$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/477192ACF3FA11EAB9D11D26C4F9AE02.roa File: 477192ACF3FA11EAB9D11D26C4F9AE02.roa (raw, json) Hash identifier: Lubg1etHnAX3Eexr1F6RZ/V0j32jER/ID7u87KtGroA= Subject key identifier: 59:18:53:95:1F:10:2E:49:87:3B:27:E0:56:D1:2A:20:B2:5F:CA:48 Certificate issuer: /CN=A911C812/serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB Certificate serial: 0884 Authority key identifier: 6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/477192ACF3FA11EAB9D11D26C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:37:48 +0000 ROA not before: Thu 12 Jun 2025 20:58:24 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 9534 IP address blocks: 43.240.20.0/22 maxlen: 22 43.240.20.0/24 maxlen: 24 43.240.21.0/24 maxlen: 24 43.240.22.0/24 maxlen: 24 43.240.23.0/24 maxlen: 24 103.239.248.0/22 maxlen: 22 202.75.128.0/19 maxlen: 19 202.75.160.0/19 maxlen: 19 202.151.192.0/18 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2180 (0x884) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C812, serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB Validity Not Before: Jun 12 20:58:24 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3fadc-2c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cf:35:ad:9f:9e:17:83:d9:7d:af:3c:40:e0: 27:82:f2:c2:80:39:c7:7b:60:e2:5a:5f:4b:15:b6: 42:3b:b1:73:a8:51:1c:32:b2:7f:f4:5a:45:ec:55: 9a:9f:05:cd:f9:0b:d4:21:b3:2c:92:60:9f:ca:88: dc:e1:5f:fa:98:6c:91:d0:03:13:cf:58:cd:4e:83: 0c:dd:1c:65:e6:c1:dc:54:9e:f1:1b:33:d1:c6:e4: ac:b5:12:2f:51:31:89:df:3f:c8:55:f3:5f:60:6a: a1:b9:ca:a3:fb:fb:ce:f2:2c:2c:2b:87:d1:ba:d0: ef:57:65:d2:50:80:d1:70:6d:7d:e5:e6:95:12:62: 67:98:8c:90:2e:7e:e5:7e:d8:16:25:3f:95:4c:ed: 3d:90:d2:c5:d7:f5:a7:59:cd:b3:b5:b1:be:de:8a: da:27:c9:78:b9:36:9c:44:f9:7f:8a:4c:ab:63:d2: 9e:e4:28:ce:81:6f:c7:81:4a:c5:5d:36:ea:91:49: 21:51:d7:67:76:be:ed:6e:a8:ac:bd:b0:14:4f:7d: 68:c6:48:c2:5f:eb:69:7e:e1:72:23:c9:3d:63:72: 65:20:32:a3:22:68:b5:a7:30:c3:56:85:b3:27:eb: 55:87:ee:1e:fa:fe:0a:f3:8e:4d:c0:72:5a:e6:c9: af:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:18:53:95:1F:10:2E:49:87:3B:27:E0:56:D1:2A:20:B2:5F:CA:48 X509v3 Authority Key Identifier: keyid:6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/477192ACF3FA11EAB9D11D26C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.240.20.0/22 103.239.248.0/22 202.75.128.0/18 202.151.192.0/18 Signature Algorithm: sha256WithRSAEncryption 