$ rpki-client -vvf rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/6FCDD2583E2A11F1A3496A87B6833773.roa File: 6FCDD2583E2A11F1A3496A87B6833773.roa (raw, json) Hash identifier: Ai2MwF3dSzKIObesI/BV2cneUL9Hmjliymu4mkNTO8Y= Subject key identifier: 4C:A7:C5:C5:15:22:02:EA:31:AC:89:02:F5:84:68:A8:28:6B:3C:CE Certificate issuer: /CN=A914E801/serialNumber=628125351377C5906B849BA05267987E17AE2DE4 Certificate serial: 02 Authority key identifier: 62:81:25:35:13:77:C5:90:6B:84:9B:A0:52:67:98:7E:17:AE:2D:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoElNRN3xZBrhJugUmeYfheuLeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/6FCDD2583E2A11F1A3496A87B6833773.roa Signing time: Wed 22 Apr 2026 09:05:41 +0000 ROA not before: Wed 22 Apr 2026 09:05:41 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 63888 IP address blocks: 43.229.36.0/22 maxlen: 22 43.229.36.0/24 maxlen: 24 43.229.37.0/24 maxlen: 24 43.229.38.0/24 maxlen: 24 43.229.39.0/24 maxlen: 24 103.41.124.0/22 maxlen: 22 103.41.124.0/24 maxlen: 24 103.41.125.0/24 maxlen: 24 103.41.126.0/24 maxlen: 24 103.41.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.crl rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoElNRN3xZBrhJugUmeYfheuLeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E801, serialNumber=628125351377C5906B849BA05267987E17AE2DE4 Validity Not Before: Apr 22 09:05:41 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69e88f65-b8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0b:74:39:f3:66:21:5d:4c:06:fa:54:e0:4e: 00:44:0d:7f:1f:8d:73:05:eb:e9:d9:7b:48:9a:f2: 56:6e:2e:b3:63:5f:b4:6a:7a:af:c6:d9:59:54:ed: c6:6c:ff:18:2a:d7:2d:fd:f1:5a:a3:54:e5:f8:9c: 1c:8b:9b:29:a9:ce:80:d6:69:1d:2e:f6:6f:ac:9a: da:09:e3:e6:da:f9:e4:f9:fb:74:ab:30:88:ba:f3: f4:aa:0c:fd:b2:d8:f6:46:32:15:a5:7b:c2:55:f7: f0:13:be:10:65:e7:b9:55:f3:b2:2a:d5:c5:d5:1d: c2:39:c2:71:72:2a:cc:60:e0:d6:bd:8c:2d:cc:0b: 5b:a3:df:19:0b:63:9d:80:d0:de:85:22:0e:31:b1: 71:1c:ba:15:25:ef:c8:cc:a4:d5:08:ab:71:64:6e: cd:ef:41:01:02:9a:0f:b0:01:00:4f:16:ab:d0:04: 8f:66:94:c2:3d:f9:eb:f1:97:64:b3:52:23:ca:77: 73:d3:bb:9b:68:f3:74:fb:8a:f8:e3:e9:80:0e:2b: 62:15:25:15:70:4a:c4:5f:f0:e4:eb:f8:b7:88:7a: 9e:e6:ea:cc:d2:72:38:52:69:6e:8a:d6:ea:38:fb: 74:0c:be:b9:a6:ba:b6:40:49:c9:1a:0b:50:44:56: b2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A7:C5:C5:15:22:02:EA:31:AC:89:02:F5:84:68:A8:28:6B:3C:CE X509v3 Authority Key Identifier: keyid:62:81:25:35:13:77:C5:90:6B:84:9B:A0:52:67:98:7E:17:AE:2D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoElNRN3xZBrhJugUmeYfheuLeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/6FCDD2583E2A11F1A3496A87B6833773.roa