$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/7FA7FFD6D54F11EF88D65E53C4F9AE02.roa File: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (raw, json) Hash identifier: PKziXo5JwfLo2oKzhtquW/s14RITw4Gju81cfabKo1g= Subject key identifier: EC:EC:35:8B:52:79:71:8F:0E:B1:EA:00:21:AC:45:1E:EF:7C:51:0C Certificate issuer: /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Certificate serial: 03C8 Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/7FA7FFD6D54F11EF88D65E53C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:24:46 +0000 ROA not before: Sat 11 Oct 2025 03:27:29 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 153494 IP address blocks: 43.243.208.0/22 maxlen: 24 103.39.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 968 (0x3c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Validity Not Before: Oct 11 03:27:29 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a44c2e-b538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fa:94:50:08:6b:31:81:a4:54:db:b2:1a:05: a0:0c:0e:65:39:34:96:2a:ed:91:51:76:57:7a:18: 6f:a0:0c:38:3f:4c:f7:fd:9f:df:53:91:86:8e:c6: 53:c7:cc:65:78:68:50:77:18:74:72:2f:6d:40:c7: 0f:c1:c8:c2:cc:3e:41:b1:e5:7d:ce:6c:34:af:c0: 31:96:ad:fb:ac:b6:3b:02:5d:bc:e6:a0:17:f2:90: f6:0f:20:03:ac:5b:e4:71:e8:ad:5c:ac:0c:cc:bb: 0a:4e:b5:5d:56:8d:22:0c:49:bc:26:b2:ab:66:36: ac:b6:97:8e:39:a9:a4:70:d4:cd:b4:ef:5a:9d:ca: ae:fa:ad:18:72:e3:e9:b5:67:ad:24:41:c9:ac:9f: b5:73:0d:b4:a7:cd:24:16:27:90:7c:cc:2a:b2:3e: c1:f6:e3:b5:30:b5:4e:3b:4e:87:bd:1b:9a:db:75: fa:85:a9:68:84:1f:47:62:05:f0:3c:6f:ea:25:10: 07:8d:1f:e3:10:2c:9c:b5:f6:34:ee:8b:a9:da:f0: 0c:44:d7:2d:f9:a5:84:97:5b:24:de:86:1f:db:ef: 07:fa:4a:e7:2a:a5:5c:c3:ca:a0:90:5d:7a:a6:65: 36:34:37:86:7d:c7:fe:48:40:6e:79:de:d6:4e:ab: c6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EC:35:8B:52:79:71:8F:0E:B1:EA:00:21:AC:45:1E:EF:7C:51:0C X509v3 Authority Key Identifier: keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/7FA7FFD6D54F11EF88D65E53C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.243.208.0/22 103.39.24.0/22 Signature Algorithm: sha256WithRSAEncryption 11:d2:17:8f:e0:d8:4a:b5:5b:57:4a:75:af:dc:a8:cb:12:95: 1c:41:77:e1:90:ef:dd:15:a4:0b:a1:bf:60:c6:34:e5:7a:e4: 25:09:92:79:19:79:d1:44:bd:24:94:7e:5d:0e:2a:13:c4:6d: eb:61:67:62:26:54:0e:8b:30:0e:ba:df:4f:93:d1:c0:b3:9e: 1b:92:d4:02:eb:e5:8c:c1:01:69:9d:7b:a2:ce:b1:ca:a0:17: ce:7c:4a:fa:e0:23:48:e1:38:87:85:b5:fc:4b:94:f4:c1:ec: 26:b4:5b:bd:d0:22:bb:7f:3e:2d:27:86:5f:03:b5:b4:62:40: 91:0a:5e:61:1f:57:70:37:7b:0c:60:b8:9c:52:97:e2:ac:5f: 2a:35:a0:b8:39:f2:58:75:26:c8:5f:27:e1:2a:85:74:df:a3: 6c:f8:1f:b9:9e:19:b2:9f:0e:01:e7:51:25:06:b5:c5:42:02: 8c:db:57:b9:46:8f:fa:cd:9c:4d:01:66:8a:5d:c4:b3:74:bc: f8:a4:35:1e:16:28:33:7e:2d:3e:e5:04:1f:6b:7c:e4:01:11: e1:bb:14:d9:3a:7c:be:46:b6:16:aa:c8:fb:9e:39:e5:63:f5: 83:77:61:69:f9:9b:13:4c:89:58:82:c0:54:10:44:2a:18:e0: 23:79:3c:1c -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEzNUUxMTAvBgNVBAUTKDg4OTk2OTNFOTMxMzUwQzU1NUYyQkY0N0IxNTFERUY4 NzM0MkI3MjkwHhcNMjUxMDExMDMyNzI5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGMyZS1iNTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/qUUAhrMYGkVNuyGgWgDA5lOTSWKu2RUXZXehhvoAw4P0z3/Z/fU5GGjsZT x8xleGhQdxh0ci9tQMcPwcjCzD5BseV9zmw0r8Axlq37rLY7Al285qAX8pD2DyAD rFvkceitXKwMzLsKTrVdVo0iDEm8JrKrZjastpeOOamkcNTNtO9ancqu+q0YcuPp tWetJEHJrJ+1cw20p80kFieQfMwqsj7B9uO1MLVOO06HvRua23X6halohB9HYgXw PG/qJRAHjR/jECyctfY07oup2vAMRNct+aWEl1sk3oYf2+8H+krnKqVcw8qgkF16 pmU2NDeGfcf+SEBued7WTqvGhwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOzsNYtS eXGPDrHqACGsRR7vfFEMMB8GA1UdIwQYMBaAFIiZaT6TE1DFVfK/R7FR3vhzQrcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTM1RS9GQTkyNzc4MkM2 MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVNVlY4cjlIc1ZIZS1ITkN0 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKbHBQcE1UVU1WVjhyOUhzVkhlLUhOQ3R5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUEzNUUvRkE5Mjc3ODJDNjAwMTFFQzlEQTc0MDBGQzRGOUFFMDIvN0ZBN0ZGRDZE NTRGMTFFRjg4RDY1RTUzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/PQAwQCZycYMA0GCSqGSIb3DQEBCwUAA4IBAQAR0heP4NhKtVtX SnWv3KjLEpUcQXfhkO/dFaQLob9gxjTleuQlCZJ5GXnRRL0klH5dDioTxG3rYWdi JlQOizAOut9Pk9HAs54bktQC6+WMwQFpnXuizrHKoBfOfEr64CNI4TiHhbX8S5T0 wewmtFu90CK7fz4tJ4ZfA7W0YkCRCl5hH1dwN3sMYLicUpfirF8qNaC4OfJYdSbI XyfhKoV036Ns+B+5nhmynw4B51ElBrXFQgKM21e5Ro/6zZxNAWaKXcSzdLz4pDUe Figzfi0+5QQfa3zkARHhuxTZOny+RrYWqsj7njnlY/WDd2Fp+ZsTTIlYgsBUEEQq GOAjeTwc -----END CERTIFICATE-----Generated at Mon Mar 2 04:34:27 2026 by rpki-client