$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/22613D48AC7311EE8A97A86FC4F9AE02.roa File: 22613D48AC7311EE8A97A86FC4F9AE02.roa (raw, json) Hash identifier: LHB5pGY8dTTpWRgeoK0nlLC3xPEqarqRqlE/1vamRUU= Subject key identifier: 3E:BD:88:8E:17:3D:48:BE:FF:37:16:38:7C:A8:62:A1:DF:40:BF:B7 Certificate issuer: /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Certificate serial: 01E8 Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/22613D48AC7311EE8A97A86FC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:53:22 +0000 ROA not before: Thu 23 Oct 2025 05:19:03 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 2914 IP address blocks: 43.239.250.0/24 maxlen: 24 114.31.208.0/22 maxlen: 22 2404:3600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Validity Not Before: Oct 23 05:19:03 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a46f01-28da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b7:a6:79:d2:74:29:c7:9b:7e:8c:af:8d:26: 37:7f:6f:f8:bb:ee:18:5a:6e:a9:d3:6b:a5:02:14: 5d:4c:c8:df:cd:7d:09:06:cc:72:27:af:a4:bb:bb: 2f:1e:ac:77:3b:db:e8:bf:54:64:90:cf:3f:9a:df: 97:54:df:8a:81:0e:00:99:e6:cb:41:8f:2d:83:eb: 3d:af:82:7e:65:0a:c4:c2:75:ba:11:f9:40:c5:d6: 0a:83:f5:d2:52:9b:e0:d5:eb:03:c7:c1:a7:9c:41: 0f:b8:b5:87:cf:6e:b6:90:5d:87:6a:cb:c9:50:05: 61:1e:45:e4:82:2b:ce:cb:c6:46:3b:d6:c3:8a:59: 52:1a:91:a0:b4:cd:90:f1:6c:b1:a6:a2:f8:0d:86: ae:3c:64:93:cc:85:19:30:84:86:59:fd:0d:9c:39: a6:b1:ff:82:2b:7f:91:e7:eb:31:ce:20:db:74:67: 57:10:cc:cc:f4:55:ea:bb:0e:69:f7:df:e6:28:6b: 3c:88:0f:28:f0:6f:50:7e:84:bf:7f:d6:c8:9d:00: 50:cf:c5:bb:f6:a1:50:64:1d:8f:3f:4c:e8:07:99: 31:8e:5b:0d:13:64:be:7c:ad:8e:5f:d5:8e:85:b1: 88:87:4b:89:6d:6c:57:8e:f4:63:d5:6a:b3:a3:de: 3b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BD:88:8E:17:3D:48:BE:FF:37:16:38:7C:A8:62:A1:DF:40:BF:B7 X509v3 Authority Key Identifier: keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/22613D48AC7311EE8A97A86FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.250.0/24 114.31.208.0/22 IPv6: 2404:3600::/32 Signature Algorithm: sha256WithRSAEncryption 82:a8:b0:37:d4:49:8b:03:15:ef:fe:a6:f1:4a:19:49:e6:b3: b3:b0:6e:53:96:fb:a4:5a:76:f7:5f:09:9b:b3:b2:aa:5c:f0: 07:6b:65:92:97:80:40:f3:2f:97:f0:20:59:bc:0e:75:9c:ae: a2:82:c3:9f:60:12:8f:60:3a:80:62:9d:3a:30:c7:5f:66:38: 97:50:26:7c:79:2f:d1:cb:50:4d:2b:39:e3:f1:68:44:c1:4d: 0c:ad:61:63:8f:96:2a:8b:1f:30:a5:f2:07:8e:88:de:f5:29: 5c:89:bd:b7:de:81:49:b2:b8:ce:f4:c4:61:d7:c2:3a:27:11: b5:12:d1:09:57:db:dc:8e:cf:0c:18:3f:a6:d1:b8:46:21:ac: 4c:2c:f3:6d:cc:74:0b:c5:b0:30:48:da:85:ef:bb:d7:6c:3c: f0:7a:1f:8d:ee:ce:cb:3a:b8:29:83:90:34:19:13:35:63:e7: 23:4a:bc:85:94:07:77:7e:73:1f:fa:eb:9a:c9:f2:cb:b7:fd: da:d4:29:f2:4b:3c:60:9e:b1:e0:b9:26:ce:16:4c:9f:0a:68: 48:e7:0d:cb:41:9c:31:35:74:36:cb:1c:be:74:a1:69:64:ec: e1:43:cf:61:45:66:6f:2a:c1:ab:47:e8:1b:f3:e8:25:4d:39: 74:9f:11:f8 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCQ0UxMTAvBgNVBAUTKDMwMDc0MkU0QUQ1NDdBRTQ5REQ4MkM4MkY3RUNFQjA5 NUI5MDJBMjAwHhcNMjUxMDIzMDUxOTAzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmYwMS0yOGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bemedJ0KcebfoyvjSY3f2/4u+4YWm6p02ulAhRdTMjfzX0JBsxyJ6+ku7sv Hqx3O9vov1RkkM8/mt+XVN+KgQ4AmebLQY8tg+s9r4J+ZQrEwnW6EflAxdYKg/XS Upvg1esDx8GnnEEPuLWHz262kF2HasvJUAVhHkXkgivOy8ZGO9bDillSGpGgtM2Q 8WyxpqL4DYauPGSTzIUZMISGWf0NnDmmsf+CK3+R5+sxziDbdGdXEMzM9FXquw5p 99/mKGs8iA8o8G9QfoS/f9bInQBQz8W79qFQZB2PP0zoB5kxjlsNE2S+fK2OX9WO hbGIh0uJbWxXjvRj1Wqzo947SQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFD69iI4X PUi+/zcWOHyoYqHfQL+3MB8GA1UdIwQYMBaAFDAHQuStVHrkndgsgvfs6wlbkCog MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJDRS85MDA5OUM0MDU3 REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1U2QyQ3lDOS16ckNWdVFL aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01BZEM1SzFVZXVTZDJDeUM5LXpyQ1Z1UUtpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUFCQ0UvOTAwOTlDNDA1N0REMTFFRUJBRkZFNDJEQzRGOUFFMDIvMjI2MTNENDhB QzczMTFFRThBOTdBODZGQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQAK+/6AwQCch/QMA0EAgACMAcDBQAkBDYAMA0GCSqGSIb3DQEBCwUA A4IBAQCCqLA31EmLAxXv/qbxShlJ5rOzsG5TlvukWnb3Xwmbs7KqXPAHa2WSl4BA 8y+X8CBZvA51nK6igsOfYBKPYDqAYp06MMdfZjiXUCZ8eS/Ry1BNKznj8WhEwU0M rWFjj5Yqix8wpfIHjoje9Slcib233oFJsrjO9MRh18I6JxG1EtEJV9vcjs8MGD+m 0bhGIaxMLPNtzHQLxbAwSNqF77vXbDzweh+N7s7LOrgpg5A0GRM1Y+cjSryFlAd3 fnMf+uuayfLLt/3a1CnySzxgnrHguSbOFkyfCmhI5w3LQZwxNXQ2yxy+dKFpZOzh Q89hRWZvKsGrR+gb8+glTTl0nxH4 -----END CERTIFICATE-----Generated at Thu Mar 26 03:07:09 2026 by rpki-client