$ rpki-client -vvf rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/43A759B0C82811F0B893BE0BC4F9AE02.roa File: 43A759B0C82811F0B893BE0BC4F9AE02.roa (raw, json) Hash identifier: vhOhWtXWx2NXMlekJamWdlkcEWL4iJ0mvgLNcrgjiQc= Subject key identifier: AC:44:96:BD:B5:57:03:23:0C:73:60:94:70:7C:BD:7C:46:C5:AB:BE Certificate issuer: /CN=A911FAC3/serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Certificate serial: 147F Authority key identifier: 77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/43A759B0C82811F0B893BE0BC4F9AE02.roa Signing time: Tue 30 Jun 2026 07:59:16 +0000 ROA not before: Tue 30 Jun 2026 07:59:16 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 63932 IP address blocks: 43.229.12.0/22 maxlen: 22 43.229.13.0/24 maxlen: 24 103.48.16.0/22 maxlen: 22 114.130.240.0/21 maxlen: 21 114.130.240.0/23 maxlen: 23 114.130.242.0/24 maxlen: 24 114.130.252.0/22 maxlen: 22 2401:ed80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5247 (0x147f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FAC3, serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Validity Not Before: Jun 30 07:59:16 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6a437753-539b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:fd:8b:a0:67:29:99:b9:ed:b0:4b:2e:05: 17:a8:34:3a:e1:95:67:19:89:1b:c0:41:77:57:bd: 04:aa:d6:82:e2:81:3f:92:5c:61:ed:5f:f3:a0:1c: 15:33:a9:ef:ec:90:9a:a6:22:ac:0e:63:0f:11:ac: 7f:2f:33:90:d3:d8:56:f8:4c:f7:4a:6b:47:ac:84: ef:8c:9e:87:f9:16:71:df:5f:21:43:19:4b:1c:61: 87:d1:ee:3d:0b:c8:94:a5:5d:20:c5:4e:1a:2e:b5: 19:da:9a:9a:d8:5a:64:6d:f9:71:f7:43:32:66:97: 76:9f:11:53:32:c6:49:d9:e0:1d:93:fd:e4:cb:12: 0e:2b:ec:1d:92:94:87:2e:ea:47:77:54:55:87:49: 39:34:81:7a:9f:98:d3:cc:2e:d6:41:a8:fa:9d:52: f3:97:51:1d:ec:14:0c:49:58:8b:a8:45:b5:b3:5d: 8d:28:20:05:33:7d:35:a1:ae:c8:5d:6d:ef:7c:c9: 2e:45:1a:42:60:a4:74:99:d3:13:66:d1:a9:ee:c5: a9:8e:62:bf:34:65:a1:2a:cb:ae:e6:cd:5a:0a:22: 68:b5:06:a0:90:ec:c5:71:f7:a0:f7:aa:7f:e4:84: 21:5d:2f:80:ea:05:d2:4e:01:ea:95:c6:91:ca:49: e6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:44:96:BD:B5:57:03:23:0C:73:60:94:70:7C:BD:7C:46:C5:AB:BE X509v3 Authority Key Identifier: keyid:77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/43A759B0C82811F0B893BE0BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.229.12.0/22 103.48.16.0/22 114.130.240.0/21 114.130.252.0/22 IPv6: 2401:ed80::/32 Signature Algorithm: sha256WithRSAEncryption 4f:98:eb:cf:4f:75:98:fa:c7:fe:67:77:63:95:bb:54:ca:a0: 