$ rpki-client -vvf rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/B34FF580C40C11EB9C21CF7BC4F9AE02.roa File: B34FF580C40C11EB9C21CF7BC4F9AE02.roa (raw, json) Hash identifier: AHX2Cbl2rz6kRmxymOxkw7NSq6UN44I0j9H1piywQnM= Subject key identifier: 66:10:AB:63:90:DD:D2:24:D6:C2:52:40:F4:BE:15:B1:B0:43:23:75 Certificate issuer: /CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608 Certificate serial: 35E6 Authority key identifier: 7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/B34FF580C40C11EB9C21CF7BC4F9AE02.roa Signing time: Wed 22 Jul 2026 15:14:27 +0000 ROA not before: Wed 22 Jul 2026 15:14:26 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 24550 IP address blocks: 43.228.192.0/22 maxlen: 24 103.225.244.0/22 maxlen: 24 111.119.32.0/19 maxlen: 19 111.119.32.0/21 maxlen: 24 111.119.48.0/20 maxlen: 24 116.90.224.0/20 maxlen: 24 118.91.160.0/20 maxlen: 24 2400:9700::/32 maxlen: 32 2400:9700:5::/48 maxlen: 48 2400:9700:6::/48 maxlen: 48 2400:9700:7::/48 maxlen: 48 2400:9700:8::/48 maxlen: 48 2400:9700:20::/44 maxlen: 44 2400:9700:100::/44 maxlen: 44 2400:9700:100::/48 maxlen: 48 2400:9700:101::/48 maxlen: 48 2400:9700:103::/48 maxlen: 48 2400:9700:110::/44 maxlen: 44 2400:9700:110::/48 maxlen: 48 2400:9700:111::/48 maxlen: 48 2400:9700:113::/48 maxlen: 48 2400:9700:120::/44 maxlen: 44 2400:9700:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13798 (0x35e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913ED35, serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608 Validity Not Before: Jul 22 15:14:26 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a60de52-ae1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a1:83:37:1a:28:0c:88:86:e5:b3:2d:08:96: f4:e3:27:ba:55:8c:86:d8:db:99:bd:1a:8f:0d:13: 28:83:2c:5b:db:8b:d0:08:a4:09:ff:62:f5:28:54: 64:b3:35:a9:b6:79:62:55:75:ee:37:ff:e6:de:f2: 12:d3:51:98:09:12:67:45:ad:7b:67:70:0c:b5:ba: d7:1c:01:3a:82:f2:ce:92:54:ed:81:d4:01:6d:6a: 5f:0e:c3:db:93:24:8d:48:fd:7c:b4:20:28:da:37: 26:34:5c:96:91:ac:78:43:47:bb:4b:76:99:1f:2f: d4:59:2a:fe:55:83:4f:ca:c5:63:3b:4e:95:6b:2d: 4f:18:85:a4:5b:29:c5:2e:5d:8a:43:ff:bd:c7:fb: 73:99:9e:4b:62:68:f6:24:93:31:39:f2:06:cc:61: b2:b3:eb:5b:a7:ed:5f:18:69:9d:82:69:2d:2c:d2: 97:44:08:53:55:27:af:84:a0:a7:ca:20:25:c6:30: b1:f0:ea:fe:d1:ab:2f:91:19:b0:d3:c7:88:4d:ff: 09:d7:3d:1b:25:4a:41:ae:01:ad:30:08:30:36:ae: c1:76:b5:fd:dc:bd:6a:ed:2e:6f:38:6e:7e:94:00: 8b:ec:59:f7:ce:d4:ed:d8:55:8c:20:8b:e3:c5:38: c6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:10:AB:63:90:DD:D2:24:D6:C2:52:40:F4:BE:15:B1:B0:43:23:75 X509v3 Authority Key Identifier: keyid:7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/B34FF580C40C11EB9C21CF7BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.228.192.0/22 