$ rpki-client -vvf rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/8F65EB2E222711F1BF2828673E3D8C67.roa File: 8F65EB2E222711F1BF2828673E3D8C67.roa (raw, json) Hash identifier: qmo0KXQGv/zbQZwW5eSufteMAOTzrrUI2IHsP4izFvM= Subject key identifier: 19:05:9B:35:08:65:A8:CC:E2:5E:BC:4C:E6:73:EC:78:CD:2D:43:06 Certificate issuer: /CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Certificate serial: 01F2 Authority key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/8F65EB2E222711F1BF2828673E3D8C67.roa Signing time: Sun 05 Jul 2026 05:31:32 +0000 ROA not before: Sun 05 Jul 2026 05:31:32 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 132335 IP address blocks: 43.230.200.0/24 maxlen: 24 43.230.201.0/24 maxlen: 24 43.230.202.0/24 maxlen: 24 45.64.104.0/24 maxlen: 24 45.64.105.0/24 maxlen: 24 45.64.106.0/24 maxlen: 24 45.113.225.0/24 maxlen: 24 45.120.136.0/22 maxlen: 22 45.120.136.0/24 maxlen: 24 45.120.137.0/24 maxlen: 24 45.120.138.0/24 maxlen: 24 45.120.139.0/24 maxlen: 24 103.12.211.0/24 maxlen: 24 103.13.112.0/24 maxlen: 24 103.13.113.0/24 maxlen: 24 103.13.114.0/24 maxlen: 24 103.13.115.0/24 maxlen: 24 103.26.204.0/22 maxlen: 24 103.250.184.0/23 maxlen: 24 157.119.40.0/24 maxlen: 24 2001:df2:1000::/48 maxlen: 48 2001:df2:1001::/48 maxlen: 48 2405:7140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C362, serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Validity Not Before: Jul 5 05:31:32 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a49ec34-5357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ea:24:8b:ca:75:c8:37:d2:ee:b7:79:4a:9b: a4:f4:57:57:b5:e0:89:94:65:d0:09:9f:78:c4:46: 3c:b4:5e:17:a2:c2:d5:19:1d:62:30:06:2a:23:f0: 99:bf:d6:4a:93:7b:56:4f:9b:53:5c:65:bf:64:00: 6b:82:c9:94:da:cf:1e:5a:46:9c:bb:b1:fc:9e:eb: 8d:38:a9:33:1b:5d:8b:58:ec:79:76:f0:40:3f:18: 22:de:cf:98:c2:98:99:33:eb:48:50:ec:9d:0f:01: 4c:9f:a2:42:d6:db:02:4c:5c:b1:ad:ae:d8:88:eb: d0:c0:46:4e:95:e2:ef:64:c6:4a:ab:8f:b2:c5:88: 42:48:1c:ef:fb:58:cd:24:08:5c:cb:af:01:71:fc: ad:61:46:91:44:e4:83:f7:a9:20:51:fd:90:98:2d: ef:ab:54:aa:05:17:f0:d4:ef:65:3f:02:e4:62:26: 82:e2:bb:aa:ec:28:94:15:d1:68:b1:89:cd:73:ac: 80:cb:19:b6:04:f8:9e:14:df:a1:0d:de:ca:ad:0b: 27:0e:07:b9:14:ee:01:73:b6:2c:c3:3e:45:4d:86: b5:99:eb:b7:df:28:45:ab:47:c6:3a:c5:6c:23:f7: 82:25:99:2a:fc:34:d5:1a:fe:a9:fa:8e:67:f7:96: 5e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:05:9B:35:08:65:A8:CC:E2:5E:BC:4C:E6:73:EC:78:CD:2D:43:06 X509v3 Authority Key Identifier: keyid:EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/8F65EB2E222711F1BF2828673E3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 43.230.200.0-43.230.202.255 45.64.104.0-45.64.106.255 