$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/DB2A35A6817711F19F018AE08EA30FBC.roa File: DB2A35A6817711F19F018AE08EA30FBC.roa (raw, json) Hash identifier: jatNXk52k64uClfl02ixrvCT8amWzJ8ZDNs1sE6Nl9Q= Subject key identifier: F8:6D:EF:98:E7:44:5B:30:42:4C:A8:C6:AE:3C:EA:F2:48:6B:F0:21 Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 05BC Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/DB2A35A6817711F19F018AE08EA30FBC.roa Signing time: Fri 17 Jul 2026 00:38:40 +0000 ROA not before: Fri 17 Jul 2026 00:38:40 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 2914 IP address blocks: 113.20.40.0/22 maxlen: 22 113.20.60.0/22 maxlen: 22 223.29.160.0/22 maxlen: 22 223.29.164.0/22 maxlen: 22 223.29.168.0/22 maxlen: 22 223.29.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1468 (0x5bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Jul 17 00:38:40 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a597990-4b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8b:33:5f:6d:b7:ec:ea:4d:2a:40:b4:e3:ff: d5:77:8e:0e:b8:e8:97:d4:e0:2a:07:1d:0a:82:cd: f3:70:63:5f:f8:82:3c:3e:64:32:8b:47:b2:66:6c: 98:00:af:07:a4:77:9c:e5:42:a3:20:7f:a5:58:23: cc:7b:18:d1:0b:d9:c1:82:16:83:18:9f:00:6c:34: 2c:35:e2:88:f4:35:03:6a:83:9b:ac:7a:0c:5e:71: 80:e5:99:84:7d:0c:3f:28:25:9d:b6:02:4d:e7:c5: 96:a9:55:6a:03:b7:d2:e5:7f:36:7b:a3:9b:bf:79: 61:50:00:94:3f:1e:c3:63:50:d2:d3:97:05:62:59: 2a:48:85:cc:21:88:e6:0b:dd:75:fa:32:5d:d1:3e: ed:0b:3c:61:f2:54:b9:a7:a9:b2:e8:40:b8:bb:18: 3f:57:43:dc:22:b0:af:33:d1:34:d0:cd:05:38:fe: 27:f1:d7:bc:0f:b1:f2:95:48:8f:aa:3a:6f:f3:a2: 58:79:ea:61:c0:b3:41:c9:a6:c0:99:dd:ed:2c:06: d4:51:24:d5:53:06:b0:4b:ec:ee:9d:22:67:18:36: 59:4b:80:12:d2:49:d8:4f:5a:a2:b6:a1:01:53:3b: 7b:1d:95:d2:54:f0:68:56:bb:b2:0d:06:91:e8:87: ca:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6D:EF:98:E7:44:5B:30:42:4C:A8:C6:AE:3C:EA:F2:48:6B:F0:21 X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/DB2A35A6817711F19F018AE08EA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 113.20.40.0/22 113.20.60.0/22 223.29.160.0/20 Signature Algorithm: sha256WithRSAEncryption 73:8f:3c:dd:19:74:50:46:df:76:8e:c8:d9:f7:fd:38:36:62: 3b:05:fe:65:0b:54:5b:dd:3e:aa:95:4d:1b:fe:0f:d8:d0:60: c1:f3:7c:1e:f1:1e:d8:9f:ce:40:2b:3e:7d:08:39:d7:05:3f: 63:2a:99:e4:47:e6:74:2e:08:06:cd:bf:22:fd:56:aa:0e:20: 87:f7:56:ff:35:a0:97:13:cf:4f:dc:35:8c:48:27:45:26:c5: c0:6c:63:eb:bc:41:b2:e6:7f:e8:fc:c9:66:ef:2c:af:33:40: 22:2f:05:3d:93:85:00:40:39:b2:30:dc:8f:dc:43:f1:17:a4: f6:60:e0:e2:45:23:7c:df:83:9c:42:1b:18:dd:b9:16:3c:7a: e8:bd:08:8e:8b:21:fd:21:da:73:92:c4:51:c6:b2:af:a6:5d: 2b:00:b0:6e:33:31:43:19:de:64:45:18:53:e3:3f:c9:15:dd: 15:1c:4a:54:45:33:3d:e1:29:02:11:d3:fd:ca:fd:c6:2d:2e: 94:37:62:74:fa:1b:85:68:68:9b:1e:12:d9:c4:2e:4a:e9:82: 70:69:8d:83:d8:b7:73:b0:74:21:d9:bb:1f:06:72:db:5e:9a: ce:e7:5d:58:49:51:56:f1:9c:5b:cb:49:05:0e:64:5c:eb:dc: fd:52:83:f1 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjYwNzE3MDAzODQwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU5Nzk5MC00Yjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA44szX2237OpNKkC04//Vd44OuOiX1OAqBx0Kgs3zcGNf+II8PmQyi0eyZmyY AK8HpHec5UKjIH+lWCPMexjRC9nBghaDGJ8AbDQsNeKI9DUDaoObrHoMXnGA5ZmE fQw/KCWdtgJN58WWqVVqA7fS5X82e6Obv3lhUACUPx7DY1DS05cFYlkqSIXMIYjm C911+jJd0T7tCzxh8lS5p6my6EC4uxg/V0PcIrCvM9E00M0FOP4n8de8D7HylUiP qjpv86JYeephwLNByabAmd3tLAbUUSTVUwawS+zunSJnGDZZS4AS0knYT1qitqEB Uzt7HZXSVPBoVruyDQaR6IfKRwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFPht75jn RFswQkyoxq486vJIa/AhMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvREIyQTM1QTY4 MTc3MTFGMTlGMDE4QUUwOEVBMzBGQkMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCcRQoAwQCcRQ8AwQE3x2gMA0GCSqGSIb3DQEBCwUAA4IBAQBzjzzd GXRQRt92jsjZ9/04NmI7Bf5lC1Rb3T6qlU0b/g/Y0GDB83we8R7Yn85AKz59CDnX BT9jKpnkR+Z0LggGzb8i/VaqDiCH91b/NaCXE89P3DWMSCdFJsXAbGPrvEGy5n/o /Mlm7yyvM0AiLwU9k4UAQDmyMNyP3EPxF6T2YODiRSN834OcQhsY3bkWPHrovQiO iyH9IdpzksRRxrKvpl0rALBuMzFDGd5kRRhT4z/JFd0VHEpURTM94SkCEdP9yv3G LS6UN2J0+huFaGibHhLZxC5K6YJwaY2D2LdzsHQh2bsfBnLbXprO511YSVFW8Zxb y0kFDmRc69z9UoPx -----END CERTIFICATE-----Generated at Fri Jul 24 04:34:57 2026 by rpki-client