$ rpki-client -vvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/B811CFA2BF7811EE80314533C4F9AE02.roa File: B811CFA2BF7811EE80314533C4F9AE02.roa (raw, json) Hash identifier: uB1ptL86TUYIpYIuNSpFFg8ZR5mh0LibkD3yr4cunXE= Subject key identifier: 01:66:8F:96:63:C6:D9:EC:E7:A5:D7:D3:8E:58:8D:F1:97:0E:F0:90 Certificate issuer: /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21 Certificate serial: 083B Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/B811CFA2BF7811EE80314533C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:52:20 +0000 ROA not before: Fri 04 Jul 2025 22:02:19 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 132825 IP address blocks: 43.251.112.0/24 maxlen: 24 43.251.113.0/24 maxlen: 24 43.251.114.0/24 maxlen: 24 43.251.115.0/24 maxlen: 24 119.42.32.0/24 maxlen: 24 119.42.34.0/24 maxlen: 24 119.42.35.0/24 maxlen: 24 2001:df0:fbc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2107 (0x83b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EE77, serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21 Validity Not Before: Jul 4 22:02:19 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a452a4-f27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0c:9c:a0:c0:fc:16:0b:a2:cd:c4:ca:65:55: 13:8c:3b:5a:44:ea:30:93:9f:9c:10:9c:fd:6e:99: 97:19:45:e9:9e:36:c4:97:7b:fa:85:0d:78:1d:ba: 80:28:f3:6c:ec:85:72:03:62:aa:c4:ff:ed:0e:49: a1:f8:6d:22:64:a6:94:97:12:40:ba:26:be:e7:ae: a7:c5:ac:ed:1e:92:39:1f:a7:29:77:66:51:26:33: a6:f8:60:54:a6:b3:9a:f3:98:76:f7:94:1b:63:f4: 84:59:19:1b:0f:02:e8:65:34:7e:d8:dd:64:5b:24: e4:eb:36:29:3e:ad:00:af:f1:29:fd:1b:8a:74:fe: 85:10:9a:fc:1d:24:6f:f4:f0:94:6b:5b:52:a1:da: 2b:a9:30:09:63:99:25:39:76:64:6f:1c:0c:ea:be: 03:b6:1d:7b:20:0f:02:44:83:88:ce:ec:48:66:02: 9e:1e:6d:f2:69:bd:98:ad:f3:a8:de:96:80:6b:69: 07:f3:69:c8:f9:bc:ae:19:d2:e0:4e:47:a3:12:b8: 61:05:57:97:a7:07:11:7d:81:f2:05:19:87:4d:86: fc:bb:42:5e:df:a8:43:e8:f9:db:ab:94:d2:e8:b3: 13:55:99:8c:ce:c6:e5:35:63:eb:d7:7d:f0:d2:39: 79:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:66:8F:96:63:C6:D9:EC:E7:A5:D7:D3:8E:58:8D:F1:97:0E:F0:90 X509v3 Authority Key Identifier: keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/B811CFA2BF7811EE80314533C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.251.112.0/22 119.42.32.0/24 119.42.34.0/23 IPv6: 2001:df0:fbc0::/48 Signature Algorithm: sha256WithRSAEncryption a8:8e:28:73:d1:45:8f:93:ae:1c:59:cf:b3:64:1b:bb:b9:1c: