e:84:01:56: 6e:10:99:e3:c1:0e:4a:65:97:7f:99:97:d8:7d:ae:61:82:9c: af:30:4d:11 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEzNUUxMTAvBgNVBAUTKDg4OTk2OTNFOTMxMzUwQzU1NUYyQkY0N0IxNTFERUY4 NzM0MkI3MjkwHhcNMjYxMDExMDA0OTM4WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNhZGQyMi02MmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyt2pRl+pEFzS8IUWWs3xWxMsgIMduoYjqb9Hux7BIBg8hKuUa9dvigRtEFs PNLRQ7qDhFgneTZl91LaVuOYNN+jujEbFst6nU60ZrgqxN8Pu4GkzarxXy9P6Ehk d562AtQp0d8237moEJ97OBPSlyN0EOVcGIjmxkMg/l++zXZb+6G4NITDPr4P1GAz ybg3TT7/PuGQ309uG/ZOEmrJTYSoAL8p0H5QRmJogDyjqi27lKK1ZVatX9k5eEbg iQMJe1lMErC23YefQozz5BVJcEkw2x/2cH5IGD9gAuBepao52cg9eOw/Z660bac5 97YxPv+2/4o7oiHaRh82hE7hKwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFMF9Nbq5 dmO3THhHibuZ8hONb88XMB8GA1UdIwQYMBaAFIiZaT6TE1DFVfK/R7FR3vhzQrcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTM1RS9GQTkyNzc4MkM2 MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVNVlY4cjlIc1ZIZS1ITkN0 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKbHBQcE1UVU1WVjhyOUhzVkhlLUhOQ3R5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUEzNUUvRkE5Mjc3ODJDNjAwMTFFQzlEQTc0MDBGQzRGOUFFMDIvM0RDQzg5RkFD NkNCMTFFQ0IxODVFNDNFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/PQAwQCZycYMA0GCSqGSIb3DQEBCwUAA4IBAQCmMqr+iwEICUZx cSbKVQkdUeu985MAxR6kmvobdvdVmMJSB8j67ZALXrFUe0vqZYsE6bPtp/au21ku R2NAoagEJp6TdXn2Sm3u/FWMDEYYZT90UyJvYzo8qzPRbXVA2qNMUxhh3L8fAK1j LX9bFDzRHIC72fV87SIwRGk9FFuRpgPtcMdr0fNqmA9wSxei9MlWxFCRQLsly4dg DxXoJLgsVsHPf6cDhMymiPYVzRmFlN1ORvwYLNU8WqVg+Fq1cQN/r2d33115yi7h kL2BjJEL505QGObjQH3+cpJAL6s3yZCCECk02Z6EAVZuEJnjwQ5KZZd/mZfYfa5h gpyvME0R -----END CERTIFICATE-----Generated at Sun Nov 15 23:46:50 2026 by rpki-client