$ rpki-client -vvf rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/BA2F8ECC7F4811F1990DB98295A30FBC.roa File: BA2F8ECC7F4811F1990DB98295A30FBC.roa (raw, json) Hash identifier: B0ehoAhHlNvECD8MrwXSLG+T0N6cMbbYGRxsUCIbqxg= Subject key identifier: 87:7C:35:16:AD:B9:A7:D5:C8:43:04:D9:D6:D3:B8:9F:B2:20:FA:B8 Certificate issuer: /CN=A9142C40/serialNumber=11CE4E5A2C08A77C4279E01CCB5BAE8C8A09C293 Certificate serial: 02 Authority key identifier: 11:CE:4E:5A:2C:08:A7:7C:42:79:E0:1C:CB:5B:AE:8C:8A:09:C2:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ec5OWiwIp3xCeeAcy1uujIoJwpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/BA2F8ECC7F4811F1990DB98295A30FBC.roa Signing time: Tue 14 Jul 2026 05:56:16 +0000 ROA not before: Tue 14 Jul 2026 05:56:16 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 138415 IP address blocks: 43.249.172.0/22 maxlen: 24 103.41.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.crl rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ec5OWiwIp3xCeeAcy1uujIoJwpM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142C40, serialNumber=11CE4E5A2C08A77C4279E01CCB5BAE8C8A09C293 Validity Not Before: Jul 14 05:56:16 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6a55cf80-8321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ec:1d:98:c5:28:57:13:8d:bb:ba:1b:9a:04: 93:38:18:43:f5:1d:39:2e:8d:6a:c2:13:e3:5c:89: e2:67:d4:cb:4c:07:68:ef:3c:b2:d3:2c:ae:4c:c9: 8b:3b:22:06:b1:6a:8b:60:56:57:8b:76:c7:e6:f2: 08:b3:f1:34:74:0a:c9:5b:35:2f:38:86:71:1f:47: cb:6a:61:5f:4a:9c:92:6b:a0:2a:65:14:57:6f:9c: b1:2b:2d:23:cc:da:97:7e:81:bc:97:ba:6f:8b:19: 98:08:4f:0d:ec:c9:a6:f2:27:89:1e:b4:2d:b6:81: ad:cd:b9:00:9f:5a:8c:70:22:4f:92:60:22:c6:8d: 6c:26:08:ca:f7:0e:74:ff:5b:cd:aa:a2:46:77:fb: 45:50:69:d1:46:1a:65:5c:69:60:47:ea:15:b5:b6: f8:e3:51:d7:25:da:f6:4f:7c:e9:0d:c1:2a:2f:ae: 97:6f:60:74:43:82:71:22:ed:af:af:44:51:92:81: f4:26:d7:75:00:3d:c9:ce:28:a5:5c:34:d3:02:d3: a3:d4:c6:bb:9f:fd:8d:cb:7c:04:d5:cc:a3:d3:4d: 9c:c1:b2:2e:ef:a6:5d:e6:87:88:bf:a7:35:01:c3: 83:00:a5:b7:03:54:ad:b9:7d:9d:48:18:ce:ed:1b: f5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7C:35:16:AD:B9:A7:D5:C8:43:04:D9:D6:D3:B8:9F:B2:20:FA:B8 X509v3 Authority Key Identifier: keyid:11:CE:4E:5A:2C:08:A7:7C:42:79:E0:1C:CB:5B:AE:8C:8A:09:C2:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ec5OWiwIp3xCeeAcy1uujIoJwpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/BA2F8ECC7F4811F1990DB98295A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 