$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/CB737E28422611F1882323FB8F833773.roa File: CB737E28422611F1882323FB8F833773.roa (raw, json) Hash identifier: Sas3K0pNeR22zRvDEW+/zPRH6R1LCgFXxVnXBhEToJY= Subject key identifier: 67:B3:E6:97:42:A9:D4:A5:20:EC:3E:45:2B:F0:2A:8A:C4:12:FC:B3 Certificate issuer: /CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663 Certificate serial: 0D19 Authority key identifier: FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/CB737E28422611F1882323FB8F833773.roa Signing time: Tue 28 Apr 2026 19:23:51 +0000 ROA not before: Tue 28 Apr 2026 19:23:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38026 IP address blocks: 43.240.100.0/22 maxlen: 24 103.36.100.0/22 maxlen: 24 116.193.216.0/21 maxlen: 24 202.164.208.0/21 maxlen: 24 2404:af80::/32 maxlen: 32 2404:af80::/48 maxlen: 48 2404:af80:1::/48 maxlen: 48 2404:af80:2::/48 maxlen: 48 2404:af80:3::/48 maxlen: 48 2404:af80:4::/48 maxlen: 48 2404:af80:10::/48 maxlen: 48 2404:af80:11::/48 maxlen: 48 2404:af80:12::/48 maxlen: 48 2404:af80:13::/48 maxlen: 48 2404:af80:14::/48 maxlen: 48 2404:af80:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3353 (0xd19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F1D5, serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663 Validity Not Before: Apr 28 19:23:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f10947-ea69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f4:9a:b8:e8:a0:00:13:49:c8:5b:6a:4b:1b: c9:67:87:f9:58:20:f3:2c:c4:e9:f1:dc:f4:b5:fe: c0:32:9d:ef:77:65:44:6e:10:55:f3:56:09:d4:ee: 42:4d:ab:96:af:ae:18:55:06:20:9e:9a:a7:5a:c2: 7b:03:10:9c:1e:c8:e7:4d:49:3a:35:01:04:d0:41: 88:4b:36:b3:79:3b:f0:1d:ee:a4:ba:0b:75:cc:36: 13:af:9b:60:74:a0:cd:b2:ac:ef:5b:06:a4:ab:b1: fa:ba:6a:53:53:b6:e3:68:14:43:f7:79:f4:25:6b: 68:dc:b8:00:80:18:f7:86:3c:74:eb:77:63:e8:7c: 4d:48:7d:e7:f8:37:72:c4:8e:61:3f:29:fb:5b:8b: 00:57:53:44:15:3d:78:61:07:57:ce:a1:fb:c3:72: be:d9:e6:78:7d:7c:58:b6:8a:80:1d:fe:d0:c2:a4: 83:cc:da:4a:c3:ce:f0:28:5a:81:00:03:3b:0a:21: 52:eb:81:6d:38:1b:1b:c9:36:23:60:1d:77:4b:21: 26:8c:a5:09:be:5f:1d:ec:ca:a3:6a:83:2f:64:85: 94:20:56:ed:26:7b:6e:25:18:30:8e:28:cc:93:9f: 0d:18:ac:7d:d9:54:46:1a:da:bf:a6:b2:a1:a9:b6: 9a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B3:E6:97:42:A9:D4:A5:20:EC:3E:45:2B:F0:2A:8A:C4:12:FC:B3 X509v3 Authority Key Identifier: keyid:FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/CB737E28422611F1882323FB8F833773.roa sbgp-ipAddrBlock: critical IPv4: 43.240.100.0/22 103.36.100.0/22 116.193.216.0/21 202.164.208.0/21 IPv6: 2404:af80::/32 