$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/3050FB0E9F7511F085D9D70FC4F9AE02.roa File: 3050FB0E9F7511F085D9D70FC4F9AE02.roa (raw, json) Hash identifier: cxFpd8YkhhSyEo49SdD/UDOXzwAIuaaISKDDdB8uQeA= Subject key identifier: 06:F4:DF:F3:8D:14:20:A3:90:0C:17:10:CC:E7:21:78:2C:DD:C3:E5 Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 0610 Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/3050FB0E9F7511F085D9D70FC4F9AE02.roa Signing time: Tue 03 Nov 2026 00:47:31 +0000 ROA not before: Tue 03 Nov 2026 00:47:31 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 45461 IP address blocks: 113.20.32.0/21 maxlen: 24 113.20.47.0/24 maxlen: 24 223.29.128.0/19 maxlen: 19 2403:200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Nov 2026 23:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1552 (0x610) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Nov 3 00:47:31 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ae92f23-2b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:97:fd:c3:43:f1:c4:71:95:a3:6b:89:27:81: b5:dc:ab:3e:7e:7c:50:be:91:b5:d2:08:b2:96:b5: 0a:ab:fe:97:f4:3b:31:4e:d7:fa:dd:4f:1c:5e:be: fd:bf:a2:ca:c1:46:6a:ac:8b:a4:7c:b0:db:1c:da: a6:eb:f6:e6:42:91:dc:72:44:48:d7:34:a4:93:46: 13:92:1f:51:3a:a5:bc:9c:b8:4c:77:74:1c:dd:ea: 41:00:b6:8c:b8:e8:71:98:e5:a2:55:86:b1:d8:83: 0a:fc:9c:85:04:50:84:90:df:95:3b:c1:b7:3e:8a: 1a:d6:31:ff:4f:ff:6d:db:4a:cf:04:40:c5:cf:85: c9:73:46:be:70:a3:35:2e:49:a9:e6:27:d9:a5:e6: a8:15:67:fc:05:07:3c:c2:6f:53:8b:3b:54:1e:f3: da:e9:c6:7f:3f:fc:b6:51:91:6e:20:70:9a:f1:4f: 6a:f0:24:75:d9:93:f7:2b:c7:73:4b:68:b1:ca:74: 6d:c9:29:1b:77:a3:fa:02:03:8a:67:bb:8b:15:63: 39:2f:1a:69:8b:36:8e:01:bd:d8:44:48:32:5d:49: a4:b5:ba:57:a3:ac:6e:56:6d:27:10:f9:a3:fb:f4: 74:e4:e9:09:ac:19:72:9e:cb:77:af:94:01:60:92: cd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F4:DF:F3:8D:14:20:A3:90:0C:17:10:CC:E7:21:78:2C:DD:C3:E5 X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/3050FB0E9F7511F085D9D70FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 113.20.32.0/21 113.20.47.0/24 223.29.128.0/19 IPv6: 2403:200::/32 Signature Algorithm: sha256WithRSAEncryption 2f:f0:28:ce:00:4e:62:76:f8:77:d0:b3:5f:09:91:94:0a:35: b1:fd:07:af:77:9e:36:7c:c0:06:25:ab:56:26:55:a1:3d:1f: 06:6b:6e:40:b1:42:88:4c:48:e8:ac:aa:8c:ba:d5:ea:0f:68: 6f:4a:ed:fa:26:77:f9:0f:aa:b6:46:6e:03:f1:a6:10:51:b1: 81:88:fe:d2:21:14:49:17:d7:fe:42:76:70:08:6a:c3:11:8d: 5b:78:c2:a8:55:d6:13:99:b1:90:77:2f:6a:61:73:b2:34:5d: ad:60:92:94:38:18:a9:23:ef:60:20:1a:b5:79:d6:84:55:ca: 17:9f:7b:da:3a:af:43:60:b1:2e:7e:40:06:72:9c:e7:14:ab: 0c:7d:84:31:6e:38:7e:c3:ad:65:b8:a9:ac:f3:c2:cd:b7:0d: 92:65:05:25:90:2b:1c:6d:4c:d7:92:72:87:ef:21:2c:63:a4: 5c:c2:a5:b0:4a:b1:1a:e9:5a:e0:1a:bb:63:cc:54:b8:1c:50: 50:fb:50:4f:5e:65:00:69:4d:db:f0:f5:70:42:79:fe:59:c9: db:5e:d4:23:03:0f:e1:83:b9:af:78:c3:2d:1d:ec:97:18:d1: b9:4d:6a:36:c9:0e:c3:df:51:14:44:91:7b:0c:2d:14:74:40: b3:d3:46:d2 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICBhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjYxMTAzMDA0NzMxWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWU5MmYyMy0yYjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkZf9w0PxxHGVo2uJJ4G13Ks+fnxQvpG10giylrUKq/6X9DsxTtf63U8cXr79 v6LKwUZqrIukfLDbHNqm6/bmQpHcckRI1zSkk0YTkh9ROqW8nLhMd3Qc3epBALaM uOhxmOWiVYax2IMK/JyFBFCEkN+VO8G3Pooa1jH/T/9t20rPBEDFz4XJc0a+cKM1 Lkmp5ifZpeaoFWf8BQc8wm9TiztUHvPa6cZ/P/y2UZFuIHCa8U9q8CR12ZP3K8dz S2ixynRtySkbd6P6AgOKZ7uLFWM5LxppizaOAb3YREgyXUmktbpXo6xuVm0nEPmj +/R05OkJrBlynst3r5QBYJLNqwIDAQABo4ICezCCAncwHQYDVR0OBBYEFAb03/ON FCCjkAwXEMznIXgs3cPlMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvMzA1MEZCMEU5 Rjc1MTFGMDg1RDlENzBGQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQDcRQgAwQAcRQvAwQF3x2AMA0EAgACMAcDBQAkAwIAMA0GCSqGSIb3 DQEBCwUAA4IBAQAv8CjOAE5idvh30LNfCZGUCjWx/Qevd542fMAGJatWJlWhPR8G a25AsUKITEjorKqMutXqD2hvSu36Jnf5D6q2Rm4D8aYQUbGBiP7SIRRJF9f+QnZw CGrDEY1beMKoVdYTmbGQdy9qYXOyNF2tYJKUOBipI+9gIBq1edaEVcoXn3vaOq9D YLEufkAGcpznFKsMfYQxbjh+w61luKms88LNtw2SZQUlkCscbUzXknKH7yEsY6Rc wqWwSrEa6VrgGrtjzFS4HFBQ+1BPXmUAaU3b8PVwQnn+WcnbXtQjAw/hg7mveMMt HeyXGNG5TWo2yQ7D31EURJF7DC0UdECz00bS -----END CERTIFICATE-----Generated at Sat Nov 14 21:05:55 2026 by rpki-client