43.249.172.0/22 103.41.4.0/22 Signature Algorithm: sha256WithRSAEncryption 57:cb:c5:2e:68:d0:2a:04:08:0d:12:4e:e6:f9:96:03:53:ab: 2b:07:da:e5:11:65:be:0f:9a:ec:23:b9:2c:2a:02:cc:e3:75: b9:66:81:f2:c2:1d:20:76:ec:e4:58:12:a0:f8:e8:25:bb:bf: c3:29:e5:84:e5:d5:2a:ce:22:76:b7:3d:8c:b7:e0:a4:c9:af: d3:f6:75:11:9f:41:5b:16:d2:cd:21:84:79:7a:a1:18:a0:c7: 97:c5:91:f4:e9:08:db:94:ea:57:ec:da:62:c6:4b:07:88:fb: e8:5a:5d:94:b6:0b:5a:40:db:10:5a:36:45:83:1f:68:ce:d9: 4c:b6:51:77:32:90:f7:2d:56:ef:9e:28:e4:6c:ed:5a:38:cf: bc:99:0f:cd:1f:44:42:a7:b8:ef:a3:f1:27:ee:86:e2:46:aa: b0:b9:9e:06:a6:8a:cb:46:a2:ad:05:4a:56:09:06:a8:c6:0b: e8:d2:70:bc:6d:4d:09:62:ed:e4:50:2b:c7:90:60:e0:88:99: 45:2f:44:ed:d0:a3:84:33:4a:53:3a:13:e4:ec:b0:15:15:fd: 94:fa:c7:21:f4:aa:c0:6a:73:e2:17:a6:26:c1:e4:7a:83:54: 47:66:16:80:64:9b:7d:52:c9:77:b5:ac:66:45:90:be:28:bf: 1c:fc:53:15 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkM0MDExMC8GA1UEBRMoMTFDRTRFNUEyQzA4QTc3QzQyNzlFMDFDQ0I1QkFFOEM4 QTA5QzI5MzAeFw0yNjA3MTQwNTU2MTZaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNTVjZjgwLTgzMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCc7B2YxShXE427uhuaBJM4GEP1HTkujWrCE+NcieJn1MtMB2jvPLLTLK5MyYs7 IgaxaotgVleLdsfm8giz8TR0CslbNS84hnEfR8tqYV9KnJJroCplFFdvnLErLSPM 2pd+gbyXum+LGZgITw3syabyJ4ketC22ga3NuQCfWoxwIk+SYCLGjWwmCMr3DnT/ W82qokZ3+0VQadFGGmVcaWBH6hW1tvjjUdcl2vZPfOkNwSovrpdvYHRDgnEi7a+v RFGSgfQm13UAPcnOKKVcNNMC06PUxruf/Y3LfATVzKPTTZzBsi7vpl3mh4i/pzUB w4MApbcDVK25fZ1IGM7tG/XnAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUh3w1Fq25 p9XIQwTZ1tO4n7Ig+rgwHwYDVR0jBBgwFoAUEc5OWiwIp3xCeeAcy1uujIoJwpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyQzQwLzcwMUNFOEZBN0Y0 NTExRjFCQThBQTcwQzk1QTMwRkJDL0VjNU9XaXdJcDN4Q2VlQWN5MXV1aklvSndw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRWM1T1dpd0lwM3hDZWVBY3kxdXVqSW9Kd3BNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkM0MC83MDFDRThGQTdGNDUxMUYxQkE4QUE3MEM5NUEzMEZCQy9CQTJGOEVDQzdG NDgxMUYxOTkwREI5ODI5NUEzMEZCQy5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAIr+awDBAJnKQQwDQYJKoZIhvcNAQELBQADggEBAFfLxS5o0CoECA0S Tub5lgNTqysH2uURZb4PmuwjuSwqAszjdblmgfLCHSB27ORYEqD46CW7v8Mp5YTl 1SrOIna3PYy34KTJr9P2dRGfQVsW0s0hhHl6oRigx5fFkfTpCNuU6lfs2mLGSweI ++haXZS2C1pA2xBaNkWDH2jO2Uy2UXcykPctVu+eKORs7Vo4z7yZD80fREKnuO+j 8SfuhuJGqrC5ngamistGoq0FSlYJBqjGC+jScLxtTQli7eRQK8eQYOCImUUvRO3Q o4QzSlM6E+TssBUV/ZT6xyH0qsBqc+IXpibB5HqDVEdmFoBkm31SyXe1rGZFkL4o vxz8UxU= -----END CERTIFICATE-----Generated at Thu Jul 23 23:45:28 2026 by rpki-client