$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/4A4A33C0661B11EFA314D413C4F9AE02.roa File: 4A4A33C0661B11EFA314D413C4F9AE02.roa (raw, json) Hash identifier: mnKgy+h6TuBy/xRc+mZm6/IdgUed2+EnCJcqFdbyrso= Subject key identifier: 09:0D:6A:E0:A4:F4:13:6B:2E:E8:0F:89:93:E0:DB:F2:A4:77:D9:07 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 08D6 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/4A4A33C0661B11EFA314D413C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:53:43 +0000 ROA not before: Wed 08 Oct 2025 22:54:06 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 142132 IP address blocks: 43.252.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2262 (0x8d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 8 22:54:06 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a48b36-2484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:59:2c:c9:2c:dc:6f:5a:35:e1:8f:be:ef: 5b:0c:a3:5f:65:8b:1f:e3:93:ee:a2:44:c3:6c:34: 19:b7:03:66:92:61:09:ee:33:31:31:9d:85:1e:27: 1c:d5:1a:cc:49:db:b5:1d:d3:b6:0d:53:66:91:03: 5b:16:49:16:c9:66:d9:aa:89:d1:46:22:7c:09:d5: 73:f9:d3:00:52:08:74:6b:a8:12:08:91:5d:4b:70: 90:ea:b8:3b:f7:bb:44:b5:84:3f:07:d9:d5:84:5f: 55:4d:68:00:76:82:3a:9a:4e:e8:a7:0c:eb:24:a4: 77:83:50:fd:ae:77:6d:67:76:b0:94:9e:f0:1b:c9: 1a:ce:bd:aa:99:cb:4a:67:67:35:97:df:86:7c:5b: f5:44:d2:86:fd:10:0c:39:7e:f4:dc:ab:02:ab:ee: a6:ea:e9:0a:d3:d4:b7:cb:25:ea:b0:01:10:a4:f6: 4b:0b:ce:0c:5b:50:5a:9d:0f:f6:64:07:67:25:f4: 4b:c4:40:51:04:12:79:35:6e:0b:7d:7c:e2:08:a0: c5:6a:a8:2e:3d:86:84:5d:39:ae:d3:30:12:e7:fc: 13:13:ac:2a:91:d5:80:f9:22:5d:ed:09:b9:32:df: 05:5e:eb:3f:6c:38:8f:3a:ab:b8:b3:f8:79:87:cf: 65:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0D:6A:E0:A4:F4:13:6B:2E:E8:0F:89:93:E0:DB:F2:A4:77:D9:07 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/4A4A33C0661B11EFA314D413C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.252.211.0/24 Signature Algorithm: sha256WithRSAEncryption b3:68:ce:bc:1a:f3:a6:75:55:6f:e4:fb:8d:5a:df:c3:c3:c9: 19:56:95:ac:f7:76:cd:18:d7:0e:f2:89:60:09:26:ac:1b:b2: 0a:37:53:0a:92:e4:b0:cb:ea:92:13:ea:48:77:3b:b8:53:15: a4:77:f4:bd:14:04:e6:9b:b3:76:27:cb:39:69:71:66:96:7c: f8:95:0d:95:c9:e0:19:0a:4d:5e:27:48:11:8a:25:f0:22:a5: 9b:93:c9:91:80:be:a0:11:9e:67:3d:0b:40:c7:10:a9:cf:1b: 5f:5e:62:29:d4:ed:b0:d4:a6:f9:88:61:81:f1:4a:13:4b:cb: a2:69:0f:13:01:ba:10:3d:0e:82:74:23:f5:3d:42:60:91:83: cc:a1:2f:f2:51:30:4b:52:3f:84:99:06:d9:b9:1c:98:50:72: 30:82:10:6a:fd:9a:be:8e:08:76:09:e0:84:b7:29:41:70:63: b6:74:d5:10:46:1a:5c:f7:b0:53:9b:0d:cf:39:6d:2e:41:9f: dc:13:e5:0b:ed:c9:4c:12:ca:5b:bd:d9:9f:53:60:b1:f2:a4: ac:07:68:ea:5c:d3:38:cb:f5:9a:b6:ea:df:84:4f:73:6d:9c: 05:45:83:6b:ca:5b:18:0e:03:28:26:5d:1d:05:f1:de:67:51: 10:91:99:69 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUxMDA4MjI1NDA2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGIzNi0yNDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOdZLMks3G9aNeGPvu9bDKNfZYsf45PuokTDbDQZtwNmkmEJ7jMxMZ2FHicc 1RrMSdu1HdO2DVNmkQNbFkkWyWbZqonRRiJ8CdVz+dMAUgh0a6gSCJFdS3CQ6rg7 97tEtYQ/B9nVhF9VTWgAdoI6mk7opwzrJKR3g1D9rndtZ3awlJ7wG8kazr2qmctK Z2c1l9+GfFv1RNKG/RAMOX703KsCq+6m6ukK09S3yyXqsAEQpPZLC84MW1BanQ/2 ZAdnJfRLxEBRBBJ5NW4LfXziCKDFaqguPYaEXTmu0zAS5/wTE6wqkdWA+SJd7Qm5 Mt8FXus/bDiPOqu4s/h5h89l6QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAkNauCk 9BNrLugPiZPg2/Kkd9kHMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvNEE0QTMzQzA2 NjFCMTFFRkEzMTRENDEzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK/zTMA0GCSqGSIb3DQEBCwUAA4IBAQCzaM68GvOmdVVv5PuNWt/D w8kZVpWs93bNGNcO8olgCSasG7IKN1MKkuSwy+qSE+pIdzu4UxWkd/S9FATmm7N2 J8s5aXFmlnz4lQ2VyeAZCk1eJ0gRiiXwIqWbk8mRgL6gEZ5nPQtAxxCpzxtfXmIp 1O2w1Kb5iGGB8UoTS8uiaQ8TAboQPQ6CdCP1PUJgkYPMoS/yUTBLUj+EmQbZuRyY UHIwghBq/Zq+jgh2CeCEtylBcGO2dNUQRhpc97BTmw3POW0uQZ/cE+UL7clMEspb vdmfU2Cx8qSsB2jqXNM4y/WaturfhE9zbZwFRYNrylsYDgMoJl0dBfHeZ1EQkZlp -----END CERTIFICATE-----Generated at Mon Mar 2 05:56:41 2026 by rpki-client