$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/8FEAA0421D1A11F19DA5ED77103D8C67.roa File: 8FEAA0421D1A11F19DA5ED77103D8C67.roa (raw, json) Hash identifier: dEk3degjNLUiA3kpAMrU5suBNlrDXd9oTzhhHbGgPc0= Subject key identifier: DB:C8:DE:DE:17:42:B5:09:48:EF:8C:35:4B:39:93:21:EF:39:08:A2 Certificate issuer: /CN=A911CC61/serialNumber=0474937E79A9D673353EABD82C4B8424B6C6830D Certificate serial: 3B Authority key identifier: 04:74:93:7E:79:A9:D6:73:35:3E:AB:D8:2C:4B:84:24:B6:C6:83:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/8FEAA0421D1A11F19DA5ED77103D8C67.roa Signing time: Wed 11 Mar 2026 07:18:55 +0000 ROA not before: Wed 11 Mar 2026 07:18:55 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 152194 IP address blocks: 43.226.16.0/22 maxlen: 24 103.45.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.crl rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CC61, serialNumber=0474937E79A9D673353EABD82C4B8424B6C6830D Validity Not Before: Mar 11 07:18:55 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69b1175e-4542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:a0:14:73:a9:11:68:9c:c4:d7:e2:8c:4e: 25:5e:68:a9:76:86:69:64:ad:5a:96:f9:bc:69:73: 94:38:0e:d2:c5:aa:68:31:07:a2:c6:0b:f1:99:e6: da:e1:66:c1:75:f1:de:84:b6:44:16:95:cc:d0:94: 83:d6:00:59:18:90:57:76:75:b8:95:1c:5b:4f:79: 51:70:bc:bf:32:8e:9a:3a:01:11:85:f5:b9:4f:5f: c3:b9:bb:05:9c:e0:c5:ac:b5:90:0f:c5:95:b1:be: 06:06:52:bc:34:6d:4b:95:f4:96:f9:76:6f:23:19: f8:c6:64:82:ca:bb:73:ea:1e:8d:81:d2:98:3d:02: d8:17:07:37:10:79:80:db:79:ed:bb:f9:cc:f0:e9: a4:45:79:a0:f5:ec:f6:52:58:de:28:c9:3d:59:78: 22:41:f2:5b:62:3d:6f:60:00:d9:80:e2:29:d0:07: 3e:8a:9e:78:10:a9:7f:88:c1:f3:3c:4e:43:89:26: 9b:84:25:65:c4:7f:0f:69:69:1c:33:d5:8b:c3:51: 9f:13:7b:26:c1:1c:e9:e0:35:7e:b0:88:71:bb:de: e3:b4:1b:f6:fc:67:4b:1d:28:65:81:ee:ca:6e:e2: 42:92:d3:61:e4:21:47:d7:03:17:01:ac:81:3e:ba: a7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C8:DE:DE:17:42:B5:09:48:EF:8C:35:4B:39:93:21:EF:39:08:A2 X509v3 Authority Key Identifier: keyid:04:74:93:7E:79:A9:D6:73:35:3E:AB:D8:2C:4B:84:24:B6:C6:83:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/8FEAA0421D1A11F19DA5ED77103D8C67.roa sbgp-ipAddrBlock: critical IPv4: 43.226.16.0/22 103.45.64.