$ rpki-client -vvvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/D34D9A72BBEB11EC83BEA22AC4F9AE02.roa File: D34D9A72BBEB11EC83BEA22AC4F9AE02.roa (raw, json) Hash identifier: A4RJSzUlQB5VOmkerlNyMZrBFl4XHSm0HRS+FYy7Fwc= Subject key identifier: F7:3D:0B:04:85:E8:B0:38:92:EF:CA:AC:0C:B0:4E:EC:F9:54:AE:D6 Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Certificate serial: 0959 Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/D34D9A72BBEB11EC83BEA22AC4F9AE02.roa Signing time: Mon 14 Sep 2026 20:41:22 +0000 ROA not before: Mon 14 Sep 2026 20:41:22 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 132825 IP address blocks: 43.231.4.0/24 maxlen: 24 43.231.5.0/24 maxlen: 24 43.231.6.0/24 maxlen: 24 43.231.7.0/24 maxlen: 24 103.250.4.0/24 maxlen: 24 103.250.5.0/24 maxlen: 24 103.250.6.0/24 maxlen: 24 103.250.7.0/24 maxlen: 24 118.107.192.0/24 maxlen: 24 118.107.193.0/24 maxlen: 24 118.107.194.0/24 maxlen: 24 118.107.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 20:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2393 (0x959) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Validity Not Before: Sep 14 20:41:22 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa85bf2-4ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3e:94:49:5c:50:bf:53:d3:a1:b7:49:13:be: ce:c1:a6:14:91:02:c6:05:b6:39:6b:99:38:04:4b: e4:4b:fb:e9:b0:1b:1e:e4:bb:c3:32:f5:a2:89:19: dd:43:3f:93:d0:d9:ab:86:f8:94:24:ad:fe:1e:60: 96:17:b2:7d:70:76:fb:f0:84:b0:b3:8b:6e:44:57: 87:74:3f:68:74:d2:36:37:2a:41:49:1d:ce:a9:16: 8c:0b:7c:53:dc:4d:0e:a5:d0:e2:75:34:03:f0:0d: 94:50:cd:4e:0d:63:94:bf:4a:46:28:9d:21:f9:96: 30:13:9b:3a:fe:f8:b8:22:38:25:60:1e:1c:fb:db: d0:04:b0:47:6d:43:fc:20:fa:f7:c5:0f:8a:fd:b8: 0f:73:08:eb:9c:46:2f:ad:8f:77:12:90:96:78:7d: 50:d5:3a:9c:be:19:42:9c:75:4d:2c:28:d3:8e:cf: 8c:b5:9b:8c:c3:13:20:b8:a3:27:fe:17:0e:49:95: 26:b5:00:12:20:ac:7b:d5:fd:20:02:9e:88:9f:e2: 6c:e4:78:82:02:6f:fa:a3:ae:24:ce:97:81:2c:c6: 95:ad:ce:34:08:27:9e:9a:6e:28:15:4f:06:0b:73: 49:74:48:e1:ee:8b:5d:c8:5d:b2:fa:56:4e:ef:fe: bf:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3D:0B:04:85:E8:B0:38:92:EF:CA:AC:0C:B0:4E:EC:F9:54:AE:D6 X509v3 Authority Key Identifier: keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/D34D9A72BBEB11EC83BEA22AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.231.4.0/22 103.250.4.0/22 118.107.192.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:c0:17:83:e0:c4:c9:ac:05:e1:af:47:a7:89:90:b5:5e:21: cb:1f:b3:47:1b:70:f1:63:b6:95:d1:34:2a:09:2b:35:27:d0: 35:55:a6:a0:73:b9:51:a3:a2:cd:7d:ca:3d:e8:34:f1:5d:3c: 70:06:c5:ed:b4:62:4c:d8:d7:90:48:05:96:8d:ff:50:98:24: 11:82:87:4c:1f:cf:74:72:e8:e0:cb:b3:30:a8:e6:0a:90:39: f5:ba:22:aa:1a:3f:00:91:e4:79:a8:60:0d:53:67:7c:cb:7d: e6:87:ba:0b:77:36:c5:ee:c4:ed:0d:85:d4:2b:58:e3:6b:60: fc:c5:b2:d5:88:6f:b3:7f:6c:d5:ff:5c:dc:8a:35:30:e2:e9: c2:6a:a4:86:fd:ae:91:d8:c1:bb:cf:48:34:e7:8a:37:4c:3e: 4d:73:4c:2c:b9:33:2d:39:92:fc:12:4c:b0:27:c8:95:a5:94: a5:db:8d:04:b5:34:d1:b0:91:4e:a6:a7:84:2b:ac:1d:13:03: e0:a5:20:82:2c:0c:02:0f:2c:ce:77:55:56:b3:eb:a1:ab:a7: ab:c3:7a:ed:76:81:08:98:30:e9:ee:38:c7:af:9f:f7:49:3f: a8:d8:0c:29:e5:1a:06:62:14:81:33:9f:e0:a0:36:bf:9a:7f: c1:8c:67:66 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1 MzIzM0U1OTUwHhcNMjYwOTE0MjA0MTIyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE4NWJmMi00ZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzD6USVxQv1PTobdJE77OwaYUkQLGBbY5a5k4BEvkS/vpsBse5LvDMvWiiRnd Qz+T0NmrhviUJK3+HmCWF7J9cHb78ISws4tuRFeHdD9odNI2NypBSR3OqRaMC3xT 3E0OpdDidTQD8A2UUM1ODWOUv0pGKJ0h+ZYwE5s6/vi4IjglYB4c+9vQBLBHbUP8 IPr3xQ+K/bgPcwjrnEYvrY93EpCWeH1Q1TqcvhlCnHVNLCjTjs+MtZuMwxMguKMn /hcOSZUmtQASIKx71f0gAp6In+Js5HiCAm/6o64kzpeBLMaVrc40CCeemm4oFU8G C3NJdEjh7otdyF2y+lZO7/6/zQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFPc9CwSF 6LA4ku/KrAywTuz5VK7WMB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2 QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjE3NkQvOTNEMTdDRDAwNkEwMTFFQkI0MDkwODU5QzRGOUFFMDIvRDM0RDlBNzJC QkVCMTFFQzgzQkVBMjJBQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCK+cEAwQCZ/oEAwQCdmvAMA0GCSqGSIb3DQEBCwUAA4IBAQANwBeD 4MTJrAXhr0eniZC1XiHLH7NHG3DxY7aV0TQqCSs1J9A1Vaagc7lRo6LNfco96DTx XTxwBsXttGJM2NeQSAWWjf9QmCQRgodMH890cujgy7MwqOYKkDn1uiKqGj8AkeR5 qGANU2d8y33mh7oLdzbF7sTtDYXUK1jja2D8xbLViG+zf2zV/1zcijUw4unCaqSG /a6R2MG7z0g054o3TD5Nc0wsuTMtOZL8EkywJ8iVpZSl240EtTTRsJFOpqeEK6wd EwPgpSCCLAwCDyzOd1VWs+uhq6erw3rtdoEImDDp7jjHr5/3ST+o2Awp5RoGYhSB M5/goDa/mn/BjGdm -----END CERTIFICATE-----Generated at Sat Sep 26 03:26:31 2026 by rpki-client