$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/C038B7FE86EF11F19E006003A7EE528E.roa File: C038B7FE86EF11F19E006003A7EE528E.roa (raw, json) Hash identifier: ZEscxUiYOhY8wr30WKkD3cENQG8jr+C0jILnAClnhKo= Subject key identifier: 48:0E:69:D6:D2:76:8E:54:CE:CE:E8:91:E2:86:70:63:D4:AD:47:4C Certificate issuer: /CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Certificate serial: 1EB1 Authority key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/C038B7FE86EF11F19E006003A7EE528E.roa Signing time: Thu 23 Jul 2026 23:39:31 +0000 ROA not before: Thu 23 Jul 2026 23:39:30 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 10226 IP address blocks: 43.252.244.0/22 maxlen: 24 101.78.8.0/21 maxlen: 24 103.13.88.0/22 maxlen: 24 114.129.24.0/21 maxlen: 24 202.62.96.0/20 maxlen: 24 2404:2e00::/32 maxlen: 32 2404:2e00::/48 maxlen: 48 2404:2e00:1::/48 maxlen: 48 2404:2e00:2::/48 maxlen: 48 2404:2e00:3::/48 maxlen: 48 2404:2e00:4::/48 maxlen: 48 2404:2e00:5::/48 maxlen: 48 2404:2e00:6::/48 maxlen: 48 2404:2e00:7::/48 maxlen: 48 2404:2e00:8::/48 maxlen: 48 2404:2e00:9::/48 maxlen: 48 2404:2e00:a::/48 maxlen: 48 2404:2e00:b::/48 maxlen: 48 2404:2e00:c::/48 maxlen: 48 2404:2e00:d::/48 maxlen: 48 2404:2e00:e::/48 maxlen: 48 2404:2e00:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 23:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7857 (0x1eb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAB9, serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Validity Not Before: Jul 23 23:39:30 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a62a632-81aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:91:86:6a:99:80:65:45:09:54:d5:45:43:fa: 07:a4:ef:7e:c8:3f:f1:10:1b:b5:0f:b4:75:5a:fd: 63:a7:14:28:62:78:99:aa:a9:5f:a2:65:31:ee:45: 61:26:9e:13:29:24:92:8e:a0:f2:1e:47:9b:d8:53: 04:f3:37:f7:77:e2:bc:99:47:59:95:de:2d:21:b9: b5:d5:b0:73:49:e6:5c:0b:75:78:70:ba:f3:d1:8d: 2a:92:d6:a3:4b:f8:4d:e8:23:cc:e2:53:50:44:04: e2:c6:c2:39:9c:de:54:eb:99:b2:7a:c6:5b:90:e0: 2e:32:ac:1c:a6:9f:84:e1:14:69:6d:c3:c4:be:36: 62:1c:69:33:8d:7b:1a:37:08:78:2d:8f:4d:2d:df: 67:d0:bf:7d:2b:f4:38:36:8f:7a:fd:32:74:e3:ac: 36:ad:b5:b5:9e:2f:09:3e:ba:4f:1e:e5:f5:4f:d3: 91:9d:75:3e:c6:5e:3e:cb:a6:bd:4f:6e:39:c5:11: 33:9c:b2:cf:62:a9:0f:c9:08:e3:a5:0c:3a:ec:8b: bc:d1:84:d1:db:b7:63:d3:0d:d3:53:3a:cc:8c:fd: ae:93:2f:f5:0e:5f:f6:26:98:ea:17:ee:42:98:20: 86:98:b4:04:83:9f:3b:27:9f:91:1f:02:ef:08:ab: b1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0E:69:D6:D2:76:8E:54:CE:CE:E8:91:E2:86:70:63:D4:AD:47:4C X509v3 Authority Key Identifier: keyid:34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/C038B7FE86EF11F19E006003A7EE528E.roa sbgp-ipAddrBlock: