$ rpki-client -vvf rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/4BB610C2E16511EC8EDF6621C4F9AE02.roa File: 4BB610C2E16511EC8EDF6621C4F9AE02.roa (raw, json) Hash identifier: 1/JNtgxrsCQgMCZg/xoCtiLGpLNRukBhGSMeMiBFJLE= Subject key identifier: B3:8F:D8:23:79:49:AC:D9:E3:B1:9B:A2:D0:35:6A:8A:6D:6E:A0:BF Certificate issuer: /CN=A9163824/serialNumber=7273853DA063EFCB8EC544B0320D5A707B94C089 Certificate serial: 07CB Authority key identifier: 72:73:85:3D:A0:63:EF:CB:8E:C5:44:B0:32:0D:5A:70:7B:94:C0:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/4BB610C2E16511EC8EDF6621C4F9AE02.roa Signing time: Tue 28 Apr 2026 16:19:56 +0000 ROA not before: Tue 28 Apr 2026 16:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133443 IP address blocks: 43.239.72.0/24 maxlen: 24 43.239.73.0/24 maxlen: 24 43.239.74.0/24 maxlen: 24 43.239.75.0/24 maxlen: 24 103.229.84.0/24 maxlen: 24 103.229.85.0/24 maxlen: 24 103.229.86.0/24 maxlen: 24 103.229.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.crl rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1995 (0x7cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163824, serialNumber=7273853DA063EFCB8EC544B0320D5A707B94C089 Validity Not Before: Apr 28 16:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f0de2c-fe96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:5c:2b:de:93:9d:45:7f:d2:3f:b5:bf:05:f6: 67:ff:49:3c:e6:7d:0d:6f:6a:0e:38:35:bd:6b:17: 04:07:66:cf:7e:e2:95:a5:cc:5b:c1:6a:7c:a7:06: e1:91:6a:49:af:c2:5a:21:ae:4a:04:8b:ac:b4:3e: 10:4e:7a:f3:d7:1a:95:b9:b9:a7:74:0e:ed:2f:5d: 9e:47:ae:95:69:61:6c:4a:c9:b8:48:85:75:f9:a2: d6:3b:b8:43:86:e6:64:a9:00:e7:af:96:fa:26:e0: c5:61:f5:a7:25:92:db:04:ec:7d:fa:f8:43:c8:e3: 47:2e:8e:42:2f:69:ca:8e:a0:c9:00:de:49:73:60: cf:f9:12:2a:30:2a:e0:85:96:eb:ce:79:3c:3c:53: 46:14:67:a1:e6:91:6b:21:b4:84:82:ea:92:0f:7d: 76:63:17:3e:7f:4d:ea:95:2b:74:1e:f6:6d:93:b3: 54:26:ef:b5:26:81:cd:06:4a:41:cb:db:45:33:2a: fa:b5:5b:ca:17:83:2f:ba:b6:37:c4:47:df:92:c5: c5:c1:7b:99:46:d1:00:6d:7c:85:21:30:d8:8d:9a: 70:5d:88:2e:40:4a:98:0a:5a:24:f5:8f:b3:76:03: 5c:66:bd:63:51:4c:a2:f9:45:19:a4:87:25:9c:7e: b6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8F:D8:23:79:49:AC:D9:E3:B1:9B:A2:D0:35:6A:8A:6D:6E:A0:BF X509v3 Authority Key Identifier: keyid:72:73:85:3D:A0:63:EF:CB:8E:C5:44:B0:32:0D:5A:70:7B:94:C0:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/4BB610C2E16511EC8EDF6621C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.72.0/22 103.229.84.0/22 Signature