$ rpki-client -vvf rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/192968FAA43411E9BF46490BC4F9AE02.roa File: 192968FAA43411E9BF46490BC4F9AE02.roa (raw, json) Hash identifier: OMxL7HXsWXsaIdZTH4NA7lYMb4KsSOWlG8xgB8AS9W8= Subject key identifier: 0A:89:CB:D7:79:27:9F:D6:5F:67:35:3F:A2:F5:DA:25:84:EA:F1:20 Certificate issuer: /CN=A913F4B0/serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039 Certificate serial: 0F2F Authority key identifier: 19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/192968FAA43411E9BF46490BC4F9AE02.roa Signing time: Tue 28 Jul 2026 18:35:10 +0000 ROA not before: Tue 28 Jul 2026 18:35:10 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 132882 IP address blocks: 43.228.200.0/22 maxlen: 22 43.252.216.0/22 maxlen: 22 103.12.140.0/22 maxlen: 22 103.22.160.0/22 maxlen: 22 103.26.248.0/22 maxlen: 22 103.194.80.0/22 maxlen: 22 163.53.224.0/22 maxlen: 22 2400:6e80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:35:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3887 (0xf2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F4B0, serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039 Validity Not Before: Jul 28 18:35:10 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a68f65e-395b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a7:d6:c6:96:18:cc:f0:1e:7b:0c:b3:2a:2e: 59:ff:59:56:00:dc:6c:23:0e:4c:ca:ca:98:00:10: e3:ec:49:d2:d3:c9:b4:8b:f3:c2:45:bf:80:ff:28: 1c:27:d9:77:67:b1:de:99:b6:3b:3c:78:55:07:f3: 5e:33:b1:e0:c1:2f:eb:9e:c0:a7:53:b9:5e:07:3b: 06:b6:c8:5f:55:ec:28:2f:0d:6d:a9:d1:01:19:4a: dd:11:25:9d:df:94:ff:b6:13:51:29:e0:ba:64:0e: 0a:b3:e1:96:bd:47:74:13:81:37:dc:83:8b:06:2a: e5:6e:a5:65:99:24:dd:04:16:61:74:47:9f:c1:17: 06:8d:3a:68:8a:ea:9c:2a:f5:67:34:56:7e:8b:04: b3:ef:a4:54:c3:a3:81:e5:26:33:00:6e:f0:0c:ca: 47:61:a6:ca:f1:86:d8:29:7c:f8:13:6b:5c:16:36: ed:0c:bf:10:9d:10:dc:0c:7e:54:f5:43:9e:f7:0b: b9:41:b5:77:de:2f:e8:7a:64:0e:e8:63:b1:5d:1f: ca:21:58:d9:d1:e5:bc:5b:ac:bd:f8:9a:ab:09:47: 55:cf:54:5a:d0:7c:67:1f:eb:5b:60:b8:46:33:e5: 2c:d7:7e:2a:c9:18:43:96:50:0f:86:30:73:a2:62: 17:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:89:CB:D7:79:27:9F:D6:5F:67:35:3F:A2:F5:DA:25:84:EA:F1:20 X509v3 Authority Key Identifier: keyid:19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/192968FAA43411E9BF46490BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.228.200.0/22 43.252.216.0/22 103.12.140.0/22 103.22.160.0/22 103.26.248.0/22 103.194.80.0/22 163.53.224.0/22 IPv6: 2400:6e80::/32 Signature Algorithm: sha256WithRSAEncryption 