$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/6AACACDA794A11F1A904CD4C78A30FBC.roa File: 6AACACDA794A11F1A904CD4C78A30FBC.roa (raw, json) Hash identifier: g5+aApGy18irZconjhjVDPxZ5GYIWn8hvJMUMTco7Nk= Subject key identifier: EA:70:9C:B2:8C:73:40:36:84:BB:A5:9F:93:EF:8B:5E:39:7F:93:F8 Certificate issuer: /CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1 Certificate serial: 02D1 Authority key identifier: AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/6AACACDA794A11F1A904CD4C78A30FBC.roa Signing time: Thu 23 Jul 2026 16:59:12 +0000 ROA not before: Thu 23 Jul 2026 16:59:12 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 394695 IP address blocks: 43.225.52.0/22 maxlen: 24 103.21.58.0/23 maxlen: 24 103.224.23.0/24 maxlen: 24 137.59.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917748E, serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1 Validity Not Before: Jul 23 16:59:12 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a624860-116a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:50:74:63:65:94:8f:6d:43:be:bc:45:31:f6: aa:fe:66:a0:95:78:6c:81:3c:09:dc:a5:e0:00:3e: 90:72:be:32:cc:b6:d2:3b:68:ee:ff:6b:36:13:db: 22:53:fb:78:95:cf:0b:1b:b0:e2:3c:cc:67:13:31: 67:b3:c1:d8:ad:ab:a0:bc:da:8f:e1:44:02:0d:c7: f4:f5:1c:e7:60:97:a2:03:7a:c1:39:c9:18:33:68: b5:16:b0:9f:b4:14:d5:d5:c4:08:59:18:fc:1d:47: c0:5b:88:11:9d:ed:ba:12:44:e0:7c:18:86:f5:77: 62:60:03:07:0f:59:2e:2b:f2:76:db:c6:b1:48:f1: a8:0d:47:b3:fd:82:60:3d:e4:b1:2b:d9:db:16:4c: 4c:7f:4f:3d:47:2d:26:c3:fe:78:73:a8:36:31:18: a6:5f:b2:96:b0:9f:47:9b:8e:bc:9f:04:df:c2:d3: ad:19:5c:c0:34:de:0b:79:ef:39:f2:06:7b:e9:48: 70:f1:de:ad:12:bf:32:66:0f:fe:75:40:b6:f0:cc: 00:95:cc:af:b0:81:74:89:03:ba:50:e0:92:c2:d2: e0:1b:7b:bb:3c:b6:46:d6:5c:96:6c:98:c2:98:a6: 12:9b:e0:a1:40:2e:b1:c8:0b:fc:f1:86:a2:a3:0a: 61:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:70:9C:B2:8C:73:40:36:84:BB:A5:9F:93:EF:8B:5E:39:7F:93:F8 X509v3 Authority Key Identifier: keyid:AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/6AACACDA794A11F1A904CD4C78A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 43.225.52.0/22 103.21.58.0/23 103.224.23.0/24 137.59.148.0/22 Signature Algorithm: sha256WithRSAEncryption d1:e0:39:cd:de:a7:9d:2b:c0:34:bf:b3:f0:c1:ea:a0:1d:49: fd:f0:1a:38:4a:81:10:11:8a:84:f0:99:92:a2:50:5d:90:6c: e7:26:cc:78:dc:22:9e:66:00:20:8c:c7:75:78:ae:45:6d:a0: 16:17:0e:e3:e5:f9:99:0f:6a:fa:8b:0f:aa:6d:77:ea:f7:c3: 2f:5d:4b:b2:a6:3a:3b:14:15:dc:2c:37:1f:5a:cf:19:d0:75: 9c:56:bc:90:b7:fa:9b:ef:0f:5a:d8:6c:fc:c7:87:ae:74:d1: 49:57:cd:d7:e0:5b:f3:bc:b3:a7:77:ee:21:16:91:cf:7c:95: 17:52:61:42:e0:79:0d:42:c7:23:f7:6e:2b:9c:a5:7c:31:00: d1:57:ee:5e:24:3c:b4:7e:f0:d6:48:35:aa:37:c7:04:55:ef: 38:93:d4:51:73:c7:4d:8f:bc:1a:be:68:44:ea:d1:95:d4:7c: cf:a1:5f:31:17:a6:de:fb:ec:d5:82:77:4f:60:7f:c4:71:27: 61:19:2d:2d:6f:8f:d0:a4:5e:97:b7:4b:0d:08:cf:bf:dc:a8: ea:43:36:48:1a:eb:0c:b7:c0:12:f4:01:85:17:b0:ab:16:8b: 13:6d:0e:28:12:4b:26:c1:64:73:33:40:25:e4:0e:b7:f7:98: f2:a6:c3:21 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0OEUxMTAvBgNVBAUTKEFFOTM4M0E5M0I2QzVBMTM1RDI2MTNBOTdDNURFQzk2 MDk2MjMzRjEwHhcNMjYwNzIzMTY1OTEyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYyNDg2MC0xMTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVB0Y2WUj21DvrxFMfaq/maglXhsgTwJ3KXgAD6Qcr4yzLbSO2ju/2s2E9si U/t4lc8LG7DiPMxnEzFns8HYraugvNqP4UQCDcf09RznYJeiA3rBOckYM2i1FrCf tBTV1cQIWRj8HUfAW4gRne26EkTgfBiG9XdiYAMHD1kuK/J228axSPGoDUez/YJg PeSxK9nbFkxMf089Ry0mw/54c6g2MRimX7KWsJ9Hm468nwTfwtOtGVzANN4Lee85 8gZ76Uhw8d6tEr8yZg/+dUC28MwAlcyvsIF0iQO6UOCSwtLgG3u7PLZG1lyWbJjC mKYSm+ChQC6xyAv88YaiowphcQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFOpwnLKM c0A2hLuln5Pvi145f5P4MB8GA1UdIwQYMBaAFK6Tg6k7bFoTXSYTqXxd7JYJYjPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS81NzExNTlFMjRG QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9ycE9EcVR0c1doTmRKaE9wZkYzc2xnbGlN X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JwT0RxVHRzV2hOZEpoT3BmRjNzbGdsaU1fRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzc0OEUvNTcxMTU5RTI0RkE5MTFFREFERTUxNTdDQzRGOUFFMDIvNkFBQ0FDREE3 OTRBMTFGMUE5MDRDRDRDNzhBMzBGQkMucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQCK+E0AwQBZxU6AwQAZ+AXAwQCiTuUMA0GCSqGSIb3DQEBCwUAA4IB AQDR4DnN3qedK8A0v7PwweqgHUn98Bo4SoEQEYqE8JmSolBdkGznJsx43CKeZgAg jMd1eK5FbaAWFw7j5fmZD2r6iw+qbXfq98MvXUuypjo7FBXcLDcfWs8Z0HWcVryQ t/qb7w9a2Gz8x4eudNFJV83X4FvzvLOnd+4hFpHPfJUXUmFC4HkNQscj924rnKV8 MQDRV+5eJDy0fvDWSDWqN8cEVe84k9RRc8dNj7wavmhE6tGV1HzPoV8xF6be++zV gndPYH/EcSdhGS0tb4/QpF6Xt0sNCM+/3KjqQzZIGusMt8AS9AGFF7CrFosTbQ4o EksmwWRzM0Al5A6395jypsMh -----END CERTIFICATE-----Generated at Fri Jul 24 04:27:48 2026 by rpki-client