54:a0:e1:65:af:c9:be:3b:13:b4:b8:47:6b:c7:fb:67:de:52: 3c:27:93:28:12:b3:d5:b8:bd:2a:67:dd:4d:a5:53:1e:4c:9b: 0c:b9:ae:14:d0:1b:8a:f8:69:1f:3d:62:1f:63:3b:f8:bd:52: f0:71:84:29:75:90:b8:75:37:81:1e:31:29:8a:b3:f3:72:ee: 3c:19:46:e5:62:f7:f2:2f:be:d7:5d:a0:56:57:0f:c1:82:e1: bc:62:eb:22:fd:da:41:79:78:63:d8:a7:62:f9:84:eb:1c:c8: 20:ae:84:03:1f:78:e4:e1:f4:f4:eb:a3:f3:d4:ac:d5:b3:04: 43:25:ae:cb:9b:66:f0:7b:24:fc:f0:a4:61:b4:62:07:1a:d1: 1a:e3:35:2b:2a:1e:c3:eb:d2:ba:2f:05:0e:cd:0e:fb:e4:ec: 4b:bb:60:8b:5b:02:9d:df:23:62:35:a8:c4:15:4c:61:b7:4d: 9f:6a:8e:bc:cd:0a:4c:d3:0a:bf:a5:cb:91:17:82:5b:ea:73: e9:6e:a1:e6:a3:e8:88:6d:68:3a:32:3e:1a:e1:b8:3a:8d:5d: bf:32:30:18:11:c3:15:a5:cf:1d:2d:69:a7:66:96:a3:f1:3c: 95:49:85:fb:de:40:df:c1:b7:70:b3:53:3e:4a:85:16:35:14: 42:63:8f:80 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICCIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4MTIxMTAvBgNVBAUTKDZBMzJCRDEzREZDRDc3RUYxQjVDMDUyQkUzNkVEODlB RDIxMjcwREIwHhcNMjUwNjEyMjA1ODI0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZmFkYy0yYzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkc81rZ+eF4PZfa88QOAngvLCgDnHe2DiWl9LFbZCO7FzqFEcMrJ/9FpF7FWa nwXN+QvUIbMskmCfyojc4V/6mGyR0AMTz1jNToMM3Rxl5sHcVJ7xGzPRxuSstRIv UTGJ3z/IVfNfYGqhucqj+/vO8iwsK4fRutDvV2XSUIDRcG195eaVEmJnmIyQLn7l ftgWJT+VTO09kNLF1/WnWc2ztbG+3oraJ8l4uTacRPl/ikyrY9Ke5CjOgW/HgUrF XTbqkUkhUddndr7tbqisvbAUT31oxkjCX+tpfuFyI8k9Y3JlIDKjImi1pzDDVoWz J+tVh+4e+v4K845NwHJa5smvNwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFFkYU5Uf EC5Jhzsn4FbRKiCyX8pIMB8GA1UdIwQYMBaAFGoyvRPfzXfvG1wFK+Nu2JrSEnDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzgxMi9CMjVFRjk5MEU5 MTYxMUVBQTcwNUQ4NEZDNEY5QUUwMi9haks5RTlfTmQtOGJYQVVyNDI3WW10SVNj TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FqSzlFOV9OZC04YlhBVXI0MjdZbXRJU2NOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUM4MTIvQjI1RUY5OTBFOTE2MTFFQUE3MDVEODRGQzRGOUFFMDIvNDc3MTkyQUNG M0ZBMTFFQUI5RDExRDI2QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQCK/AUAwQCZ+/4AwQGykuAAwQGypfAMA0GCSqGSIb3DQEBCwUAA4IB AQBUoOFlr8m+OxO0uEdrx/tn3lI8J5MoErPVuL0qZ91NpVMeTJsMua4U0BuK+Gkf PWIfYzv4vVLwcYQpdZC4dTeBHjEpirPzcu48GUblYvfyL77XXaBWVw/BguG8Yusi /dpBeXhj2Kdi+YTrHMggroQDH3jk4fT066Pz1KzVswRDJa7Lm2bweyT88KRhtGIH GtEa4zUrKh7D69K6LwUOzQ775OxLu2CLWwKd3yNiNajEFUxht02fao68zQpM0wq/ pcuRF4Jb6nPpbqHmo+iIbWg6Mj4a4bg6jV2/MjAYEcMVpc8dLWmnZpaj8TyVSYX7 3kDfwbdws1M+SoUWNRRCY4+A -----END CERTIFICATE-----Generated at Mon Mar 2 06:52:44 2026 by rpki-client