critical IPv4: 43.252.244.0/22 101.78.8.0/21 103.13.88.0/22 114.129.24.0/21 202.62.96.0/20 IPv6: 2404:2e00::/32 Signature Algorithm: sha256WithRSAEncryption a3:d3:32:09:66:ed:29:35:87:47:97:14:b1:1c:eb:ce:2d:2a: 7c:36:83:93:4d:4a:de:49:a7:b3:3f:5d:b2:cd:4f:1e:a4:1c: 78:64:2d:8c:b2:9b:19:6d:05:2a:99:f6:48:ad:7b:60:ec:13: 99:f7:07:6a:66:5c:5c:25:00:5d:2e:0b:5d:e8:bf:b4:48:ec: 80:eb:11:dd:e3:c2:62:9b:bb:8e:7e:b2:ec:01:46:e1:80:ad: 2e:4b:3a:18:a5:c6:20:69:e4:ee:c3:19:8e:f2:58:08:8d:90: d4:6d:3e:ca:af:28:6b:e4:a3:6e:d8:55:77:a2:90:68:b3:51: 91:72:8c:a1:21:22:28:1d:4f:42:4e:aa:83:db:3a:2b:b0:9b: 2f:30:de:f6:f5:63:96:91:48:1f:47:5c:75:f1:30:d8:9e:d7: 9e:bc:18:c8:70:a7:4d:2e:99:e7:8d:8d:01:f9:0a:3f:20:e8: fd:6d:9f:8b:bf:47:28:26:55:80:08:1e:e2:bf:19:0e:90:52: e4:69:2d:8d:3e:5d:b7:b4:0f:e4:83:ee:5a:2c:93:70:e4:f4: 28:0e:61:36:fd:e2:47:51:29:d0:44:7d:b7:d2:fb:80:02:8a: bc:3d:0a:0c:51:63:7d:a2:ec:45:17:ff:b6:7b:5e:a5:c2:bb: a0:87:63:4e -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICHrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQjkxMTAvBgNVBAUTKDM0OUMwOUU5OUNBODA2RTMzNTkxNTczNUNGOTcyQTFC Rjg2NEE2QzMwHhcNMjYwNzIzMjMzOTMwWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYyYTYzMi04MWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/JGGapmAZUUJVNVFQ/oHpO9+yD/xEBu1D7R1Wv1jpxQoYniZqqlfomUx7kVh Jp4TKSSSjqDyHkeb2FME8zf3d+K8mUdZld4tIbm11bBzSeZcC3V4cLrz0Y0qktaj S/hN6CPM4lNQRATixsI5nN5U65myesZbkOAuMqwcpp+E4RRpbcPEvjZiHGkzjXsa Nwh4LY9NLd9n0L99K/Q4No96/TJ046w2rbW1ni8JPrpPHuX1T9ORnXU+xl4+y6a9 T245xREznLLPYqkPyQjjpQw67Iu80YTR27dj0w3TUzrMjP2uky/1Dl/2JpjqF+5C mCCGmLQEg587J5+RHwLvCKuxJQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFEgOadbS do5Uzs7okeKGcGPUrUdMMB8GA1UdIwQYMBaAFDScCemcqAbjNZFXNc+XKhv4ZKbD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFCOS85MzhBNzBFNDk1 Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1TTFrVmMxejVjcUdfaGtw c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Kd0o2WnlvQnVNMWtWYzF6NWNxR19oa3BzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZBQjkvOTM4QTcwRTQ5NUNEMTFFNkJGNEE4MjMyQzRGOUFFMDIvQzAzOEI3RkU4 NkVGMTFGMTlFMDA2MDAzQTdFRTUyOEUucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQCK/z0AwQDZU4IAwQCZw1YAwQDcoEYAwQEyj5gMA0EAgACMAcDBQAk BC4AMA0GCSqGSIb3DQEBCwUAA4IBAQCj0zIJZu0pNYdHlxSxHOvOLSp8NoOTTUre SaezP12yzU8epBx4ZC2MspsZbQUqmfZIrXtg7BOZ9wdqZlxcJQBdLgtd6L+0SOyA 6xHd48Jim7uOfrLsAUbhgK0uSzoYpcYgaeTuwxmO8lgIjZDUbT7Kryhr5KNu2FV3 opBos1GRcoyhISIoHU9CTqqD2zorsJsvMN729WOWkUgfR1x18TDYnteevBjIcKdN LpnnjY0B+Qo/IOj9bZ+Lv0coJlWACB7ivxkOkFLkaS2NPl23tA/kg+5aLJNw5PQo DmE2/eJHUSnQRH230vuAAoq8PQoMUWN9ouxFF/+2e16lwrugh2NO -----END CERTIFICATE-----Generated at Fri Jul 24 02:11:58 2026 by rpki-client