$ rpki-client -vvf rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/192968FAA43411E9BF46490BC4F9AE02.roa File: 192968FAA43411E9BF46490BC4F9AE02.roa (raw, json) Hash identifier: f81oh/TFo3qHVNgAKwfZj9NYv7cN7F1ZMwUFU1LNjCw= Subject key identifier: F1:82:86:52:C7:65:44:AB:C4:1D:40:A2:E2:1F:38:9F:1C:78:00:3A Certificate issuer: /CN=A913F4B0/serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039 Certificate serial: 0EDE Authority key identifier: 19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/192968FAA43411E9BF46490BC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:49:22 +0000 ROA not before: Fri 08 Aug 2025 18:27:29 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 132882 IP address blocks: 43.228.200.0/22 maxlen: 22 43.252.216.0/22 maxlen: 22 103.12.140.0/22 maxlen: 22 103.22.160.0/22 maxlen: 22 103.26.248.0/22 maxlen: 22 103.194.80.0/22 maxlen: 22 163.53.224.0/22 maxlen: 22 2400:6e80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3806 (0xede) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F4B0, serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039 Validity Not Before: Aug 8 18:27:29 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a443e2-7138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:04:2c:c8:92:53:2f:a9:2e:3a:85:f2:92:85: 00:a8:5d:df:24:a1:f8:0e:89:e4:f7:65:99:02:13: 03:4f:13:9f:ba:13:7e:4d:c6:cd:0e:aa:ff:14:88: fb:74:98:05:85:ed:e8:76:6d:9a:eb:5a:e7:e8:ac: 01:27:07:d5:cd:8d:16:2e:d1:d5:5a:a5:34:ae:d1: ec:96:3a:4d:59:12:6a:53:05:46:0a:4a:1e:3f:fa: a6:19:91:48:d2:f9:1a:f8:2c:a1:f6:f8:c5:cf:63: 43:e0:9b:25:1f:f2:2e:cf:71:d7:1d:af:d1:5b:f8: 6e:a0:60:6d:5a:91:18:5e:30:b2:1a:71:bd:3a:20: fc:41:22:f3:90:4e:07:4f:64:e1:dd:69:ec:fe:90: 5e:37:f3:f2:8c:9e:73:87:8a:90:a2:4b:52:1e:7b: c6:14:3c:c9:63:97:9d:d3:09:79:b0:17:e3:51:e2: 56:96:f0:44:7c:b5:33:67:49:ae:e1:6d:0f:4c:3f: 68:42:40:98:89:62:67:a9:eb:25:ac:db:2a:93:3c: 37:d9:7e:d1:57:d1:93:8c:d4:db:17:04:ad:31:fa: 3e:92:9b:cd:a7:a9:7a:37:15:2a:0a:7c:b5:ee:76: 77:52:92:69:b4:8c:06:8e:b9:f1:73:e3:75:6b:d9: 02:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:82:86:52:C7:65:44:AB:C4:1D:40:A2:E2:1F:38:9F:1C:78:00:3A X509v3 Authority Key Identifier: keyid:19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/192968FAA43411E9BF46490BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.228.200.0/22 43.252.216.0/22 103.12.140.0/22 103.22.160.0/22 103.26.248.0/22 103.194.80.0/22 163.53.224.0/22 IPv6: 2400:6e80::/32 Signature Algorithm: sha256WithRSAEncryption 