sbgp-ipAddrBlock: critical IPv4: 43.229.36.0/22 103.41.124.0/22 Signature Algorithm: sha256WithRSAEncryption 03:5f:27:23:ba:2d:72:1d:35:e3:9a:8d:e3:1d:a2:1f:3d:f1: 8d:00:82:11:fa:f8:c5:6a:f6:3f:85:e7:fd:5d:0b:ba:b9:e2: de:95:a8:ad:ae:47:2a:07:3a:26:8d:fe:a4:5d:8f:05:26:b3: 3a:dd:02:b0:bb:70:d3:68:19:33:a9:fe:7d:7a:c4:b3:8a:67: 47:45:4e:89:a2:e0:ac:b8:f2:65:45:d0:b4:03:15:ae:1a:19: c6:6d:39:0b:e5:fe:b4:75:15:04:a3:2d:0e:43:90:9e:e5:34: 96:e4:d3:ef:af:45:ef:22:99:98:e1:bb:9f:f8:fb:55:c6:2a: 06:88:80:e1:fc:b0:91:22:14:49:d8:15:cc:b9:bd:54:cf:90: ba:c4:1e:0b:16:c2:e5:cc:9a:72:b9:5b:48:93:fd:99:f4:c1: d8:c8:30:6e:1b:bb:52:6f:db:b1:51:b1:c0:79:35:51:ad:10: 00:b2:e3:07:60:84:ff:8b:d5:b2:d7:af:91:b1:66:a3:f4:9a: 3e:c4:d3:86:fe:b0:b7:42:20:55:f3:24:9c:8d:e8:95:53:60: 1d:2f:c9:c7:76:58:66:3e:09:29:8a:94:9f:54:28:a4:36:6f: f8:56:91:25:bc:b5:6d:19:cc:fa:9a:0c:13:bd:37:22:98:88: 16:b9:7b:b3 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTgwMTExMC8GA1UEBRMoNjI4MTI1MzUxMzc3QzU5MDZCODQ5QkEwNTI2Nzk4N0Ux N0FFMkRFNDAeFw0yNjA0MjIwOTA1NDFaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5ZTg4ZjY1LWI4YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5C3Q582YhXUwG+lTgTgBEDX8fjXMF6+nZe0ia8lZuLrNjX7Rqeq/G2VlU7cZs /xgq1y398VqjVOX4nByLmympzoDWaR0u9m+smtoJ4+ba+eT5+3SrMIi68/SqDP2y 2PZGMhWle8JV9/ATvhBl57lV87Iq1cXVHcI5wnFyKsxg4Na9jC3MC1uj3xkLY52A 0N6FIg4xsXEcuhUl78jMpNUIq3Fkbs3vQQECmg+wAQBPFqvQBI9mlMI9+evxl2Sz UiPKd3PTu5to83T7ivjj6YAOK2IVJRVwSsRf8OTr+LeIep7m6szScjhSaW6K1uo4 +3QMvrmmurZASckaC1BEVrK7AgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUTKfFxRUi AuoxrIkC9YRoqChrPM4wHwYDVR0jBBgwFoAUYoElNRN3xZBrhJugUmeYfheuLeQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFODAxLzEwOEVCMDYyM0Uy NzExRjE5RTlCNzM5N0I1ODMzNzczL1lvRWxOUk4zeFpCcmhKdWdVbWVZZmhldUxl US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWW9FbE5STjN4WkJyaEp1Z1VtZVlmaGV1TGVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTgwMS8xMDhFQjA2MjNFMjcxMUYxOUU5QjczOTdCNTgzMzc3My82RkNERDI1ODNF MkExMUYxQTM0OTZBODdCNjgzMzc3My5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAIr5SQDBAJnKXwwDQYJKoZIhvcNAQELBQADggEBAANfJyO6LXIdNeOa jeMdoh898Y0AghH6+MVq9j+F5/1dC7q54t6VqK2uRyoHOiaN/qRdjwUmszrdArC7 cNNoGTOp/n16xLOKZ0dFTomi4Ky48mVF0LQDFa4aGcZtOQvl/rR1FQSjLQ5DkJ7l NJbk0++vRe8imZjhu5/4+1XGKgaIgOH8sJEiFEnYFcy5vVTPkLrEHgsWwuXMmnK5 W0iT/Zn0wdjIMG4bu1Jv27FRscB5NVGtEACy4wdghP+L1bLXr5GxZqP0mj7E04b+ sLdCIFXzJJyN6JVTYB0vycd2WGY+CSmKlJ9UKKQ2b/hWkSW8tW0ZzPqaDBO9NyKY iBa5e7M= -----END CERTIFICATE-----Generated at Wed May 13 10:07:07 2026 by rpki-client