$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/2AAD212086FE11F194514C90ABEE528E.roa File: 2AAD212086FE11F194514C90ABEE528E.roa (raw, json) Hash identifier: STwQSq8DQE2VS7puIC3LaYb71CLa0EpjXHWsARHQLwU= Subject key identifier: 27:19:94:C8:EE:3D:4F:C0:DF:5F:07:46:A7:D0:DE:E1:B5:8C:8D:1D Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Certificate serial: 2C12 Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/2AAD212086FE11F194514C90ABEE528E.roa Signing time: Fri 24 Jul 2026 01:22:42 +0000 ROA not before: Fri 24 Jul 2026 01:22:42 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 58621 IP address blocks: 43.245.96.0/22 maxlen: 24 43.245.108.0/22 maxlen: 24 43.245.252.0/22 maxlen: 24 101.100.192.0/18 maxlen: 24 103.9.100.0/22 maxlen: 24 103.11.188.0/22 maxlen: 24 103.15.232.0/22 maxlen: 24 103.104.196.0/24 maxlen: 24 103.245.92.0/22 maxlen: 24 111.235.136.0/22 maxlen: 24 119.31.232.0/21 maxlen: 24 2001:df0:454::/48 maxlen: 48 2001:df3:4f00::/48 maxlen: 48 2403:cb00::/32 maxlen: 96 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 01:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11282 (0x2c12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Validity Not Before: Jul 24 01:22:42 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a62be62-0b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:15:02:7a:a7:d2:f6:03:0f:2c:b0:71:9b:a2: 72:f9:98:7a:a6:9c:c8:e5:b0:6d:a6:58:36:d8:7b: 22:b9:48:b6:2c:16:9e:71:21:ed:56:24:dc:df:31: 65:d6:b6:36:86:2e:11:ab:46:60:1b:85:f0:c3:2b: 85:b2:56:04:29:a0:e1:99:37:37:2b:4a:2a:67:73: 5b:0b:52:69:57:64:25:95:91:44:c6:a3:85:a6:29: 49:0b:5b:f6:50:a5:35:d1:f6:c3:5c:78:6c:68:1a: 26:0c:e7:97:05:c8:c9:10:5f:ca:bd:d1:e1:b2:da: 69:a1:f4:da:b8:d2:a4:cb:4f:03:cd:12:bd:10:0a: 8a:78:4b:f3:3e:99:45:91:d4:74:8a:4a:b5:62:56: 68:31:6e:86:d3:36:0e:ff:3a:91:5a:cd:77:0f:56: ad:2c:73:77:4e:87:cc:d4:1e:28:5d:7e:d4:9e:65: fc:8b:71:26:90:dc:2b:f2:97:65:1f:3e:67:7a:73: 5f:04:70:cc:cf:bf:45:3e:ed:62:b1:8b:2f:57:5a: 0e:f0:d6:45:f3:ce:85:f1:32:95:0e:13:e5:d3:ad: 14:7c:2a:b1:2a:40:fc:b5:6e:cb:09:88:3b:2a:5d: e5:27:5c:3e:ed:d1:c9:d8:92:53:d1:87:43:c6:76: 74:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:19:94:C8:EE:3D:4F:C0:DF:5F:07:46:A7:D0:DE:E1:B5:8C:8D:1D X509v3 Authority Key Identifier: keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/2AAD212086FE11F194514C90ABEE528E.roa sbgp-ipAddrBlock: critical IPv4: 43.245.96.0/22 43.245.108.0/22 43.245.252.0/22 101.100.192.0/18 103.9.100.0/22 103.11.188.0/22 103.15.232.0/22 103.104.196.0/24 103.245.92.0/22 111.235.136.0/22 119.31.232.0/21 IPv6: 2001:df0:454::/48 2001:df3:4f00::/48 2403:cb00::/32 Signature