$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/9517317CDFD811F0B8B3FAFD526F56BC.roa File: 9517317CDFD811F0B8B3FAFD526F56BC.roa (raw, json) Hash identifier: p5Ar/Y3yKWyl4wfili7WzV3//onZnjsth1pH0/EPtSU= Subject key identifier: A4:85:33:FB:60:8E:DD:09:B3:6D:A3:6B:3A:2B:4E:30:1B:D1:94:58 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 0998 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/9517317CDFD811F0B8B3FAFD526F56BC.roa Signing time: Sat 10 Oct 2026 22:43:45 +0000 ROA not before: Sat 10 Oct 2026 22:43:45 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 136173 IP address blocks: 43.229.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 22:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2456 (0x998) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 10 22:43:45 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acabfa1-dee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e2:c6:8b:b8:73:26:6b:06:7e:a6:94:1a:50: b1:87:7b:a0:a1:c9:e8:6c:2e:4c:b8:eb:b0:83:72: fb:ed:74:f5:ad:0d:1d:62:e6:f4:84:09:ab:9b:6e: a5:32:52:b2:6b:84:8d:09:11:d9:b4:17:79:25:ac: 8a:67:ee:3b:e3:59:0b:69:7a:68:51:96:5e:23:02: 5f:d9:a8:28:09:05:3d:b1:6b:b5:ca:b3:7c:fd:82: c5:7d:7b:c9:c9:0a:d3:9f:7d:08:7d:fb:cd:07:cc: 4e:35:10:4f:62:2f:a1:fe:c4:fc:9b:46:0a:80:4f: b9:55:49:06:b2:39:bf:6d:b7:5a:70:47:b8:0e:8e: a5:b9:bb:59:b8:3f:52:25:66:1f:fa:03:e2:2c:ad: 38:58:11:6f:30:9b:11:96:81:85:e7:10:d8:59:79: 48:0e:e8:29:35:1a:f5:c9:e9:a0:6a:58:cb:6d:7c: 84:41:bf:02:68:1c:3c:e0:fc:a7:8f:c5:f8:e8:82: 1a:29:03:4c:c7:a5:59:ad:e4:f1:4c:8a:0b:4b:be: 98:73:a0:35:b3:26:d6:41:fb:1a:5f:2e:0a:c8:a2: eb:be:62:be:8f:d7:59:7f:4d:fa:7c:28:da:a4:06: 3a:25:d3:66:9e:42:d3:ec:6e:26:ae:db:f4:52:3d: af:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:85:33:FB:60:8E:DD:09:B3:6D:A3:6B:3A:2B:4E:30:1B:D1:94:58 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/9517317CDFD811F0B8B3FAFD526F56BC.roa sbgp-ipAddrBlock: critical IPv4: 43.229.155.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:21:d2:11:df:41:b8:a8:73:b8:dd:49:dd:dd:2a:5a:e5:c3: 4f:e6:87:ae:86:c6:12:ce:34:48:11:c8:41:31:98:07:6c:ac: 4a:8f:90:06:34:54:ce:22:91:cb:a9:89:8d:09:a6:e4:2b:92: 77:e9:e2:6d:9c:de:7a:1b:b5:d7:78:1a:63:0c:19:fc:e3:a2: a0:3c:aa:7c:8d:82:0c:5a:37:ca:6b:13:d0:ad:cb:fc:e4:34: 61:55:23:b6:a2:54:32:fb:00:8a:9d:51:c4:23:09:b6:c8:71: 6b:17:54:64:74:f6:57:01:ee:63:1f:d3:32:85:af:9d:4e:52: 02:96:57:b5:54:3b:11:57:7a:43:42:b0:9f:bb:3f:d1:49:2b: 1a:70:c2:67:48:c2:9f:56:30:6e:51:ec:97:6c:fb:f2:59:e0: d2:ff:b3:06:a5:e7:8f:a9:b7:74:77:14:af:07:40:68:c1:19: 2a:a6:7f:16:97:67:ff:6c:e2:d1:11:60:e3:a9:ff:00:73:8b: 1b:b2:a2:ef:cb:d4:f4:9a:96:02:76:22:e2:07:e1:e0:54:75: b9:a9:f1:49:5b:cc:9a:f0:ec:25:91:f9:8f:24:c1:09:0b:06: 68:29:89:54:59:f8:e2:89:9d:95:70:56:43:67:fd:df:a1:54: ea:42:7b:51 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjYxMDEwMjI0MzQ1WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNhYmZhMS1kZWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2OLGi7hzJmsGfqaUGlCxh3ugocnobC5MuOuwg3L77XT1rQ0dYub0hAmrm26l MlKya4SNCRHZtBd5JayKZ+4741kLaXpoUZZeIwJf2agoCQU9sWu1yrN8/YLFfXvJ yQrTn30IffvNB8xONRBPYi+h/sT8m0YKgE+5VUkGsjm/bbdacEe4Do6lubtZuD9S JWYf+gPiLK04WBFvMJsRloGF5xDYWXlIDugpNRr1yemgaljLbXyEQb8CaBw84Pyn j8X46IIaKQNMx6VZreTxTIoLS76Yc6A1sybWQfsaXy4KyKLrvmK+j9dZf036fCja pAY6JdNmnkLT7G4mrtv0Uj2vXwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKSFM/tg jt0Js22jazorTjAb0ZRYMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvOTUxNzMxN0NE RkQ4MTFGMEI4QjNGQUZENTI2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK+WbMA0GCSqGSIb3DQEBCwUAA4IBAQAcIdIR30G4qHO43Und3Spa 5cNP5oeuhsYSzjRIEchBMZgHbKxKj5AGNFTOIpHLqYmNCabkK5J36eJtnN56G7XX eBpjDBn846KgPKp8jYIMWjfKaxPQrcv85DRhVSO2olQy+wCKnVHEIwm2yHFrF1Rk dPZXAe5jH9Myha+dTlIClle1VDsRV3pDQrCfuz/RSSsacMJnSMKfVjBuUeyXbPvy WeDS/7MGpeePqbd0dxSvB0BowRkqpn8Wl2f/bOLREWDjqf8Ac4sbsqLvy9T0mpYC diLiB+HgVHW5qfFJW8ya8OwlkfmPJMEJCwZoKYlUWfjiiZ2VcFZDZ/3foVTqQntR -----END CERTIFICATE-----Generated at Mon Oct 12 00:57:46 2026 by rpki-client