$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/211E0AC268F911EF986C8281C4F9AE02.roa File: 211E0AC268F911EF986C8281C4F9AE02.roa (raw, json) Hash identifier: P/zfn2TnTP8oh0npf6LxHTRFCNPzez1h9qHSPByk2/0= Subject key identifier: 2F:D5:FA:7F:B2:C9:47:53:52:CE:0F:15:F1:0A:CA:BF:90:5A:7C:E5 Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 0433 Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/211E0AC268F911EF986C8281C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:49:38 +0000 ROA not before: Tue 02 Dec 2025 23:58:53 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 132838 IP address blocks: 43.249.113.0/24 maxlen: 24 43.249.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1075 (0x433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: Dec 2 23:58:53 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a48a42-bb50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:01:ee:68:4a:af:8b:67:25:5d:45:9a:0b:13: 99:02:96:a3:33:68:93:5a:1a:b2:6a:34:3b:24:fb: 48:15:85:19:8d:80:ff:f0:c3:77:0b:4f:02:e0:71: b9:35:36:1c:8e:c3:84:46:c2:2c:37:96:ca:14:42: f6:9c:ff:ba:73:f1:60:56:b7:c4:57:ff:ee:b9:d9: 3a:94:7d:2f:58:23:fa:d4:b5:64:43:9f:36:31:1b: 56:20:51:6a:aa:63:d8:2f:af:71:d6:92:75:26:65: c9:fa:50:12:cb:44:b0:ec:ef:96:df:62:fd:fb:ae: 33:0d:20:98:cb:61:ae:71:02:35:54:60:d0:d2:dc: 6e:4c:81:fa:df:71:01:56:fe:19:7b:6d:fd:fa:56: 9b:bf:e7:d1:a1:43:50:cd:14:9b:19:60:6e:f9:b8: 98:82:03:4f:74:bc:f8:a0:fc:c3:f5:26:c5:4e:ce: f7:ed:4b:2b:9f:0f:03:80:53:aa:ac:34:57:d6:cf: 00:20:ab:24:c5:ab:e3:db:7c:10:67:00:e4:e9:5b: cd:43:a3:b2:79:07:d4:91:e9:41:e7:8d:a2:22:f8: 7b:a0:45:93:00:b7:3f:ce:5d:37:b5:8b:f9:28:df: df:ed:b2:81:54:e0:bc:5a:81:9e:d3:49:e7:e0:aa: d4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D5:FA:7F:B2:C9:47:53:52:CE:0F:15:F1:0A:CA:BF:90:5A:7C:E5 X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/211E0AC268F911EF986C8281C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.249.113.0-43.249.114.255 Signature Algorithm: sha256WithRSAEncryption 47:ee:2e:08:d8:06:e6:38:9a:79:da:30:1e:a8:15:0a:ea:d5: ff:03:8e:e6:c6:aa:08:cf:2f:13:fc:53:5c:67:6e:1b:76:ee: 29:bd:d2:3b:8a:51:81:f6:99:d7:b7:62:25:2d:d8:03:ec:52: ae:1c:3e:97:32:5a:33:d7:61:a5:96:b5:3e:e0:49:b6:70:74: a3:3b:d3:dc:f9:e1:b9:ab:c3:b5:3d:64:7f:c8:e6:4a:37:bc: 43:b4:60:58:4b:e6:7a:fc:57:2c:4b:33:94:c4:00:3d:60:6e: c8:1b:19:63:32:ef:89:c0:41:9c:fb:84:86:31:d5:bd:b0:68: 27:50:65:ba:2c:79:de:41:6d:39:d1:11:b1:e0:e0:25:f5:61: e2:88:79:a9:bb:d2:e9:a7:02:5c:0e:49:88:4e:c4:2d:1b:93: 92:ea:82:97:9c:18:88:10:a0:a9:2c:68:dd:df:06:dd:86:0d: c3:2a:d0:2d:8f:08:86:d9:84:c3:b3:c1:30:f1:3e:8e:b6:9b: 49:a4:5c:23:be:60:47:da:72:03:ec:61:8f:ba:cd:b3:42:81: 96:ae:d3:59:77:04:66:fd:52:ba:f9:59:6f:f2:56:6d:c6:01: 5e:87:fc:68:20:2e:af:f8:ad:28:d9:b7:12:ab:8d:03:48:a4: 6b:b6:b6:47 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICBDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjUxMjAyMjM1ODUzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGE0Mi1iYjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwHuaEqvi2clXUWaCxOZApajM2iTWhqyajQ7JPtIFYUZjYD/8MN3C08C4HG5 NTYcjsOERsIsN5bKFEL2nP+6c/FgVrfEV//uudk6lH0vWCP61LVkQ582MRtWIFFq qmPYL69x1pJ1JmXJ+lASy0Sw7O+W32L9+64zDSCYy2GucQI1VGDQ0txuTIH633EB Vv4Ze239+labv+fRoUNQzRSbGWBu+biYggNPdLz4oPzD9SbFTs737Usrnw8DgFOq rDRX1s8AIKskxavj23wQZwDk6VvNQ6OyeQfUkelB542iIvh7oEWTALc/zl03tYv5 KN/f7bKBVOC8WoGe00nn4KrUawIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFC/V+n+y yUdTUs4PFfEKyr+QWnzlMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvMjExRTBBQzI2 OEY5MTFFRjk4NkM4MjgxQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBAAr+XEDBAAr+XIwDQYJKoZIhvcNAQELBQADggEBAEfuLgjYBuY4 mnnaMB6oFQrq1f8DjubGqgjPLxP8U1xnbht27im90juKUYH2mde3YiUt2APsUq4c PpcyWjPXYaWWtT7gSbZwdKM709z54bmrw7U9ZH/I5ko3vEO0YFhL5nr8VyxLM5TE AD1gbsgbGWMy74nAQZz7hIYx1b2waCdQZbosed5BbTnREbHg4CX1YeKIeam70umn AlwOSYhOxC0bk5LqgpecGIgQoKksaN3fBt2GDcMq0C2PCIbZhMOzwTDxPo62m0mk XCO+YEfacgPsYY+6zbNCgZau01l3BGb9Urr5WW/yVm3GAV6H/GggLq/4rSjZtxKr jQNIpGu2tkc= -----END CERTIFICATE-----Generated at Mon Mar 2 02:19:55 2026 by rpki-client