$ rpki-client -vvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/31A1996898F711EEB7B27877C4F9AE02.roa File: 31A1996898F711EEB7B27877C4F9AE02.roa (raw, json) Hash identifier: V73rrflKLTiVNK5j3ada2jgTwgOJk55X18oFDRCNd5g= Subject key identifier: 36:67:65:AD:36:6B:1D:45:F1:B1:50:01:CA:D1:8D:8E:9B:35:4E:ED Certificate issuer: /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B Certificate serial: 0220 Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/31A1996898F711EEB7B27877C4F9AE02.roa Signing time: Wed 15 Jul 2026 04:30:00 +0000 ROA not before: Wed 15 Jul 2026 04:30:00 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 55532 IP address blocks: 43.245.40.0/24 maxlen: 24 43.245.41.0/24 maxlen: 24 43.245.42.0/24 maxlen: 24 43.245.43.0/24 maxlen: 24 103.1.192.0/24 maxlen: 24 103.1.193.0/24 maxlen: 24 103.1.194.0/24 maxlen: 24 103.1.195.0/24 maxlen: 24 202.9.94.0/23 maxlen: 24 203.25.173.0/24 maxlen: 24 2001:df0:a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158620, serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B Validity Not Before: Jul 15 04:30:00 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a570cc8-9748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2a:4a:c3:88:db:20:b3:4b:c8:dd:af:22:45: 60:12:34:b2:11:3e:ff:56:9b:b7:da:49:43:19:89: 95:e8:9f:4c:6f:47:b3:3b:74:6c:83:f6:12:6c:c4: c5:d3:b1:25:e2:65:e6:8f:8b:f3:d0:65:63:68:35: 67:e7:0e:1e:89:b2:92:f3:29:ef:cc:e5:0b:b5:a1: 03:78:72:91:04:50:d7:34:f1:d8:ab:3e:e4:50:54: 01:df:bf:81:76:d6:9d:34:85:9c:fd:0e:0b:2a:f0: 57:da:0e:72:93:c1:40:c4:42:5a:ba:a4:81:39:f9: 79:8f:e7:3e:b0:a4:08:55:07:eb:64:fd:65:ce:5b: e3:04:4d:2d:b0:05:00:f7:8a:af:76:da:e8:2e:86: 82:7e:8c:4d:e6:96:89:b2:59:69:c4:57:f9:0c:b1: 47:b7:90:fe:d0:1b:8c:91:cb:c5:8b:9f:e2:61:b6: 62:80:7f:49:27:45:ee:c5:50:8a:08:ee:05:2d:e2: d5:57:77:8f:bc:46:6a:ac:ad:ec:3c:e7:cb:ae:b7: f0:72:50:b2:0c:90:be:29:cd:ac:85:12:43:b4:ed: e9:51:25:06:f5:63:8f:12:42:98:7f:98:a3:ba:09: d3:e0:f4:92:82:c1:77:f4:25:51:e2:f6:4b:fd:72: e6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:67:65:AD:36:6B:1D:45:F1:B1:50:01:CA:D1:8D:8E:9B:35:4E:ED X509v3 Authority Key Identifier: keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/31A1996898F711EEB7B27877C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.40.0/22 103.1.192.0/22 202.9.94.0/23 203.25.173.0/24 IPv6: 2001:df0:a1::/48 Signature Algorithm: sha256WithRSAEncryption 