$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/C2A410D4ADA011F08E990C1DC4F9AE02.roa File: C2A410D4ADA011F08E990C1DC4F9AE02.roa (raw, json) Hash identifier: G0vU5JVbCZyLk1wSOWyQBhOy8mR2nS22Z/eltaU886M= Subject key identifier: DE:B8:38:F6:4D:6F:36:24:DB:05:F5:31:49:55:A0:97:B9:CE:DA:BA Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Certificate serial: 0A4F Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/C2A410D4ADA011F08E990C1DC4F9AE02.roa Signing time: Sat 02 May 2026 20:25:21 +0000 ROA not before: Sat 02 May 2026 20:25:21 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 135377 IP address blocks: 43.224.65.0/24 maxlen: 24 43.224.66.0/24 maxlen: 24 43.224.67.0/24 maxlen: 24 45.253.246.0/24 maxlen: 24 45.255.124.0/24 maxlen: 24 45.255.125.0/24 maxlen: 24 45.255.133.0/24 maxlen: 24 45.255.134.0/24 maxlen: 24 45.255.135.0/24 maxlen: 24 61.29.241.0/24 maxlen: 24 61.29.249.0/24 maxlen: 24 61.29.251.0/24 maxlen: 24 103.65.37.0/24 maxlen: 24 103.65.38.0/24 maxlen: 24 103.65.39.0/24 maxlen: 24 103.98.10.0/24 maxlen: 24 103.98.11.0/24 maxlen: 24 103.216.100.0/24 maxlen: 24 103.216.101.0/24 maxlen: 24 157.119.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2639 (0xa4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E509, serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Validity Not Before: May 2 20:25:21 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=69f65db1-e774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ee:de:6c:68:dc:fa:58:cb:fe:1e:99:25:b1: ed:69:d0:03:50:32:b8:bd:c1:85:8b:a1:c4:01:d2: 34:38:5d:e1:39:88:84:50:10:8b:b7:13:54:24:be: da:c3:80:a7:71:7b:91:d1:ff:2a:f6:23:20:59:3f: e0:a0:18:c9:49:88:28:a8:4b:41:70:f7:4c:e8:cc: a3:54:e9:f2:37:d7:dd:fa:fc:c7:8d:59:4d:16:4e: 68:77:ab:ed:35:6e:3a:df:f2:b5:77:c6:ca:be:c4: 95:e1:a6:b0:e8:a4:47:53:07:d5:a1:7d:14:84:ae: af:a6:aa:72:fa:48:d7:10:cc:5a:03:53:7a:65:71: 4a:35:bf:de:55:6c:f1:2d:11:19:19:ad:1b:13:f4: ea:d3:6e:d7:18:55:00:07:5b:cf:62:3a:65:0c:87: 78:a4:50:0e:b8:57:2c:21:5f:16:d2:0e:8c:4f:2a: a9:5b:bc:1c:a0:d5:26:e9:99:78:da:2b:af:00:8d: 13:dc:3b:a0:21:ff:08:b3:be:cd:68:5d:4f:03:f6: 70:3e:87:bd:05:cd:b5:ad:a1:84:c6:60:77:48:5b: 70:b4:0c:45:21:26:57:ab:14:ec:4e:6b:e5:10:98: 61:2e:41:b5:25:fb:68:20:1d:84:23:a6:61:44:19: 91:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B8:38:F6:4D:6F:36:24:DB:05:F5:31:49:55:A0:97:B9:CE:DA:BA X509v3 Authority Key Identifier: keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/C2A410D4ADA011F08E990C1DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.65.0-43.224.67.255 45.253.246.0/24 45.255.124.0/23 45.255.133.0-45.255.135.255 61.29.241.0/24 61.29.249.0/24 61.29.251.0/24 103.65.37.0-103.65.39.255 103.98.10.0/23 103.216.100.0/23 157.119.233.