Algorithm: sha256WithRSAEncryption 18:b8:33:63:3d:e9:1d:97:af:d1:5b:6c:f8:92:a1:e1:a0:1b: 2c:79:50:a1:69:67:0d:1b:a4:1e:b1:7e:07:bf:7c:51:39:da: 6a:3d:26:e3:9b:c4:4e:08:7a:c0:95:df:91:8a:c5:c9:21:c3: 41:e5:f4:7e:39:f7:83:d5:2a:b2:e9:8d:69:9e:14:c5:20:76: 13:d1:0f:5f:d1:d6:d0:8f:9f:a7:48:41:6a:74:09:e1:d5:8f: 40:54:f7:e7:80:b7:eb:9f:6f:eb:fb:56:4d:e7:83:bd:6a:05: cc:65:de:02:b4:16:cc:84:33:42:ce:ad:66:91:f3:75:3a:e1: 65:3a:ed:df:8b:13:c6:76:c9:f3:68:2e:b2:4b:98:f0:5d:ca: 35:7d:54:44:44:79:6c:ad:7b:a1:0d:8f:a8:c3:74:1a:56:42: 86:49:e2:8b:35:0a:8d:3c:8c:a3:ee:34:5c:1f:41:84:87:83: 53:ea:c0:c6:29:ea:40:a5:e9:f9:37:e6:bc:24:a6:1f:a5:70: 31:22:0f:af:af:2d:7a:4b:95:33:f8:e8:ae:37:0c:2c:07:c3: d2:ed:04:c2:ed:7b:bf:a6:a6:bd:2f:08:76:77:ba:00:1d:e1: b5:9d:08:06:41:d4:04:5e:18:fe:25:25:31:34:97:05:1f:87: 65:fc:97:eb -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgICLBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFQzUxMTAvBgNVBAUTKDlGQ0UyODkxNEM1MERDOTk3NTVGMTA4QUI0MzM0Rjc3 MkNCRUEwRTIwHhcNMjYwNzI0MDEyMjQyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYyYmU2Mi0wYjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hUCeqfS9gMPLLBxm6Jy+Zh6ppzI5bBtplg22HsiuUi2LBaecSHtViTc3zFl 1rY2hi4Rq0ZgG4XwwyuFslYEKaDhmTc3K0oqZ3NbC1JpV2QllZFExqOFpilJC1v2 UKU10fbDXHhsaBomDOeXBcjJEF/KvdHhstppofTauNKky08DzRK9EAqKeEvzPplF kdR0ikq1YlZoMW6G0zYO/zqRWs13D1atLHN3TofM1B4oXX7UnmX8i3EmkNwr8pdl Hz5nenNfBHDMz79FPu1isYsvV1oO8NZF886F8TKVDhPl060UfCqxKkD8tW7LCYg7 Kl3lJ1w+7dHJ2JJT0YdDxnZ0jwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFCcZlMju PU/A318HRqfQ3uG1jI0dMB8GA1UdIwQYMBaAFJ/OKJFMUNyZdV8QirQzT3csvqDi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkVDNS8yREVDQUU1NjBF NTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNKbDFYeENLdEROUGR5eS1v T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL244NG9rVXhRM0psMVh4Q0t0RE5QZHl5LW9PSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZFQzUvMkRFQ0FFNTYwRTU2MTFFNEI2RjE5NTNBQzRGOUFFMDIvMkFBRDIxMjA4 NkZFMTFGMTk0NTE0QzkwQUJFRTUyOEUucm9hMHwGCCsGAQUFBwEHAQH/BG0wazBI BAIAATBCAwQCK/VgAwQCK/VsAwQCK/X8AwQGZWTAAwQCZwlkAwQCZwu8AwQCZw/o AwQAZ2jEAwQCZ/VcAwQCb+uIAwQDdx/oMB8EAgACMBkDBwAgAQ3wBFQDBwAgAQ3z TwADBQAkA8sAMA0GCSqGSIb3DQEBCwUAA4IBAQAYuDNjPekdl6/RW2z4kqHhoBss eVChaWcNG6QesX4Hv3xROdpqPSbjm8ROCHrAld+RisXJIcNB5fR+OfeD1Sqy6Y1p nhTFIHYT0Q9f0dbQj5+nSEFqdAnh1Y9AVPfngLfrn2/r+1ZN54O9agXMZd4CtBbM hDNCzq1mkfN1OuFlOu3fixPGdsnzaC6yS5jwXco1fVRERHlsrXuhDY+ow3QaVkKG SeKLNQqNPIyj7jRcH0GEh4NT6sDGKepApen5N+a8JKYfpXAxIg+vry16S5Uz+Oiu NwwsB8PS7QTC7Xu/pqa9Lwh2d7oAHeG1nQgGQdQEXhj+JSUxNJcFH4dl/Jfr -----END CERTIFICATE-----Generated at Fri Jul 24 10:41:51 2026 by rpki-client