6d:8a:af:13:bd:33:61:8f:34:08:21:88:eb:02:e6:fd:92:b7: 9c:c9:3b:7e:02:2b:33:e7:99:3b:28:22:5d:56:1b:f0:b2:48: f7:0a:a2:2f:69:c4:41:df:00:6f:7f:19:19:27:09:6d:59:80: 52:d9:87:c6:84:53:1d:03:5c:4a:3c:24:1f:ee:dd:ae:50:4e: c7:b4:08:e5:e2:68:4f:7f:70:03:ab:99:f2:b8:1c:0e:29:09: 8e:63:87:5c:a1:13:94:a6:6f:4e:01:34:18:d7:18:e4:3c:28: 4c:e1:53:0b:c4:d8:f5:6c:5c:06:17:d6:cb:70:e1:77:ef:db: 8d:56:45:d1:c3:cd:5c:18:71:b0:39:f4:2a:30:45:65:e8:b6: 58:6e:56:2b:17:7f:c8:ea:e3:13:76:51:8f:14:1a:db:62:84: 8b:29:e1:c9:62:64:b6:e8:f1:83:73:43:39:e5:69:26:20:48: c0:15:6f:cb:42:18:8e:73:ea:35:ef:16:cc:0b:dd:e7:a3:c5: f2:e9:b0:3d:8c:26:97:9d:67:a5:1d:cc:5a:db:4c:a6:53:2f: 5a:f3:bf:f8:e7:c7:a5:76:cc:5a:56:e0:c3:1e:eb:6c:32:14: 49:e2:c6:76 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICFH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQzMxMTAvBgNVBAUTKDc3NjJBQTgyNzcwMjBEMEJCNUM3NTk5N0RFNUY3RDhB NTE0MkRGMTQwHhcNMjYwNjMwMDc1OTE2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQzNzc1My01MzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmz9i6BnKZm57bBLLgUXqDQ64ZVnGYkbwEF3V70EqtaC4oE/klxh7V/zoBwV M6nv7JCapiKsDmMPEax/LzOQ09hW+Ez3SmtHrITvjJ6H+RZx318hQxlLHGGH0e49 C8iUpV0gxU4aLrUZ2pqa2Fpkbflx90MyZpd2nxFTMsZJ2eAdk/3kyxIOK+wdkpSH LupHd1RVh0k5NIF6n5jTzC7WQaj6nVLzl1Ed7BQMSViLqEW1s12NKCAFM301oa7I XW3vfMkuRRpCYKR0mdMTZtGp7sWpjmK/NGWhKsuu5s1aCiJotQagkOzFcfeg96p/ 5IQhXS+A6gXSTgHqlcaRyknm9QIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFKxElr21 VwMjDHNglHB8vXxGxau+MB8GA1UdIwQYMBaAFHdiqoJ3Ag0LtcdZl95ffYpRQt8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFDMy83Qjg2OEMwODlE RjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RRdTF4MW1YM2w5OWlsRkMz eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QyS3FnbmNDRFF1MXgxbVgzbDk5aWxGQzN4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUZBQzMvN0I4NjhDMDg5REY1MTFFODk1N0FCNDE2QzRGOUFFMDIvNDNBNzU5QjBD ODI4MTFGMEI4OTNCRTBCQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCK+UMAwQCZzAQAwQDcoLwAwQCcoL8MA0EAgACMAcDBQAkAe2AMA0G CSqGSIb3DQEBCwUAA4IBAQBPmOvPT3WY+sf+Z3djlbtUyqBtiq8TvTNhjzQIIYjr Aub9krecyTt+Aisz55k7KCJdVhvwskj3CqIvacRB3wBvfxkZJwltWYBS2YfGhFMd A1xKPCQf7t2uUE7HtAjl4mhPf3ADq5nyuBwOKQmOY4dcoROUpm9OATQY1xjkPChM 4VMLxNj1bFwGF9bLcOF379uNVkXRw81cGHGwOfQqMEVl6LZYblYrF3/I6uMTdlGP FBrbYoSLKeHJYmS26PGDc0M55WkmIEjAFW/LQhiOc+o17xbMC93no8Xy6bA9jCaX nWelHcxa20ymUy9a87/458eldsxaVuDDHutsMhRJ4sZ2 -----END CERTIFICATE-----Generated at Fri Jul 24 19:30:16 2026 by rpki-client