$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/72DF94424A8611F08884C659C4F9AE02.roa File: 72DF94424A8611F08884C659C4F9AE02.roa (raw, json) Hash identifier: vo0Z9lnn3ID47G8AGl41mzrUJ1r+LNl3V8kwSFSFJD0= Subject key identifier: 93:79:77:E1:42:51:6F:F2:17:9B:EC:38:E4:73:5A:9B:90:55:AB:C6 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 08D1 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/72DF94424A8611F08884C659C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:53:39 +0000 ROA not before: Wed 08 Oct 2025 22:53:58 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 10103 IP address blocks: 43.252.209.0/24 maxlen: 24 103.225.196.0/24 maxlen: 24 103.234.54.0/24 maxlen: 24 150.107.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2257 (0x8d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 8 22:53:58 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a48b32-ecc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2e:f4:48:eb:ed:0c:4d:be:35:29:72:32:f8: 0e:dc:ac:87:56:c9:08:31:c6:de:eb:dd:04:e9:01: 77:36:a3:b1:99:f1:b3:c3:75:31:a8:0c:bf:2d:9c: e1:75:d3:78:ae:e5:b5:3d:cc:c4:6f:c2:f6:09:77: b5:9c:fd:4f:8e:6f:2b:e0:9b:dd:52:93:b5:c0:d6: c4:7d:09:ae:3a:cc:02:82:b8:d7:ba:a2:87:1d:3b: 52:27:05:5a:af:77:2f:16:c9:44:55:45:b2:56:1d: f2:db:13:87:db:0a:a2:8c:a4:04:23:19:aa:40:b2: 2f:a0:6e:03:d3:1a:33:19:cb:ac:ad:38:d7:b1:03: 64:17:d4:af:3a:07:35:8d:1c:ea:73:c4:08:69:e7: 5a:12:19:0d:9a:f1:7b:9a:4f:65:b8:48:3e:3b:2c: 84:b6:f6:aa:30:75:db:2b:23:f8:3d:88:f6:fa:e1: 79:61:34:5b:9d:c3:0f:28:9e:07:d3:ca:d3:1c:c2: 15:10:20:0c:20:df:99:f3:fe:43:41:b7:c1:75:51: fe:85:6d:05:d0:0b:22:0a:47:5e:40:cf:ff:bc:29: 18:d7:78:22:ba:e6:38:ff:7d:30:84:37:4f:15:96: b0:45:3a:3f:9e:e0:58:85:15:a8:c4:5a:25:84:08: bd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:79:77:E1:42:51:6F:F2:17:9B:EC:38:E4:73:5A:9B:90:55:AB:C6 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/72DF94424A8611F08884C659C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.252.209.0/24 103.225.196.0/24 103.234.54.0/24 150.107.2.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:bb:a8:39:a1:d2:b0:b0:1e:83:4b:6a:e2:a9:9e:c7:77:ee: 8a:63:66:a1:28:52:4e:43:53:e7:75:4f:89:6e:c2:79:1d:7c: 82:b3:11:13:6f:52:83:30:0f:8b:f7:1f:03:04:00:28:4f:67: 65:ad:07:9d:a4:fd:1e:06:33:8b:90:90:46:91:3b:2d:52:e6: 8a:61:74:80:bd:36:31:5d:05:36:e2:c8:3d:a2:6b:f3:8b:36: 2d:bd:3d:06:6a:6c:f3:91:07:80:69:40:b3:a5:31:cf:f8:76: db:00:fc:f7:d2:bb:0b:44:57:58:fc:b9:64:de:9e:82:d1:01: c2:a4:96:61:47:63:e0:00:cb:f8:27:e7:e9:3b:7d:58:61:0e: 87:d2:8f:1d:ab:23:7a:7f:af:9d:27:b2:d7:2c:2c:bd:46:93: e2:35:28:5d:e8:7e:82:c4:04:3c:33:ab:1f:d3:91:29:b7:a3: 7c:2c:e7:ad:5c:36:02:e6:1a:91:d6:45:a3:18:c5:48:8e:69: a7:04:77:30:95:9d:50:48:49:57:3c:84:cd:11:b4:28:d9:fe: 09:0b:ac:15:eb:c3:d6:ef:52:53:16:95:89:bf:fc:8b:ca:3a: 7d:f2:04:73:1d:a8:89:06:52:9a:93:23:81:89:bf:c4:e8:72: 50:7c:a7:03 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICCNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUxMDA4MjI1MzU4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGIzMi1lY2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1y70SOvtDE2+NSlyMvgO3KyHVskIMcbe690E6QF3NqOxmfGzw3UxqAy/LZzh ddN4ruW1PczEb8L2CXe1nP1Pjm8r4JvdUpO1wNbEfQmuOswCgrjXuqKHHTtSJwVa r3cvFslEVUWyVh3y2xOH2wqijKQEIxmqQLIvoG4D0xozGcusrTjXsQNkF9SvOgc1 jRzqc8QIaedaEhkNmvF7mk9luEg+OyyEtvaqMHXbKyP4PYj2+uF5YTRbncMPKJ4H 08rTHMIVECAMIN+Z8/5DQbfBdVH+hW0F0AsiCkdeQM//vCkY13giuuY4/30whDdP FZawRTo/nuBYhRWoxFolhAi9AwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFJN5d+FC UW/yF5vsOORzWpuQVavGMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvNzJERjk0NDI0 QTg2MTFGMDg4ODRDNjU5QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAK/zRAwQAZ+HEAwQAZ+o2AwQAlmsCMA0GCSqGSIb3DQEBCwUAA4IB AQAvu6g5odKwsB6DS2riqZ7Hd+6KY2ahKFJOQ1PndU+JbsJ5HXyCsxETb1KDMA+L 9x8DBAAoT2dlrQedpP0eBjOLkJBGkTstUuaKYXSAvTYxXQU24sg9omvzizYtvT0G amzzkQeAaUCzpTHP+HbbAPz30rsLRFdY/Llk3p6C0QHCpJZhR2PgAMv4J+fpO31Y YQ6H0o8dqyN6f6+dJ7LXLCy9RpPiNShd6H6CxAQ8M6sf05Ept6N8LOetXDYC5hqR 1kWjGMVIjmmnBHcwlZ1QSElXPITNEbQo2f4JC6wV68PW71JTFpWJv/yLyjp98gRz HaiJBlKakyOBib/E6HJQfKcD -----END CERTIFICATE-----Generated at Mon Mar 2 05:50:17 2026 by rpki-client