a3:5a:ad:e4:c7:5a:ee:55:12:93:d7:44:d8:36:b7:8e:2b:fd: af:40:cc:87:04:6a:5e:02:77:4b:11:eb:24:71:15:e8:44:81: 18:55:cc:8f:9c:98:4b:6b:9c:80:ef:49:a3:b5:f2:87:c7:75: ee:6f:20:67:3c:5c:00:bf:22:9d:f4:d0:58:f7:19:7d:39:94: 80:e9:34:78:c9:a6:86:d9:d3:5b:5a:f2:6e:90:88:5e:e6:e7: 23:00:2f:80:22:24:68:f5:88:5b:20:d9:8c:fb:ca:8c:62:77: 82:f0:5b:2c:af:a0:11:6d:24:9f:91:24:49:3e:9e:d1:2d:f8: f3:4a:af:8d:dc:14:43:9f:c5:d3:67:2d:8d:73:70:9d:24:ee: c6:03:95:a2:26:83:b1:15:4d:f5:88:3f:01:f3:7d:17:84:fa: a7:7c:1d:2e:1c:76:62:84:90:e4:85:47:a9:4a:04:e4:c0:ab: 99:13:a0:56:c4:45:9a:f8:0f:c5:87:93:79:4a:51:93:0e:07: d0:a1:48:d3:92:18:57:e0:c3:28:97:0e:ed:ee:47:59:f0:1d: 4d:9f:a5:3e:ca:3f:4b:11:5e:bf:1c:ef:0a:c8:74:64:6c:2b: 1b:ad:09:52 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICCDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVFNzcxMTAvBgNVBAUTKEI3ODFBMkU3RDkxRURDQThCMDMwREUzRUE4OUZBNEZB RjE3OTFGMjEwHhcNMjUwNzA0MjIwMjE5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTJhNC1mMjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmAycoMD8FguizcTKZVUTjDtaROowk5+cEJz9bpmXGUXpnjbEl3v6hQ14HbqA KPNs7IVyA2KqxP/tDkmh+G0iZKaUlxJAuia+566nxaztHpI5H6cpd2ZRJjOm+GBU prOa85h295QbY/SEWRkbDwLoZTR+2N1kWyTk6zYpPq0Ar/Ep/RuKdP6FEJr8HSRv 9PCUa1tSodorqTAJY5klOXZkbxwM6r4Dth17IA8CRIOIzuxIZgKeHm3yab2YrfOo 3paAa2kH82nI+byuGdLgTkejErhhBVeXpwcRfYHyBRmHTYb8u0Je36hD6Pnbq5TS 6LMTVZmMzsblNWPr133w0jl5dQIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFAFmj5Zj xtns56XX045YjfGXDvCQMB8GA1UdIwQYMBaAFLeBoufZHtyosDDePqifpPrxeR8h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUU3Ny9EOUJFMDdCQTBD RUQxMUVCQTdGMTExNUJDNEY5QUUwMi90NEdpNTlrZTNLaXdNTjQtcUotay12RjVI eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q0R2k1OWtlM0tpd01ONC1xSi1rLXZGNUh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVFNzcvRDlCRTA3QkEwQ0VEMTFFQkE3RjExMTVCQzRGOUFFMDIvQjgxMUNGQTJC Rjc4MTFFRTgwMzE0NTMzQzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAY BAIAATASAwQCK/twAwQAdyogAwQBdyoiMA8EAgACMAkDBwAgAQ3w+8AwDQYJKoZI hvcNAQELBQADggEBAKiOKHPRRY+TrhxZz7NkG7u5HKNareTHWu5VEpPXRNg2t44r /a9AzIcEal4Cd0sR6yRxFehEgRhVzI+cmEtrnIDvSaO18ofHde5vIGc8XAC/Ip30 0Fj3GX05lIDpNHjJpobZ01ta8m6QiF7m5yMAL4AiJGj1iFsg2Yz7yoxid4LwWyyv oBFtJJ+RJEk+ntEt+PNKr43cFEOfxdNnLY1zcJ0k7sYDlaImg7EVTfWIPwHzfReE +qd8HS4cdmKEkOSFR6lKBOTAq5kToFbERZr4D8WHk3lKUZMOB9ChSNOSGFfgwyiX Du3uR1nwHU2fpT7KP0sRXr8c7wrIdGRsKxutCVI= -----END CERTIFICATE-----Generated at Thu Mar 26 18:53:47 2026 by rpki-client