3d:24:c4:35:96:06:5e:93:8c:dd:2b:d2:12:7a:48:18:24:f2: ce:eb:0f:47:ff:f2:01:72:aa:64:81:2a:63:fb:bc:55:6a:8a: e8:7f:4d:a7:9d:11:0d:5f:de:35:b4:68:da:fe:1b:a0:7f:d7: 80:e7:7d:3a:c2:55:f6:39:4d:de:b2:58:ca:57:9b:c8:b5:cc: 82:9c:72:56:c6:84:ef:fa:76:7b:a8:66:2a:39:26:5f:ab:fa: a2:15:bf:b9:8a:2d:ad:0f:63:bd:7f:5a:e4:ad:21:98:58:80: 77:60:69:eb:24:26:dc:0b:f6:b1:c4:d6:51:06:d8:8b:3c:de: fb:c4:95:cc:9e:da:bf:eb:a5:6b:48:ed:e1:3b:1e:3a:e8:81: 4a:06:b3:15:a3:f5:00:e2:88:fe:e3:11:15:31:f2:dc:6f:07: 71:60:b3:74:cf:75:96:00:8d:00:3f:88:38:6d:06:98:9c:9b: 4e:8c:78:58:7e:3c:df:2d:63:bd:54:a8:78:7a:65:ee:48:ac: cd:c8:7f:3f:c3:7b:39:f6:b5:e6:06:90:3d:ae:e0:b7:d8:3c: d1:f1:19:6b:ff:40:b0:80:54:ce:bd:6a:d9:01:ec:30:05:30: ba:19:6b:06:13:4e:0c:68:66:f4:1f:d5:c9:39:36:81:ce:6a: ed:e5:dc:58 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2MjAxMTAvBgNVBAUTKEE0MDhBQzk0QTBEMzM2RjQ3MzI0OTA1QTkxOEFGMjQ5 MDJGMERFOEIwHhcNMjYwNzE1MDQzMDAwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU3MGNjOC05NzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCpKw4jbILNLyN2vIkVgEjSyET7/Vpu32klDGYmV6J9Mb0ezO3Rsg/YSbMTF 07El4mXmj4vz0GVjaDVn5w4eibKS8ynvzOULtaEDeHKRBFDXNPHYqz7kUFQB37+B dtadNIWc/Q4LKvBX2g5yk8FAxEJauqSBOfl5j+c+sKQIVQfrZP1lzlvjBE0tsAUA 94qvdtroLoaCfoxN5paJsllpxFf5DLFHt5D+0BuMkcvFi5/iYbZigH9JJ0XuxVCK CO4FLeLVV3ePvEZqrK3sPOfLrrfwclCyDJC+Kc2shRJDtO3pUSUG9WOPEkKYf5ij ugnT4PSSgsF39CVR4vZL/XLmvwIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFDZnZa02 ax1F8bFQAcrRjY6bNU7tMB8GA1UdIwQYMBaAFKQIrJSg0zb0cySQWpGK8kkC8N6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODYyMC8wRTkxOTkzNDg4 NDIxMUVFQTdEOEM4MTRDNEY5QUUwMi9wQWlzbEtEVE52UnpKSkJha1lyeVNRTHcz b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BBaXNsS0RUTnZSekpKQmFrWXJ5U1FMdzNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTg2MjAvMEU5MTk5MzQ4ODQyMTFFRUE3RDhDODE0QzRGOUFFMDIvMzFBMTk5Njg5 OEY3MTFFRUI3QjI3ODc3QzRGOUFFMDIucm9hMEIGCCsGAQUFBwEHAQH/BDMwMTAe BAIAATAYAwQCK/UoAwQCZwHAAwQBygleAwQAyxmtMA8EAgACMAkDBwAgAQ3wAKEw DQYJKoZIhvcNAQELBQADggEBAD0kxDWWBl6TjN0r0hJ6SBgk8s7rD0f/8gFyqmSB KmP7vFVqiuh/TaedEQ1f3jW0aNr+G6B/14DnfTrCVfY5Td6yWMpXm8i1zIKcclbG hO/6dnuoZio5Jl+r+qIVv7mKLa0PY71/WuStIZhYgHdgaeskJtwL9rHE1lEG2Is8 3vvElcye2r/rpWtI7eE7HjrogUoGsxWj9QDiiP7jERUx8txvB3Fgs3TPdZYAjQA/ iDhtBpicm06MeFh+PN8tY71UqHh6Ze5IrM3Ifz/Dezn2teYGkD2u4LfYPNHxGWv/ QLCAVM69atkB7DAFMLoZawYTTgxoZvQf1ck5NoHOau3l3Fg= -----END CERTIFICATE-----Generated at Fri Jul 24 13:58:50 2026 by rpki-client