68:ad:0b:c2:23:26:02:fc:0a:f1:19:bd:d8:72:b5:f0:ad:5c: 7b:07:47:9f:a1:f5:46:5c:c4:6c:02:a2:1a:b0:7d:a6:f9:19: b4:23:f5:d9:ef:e0:d6:8f:2c:0a:bb:ed:e1:41:25:f9:65:77: b0:98:c8:f4:2e:ec:87:6e:3b:41:b7:5d:52:8c:4e:7f:62:d0: ef:6d:2c:de:f1:9f:5f:39:a5:8e:2a:ba:0a:bc:cf:bc:bb:db: 18:47:e9:6a:eb:c0:e0:3f:22:57:ff:c0:7a:55:aa:65:78:ba: 5f:c4:12:9c:28:32:47:be:c9:d3:e3:6e:a3:f2:a8:ac:2a:90: fd:22:b4:16:7d:7b:86:a4:14:1d:99:3e:ca:68:59:20:8a:09: 9e:58:78:36:f9:4e:68:67:a5:97:4d:55:19:f0:f0:d5:bd:48: 3b:82:52:7c:99:f5:eb:02:2e:80:26:ef:50:7e:29:c3:85:0b: 84:32:25:18:a1:53:94:ce:92:e2:cf:62:b8:06:be:9a:c6:91: ca:37:9c:a5:6c:31:b9:30:fa:5a:03:07:53:c0:d5:53:5e:8d: 1f:bf:f6:56:a9:ef:6f:68:14:81:40:68:57:41:59:9e:0f:a5: 07:c0:4d:8c:01:2e:4f:28:10:ca:83:42:15:b3:04:ff:d3:0a: b3:c0:7c:f8 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICDt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y0QjAxMTAvBgNVBAUTKDE5NENGQUVDMDc1NjExRkY4M0M0MjFDREE4Nzk3RUQz MEVBMkQwMzkwHhcNMjUwODA4MTgyNzI5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDNlMi03MTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAQsyJJTL6kuOoXykoUAqF3fJKH4Donk92WZAhMDTxOfuhN+TcbNDqr/FIj7 dJgFhe3odm2a61rn6KwBJwfVzY0WLtHVWqU0rtHsljpNWRJqUwVGCkoeP/qmGZFI 0vka+Cyh9vjFz2ND4JslH/Iuz3HXHa/RW/huoGBtWpEYXjCyGnG9OiD8QSLzkE4H T2Th3Wns/pBeN/PyjJ5zh4qQoktSHnvGFDzJY5ed0wl5sBfjUeJWlvBEfLUzZ0mu 4W0PTD9oQkCYiWJnqeslrNsqkzw32X7RV9GTjNTbFwStMfo+kpvNp6l6NxUqCny1 7nZ3UpJptIwGjrnxc+N1a9kCEwIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFPGChlLH ZUSrxB1AouIfOJ8ceAA6MB8GA1UdIwQYMBaAFBlM+uwHVhH/g8Qhzah5ftMOotA5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjRCMC8yRDI3MDY5MkE0 MzMxMUU5ODgxNThGMDlDNEY5QUUwMi9HVXo2N0FkV0VmLUR4Q0hOcUhsLTB3Nmkw RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVejY3QWRXRWYtRHhDSE5xSGwtMHc2aTBEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0Y0QjAvMkQyNzA2OTJBNDMzMTFFOTg4MTU4RjA5QzRGOUFFMDIvMTkyOTY4RkFB NDM0MTFFOUJGNDY0OTBCQzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAw BAIAATAqAwQCK+TIAwQCK/zYAwQCZwyMAwQCZxagAwQCZxr4AwQCZ8JQAwQCozXg MA0EAgACMAcDBQAkAG6AMA0GCSqGSIb3DQEBCwUAA4IBAQBorQvCIyYC/ArxGb3Y crXwrVx7B0efofVGXMRsAqIasH2m+Rm0I/XZ7+DWjywKu+3hQSX5ZXewmMj0LuyH bjtBt11SjE5/YtDvbSze8Z9fOaWOKroKvM+8u9sYR+lq68DgPyJX/8B6VapleLpf xBKcKDJHvsnT426j8qisKpD9IrQWfXuGpBQdmT7KaFkgigmeWHg2+U5oZ6WXTVUZ 8PDVvUg7glJ8mfXrAi6AJu9QfinDhQuEMiUYoVOUzpLiz2K4Br6axpHKN5ylbDG5 MPpaAwdTwNVTXo0fv/ZWqe9vaBSBQGhXQVmeD6UHwE2MAS5PKBDKg0IVswT/0wqz wHz4 -----END CERTIFICATE-----Generated at Thu Mar 26 16:40:10 2026 by rpki-client