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:cb:ec:2d:8c:5a:c0:ca:9d:30:b3:46:70:c2:59:08:f1:3e: 0b:a1:83:6a:1b:a8:ad:ea:02:56:98:9a:c6:df:d6:f8:58:d0: c3:fa:58:0c:75:1c:0b:98:23:35:84:ad:e1:6f:cc:8f:7a:1f: 51:5b:cc:3c:58:7e:31:9e:b2:4a:ea:da:e1:dd:a8:37:9e:2a: 89:f7:85:32:1b:7d:ea:46:19:26:31:a7:7a:5b:bb:f0:fb:4f: 19:3e:b8:82:a3:9b:5c:f0:4d:f2:90:08:82:da:07:23:12:fc: e9:83:c1:c8:53:e3:16:73:f5:e3:5c:b0:eb:0e:9e:aa:93:d9: d7:8e:14:b4:89:68:ff:eb:f4:22:f1:5d:b0:48:33:01:19:ba: 7e:b5:d9:81:52:f4:18:f6:70:df:c8:e0:69:3d:d6:cb:fa:e5: 89:86:7d:5b:b2:a6:8b:15:02:c4:7d:16:87:db:91:a8:6a:c7: 7a:59:4e:45:5e:c9:ea:8c:45:b5:6a:29:e7:2b:b1:be:d8:4a: 33:f3:47:c1:bf:2f:f9:01:af:3a:c4:dd:ad:d5:fb:86:af:38: 8a:4b:52:e2:82:8e:5b:c8:f6:16:0a:a1:2c:72:a0:03:12:c5: 74:18:74:1a:ee:4e:c5:8a:cb:3d:c1:e0:6a:3e:f3:02:20:5d: 9d:0c:84:9c -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Q0M2MTExMC8GA1UEBRMoMDQ3NDkzN0U3OUE5RDY3MzM1M0VBQkQ4MkM0Qjg0MjRC NkM2ODMwRDAeFw0yNjAzMTEwNzE4NTVaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YjExNzVlLTQ1NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxQaAUc6kRaJzE1+KMTiVeaKl2hmlkrVqW+bxpc5Q4DtLFqmgxB6LGC/GZ5trh ZsF18d6EtkQWlczQlIPWAFkYkFd2dbiVHFtPeVFwvL8yjpo6ARGF9blPX8O5uwWc 4MWstZAPxZWxvgYGUrw0bUuV9Jb5dm8jGfjGZILKu3PqHo2B0pg9AtgXBzcQeYDb ee27+czw6aRFeaD17PZSWN4oyT1ZeCJB8ltiPW9gANmA4inQBz6KnngQqX+IwfM8 TkOJJpuEJWXEfw9paRwz1YvDUZ8TeybBHOngNX6wiHG73uO0G/b8Z0sdKGWB7spu 4kKS02HkIUfXAxcBrIE+uqeJAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQU28je3hdC tQlI74w1SzmTIe85CKIwHwYDVR0jBBgwFoAUBHSTfnmp1nM1PqvYLEuEJLbGgw0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDQzYxLzMzMUQxNDE4REEz RTExRjA4RkQxRTgzODhFRDM2NDFEL0JIU1Rmbm1wMW5NMVBxdllMRXVFSkxiR2d3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQkhTVGZubXAxbk0xUHF2WUxFdUVKTGJHZ3cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0M2MS8zMzFEMTQxOERBM0UxMUYwOEZEMUU4Mzg4RUQzNjQxRC84RkVBQTA0MjFE MUExMUYxOURBNUVENzcxMDNEOEM2Ny5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAIr4hADBAJnLUAwDQYJKoZIhvcNAQELBQADggEBAIrL7C2MWsDKnTCz RnDCWQjxPguhg2obqK3qAlaYmsbf1vhY0MP6WAx1HAuYIzWEreFvzI96H1FbzDxY fjGeskrq2uHdqDeeKon3hTIbfepGGSYxp3pbu/D7Txk+uIKjm1zwTfKQCILaByMS /OmDwchT4xZz9eNcsOsOnqqT2deOFLSJaP/r9CLxXbBIMwEZun612YFS9Bj2cN/I 4Gk91sv65YmGfVuyposVAsR9Fofbkahqx3pZTkVeyeqMRbVqKecrsb7YSjPzR8G/ L/kBrzrE3a3V+4avOIpLUuKCjlvI9hYKoSxyoAMSxXQYdBruTsWKyz3B4Go+8wIg XZ0MhJw= -----END CERTIFICATE-----Generated at Thu Mar 26 20:06:32 2026 by rpki-client