62:8f:8b:59:fb:a2:54:b7:5b:01:b2:6b:c2:92:4c:4a:2e:32: e4:30:b9:b1:86:33:d3:bf:0d:e6:db:5f:62:e7:52:55:69:3f: 83:d2:d4:02:d3:56:14:de:ed:be:25:36:ef:bd:07:9f:07:a9: 1d:ec:90:75:70:72:d3:5c:d2:9c:99:bf:f3:ea:66:7d:fc:53: 59:d6:ba:aa:f6:c3:a0:9e:11:df:41:d3:a5:b7:05:aa:79:da: 13:d0:a9:67:ff:77:da:86:30:59:35:ab:6f:33:5f:95:94:03: 89:24:63:cb:c9:59:d8:54:94:b8:75:f7:30:39:fe:7c:56:91: 87:c6:40:3b:e1:88:a9:8f:9b:1e:f7:c5:ef:5f:ec:a5:65:a4: 78:26:a8:3d:7f:94:78:f4:13:42:fd:b6:a3:60:fd:b7:3b:83: 72:aa:b2:ba:6a:ab:fb:53:cf:9e:cb:51:30:bc:32:76:65:ec: a5:bd:c2:98:69:4c:58:0b:fc:68:2b:ce:52:25:71:16:82:86: e9:e0:8b:00:d7:10:bc:27:a1:f2:b7:ad:7a:18:25:79:b1:9e: 15:61:49:65:4c:56:ce:24:f5:f2:f6:45:b3:51:f3:97:6f:b0: 34:e7:e6:47:6b:a4:92:d0:73:14:66:cb:45:8e:ce:b1:4a:bf: aa:e0:9e:e9 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICDy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y0QjAxMTAvBgNVBAUTKDE5NENGQUVDMDc1NjExRkY4M0M0MjFDREE4Nzk3RUQz MEVBMkQwMzkwHhcNMjYwNzI4MTgzNTEwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY4ZjY1ZS0zOTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvafWxpYYzPAeewyzKi5Z/1lWANxsIw5MysqYABDj7EnS08m0i/PCRb+A/ygc J9l3Z7HembY7PHhVB/NeM7HgwS/rnsCnU7leBzsGtshfVewoLw1tqdEBGUrdESWd 35T/thNRKeC6ZA4Ks+GWvUd0E4E33IOLBirlbqVlmSTdBBZhdEefwRcGjTpoiuqc KvVnNFZ+iwSz76RUw6OB5SYzAG7wDMpHYabK8YbYKXz4E2tcFjbtDL8QnRDcDH5U 9UOe9wu5QbV33i/oemQO6GOxXR/KIVjZ0eW8W6y9+JqrCUdVz1Ra0HxnH+tbYLhG M+Us134qyRhDllAPhjBzomIXpwIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFAqJy9d5 J5/WX2c1P6L12iWE6vEgMB8GA1UdIwQYMBaAFBlM+uwHVhH/g8Qhzah5ftMOotA5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjRCMC8yRDI3MDY5MkE0 MzMxMUU5ODgxNThGMDlDNEY5QUUwMi9HVXo2N0FkV0VmLUR4Q0hOcUhsLTB3Nmkw RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVejY3QWRXRWYtRHhDSE5xSGwtMHc2aTBEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0Y0QjAvMkQyNzA2OTJBNDMzMTFFOTg4MTU4RjA5QzRGOUFFMDIvMTkyOTY4RkFB NDM0MTFFOUJGNDY0OTBCQzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAw BAIAATAqAwQCK+TIAwQCK/zYAwQCZwyMAwQCZxagAwQCZxr4AwQCZ8JQAwQCozXg MA0EAgACMAcDBQAkAG6AMA0GCSqGSIb3DQEBCwUAA4IBAQBij4tZ+6JUt1sBsmvC kkxKLjLkMLmxhjPTvw3m219i51JVaT+D0tQC01YU3u2+JTbvvQefB6kd7JB1cHLT XNKcmb/z6mZ9/FNZ1rqq9sOgnhHfQdOltwWqedoT0Kln/3fahjBZNatvM1+VlAOJ JGPLyVnYVJS4dfcwOf58VpGHxkA74Yipj5se98XvX+ylZaR4Jqg9f5R49BNC/baj YP23O4NyqrK6aqv7U8+ey1EwvDJ2ZeylvcKYaUxYC/xoK85SJXEWgobp4IsA1xC8 J6Hyt616GCV5sZ4VYUllTFbOJPXy9kWzUfOXb7A05+ZHa6SS0HMUZstFjs6xSr+q 4J7p -----END CERTIFICATE-----Generated at Wed Jul 29 10:34:12 2026 by rpki-client