Algorithm: sha256WithRSAEncryption 25:2b:6f:91:ac:47:b1:ad:42:5d:8c:70:af:6e:c5:54:49:06: 01:cd:99:14:84:bb:06:e5:c8:f2:b3:ce:bc:d3:98:d1:e3:cb: 62:de:8f:86:f4:8e:27:18:3d:32:a1:76:4a:dd:c9:3f:ce:66: 4b:43:14:35:df:94:0b:5b:bf:a2:9c:34:10:08:d2:6a:83:ff: 19:6e:ae:0f:1c:8d:40:e8:49:0d:80:60:4c:14:8b:f1:8b:2a: 83:ff:43:31:c4:53:9e:94:6d:13:49:49:fa:ec:e0:12:76:23: ff:33:c1:61:df:50:a8:2d:f3:88:68:1a:80:8a:48:06:53:2c: 30:0b:b2:be:3e:95:fb:85:da:e5:41:ed:7f:db:ca:78:49:ee: 63:f6:e2:c5:37:54:23:7e:03:f1:14:10:46:32:2e:70:fb:48: 34:88:9b:71:56:dd:41:d4:b1:3a:4f:ef:37:93:c7:66:06:61: 91:6e:d0:dd:37:c5:fc:9a:71:14:34:b3:06:f7:a9:9e:91:3f: cf:1e:56:f4:17:98:5d:dc:b1:d1:cd:b5:40:ab:52:9f:da:d5: 1a:93:ec:11:f3:ea:d2:cb:ad:3c:3e:57:b4:05:3f:bc:e8:84: ad:a5:2f:9b:e2:4c:3e:11:19:47:bb:68:38:5f:1e:f0:92:5c: f3:21:fe:be -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICB8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM4MjQxMTAvBgNVBAUTKDcyNzM4NTNEQTA2M0VGQ0I4RUM1NDRCMDMyMEQ1QTcw N0I5NEMwODkwHhcNMjYwNDI4MTYxOTU2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWYwZGUyYy1mZTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Fwr3pOdRX/SP7W/BfZn/0k85n0Nb2oOODW9axcEB2bPfuKVpcxbwWp8pwbh kWpJr8JaIa5KBIustD4QTnrz1xqVubmndA7tL12eR66VaWFsSsm4SIV1+aLWO7hD huZkqQDnr5b6JuDFYfWnJZLbBOx9+vhDyONHLo5CL2nKjqDJAN5Jc2DP+RIqMCrg hZbrznk8PFNGFGeh5pFrIbSEguqSD312Yxc+f03qlSt0HvZtk7NUJu+1JoHNBkpB y9tFMyr6tVvKF4MvurY3xEffksXFwXuZRtEAbXyFITDYjZpwXYguQEqYClok9Y+z dgNcZr1jUUyi+UUZpIclnH62AwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFLOP2CN5 SazZ47GbotA1aoptbqC/MB8GA1UdIwQYMBaAFHJzhT2gY+/LjsVEsDINWnB7lMCJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzgyNC9CQTBFRkU1MkZE MjUxMUU0OUQ5MzI3M0JDNEY5QUUwMi9jbk9GUGFCajc4dU94VVN3TWcxYWNIdVV3 SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuT0ZQYUJqNzh1T3hVU3dNZzFhY0h1VXdJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjM4MjQvQkEwRUZFNTJGRDI1MTFFNDlEOTMyNzNCQzRGOUFFMDIvNEJCNjEwQzJF MTY1MTFFQzhFREY2NjIxQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK+9IAwQCZ+VUMA0GCSqGSIb3DQEBCwUAA4IBAQAlK2+RrEexrUJd jHCvbsVUSQYBzZkUhLsG5cjys86805jR48ti3o+G9I4nGD0yoXZK3ck/zmZLQxQ1 35QLW7+inDQQCNJqg/8Zbq4PHI1A6EkNgGBMFIvxiyqD/0MxxFOelG0TSUn67OAS diP/M8Fh31CoLfOIaBqAikgGUywwC7K+PpX7hdrlQe1/28p4Se5j9uLFN1QjfgPx FBBGMi5w+0g0iJtxVt1B1LE6T+83k8dmBmGRbtDdN8X8mnEUNLMG96mekT/PHlb0 F5hd3LHRzbVAq1Kf2tUak+wR8+rSy608Ple0BT+86IStpS+b4kw+ERlHu2g4Xx7w klzzIf6+ -----END CERTIFICATE-----Generated at Wed May 13 14:06:48 2026 by rpki-client