$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/D34D9A72BBEB11EC83BEA22AC4F9AE02.roa File: D34D9A72BBEB11EC83BEA22AC4F9AE02.roa (raw, json) Hash identifier: RTv0ABS4pIQE1F79UxrIcL7ETQomsrjHR3AoQMEbPV4= Subject key identifier: 5D:DE:59:1B:9D:0A:A5:94:38:06:4D:AE:9C:3F:CE:66:A8:9C:8D:43 Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Certificate serial: 08F6 Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/D34D9A72BBEB11EC83BEA22AC4F9AE02.roa Signing time: Wed 08 Apr 2026 02:51:50 +0000 ROA not before: Wed 08 Apr 2026 02:51:50 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132825 IP address blocks: 43.231.4.0/24 maxlen: 24 43.231.5.0/24 maxlen: 24 43.231.6.0/24 maxlen: 24 103.250.4.0/24 maxlen: 24 103.250.5.0/24 maxlen: 24 103.250.6.0/24 maxlen: 24 103.250.7.0/24 maxlen: 24 118.107.192.0/24 maxlen: 24 118.107.193.0/24 maxlen: 24 118.107.194.0/24 maxlen: 24 118.107.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2294 (0x8f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Validity Not Before: Apr 8 02:51:50 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69d5c2c6-faa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9d:ae:7c:33:7d:b7:d2:70:fa:61:27:db:2b: 49:77:26:a1:67:b1:05:0f:1e:2d:08:04:4c:60:f5: 70:c4:7d:f3:83:a1:94:31:79:99:06:56:7a:83:1c: ca:03:6f:5f:83:c6:e6:df:23:c1:2b:45:8f:21:ca: f6:3c:86:2a:6f:37:c5:2d:1c:7e:43:41:65:ec:a1: f9:5b:ea:83:4b:b4:04:cc:2f:36:93:93:1d:be:f1: ce:49:b4:6a:67:30:b5:06:80:9c:7d:8c:ea:3d:a1: a9:fa:b7:9e:e0:74:ea:d0:c1:5e:ff:5d:68:ca:6b: ca:3f:05:cd:3b:5d:4c:37:76:34:7d:1e:e8:05:4c: c9:fe:4d:be:6e:43:d0:c3:84:49:83:14:96:a6:63: aa:46:2c:c3:92:3d:1e:e6:e3:c4:3f:18:b3:24:f6: 65:8e:b9:4d:fb:e3:3a:a0:be:e1:2e:44:1b:15:68: ea:89:c9:c5:d8:e8:e3:15:d1:38:c5:89:38:40:b8: 1c:58:c3:cb:66:fc:5a:22:d0:ca:6e:dd:75:18:6a: b7:2f:b4:da:0a:80:7f:a4:d4:58:e1:91:60:98:ec: 6e:f2:31:17:9d:8a:dd:5d:d5:2c:90:5e:05:d6:d4: 1c:99:16:b7:4e:cd:f1:1e:21:a6:80:97:75:b6:1e: ed:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DE:59:1B:9D:0A:A5:94:38:06:4D:AE:9C:3F:CE:66:A8:9C:8D:43 X509v3 Authority Key Identifier: keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/D34D9A72BBEB11EC83BEA22AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.231.4.0-43.231.6.255 103.250.4.0/22 118.107.192.0/22 Signature Algorithm: sha256WithRSAEncryption ce:5d:8e:79:cf:14:cc:1c:db:f4:e4:ca:a5:8b:fc:47:8e:09: 4e:c8:da:7c:cf:54:b4:0b:6f:47:bb:f9:e5:92:27:03:bf:a2: d8:89:42:aa:1a:4f:ef:0f:5f:b8:1c:08:53:35:4d:cc:45:e0: 31:26:bf:8c:3f:5e:62:e4:a0:e9:02:8e:68:39:9d:6a:52:18: 04:81:2e:d7:1c:6b:bc:e7:e9:b9:ac:a5:6e:1f:cf:32:71:2b: dd:1e:1f:57:9c:b6:db:51:05:3c:cc:16:b3:00:42:cb:92:e2: e1:ff:34:05:0d:86:38:16:b2:2f:ac:90:98:f9:a7:d6:9a:6b: 36:80:2f:ef:b1:7f:15:8f:7e:95:ac:5e:13:80:cf:52:fe:e5: b7:ea:aa:75:2a:24:e0:41:98:e5:ec:19:c7:43:c7:52:da:a2: 1f:f5:56:65:b1:f4:fd:4f:d4:54:e7:ae:bb:1e:42:86:a0:17: 87:57:a6:88:88:cd:05:af:89:b1:4d:20:69:47:b1:c1:ee:43: e3:de:6b:53:01:36:65:67:ed:32:0e:36:9e:6b:11:ab:67:8e: de:6e:6a:1b:4a:2d:4a:0c:8e:70:07:90:28:8e:64:0e:c7:e1: 9f:ca:64:9d:70:dc:3a:8e:2c:da:79:85:33:a1:4f:37:57:46: 9e:71:cd:f2 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICCPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1 MzIzM0U1OTUwHhcNMjYwNDA4MDI1MTUwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWQ1YzJjNi1mYWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJ2ufDN9t9Jw+mEn2ytJdyahZ7EFDx4tCARMYPVwxH3zg6GUMXmZBlZ6gxzK A29fg8bm3yPBK0WPIcr2PIYqbzfFLRx+Q0Fl7KH5W+qDS7QEzC82k5MdvvHOSbRq ZzC1BoCcfYzqPaGp+ree4HTq0MFe/11oymvKPwXNO11MN3Y0fR7oBUzJ/k2+bkPQ w4RJgxSWpmOqRizDkj0e5uPEPxizJPZljrlN++M6oL7hLkQbFWjqicnF2OjjFdE4 xYk4QLgcWMPLZvxaItDKbt11GGq3L7TaCoB/pNRY4ZFgmOxu8jEXnYrdXdUskF4F 1tQcmRa3Ts3xHiGmgJd1th7tTwIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFF3eWRud CqWUOAZNrpw/zmaonI1DMB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2 QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjE3NkQvOTNEMTdDRDAwNkEwMTFFQkI0MDkwODU5QzRGOUFFMDIvRDM0RDlBNzJC QkVCMTFFQzgzQkVBMjJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaMAwDBAIr5wQDBAAr5wYDBAJn+gQDBAJ2a8AwDQYJKoZIhvcNAQELBQAD ggEBAM5djnnPFMwc2/TkyqWL/EeOCU7I2nzPVLQLb0e7+eWSJwO/otiJQqoaT+8P X7gcCFM1TcxF4DEmv4w/XmLkoOkCjmg5nWpSGASBLtcca7zn6bmspW4fzzJxK90e H1ectttRBTzMFrMAQsuS4uH/NAUNhjgWsi+skJj5p9aaazaAL++xfxWPfpWsXhOA z1L+5bfqqnUqJOBBmOXsGcdDx1Laoh/1VmWx9P1P1FTnrrseQoagF4dXpoiIzQWv ibFNIGlHscHuQ+Pea1MBNmVn7TIONp5rEatnjt5uahtKLUoMjnAHkCiOZA7H4Z/K ZJ1w3DqOLNp5hTOhTzdXRp5xzfI= -----END CERTIFICATE-----Generated at Fri Apr 17 20:48:38 2026 by rpki-client