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:3f:76:2e:d8:38:c1:05:f9:a5:3a:e7:a8:28:9b:d9:70:13: 14:45:ef:0e:b5:e4:fd:55:f9:3c:b4:a8:68:37:bb:f8:9b:a5: ce:7d:ad:5b:8b:c7:88:c7:47:6a:83:20:11:82:77:1f:c1:a3: ac:95:e4:55:99:86:ab:a8:95:cf:81:63:9a:9c:37:43:0d:9e: 54:8f:6c:e3:1b:3d:94:c9:74:1a:4c:7f:22:0a:e6:91:58:d7: 01:4d:5c:1b:b1:7b:7b:be:29:cc:b0:19:99:ba:20:2b:48:fa: 8a:64:80:bb:af:b2:46:66:15:3f:29:6e:b2:1b:fb:1f:e1:41: 81:7d:04:cf:c2:cc:40:e3:17:4f:04:94:79:8d:37:b0:38:60: 4f:55:3d:9f:12:05:33:87:9f:8e:bd:b9:00:79:de:10:62:0f: 27:b3:e6:9f:60:cb:cf:88:28:75:2f:c4:12:a6:94:f1:a0:40: 13:4e:a7:75:4f:e1:35:7f:f0:76:06:02:92:31:63:bb:da:b4: 16:2d:e6:4c:d3:05:51:1a:da:54:d5:38:c0:6d:bf:18:61:75: 89:df:88:ff:21:5e:1d:15:49:22:c6:c0:c9:32:ca:db:fa:51: 28:75:99:6e:35:36:af:94:40:72:ca:06:c6:e6:30:1d:7f:6d: 6b:f5:02:8e -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgICCk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDkxMTAvBgNVBAUTKEFBOEUxQkUzNjI0MjQwREMzMzAyMDQ3RkI0MUE3RDRF NDc4MDhFRjgwHhcNMjYwNTAyMjAyNTIxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWY2NWRiMS1lNzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+7ebGjc+ljL/h6ZJbHtadADUDK4vcGFi6HEAdI0OF3hOYiEUBCLtxNUJL7a w4CncXuR0f8q9iMgWT/goBjJSYgoqEtBcPdM6MyjVOnyN9fd+vzHjVlNFk5od6vt NW463/K1d8bKvsSV4aaw6KRHUwfVoX0UhK6vpqpy+kjXEMxaA1N6ZXFKNb/eVWzx LREZGa0bE/Tq027XGFUAB1vPYjplDId4pFAOuFcsIV8W0g6MTyqpW7wcoNUm6Zl4 2iuvAI0T3DugIf8Is77NaF1PA/ZwPoe9Bc21raGExmB3SFtwtAxFISZXqxTsTmvl EJhhLkG1JftoIB2EI6ZhRBmRhwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFN64OPZN bzYk2wX1MUlVoJe5ztq6MB8GA1UdIwQYMBaAFKqOG+NiQkDcMwIEf7QafU5HgI74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwOS83OUVBNTkxRUE3 QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FOd3pBZ1JfdEJwOVRrZUFq dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvNGI0MkpDUU53ekFnUl90QnA5VGtlQWp2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU1MDkvNzlFQTU5MUVBN0JEMTFFQUFBQTYyOTQ4QzRGOUFFMDIvQzJBNDEwRDRB REEwMTFGMDhFOTkwQzFEQzRGOUFFMDIucm9hMHMGCCsGAQUFBwEHAQH/BGQwYjBg BAIAATBaMAwDBAAr4EEDBAIr4EADBAAt/fYDBAEt/3wwDAMEAC3/hQMEAy3/gAME AD0d8QMEAD0d+QMEAD0d+zAMAwQAZ0ElAwQDZ0EgAwQBZ2IKAwQBZ9hkAwQAnXfp MA0GCSqGSIb3DQEBCwUAA4IBAQCKP3Yu2DjBBfmlOueoKJvZcBMURe8OteT9Vfk8 tKhoN7v4m6XOfa1bi8eIx0dqgyARgncfwaOsleRVmYarqJXPgWOanDdDDZ5Uj2zj Gz2UyXQaTH8iCuaRWNcBTVwbsXt7vinMsBmZuiArSPqKZIC7r7JGZhU/KW6yG/sf 4UGBfQTPwsxA4xdPBJR5jTewOGBPVT2fEgUzh5+OvbkAed4QYg8ns+afYMvPiCh1 L8QSppTxoEATTqd1T+E1f/B2BgKSMWO72rQWLeZM0wVRGtpU1TjAbb8YYXWJ34j/ IV4dFUkixsDJMsrb+lEodZluNTavlEByygbG5jAdf21r9QKO -----END CERTIFICATE-----Generated at Wed May 13 11:16:00 2026 by rpki-client