$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A17C3508168911EFBF38F580C4F9AE02.roa File: A17C3508168911EFBF38F580C4F9AE02.roa (raw, json) Hash identifier: lERVsj7ZnxrnEf9TOgtovUJSwTh4Gsu5+Sq5arEpLic= Subject key identifier: 40:3E:80:CD:EC:B0:32:B7:6C:F3:34:14:87:A6:43:72:43:48:26:97 Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Certificate serial: 01EF Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A17C3508168911EFBF38F580C4F9AE02.roa Signing time: Sat 23 May 2026 10:39:14 +0000 ROA not before: Sat 23 May 2026 10:39:14 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 400619 IP address blocks: 14.192.4.0/22 maxlen: 22 14.192.4.0/23 maxlen: 24 14.192.6.0/23 maxlen: 24 43.224.224.0/22 maxlen: 24 103.215.76.0/24 maxlen: 24 103.215.77.0/24 maxlen: 24 103.215.78.0/24 maxlen: 24 103.215.79.0/24 maxlen: 24 116.213.40.0/22 maxlen: 24 203.91.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 03:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Validity Not Before: May 23 10:39:14 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6a1183d2-41c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7f:c3:68:c0:c2:8a:72:46:dc:f8:1d:e9:2b: c1:68:87:01:68:a0:d4:b7:b1:f0:06:fb:99:ef:aa: 4a:83:85:56:ef:a4:9d:aa:37:72:0e:1d:80:0a:94: 0c:13:80:50:a7:3b:fa:bc:52:a9:46:56:3e:a0:f4: 5f:40:2b:b5:1c:b2:04:49:63:a6:be:83:f3:8a:35: 22:c3:5e:fa:ca:3b:a4:e2:90:1c:a5:20:c7:b2:6f: b3:4a:35:90:ab:e6:27:2b:03:2a:df:20:f6:53:25: 37:42:75:13:f2:ca:c7:86:d0:2e:9c:f9:b0:6d:1d: 2b:68:e1:14:33:72:45:2c:62:bb:a3:dc:6c:f0:54: 1c:a4:0d:cf:2b:65:26:0a:42:da:14:fc:e7:cb:07: f8:0a:44:3a:11:27:f9:88:91:b9:3b:22:5a:b0:e0: 15:0a:dc:00:29:a2:c3:91:7d:4e:43:59:7f:20:1b: 86:a3:61:68:a7:bd:53:6d:a7:ca:a1:8c:09:d1:12: 24:f2:50:86:5b:69:e5:5e:1e:9d:05:f8:af:e6:f5: 9b:12:7b:ad:84:9f:68:c9:60:fb:e5:1c:17:fd:53: 3f:a5:50:11:be:ce:12:1a:9e:5e:09:8d:d2:2a:6e: 2e:06:9f:47:ff:d2:ee:bc:97:5d:6e:0f:45:45:2f: 7f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3E:80:CD:EC:B0:32:B7:6C:F3:34:14:87:A6:43:72:43:48:26:97 X509v3 Authority Key Identifier: keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A17C3508168911EFBF38F580C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 14.192.4.0/22 43.224.224.0/22 103.215.76.0/22 116.213.40.0/22 203.91.72.0/21 Signature Algorithm: sha256WithRSAEncryption 54:43:41:bd:09:28:fd:0e:2a:3b:20:81:69:3e:fc:98:ee:26: 4f:53:19:ef:14:4a:64:6d:b2:80:24:49:7e:e4:23:22:7f:c1: ad:6f:19:b2:23:66:32:e8:5c:33:4d:61:b0:36:35:c6:c5:2b: e6:75:f4:6f:77:ec:ab:e9:64:c1:65:a7:10:ed:2f:4c:67:55: db:33:64:e4:86:ef:9c:ef:43:d5:70:e0:33:93:28:fb:cf:9b: ed:f7:62:09:8b:c7:db:f8:60:5e:7f:92:fb:b8:80:87:22:87: fb:00:35:d5:22:84:cf:ca:35:8c:6d:95:f3:f0:b3:92:f8:19: d7:bb:9f:a9:c3:7f:71:fe:4c:37:e8:9d:ac:c1:43:b1:5c:09: ce:ca:99:76:2e:9f:fd:ac:ad:03:27:73:c6:61:92:55:56:75: 0d:bd:e9:76:d5:30:d0:4a:a8:36:25:4c:43:65:35:dc:d8:a5: 06:dc:ff:cb:be:46:96:43:35:af:87:37:30:5f:ce:83:c1:70: 60:dd:d3:d9:99:50:46:25:ba:fb:3c:fa:2c:9e:a1:85:88:df: 4e:42:eb:ea:0d:b5:98:37:fc:b7:0d:12:5d:13:e9:d3:0a:c6: 36:d7:93:69:fa:b2:5e:f7:0b:0f:c9:dc:20:43:14:15:7d:53: d1:52:95:ef -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2 Mjc1QjZBNTUwHhcNMjYwNTIzMTAzOTE0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTExODNkMi00MWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6H/DaMDCinJG3Pgd6SvBaIcBaKDUt7HwBvuZ76pKg4VW76SdqjdyDh2ACpQM E4BQpzv6vFKpRlY+oPRfQCu1HLIESWOmvoPzijUiw176yjuk4pAcpSDHsm+zSjWQ q+YnKwMq3yD2UyU3QnUT8srHhtAunPmwbR0raOEUM3JFLGK7o9xs8FQcpA3PK2Um CkLaFPznywf4CkQ6ESf5iJG5OyJasOAVCtwAKaLDkX1OQ1l/IBuGo2Fop71TbafK oYwJ0RIk8lCGW2nlXh6dBfiv5vWbEnuthJ9oyWD75RwX/VM/pVARvs4SGp5eCY3S Km4uBp9H/9LuvJddbg9FRS9/JQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFEA+gM3s sDK3bPM0FIemQ3JDSCaXMB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkY1MzUvNjlBNTgwNzhCQTY2MTFFRUJDMzk2MjZFQzRGOUFFMDIvQTE3QzM1MDgx Njg5MTFFRkJGMzhGNTgwQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQCDsAEAwQCK+DgAwQCZ9dMAwQCdNUoAwQDy1tIMA0GCSqGSIb3DQEB CwUAA4IBAQBUQ0G9CSj9Dio7IIFpPvyY7iZPUxnvFEpkbbKAJEl+5CMif8Gtbxmy I2Yy6FwzTWGwNjXGxSvmdfRvd+yr6WTBZacQ7S9MZ1XbM2Tkhu+c70PVcOAzkyj7 z5vt92IJi8fb+GBef5L7uICHIof7ADXVIoTPyjWMbZXz8LOS+BnXu5+pw39x/kw3 6J2swUOxXAnOypl2Lp/9rK0DJ3PGYZJVVnUNvel21TDQSqg2JUxDZTXc2KUG3P/L vkaWQzWvhzcwX86DwXBg3dPZmVBGJbr7PPosnqGFiN9OQuvqDbWYN/y3DRJdE+nT CsY215Np+rJe9wsPydwgQxQVfVPRUpXv -----END CERTIFICATE-----Generated at Sat Jun 13 20:27:29 2026 by rpki-client