$ rpki-client -vvf rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/802FBE707FEB11EB8B5E2817C4F9AE02.roa File: 802FBE707FEB11EB8B5E2817C4F9AE02.roa (raw, json) Hash identifier: 9SaubkE1hKAflSM+TwpjxuILNivfO85uaXddylqE/9o= Subject key identifier: C8:63:C0:99:0B:D3:E8:34:4C:D0:9B:31:B0:66:25:DF:E6:C2:A5:7A Certificate issuer: /CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Certificate serial: 26EE Authority key identifier: 36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/802FBE707FEB11EB8B5E2817C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:26:57 +0000 ROA not before: Thu 10 Jul 2025 15:52:53 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 58666 IP address blocks: 43.245.80.0/22 maxlen: 23 103.14.68.0/22 maxlen: 23 103.232.180.0/22 maxlen: 23 2404:5700::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9966 (0x26ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911894F, serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Validity Not Before: Jul 10 15:52:53 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a42281-8a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:80:b7:6f:05:df:21:bb:66:c2:fa:ed:59:bc: 73:42:86:8c:38:e7:e6:6e:e5:86:22:66:92:bd:25: 41:d2:85:f7:c8:5d:f8:56:7b:2f:58:ed:ee:f4:49: 2a:be:14:37:07:95:f7:d7:44:94:b2:74:1e:d9:ed: 47:14:5f:f9:0f:54:0b:c3:b3:c6:23:fd:05:bd:01: c2:67:4d:6d:5c:38:0e:38:73:b4:96:83:c8:a4:74: bf:8d:0f:28:79:2b:14:d3:eb:ba:ce:8a:c6:03:93: 80:9e:1d:78:5d:92:66:23:eb:09:1f:27:5a:a0:32: f1:56:10:1e:31:41:78:e0:a2:8b:d6:a9:11:b6:75: b6:be:e5:d8:6d:98:d4:44:fa:c5:6e:e6:29:5e:d0: 1f:92:46:7d:d6:6a:6b:ae:2e:a7:54:e8:a0:0e:60: 54:24:0b:0e:eb:c0:57:00:0a:78:c4:f4:c2:5a:2a: 20:5c:b5:0c:86:15:c3:f0:f3:b5:26:46:1c:9b:dc: 7b:80:4f:15:dc:11:75:20:3c:fe:a1:cb:0f:90:c1: 38:2b:1e:d0:13:c0:99:5c:5b:ea:00:21:56:43:14: 0d:07:5e:93:f7:3e:58:b9:4c:18:15:b4:e1:70:3b: 55:98:94:cc:d9:84:a5:3f:a5:a5:8e:c8:c4:3b:fb: 97:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:63:C0:99:0B:D3:E8:34:4C:D0:9B:31:B0:66:25:DF:E6:C2:A5:7A X509v3 Authority Key Identifier: keyid:36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/802FBE707FEB11EB8B5E2817C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.80.0/22 103.14.68.0/22 103.232.180.0/22 IPv6: 2404:5700::/32 Signature Algorithm: sha256WithRSAEncryption 68:bf:85:a0:f7:70:55:c3:5c:5d:b2:c1:62:d9:cf:77:f2:00: 51:90:0f:ba:5a:82:51:85:d0:e2:f9:1e:5c:19:1d:6b:8b:2b: 33:5e:e5:97:99:83:ef:16:80:53:6c:4e:a2:25:27:28:73:8b: 4c:e1:e4:d0:87:63:8d:bb:23:19:71:ce:ee:3a:f5:36:a0:9b: cb:a3:8e:36:a9:da:58:dd:33:21:89:df:18:13:9b:92:23:3e: e0:35:38:3a:04:b2:86:4a:50:e7:bb:9a:6a:87:0a:df:fc:ae: 58:20:0d:8c:d0:d2:01:d3:58:99:19:b5:f1:df:58:55:2b:64: 1c:d6:02:d2:24:1b:d0:e5:e3:22:67:31:b8:39:9e:48:c1:e6: d9:ed:57:78:7b:25:9c:0b:d9:5b:fa:3a:1e:c4:db:c6:2e:ca: d6:5b:a7:2a:51:13:e2:a8:ff:c9:c3:95:cf:f1:ca:7f:d6:4e: ac:7c:37:93:8f:0d:8c:31:64:b7:b9:41:7b:af:e4:6b:3f:83: 7b:bd:d9:07:13:88:80:b2:9a:df:87:d3:dd:5f:e7:9b:3c:61: 01:db:83:1c:7a:2f:3d:2a:3d:58:5b:a8:d2:4b:1a:b7:5c:bc: 6e:6d:d7:33:9d:c9:31:9d:bb:a9:53:ff:99:91:21:41:6b:d1: df:25:31:73 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICJu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5NEYxMTAvBgNVBAUTKDM2MTI5MDY5Mjg5OTA4MkNERTIzRjUwNDUzQTQxNTVF MEFBQjc5NzgwHhcNMjUwNzEwMTU1MjUzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjI4MS04YTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoC3bwXfIbtmwvrtWbxzQoaMOOfmbuWGImaSvSVB0oX3yF34VnsvWO3u9Ekq vhQ3B5X310SUsnQe2e1HFF/5D1QLw7PGI/0FvQHCZ01tXDgOOHO0loPIpHS/jQ8o eSsU0+u6zorGA5OAnh14XZJmI+sJHydaoDLxVhAeMUF44KKL1qkRtnW2vuXYbZjU RPrFbuYpXtAfkkZ91mprri6nVOigDmBUJAsO68BXAAp4xPTCWiogXLUMhhXD8PO1 JkYcm9x7gE8V3BF1IDz+ocsPkME4Kx7QE8CZXFvqACFWQxQNB16T9z5YuUwYFbTh cDtVmJTM2YSlP6WljsjEO/uXnwIDAQABo4ICezCCAncwHQYDVR0OBBYEFMhjwJkL 0+g0TNCbMbBmJd/mwqV6MB8GA1UdIwQYMBaAFDYSkGkomQgs3iP1BFOkFV4Kq3l4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk0Ri85NjNDRjBDRUVD NUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkNDemVJX1VFVTZRVlhncXJl WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oS1FhU2laQ0N6ZUlfVUVVNlFWWGdxcmVYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTg5NEYvOTYzQ0YwQ0VFQzVFMTFFNDhFN0QwMTE5QzRGOUFFMDIvODAyRkJFNzA3 RkVCMTFFQjhCNUUyODE3QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCK/VQAwQCZw5EAwQCZ+i0MA0EAgACMAcDBQAkBFcAMA0GCSqGSIb3 DQEBCwUAA4IBAQBov4Wg93BVw1xdssFi2c938gBRkA+6WoJRhdDi+R5cGR1riysz XuWXmYPvFoBTbE6iJScoc4tM4eTQh2ONuyMZcc7uOvU2oJvLo442qdpY3TMhid8Y E5uSIz7gNTg6BLKGSlDnu5pqhwrf/K5YIA2M0NIB01iZGbXx31hVK2Qc1gLSJBvQ 5eMiZzG4OZ5IwebZ7Vd4eyWcC9lb+joexNvGLsrWW6cqURPiqP/Jw5XP8cp/1k6s fDeTjw2MMWS3uUF7r+RrP4N7vdkHE4iAsprfh9PdX+ebPGEB24Mcei89Kj1YW6jS Sxq3XLxubdcznckxnbupU/+ZkSFBa9HfJTFz -----END CERTIFICATE-----Generated at Mon Mar 2 05:38:31 2026 by rpki-client