$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/23803F800C9C11ED82C8955BC4F9AE02.roa File: 23803F800C9C11ED82C8955BC4F9AE02.roa (raw, json) Hash identifier: 9pyk61d8cpOYY/9bR1+9dkSENPysOmYNLIQsHypTK/Q= Subject key identifier: 33:CA:4D:67:4D:F6:ED:0D:26:63:B5:B5:7E:29:5D:59:D1:03:4B:4A Certificate issuer: /CN=A911BDAE/serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0 Certificate serial: 0311 Authority key identifier: E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/23803F800C9C11ED82C8955BC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:53:14 +0000 ROA not before: Thu 29 Jan 2026 01:21:04 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 38851 IP address blocks: 43.226.232.0/22 maxlen: 23 103.46.144.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 785 (0x311) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDAE, serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0 Validity Not Before: Jan 29 01:21:04 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a436ba-a22c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a4:23:d2:f4:c0:56:3c:39:bb:b0:c6:48:85: 5b:8f:23:54:da:a6:5f:fb:a0:83:8c:a3:f7:f6:bb: 1e:04:3f:88:4f:28:3d:9a:5e:2d:15:46:59:35:ae: d6:df:7c:a4:5b:2e:ff:83:1d:78:d1:7d:ee:66:ff: 21:c4:0a:e3:9b:5c:00:38:9b:8f:6d:c8:e5:24:fd: 01:57:67:94:31:de:3e:00:df:69:19:f9:35:28:c6: a1:2a:53:93:ce:18:6c:3b:f2:a9:26:6b:78:46:39: 02:14:53:e9:bf:ef:ca:5b:37:3d:84:c5:2c:e2:58: 4c:89:6e:67:b7:91:c6:ca:45:63:9c:eb:21:58:e3: 42:1f:90:cf:b6:7c:53:ce:2f:41:4e:41:ce:e4:35: 15:37:f2:9b:74:7c:28:2f:83:af:e5:fa:bd:b5:a2: d6:61:3a:ff:04:9a:38:eb:32:14:de:88:ac:68:d0: d8:f4:2e:84:11:1c:17:ce:5d:aa:0b:ea:a1:d6:08: 66:68:27:cd:ad:47:e2:ec:79:dc:8d:b2:1a:98:09: ec:d3:56:14:c7:7c:75:08:c6:f7:1f:09:40:a3:8a: 25:b7:a8:fe:0c:c5:85:33:b6:12:22:49:8f:03:97: 8f:f4:22:94:f7:c1:d1:87:4d:59:f1:81:72:cf:a8: 07:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CA:4D:67:4D:F6:ED:0D:26:63:B5:B5:7E:29:5D:59:D1:03:4B:4A X509v3 Authority Key Identifier: keyid:E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/23803F800C9C11ED82C8955BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.226.232.0/22 103.46.144.0/22 Signature Algorithm: sha256WithRSAEncryption 96:71:53:c7:d3:5d:cd:77:95:85:6f:83:90:0d:92:8a:9c:ab: d8:97:77:ce:5a:5b:ef:85:02:5b:af:81:6e:5e:3a:eb:c6:9a: 84:86:80:c9:2d:46:c0:83:a8:c7:b7:e5:56:84:46:5d:12:de: 7d:d4:f5:7c:52:0e:f6:19:42:6d:52:ed:b4:97:58:57:c2:ac: d9:7e:bb:df:18:7f:38:f7:da:c9:b0:ee:57:2d:c7:bd:ef:a4: 9b:c8:ae:46:1e:5e:fb:cd:1c:37:ba:ad:b2:8b:e2:1e:dd:a1: b9:c8:6b:d9:ec:5f:f8:cc:de:be:ff:fc:71:be:17:09:eb:0d: 0a:24:ec:b6:da:83:a2:f6:83:ef:12:62:b2:9a:c1:ab:4d:70: 4a:97:2b:17:24:89:70:b2:51:8d:b9:70:78:18:51:7d:9a:6f: 54:f2:7b:79:71:5b:03:77:e0:6a:63:91:88:e0:e8:90:e5:7a: df:4b:e1:34:d6:20:ad:c2:43:62:ff:52:3d:15:9a:db:3c:7a: 11:66:71:6a:94:04:35:c2:7c:81:5b:f8:0f:61:f0:e7:44:71: ec:a9:4a:4d:2d:8e:9b:da:c4:10:f5:47:18:ed:a7:03:3a:57: 34:6b:43:5a:c6:d5:5a:12:dc:d8:01:91:0e:48:4b:4d:61:2c: d1:b5:95:40 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQUUxMTAvBgNVBAUTKEU5RkU4M0E5NEMwMUJCMTNENTM1N0YzNzBDNzY1OTcz RTk5N0Y0RDAwHhcNMjYwMTI5MDEyMTA0WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzZiYS1hMjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi6Qj0vTAVjw5u7DGSIVbjyNU2qZf+6CDjKP39rseBD+ITyg9ml4tFUZZNa7W 33ykWy7/gx140X3uZv8hxArjm1wAOJuPbcjlJP0BV2eUMd4+AN9pGfk1KMahKlOT zhhsO/KpJmt4RjkCFFPpv+/KWzc9hMUs4lhMiW5nt5HGykVjnOshWONCH5DPtnxT zi9BTkHO5DUVN/KbdHwoL4Ov5fq9taLWYTr/BJo46zIU3oisaNDY9C6EERwXzl2q C+qh1ghmaCfNrUfi7HncjbIamAns01YUx3x1CMb3HwlAo4olt6j+DMWFM7YSIkmP A5eP9CKU98HRh01Z8YFyz6gHTwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFDPKTWdN 9u0NJmO1tX4pXVnRA0tKMB8GA1UdIwQYMBaAFOn+g6lMAbsT1TV/Nwx2WXPpl/TQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBRS9FOEYxMjk5ODBD OTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4UFZOWDgzREhaWmMtbVg5 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZmNkRxVXdCdXhQVk5YODNESFpaYy1tWDlOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJEQUUvRThGMTI5OTgwQzk1MTFFRDg4NjI1NjM0QzRGOUFFMDIvMjM4MDNGODAw QzlDMTFFRDgyQzg5NTVCQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK+LoAwQCZy6QMA0GCSqGSIb3DQEBCwUAA4IBAQCWcVPH013Nd5WF b4OQDZKKnKvYl3fOWlvvhQJbr4FuXjrrxpqEhoDJLUbAg6jHt+VWhEZdEt591PV8 Ug72GUJtUu20l1hXwqzZfrvfGH8499rJsO5XLce976SbyK5GHl77zRw3uq2yi+Ie 3aG5yGvZ7F/4zN6+//xxvhcJ6w0KJOy22oOi9oPvEmKymsGrTXBKlysXJIlwslGN uXB4GFF9mm9U8nt5cVsDd+BqY5GI4OiQ5XrfS+E01iCtwkNi/1I9FZrbPHoRZnFq lAQ1wnyBW/gPYfDnRHHsqUpNLY6b2sQQ9UcY7acDOlc0a0NaxtVaEtzYAZEOSEtN YSzRtZVA -----END CERTIFICATE-----Generated at Mon Mar 2 09:07:32 2026 by rpki-client