103.225.244.0/22 111.119.32.0/19 116.90.224.0/20 118.91.160.0/20 IPv6: 2400:9700::/32 Signature Algorithm: sha256WithRSAEncryption cf:0d:30:47:27:c3:20:cd:2a:92:34:44:92:45:dc:be:e9:78: d5:f4:a9:a7:85:82:41:23:42:f3:43:7a:4c:86:2a:22:58:f1: 71:77:29:8c:aa:0f:90:c8:c7:e5:11:d7:85:1c:cb:c0:90:de: 92:d4:c4:d7:48:ad:22:49:ac:71:7a:d2:53:db:6e:0c:ce:2f: 50:c2:69:68:4a:4e:64:76:90:e7:99:f2:d9:bf:23:94:3f:c1: 67:d3:58:0a:ed:24:75:d7:60:6e:0b:71:0b:07:ba:f6:b9:0c: 87:3b:d7:37:90:c3:ff:ca:30:5f:0d:36:c0:c2:6d:26:02:82: ae:c1:ef:62:fc:ef:8d:4a:db:c5:aa:cc:0c:5c:d2:7c:d7:3c: e0:98:a7:dd:a7:47:45:67:39:e5:ef:2b:92:91:96:ae:b4:d4: 42:50:f7:50:d8:2b:78:9f:4f:bc:4e:cd:5d:0f:05:61:ac:da: 72:7d:97:08:ea:db:f8:c4:c9:c9:20:bf:d9:ce:51:66:97:50: 9f:58:4f:51:5e:75:40:25:4a:a1:45:6c:d1:46:87:81:7f:7d: 91:f2:b2:b2:15:6b:2d:a5:77:54:89:62:ec:c8:f9:0f:24:60: 66:e3:59:dd:c7:1e:f5:8d:4f:4a:8e:23:d3:40:45:c2:4a:a4: 4c:ac:52:1e -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICNeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VEMzUxMTAvBgNVBAUTKDdFRTk0NUU5RTVFNTFDNEI0MUQ5OUM0MzMyOTUyRjlD OTU4NzY2MDgwHhcNMjYwNzIyMTUxNDI2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYwZGU1Mi1hZTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6GDNxooDIiG5bMtCJb04ye6VYyG2NuZvRqPDRMogyxb24vQCKQJ/2L1KFRk szWptnliVXXuN//m3vIS01GYCRJnRa17Z3AMtbrXHAE6gvLOklTtgdQBbWpfDsPb kySNSP18tCAo2jcmNFyWkax4Q0e7S3aZHy/UWSr+VYNPysVjO06Vay1PGIWkWynF Ll2KQ/+9x/tzmZ5LYmj2JJMxOfIGzGGys+tbp+1fGGmdgmktLNKXRAhTVSevhKCn yiAlxjCx8Or+0asvkRmw08eITf8J1z0bJUpBrgGtMAgwNq7BdrX93L1q7S5vOG5+ lACL7Fn3ztTt2FWMIIvjxTjGyQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFGYQq2OQ 3dIk1sJSQPS+FbGwQyN1MB8GA1UdIwQYMBaAFH7pRenl5RxLQdmcQzKVL5yVh2YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUQzNS9CNjNCQTdFRTFE OTQxMUUyOUQxQTJFRjkwOEIwMkNEMi9mdWxGNmVYbEhFdEIyWnhETXBVdm5KV0ha Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1bEY2ZVhsSEV0QjJaeERNcFV2bkpXSFpnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0VEMzUvQjYzQkE3RUUxRDk0MTFFMjlEMUEyRUY5MDhCMDJDRDIvQjM0RkY1ODBD NDBDMTFFQjlDMjFDRjdCQzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQCK+TAAwQCZ+H0AwQFb3cgAwQEdFrgAwQEdlugMA0EAgACMAcDBQAk AJcAMA0GCSqGSIb3DQEBCwUAA4IBAQDPDTBHJ8MgzSqSNESSRdy+6XjV9KmnhYJB I0LzQ3pMhioiWPFxdymMqg+QyMflEdeFHMvAkN6S1MTXSK0iSaxxetJT224Mzi9Q wmloSk5kdpDnmfLZvyOUP8Fn01gK7SR112BuC3ELB7r2uQyHO9c3kMP/yjBfDTbA wm0mAoKuwe9i/O+NStvFqswMXNJ81zzgmKfdp0dFZznl7yuSkZautNRCUPdQ2Ct4 n0+8Ts1dDwVhrNpyfZcI6tv4xMnJIL/ZzlFml1CfWE9RXnVAJUqhRWzRRoeBf32R 8rKyFWstpXdUiWLsyPkPJGBm41ndxx71jU9KjiPTQEXCSqRMrFIe -----END CERTIFICATE-----Generated at Fri Jul 24 03:47:02 2026 by rpki-client