$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/85E1EA3CBD2011F181CACAEB4C11F970.roa File: 85E1EA3CBD2011F181CACAEB4C11F970.roa (raw, json) Hash identifier: 0fFpLgylWik5AUihdajfhV+EarzIno/5HOOHH7xFom8= Subject key identifier: 90:A4:60:C9:75:29:D8:4D:39:BB:72:22:9E:E8:4E:22:9A:E7:CE:0A Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 060E Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/85E1EA3CBD2011F181CACAEB4C11F970.roa Signing time: Tue 03 Nov 2026 00:47:26 +0000 ROA not before: Tue 03 Nov 2026 00:47:26 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 2914 IP address blocks: 113.20.40.0/22 maxlen: 22 113.20.60.0/22 maxlen: 22 223.29.164.0/22 maxlen: 22 223.29.168.0/22 maxlen: 22 223.29.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 00:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1550 (0x60e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Nov 3 00:47:26 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ae92f1e-d613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f4:ed:2c:1a:5d:6c:bf:5b:d8:12:cc:97:f8: ed:c6:60:ef:1e:37:40:91:41:92:86:fe:c5:f0:2f: 0f:95:a5:2b:de:e2:fa:cf:d2:67:e9:2d:9a:1d:85: d3:ee:4b:bd:73:0b:81:73:f4:84:fb:5f:a5:e1:54: a6:15:7d:ad:e3:46:8a:04:2a:d9:3a:18:8d:18:0f: e7:58:8f:75:fa:2c:2e:ac:4a:e0:f2:8e:09:99:bb: e8:e8:97:65:31:b2:48:a0:b2:29:d4:1e:05:5b:a4: 9d:ec:88:6b:49:25:78:2c:b0:72:79:03:f3:3f:cf: f7:30:71:29:3f:47:0d:ed:7b:19:2c:58:48:47:e4: ce:7a:78:ec:4a:00:e7:88:a8:ab:a7:d8:83:0d:ee: 73:c4:55:42:84:1f:de:6e:8c:c1:3a:d0:76:de:7f: 6b:82:c9:01:a2:7c:ef:54:5d:06:8a:e9:b7:6a:2d: b0:89:2b:03:bc:9f:d1:9b:f1:da:8e:0b:b7:a7:47: 8a:c1:30:3a:08:05:6b:a0:49:fb:d6:06:b9:96:c9: d2:b1:8e:a2:ca:3f:97:cd:46:d1:61:e2:21:ba:61: 5e:b1:ff:df:90:c6:8c:9e:90:56:a7:95:c3:86:c2: 88:86:e1:b2:2a:10:2d:d2:09:1c:07:a3:a3:6b:21: a6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A4:60:C9:75:29:D8:4D:39:BB:72:22:9E:E8:4E:22:9A:E7:CE:0A X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/85E1EA3CBD2011F181CACAEB4C11F970.roa sbgp-ipAddrBlock: critical IPv4: 113.20.40.0/22 113.20.60.0/22 223.29.164.0-223.29.175.255 Signature Algorithm: sha256WithRSAEncryption 99:21:3f:db:71:d8:24:a1:2e:3b:f2:44:a4:35:d5:fe:8e:12: 39:91:b3:55:ec:6d:b0:57:91:0f:2f:52:da:d3:f2:10:15:80: 02:1f:98:65:5c:28:20:14:a4:d0:9f:dc:2f:bc:60:7c:f3:14: b7:c3:92:8a:9c:c8:21:7c:28:63:fb:05:d7:15:c1:36:f9:0e: 89:00:17:bd:5b:6a:74:e3:a7:e4:a0:97:42:6a:7b:da:31:21: 62:d7:3e:cf:8c:5a:13:3c:a1:c8:14:83:c2:c5:64:65:8f:9b: 76:15:f3:df:dc:24:29:69:17:31:30:fe:40:84:28:24:49:41: 80:b5:81:c7:4e:7a:ce:36:ba:ea:20:46:8a:d5:8c:4a:fa:9b: aa:cb:43:7d:aa:ef:51:b5:6a:b3:17:98:4c:3d:5a:ea:bf:e8: ba:17:e3:c8:ad:94:ac:46:5d:cc:c3:5c:47:48:81:9d:7c:fd: 24:b0:f5:c6:46:6b:d4:c1:fa:3c:f6:9e:8d:ba:c5:54:a0:a1: cc:13:21:06:53:94:58:15:4e:32:07:0c:f8:b9:3a:81:56:93: c9:35:72:3a:99:10:2e:58:14:b8:47:d0:c6:b7:d8:89:78:73: 4c:cb:26:47:bf:85:e2:5d:fe:24:cf:d4:69:27:8f:6a:70:35: 4d:19:bf:12 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICBg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjYxMTAzMDA0NzI2WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWU5MmYxZS1kNjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/TtLBpdbL9b2BLMl/jtxmDvHjdAkUGShv7F8C8PlaUr3uL6z9Jn6S2aHYXT 7ku9cwuBc/SE+1+l4VSmFX2t40aKBCrZOhiNGA/nWI91+iwurErg8o4Jmbvo6Jdl MbJIoLIp1B4FW6Sd7IhrSSV4LLByeQPzP8/3MHEpP0cN7XsZLFhIR+TOenjsSgDn iKirp9iDDe5zxFVChB/ebozBOtB23n9rgskBonzvVF0Gium3ai2wiSsDvJ/Rm/Ha jgu3p0eKwTA6CAVroEn71ga5lsnSsY6iyj+XzUbRYeIhumFesf/fkMaMnpBWp5XD hsKIhuGyKhAt0gkcB6OjayGmawIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFJCkYMl1 KdhNObtyIp7oTiKa584KMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvODVFMUVBM0NC RDIwMTFGMTgxQ0FDQUVCNEMxMUY5NzAucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaAwQCcRQoAwQCcRQ8MAwDBALfHaQDBATfHaAwDQYJKoZIhvcNAQELBQAD ggEBAJkhP9tx2CShLjvyRKQ11f6OEjmRs1XsbbBXkQ8vUtrT8hAVgAIfmGVcKCAU pNCf3C+8YHzzFLfDkoqcyCF8KGP7BdcVwTb5DokAF71banTjp+Sgl0Jqe9oxIWLX Ps+MWhM8ocgUg8LFZGWPm3YV89/cJClpFzEw/kCEKCRJQYC1gcdOes42uuogRorV jEr6m6rLQ32q71G1arMXmEw9Wuq/6LoX48itlKxGXczDXEdIgZ18/SSw9cZGa9TB +jz2no26xVSgocwTIQZTlFgVTjIHDPi5OoFWk8k1cjqZEC5YFLhH0Ma32Il4c0zL Jke/heJd/iTP1Gknj2pwNU0ZvxI= -----END CERTIFICATE-----Generated at Thu Nov 5 16:52:33 2026 by rpki-client