45.113.225.0/24 45.120.136.0/22 103.12.211.0/24 103.13.112.0/22 103.26.204.0/22 103.250.184.0/23 157.119.40.0/24 IPv6: 2001:df2:1000::/47 2405:7140::/48 Signature Algorithm: sha256WithRSAEncryption 8e:fb:b7:19:2e:e4:3c:f1:63:0d:be:c1:e3:5e:65:30:2a:b0: db:a6:f4:18:0c:65:bf:0a:c1:4f:62:35:f1:a5:0c:89:fa:59: 7d:67:98:0c:6c:3c:79:b5:8d:cf:96:60:c5:06:47:5c:ab:5d: c7:71:bc:aa:c8:53:05:88:70:df:9f:ba:5b:05:21:b2:11:f2: 8f:8c:38:e7:e2:3b:0b:d8:d7:92:34:8e:a4:ff:8f:80:88:eb: 77:c9:fd:de:fe:3d:e2:0b:c5:4c:ba:80:e5:87:2f:86:35:4f: d6:c6:4e:62:dc:72:33:72:f0:32:cb:c2:a7:57:9f:6a:6a:b2: 4f:e5:02:e5:93:4c:c0:e1:f1:65:24:01:5a:d8:90:8c:59:1c: 23:e6:20:a6:73:c8:d3:e5:b8:bd:ec:30:6f:0d:15:3f:f6:32: b9:df:5c:37:33:04:3b:e7:ec:88:3c:35:02:a0:08:aa:67:f2: ab:b2:3f:ee:bd:68:34:28:49:66:bd:60:56:8e:4e:1f:09:13: 2a:6c:05:b3:76:88:2a:31:d4:72:25:60:31:48:60:02:10:da: 46:32:eb:1f:0c:e2:0c:08:6c:23:fb:65:56:c5:16:ad:fd:a7: a9:d6:c5:12:f9:3f:2a:16:5a:76:17:9e:a4:58:60:ef:8a:e6: dc:74:f8:af -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzNjIxMTAvBgNVBAUTKEVBODNBRjRBMjFDQkMyMDcxRjU2OTU2RTVEREQ1ODRD NzYzOEZBNUIwHhcNMjYwNzA1MDUzMTMyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ5ZWMzNC01MzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuoki8p1yDfS7rd5Spuk9FdXteCJlGXQCZ94xEY8tF4XosLVGR1iMAYqI/CZ v9ZKk3tWT5tTXGW/ZABrgsmU2s8eWkacu7H8nuuNOKkzG12LWOx5dvBAPxgi3s+Y wpiZM+tIUOydDwFMn6JC1tsCTFyxra7YiOvQwEZOleLvZMZKq4+yxYhCSBzv+1jN JAhcy68BcfytYUaRROSD96kgUf2QmC3vq1SqBRfw1O9lPwLkYiaC4ruq7CiUFdFo sYnNc6yAyxm2BPieFN+hDd7KrQsnDge5FO4Bc7Yswz5FTYa1meu33yhFq0fGOsVs I/eCJZkq/DTVGv6p+o5n95ZeewIDAQABo4ICujCCArYwHQYDVR0OBBYEFBkFmzUI ZajM4l68TOZz7HjNLUMGMB8GA1UdIwQYMBaAFOqDr0ohy8IHH1aVbl3dWEx2OPpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzM2Mi82QTA4RjQ5MjI1 NzcxMUVGQkIwQjgyNTFDNEY5QUUwMi82b092U2lITHdnY2ZWcFZ1WGQxWVRIWTQt bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvT3ZTaUhMd2djZlZwVnVYZDFZVEhZNC1scy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMzNjIvNkEwOEY0OTIyNTc3MTFFRkJCMEI4MjUxQzRGOUFFMDIvOEY2NUVCMkUy MjI3MTFGMUJGMjgyODY3M0UzRDhDNjcucm9hMHkGCCsGAQUFBwEHAQH/BGowaDBM BAIAATBGMAwDBAMr5sgDBAAr5sowDAMEAy1AaAMEAC1AagMEAC1x4QMEAi14iAME AGcM0wMEAmcNcAMEAmcazAMEAWf6uAMEAJ13KDAYBAIAAjASAwcBIAEN8hAAAwcA JAVxQAAAMA0GCSqGSIb3DQEBCwUAA4IBAQCO+7cZLuQ88WMNvsHjXmUwKrDbpvQY DGW/CsFPYjXxpQyJ+ll9Z5gMbDx5tY3PlmDFBkdcq13HcbyqyFMFiHDfn7pbBSGy EfKPjDjn4jsL2NeSNI6k/4+AiOt3yf3e/j3iC8VMuoDlhy+GNU/Wxk5i3HIzcvAy y8KnV59qarJP5QLlk0zA4fFlJAFa2JCMWRwj5iCmc8jT5bi97DBvDRU/9jK531w3 MwQ75+yIPDUCoAiqZ/Krsj/uvWg0KElmvWBWjk4fCRMqbAWzdogqMdRyJWAxSGAC ENpGMusfDOIMCGwj+2VWxRat/aep1sUS+T8qFlp2F56kWGDviubcdPiv -----END CERTIFICATE-----Generated at Fri Jul 24 17:38:26 2026 by rpki-client