Signature Algorithm: sha256WithRSAEncryption 2c:cb:1f:d5:84:f3:78:33:9d:a9:cd:df:40:dc:7c:e9:59:af: 60:35:82:fa:f9:4f:a1:41:61:0c:c7:7d:84:0a:9e:81:32:28: f2:ee:35:82:4f:45:ba:02:67:48:96:10:25:f7:99:65:f8:95: dd:3e:23:3a:c4:34:34:44:b1:06:1e:1f:80:39:c9:45:05:d7: 13:72:c2:be:83:02:f7:db:33:88:9b:ce:73:67:10:0a:f7:cf: 06:58:e9:1e:3e:54:ce:ed:e7:b8:1f:1b:18:89:a3:f9:65:65: 94:9e:23:51:0f:a1:06:7a:ed:ac:b1:28:41:f2:c5:c3:49:a2: f3:94:bd:ae:4c:1a:bb:5b:71:1c:96:b9:ec:34:21:eb:d2:cc: cd:84:56:c2:d2:1a:97:29:fd:75:85:5b:16:42:38:54:0c:e1: 9b:53:f3:2b:33:12:1e:84:b1:36:36:be:2c:01:c9:03:0d:4c: a2:84:3a:0d:f3:3b:64:63:4c:8a:0d:7c:a0:9e:7a:46:7c:a8: 5b:bb:bc:0d:b5:be:2b:3a:61:16:00:2a:17:10:21:bf:6e:97: 3d:4b:60:8f:0f:ca:b4:ee:68:ac:8e:e2:b6:21:95:74:b5:52: 21:8a:a9:15:67:f2:1e:3c:90:39:47:a5:a6:12:a4:d0:df:8e: ab:18:f6:e7 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICDRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxRDUxMTAvBgNVBAUTKEZCQkE0QTk2MDlCNDE3NEU2Q0I0N0I5NTgzNEUyQTlD M0Q5Njg2NjMwHhcNMjYwNDI4MTkyMzUxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWYxMDk0Ny1lYTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfSauOigABNJyFtqSxvJZ4f5WCDzLMTp8dz0tf7AMp3vd2VEbhBV81YJ1O5C TauWr64YVQYgnpqnWsJ7AxCcHsjnTUk6NQEE0EGISzazeTvwHe6kugt1zDYTr5tg dKDNsqzvWwakq7H6umpTU7bjaBRD93n0JWto3LgAgBj3hjx063dj6HxNSH3n+Ddy xI5hPyn7W4sAV1NEFT14YQdXzqH7w3K+2eZ4fXxYtoqAHf7QwqSDzNpKw87wKFqB AAM7CiFS64FtOBsbyTYjYB13SyEmjKUJvl8d7MqjaoMvZIWUIFbtJntuJRgwjijM k58NGKx92VRGGtq/prKhqbaaHwIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFGez5pdC qdSlIOw+RSvwKorEEvyzMB8GA1UdIwQYMBaAFPu6SpYJtBdObLR7lYNOKpw9loZj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjFENS9FRTAxODA3ODBG NjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYwNXN0SHVWZzA0cW5EMldo bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cEtsZ20wRjA1c3RIdVZnMDRxbkQyV2htTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkYxRDUvRUUwMTgwNzgwRjYyMTFFQUE3MDZBRjNEQzRGOUFFMDIvQ0I3MzdFMjg0 MjI2MTFGMTg4MjMyM0ZCOEY4MzM3NzMucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCK/BkAwQCZyRkAwQDdMHYAwQDyqTQMA0EAgACMAcDBQAkBK+AMA0G CSqGSIb3DQEBCwUAA4IBAQAsyx/VhPN4M52pzd9A3HzpWa9gNYL6+U+hQWEMx32E Cp6BMijy7jWCT0W6AmdIlhAl95ll+JXdPiM6xDQ0RLEGHh+AOclFBdcTcsK+gwL3 2zOIm85zZxAK988GWOkePlTO7ee4HxsYiaP5ZWWUniNRD6EGeu2ssShB8sXDSaLz lL2uTBq7W3EclrnsNCHr0szNhFbC0hqXKf11hVsWQjhUDOGbU/MrMxIehLE2Nr4s AckDDUyihDoN8ztkY0yKDXygnnpGfKhbu7wNtb4rOmEWACoXECG/bpc9S2CPD8q0 7misjuK2IZV0tVIhiqkVZ/IePJA5R6WmEqTQ346rGPbn -----END CERTIFICATE-----Generated at Wed May 13 08:25:07 2026 by rpki-client