$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/8BD42F1CDEB111EA971A1721C4F9AE02.roa File: 8BD42F1CDEB111EA971A1721C4F9AE02.roa (raw, json) Hash identifier: x+US0XXhT1/nY45/7RxR65Cd/Kbc1gyUA+GxQK0JMIw= Subject key identifier: DE:01:C0:25:0A:FD:F3:50:75:A9:85:6A:66:49:9B:34:F9:1E:C9:0C Certificate issuer: /CN=A911BC62/serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A Certificate serial: 28F3 Authority key identifier: 24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/8BD42F1CDEB111EA971A1721C4F9AE02.roa Signing time: Wed 30 Sep 2026 16:22:54 +0000 ROA not before: Wed 30 Sep 2026 16:22:54 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 45356 IP address blocks: 43.250.240.0/22 maxlen: 24 61.245.160.0/20 maxlen: 24 103.2.152.0/22 maxlen: 24 124.6.240.0/20 maxlen: 24 202.129.232.0/22 maxlen: 24 2407:c00::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 15:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10483 (0x28f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BC62, serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A Validity Not Before: Sep 30 16:22:54 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd375d-fcf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:49:cb:f5:31:dd:29:de:56:7b:52:da:e4:3b: 66:88:3d:59:b7:7e:10:ea:8c:ed:f3:6d:cb:ba:2f: d6:34:29:af:4b:88:8b:02:10:c2:e4:89:b2:ae:6f: 70:c1:24:db:61:85:54:bc:83:44:b4:6e:ff:74:72: da:17:af:94:5d:9f:21:75:94:8a:11:aa:d0:7a:f7: 7d:c3:2d:f4:50:89:82:75:d4:a4:d4:29:b1:39:cc: 88:e2:db:10:ec:b4:3b:ca:50:4f:db:76:c5:07:fa: 2d:77:33:94:82:65:a1:f7:19:68:65:8a:b4:4f:12: 57:c4:f0:85:54:11:ce:dd:34:8f:f6:61:2d:a9:d8: 66:4a:02:75:3d:35:93:72:13:ff:ea:d1:a5:25:31: 78:ac:98:4f:60:8c:70:b1:5f:53:97:24:ad:1d:d2: c3:2a:a2:a6:89:34:c3:5b:f0:92:a1:5c:ba:df:db: c8:94:33:39:69:c4:1d:70:ae:b8:d5:7c:46:d3:3d: 38:ee:36:c2:ea:19:0b:44:cc:26:e9:16:bc:51:8e: ba:a2:04:a1:6f:80:55:66:1a:b2:a0:34:60:52:00: ab:de:8a:28:15:16:af:e5:58:8a:b6:98:cb:2b:4b: 77:4a:0a:ea:45:a5:ba:3c:33:94:b6:ac:87:5c:2c: 8c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:01:C0:25:0A:FD:F3:50:75:A9:85:6A:66:49:9B:34:F9:1E:C9:0C X509v3 Authority Key Identifier: keyid:24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/8BD42F1CDEB111EA971A1721C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.250.240.0/22 61.245.160.0/20 103.2.152.0/22 124.6.240.0/20 202.129.232.0/22 IPv6: 2407:c00::/32 Signature Algorithm: sha256WithRSAEncryption 3a:05:17:b4:af:41:ea:c8:87:16:88:33:6f:40:2b:04:ed:15: c2:76:ce:1e:6d:09:b5:2b:a2:db:f2:e1:80:66:ee:4d:70:5b: 36:d7:c9:3c:b3:44:ed:6a:f1:18:37:03:71:4f:02:a1:4a:93: 49:80:28:06:a9:4a:86:19:f3:8c:1a:d2:ba:7c:5d:81:79:a0: 76:28:d1:4d:99:64:27:6b:bc:0b:c4:f9:c9:dd:bc:c9:3c:43: ca:9a:32:0c:80:76:1a:63:a2:cf:b4:67:75:fc:c4:de:0e:4c: 0d:e5:9f:6a:fb:bd:0d:3d:d7:ce:2d:19:a6:7c:7f:f8:ad:bd: 94:be:a0:36:18:c3:6f:0e:d7:59:a7:a6:b1:de:ea:8b:b6:b8: a4:57:87:6f:46:55:70:65:df:ed:5f:3a:4b:e0:67:3b:4c:fe: 9f:4e:cf:4b:11:c5:93:c1:97:a0:58:37:c8:9a:f1:58:d2:00: 6d:0f:84:e6:5d:7d:8b:e2:15:bd:08:a0:26:d8:06:cd:ee:b3: b1:60:08:d9:09:74:33:8e:6a:fb:fb:e3:78:d4:97:3b:04:b6: 08:e1:fe:e7:39:97:b0:68:26:1e:f5:2c:c0:74:f8:e7:3e:d7: ac:2e:52:d2:84:d8:66:04:1a:3f:2d:8f:1e:fa:7b:8d:7d:14: 51:b1:76:a7 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICKPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDNjIxMTAvBgNVBAUTKDI0RjBDMUQ4RTNGNEEyOTZGRENERUIyMzVBNkM0ODNC NkIyREM5N0EwHhcNMjYwOTMwMTYyMjU0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkMzc1ZC1mY2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUnL9THdKd5We1La5DtmiD1Zt34Q6ozt823Lui/WNCmvS4iLAhDC5Imyrm9w wSTbYYVUvINEtG7/dHLaF6+UXZ8hdZSKEarQevd9wy30UImCddSk1CmxOcyI4tsQ 7LQ7ylBP23bFB/otdzOUgmWh9xloZYq0TxJXxPCFVBHO3TSP9mEtqdhmSgJ1PTWT chP/6tGlJTF4rJhPYIxwsV9TlyStHdLDKqKmiTTDW/CSoVy639vIlDM5acQdcK64 1XxG0z047jbC6hkLRMwm6Ra8UY66ogShb4BVZhqyoDRgUgCr3oooFRav5ViKtpjL K0t3SgrqRaW6PDOUtqyHXCyM+wIDAQABo4IChzCCAoMwHQYDVR0OBBYEFN4BwCUK /fNQdamFamZJmzT5HskMMB8GA1UdIwQYMBaAFCTwwdjj9KKW/c3rI1psSDtrLcl6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkM2Mi8zMjg4QzMxMkEy RTYxMUU0QTA4MUM0NkRDNEY5QUUwMi9KUERCMk9QMG9wYjl6ZXNqV214SU8yc3R5 WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pQREIyT1Awb3BiOXplc2pXbXhJTzJzdHlYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJDNjIvMzI4OEMzMTJBMkU2MTFFNEEwODFDNDZEQzRGOUFFMDIvOEJENDJGMUNE RUIxMTFFQTk3MUExNzIxQzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQCK/rwAwQEPfWgAwQCZwKYAwQEfAbwAwQCyoHoMA0EAgACMAcDBQAk BwwAMA0GCSqGSIb3DQEBCwUAA4IBAQA6BRe0r0HqyIcWiDNvQCsE7RXCds4ebQm1 K6Lb8uGAZu5NcFs218k8s0TtavEYNwNxTwKhSpNJgCgGqUqGGfOMGtK6fF2BeaB2 KNFNmWQna7wLxPnJ3bzJPEPKmjIMgHYaY6LPtGd1/MTeDkwN5Z9q+70NPdfOLRmm fH/4rb2UvqA2GMNvDtdZp6ax3uqLtrikV4dvRlVwZd/tXzpL4Gc7TP6fTs9LEcWT wZegWDfImvFY0gBtD4TmXX2L4hW9CKAm2AbN7rOxYAjZCXQzjmr7++N41Jc7BLYI 4f7nOZewaCYe9SzAdPjnPtesLlLShNhmBBo/LY8e+nuNfRRRsXan -----END CERTIFICATE-----Generated at Sun Oct 4 00:29:06 2026 by rpki-client