$ rpki-client -vvf rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa File: 7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa (raw, json) Hash identifier: kIDAax2G7AcDjGKp9hfgKtHY9JszeMJYItKOmI313N4= Subject key identifier: 18:19:CE:B9:12:EB:87:09:1D:54:5B:D9:EE:84:B9:F2:14:02:99:C6 Certificate issuer: /CN=A913F4B0/serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039 Certificate serial: 0F30 Authority key identifier: 19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa Signing time: Tue 28 Jul 2026 18:35:12 +0000 ROA not before: Tue 28 Jul 2026 18:35:12 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 134809 IP address blocks: 43.228.200.0/22 maxlen: 22 43.252.216.0/22 maxlen: 22 103.12.140.0/22 maxlen: 22 103.22.160.0/22 maxlen: 22 103.26.248.0/22 maxlen: 22 103.194.80.0/22 maxlen: 22 163.53.224.0/22 maxlen: 22 2400:6e80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:35:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3888 (0xf30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F4B0, serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039 Validity Not Before: Jul 28 18:35:12 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a68f660-ed27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a8:30:59:2e:13:fc:de:d6:62:d3:33:74:7b: f3:6b:f4:dc:37:c3:45:ef:83:ea:2b:74:44:0d:86: 35:cd:e5:12:51:ef:f6:f7:2b:40:97:83:b1:0d:e9: 38:f1:ff:e9:27:7d:6c:dd:58:ba:42:0a:8d:d3:4e: df:cc:83:9b:bb:bf:ba:8f:80:80:d1:6b:8d:2a:a8: 31:d9:ac:e6:33:76:c4:f0:59:16:5a:94:5b:ca:fe: dc:76:2e:e8:8b:58:18:3c:cf:5b:77:be:1c:4d:84: c5:dd:4a:0c:63:c1:9e:11:aa:a2:46:ed:5b:c5:a7: e9:fe:51:16:56:95:13:05:39:4b:7a:b0:e4:cf:f1: 20:d6:fc:17:c7:43:4a:48:68:2e:88:8b:4d:26:98: ce:77:c8:2a:7a:2c:f9:ce:ff:37:b9:e3:db:f0:8c: 24:36:89:1d:ba:1d:a5:ee:80:25:5e:19:89:2e:93: 47:cb:c9:a5:03:c6:ca:bc:d6:a4:2c:b4:6f:7e:a7: 7f:f9:61:58:9c:d3:43:e1:7d:bd:91:70:68:fa:b8: de:6c:8b:aa:df:12:43:cc:1c:7e:16:7d:1d:90:5a: 0b:97:63:f5:a9:e0:e3:24:13:3a:75:bb:01:46:dc: 84:ba:e4:07:22:d1:25:2b:73:d8:83:4a:01:c0:ab: 2b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:19:CE:B9:12:EB:87:09:1D:54:5B:D9:EE:84:B9:F2:14:02:99:C6 X509v3 Authority Key Identifier: keyid:19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/7FC2BA3ACEE211EDAF41BC25C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.228.200.0/22 43.252.216.0/22 103.12.140.0/22 103.22.160.0/22 103.26.248.0/22 103.194.80.0/22 163.53.224.0/22 IPv6: 2400:6e80::/32 Signature Algorithm: sha256WithRSAEncryption 15:a0:22:3b:d2:c6:b3:a3:e7:9e:a4:ef:43:a4:fc:ae:8d:20: 87:f0:dc:f2:de:60:2a:7b:53:e8:df:91:53:7e:34:93:78:88: 6c:04:4a:01:7e:0a:26:63:09:24:63:b2:5f:df:73:d1:0b:a0: 0e:02:1a:e0:77:a3:0b:ea:1c:76:6c:67:0f:fd:0f:7f:74:5a: c8:57:c5:d3:41:0c:f2:06:bd:5c:9b:2c:57:42:15:b5:ea:23: ba:81:88:d8:35:ea:75:f0:ca:50:32:f0:48:31:d5:de:84:f2: 63:a5:f7:bd:34:ab:00:33:80:36:11:77:b6:20:bc:92:1c:97: e6:4f:c7:9a:fd:99:67:07:76:e9:1e:ff:f7:25:94:62:59:ce: ac:6f:79:70:8c:c8:29:57:93:59:95:cb:c8:75:58:6d:f5:9b: cb:43:17:1e:39:97:4c:68:8f:d5:a2:a1:99:19:28:70:aa:4f: 8e:69:f7:48:f6:fb:0a:bf:03:76:91:d8:88:c3:7e:2c:06:68: 79:03:fa:03:fb:aa:07:01:af:09:73:de:1b:63:c2:be:87:06: 4e:77:4c:4f:33:47:16:5a:f5:98:c6:09:8c:b2:cd:a5:97:e3: 3f:aa:bb:16:84:27:56:1c:47:b8:62:37:b0:e4:04:d4:58:cf: c8:62:3c:a4 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICDzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y0QjAxMTAvBgNVBAUTKDE5NENGQUVDMDc1NjExRkY4M0M0MjFDREE4Nzk3RUQz MEVBMkQwMzkwHhcNMjYwNzI4MTgzNTEyWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY4ZjY2MC1lZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKgwWS4T/N7WYtMzdHvza/TcN8NF74PqK3REDYY1zeUSUe/29ytAl4OxDek4 8f/pJ31s3Vi6QgqN007fzIObu7+6j4CA0WuNKqgx2azmM3bE8FkWWpRbyv7cdi7o i1gYPM9bd74cTYTF3UoMY8GeEaqiRu1bxafp/lEWVpUTBTlLerDkz/Eg1vwXx0NK SGguiItNJpjOd8gqeiz5zv83uePb8IwkNokduh2l7oAlXhmJLpNHy8mlA8bKvNak LLRvfqd/+WFYnNND4X29kXBo+rjebIuq3xJDzBx+Fn0dkFoLl2P1qeDjJBM6dbsB RtyEuuQHItElK3PYg0oBwKsrBQIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFBgZzrkS 64cJHVRb2e6EufIUApnGMB8GA1UdIwQYMBaAFBlM+uwHVhH/g8Qhzah5ftMOotA5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjRCMC8yRDI3MDY5MkE0 MzMxMUU5ODgxNThGMDlDNEY5QUUwMi9HVXo2N0FkV0VmLUR4Q0hOcUhsLTB3Nmkw RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVejY3QWRXRWYtRHhDSE5xSGwtMHc2aTBEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0Y0QjAvMkQyNzA2OTJBNDMzMTFFOTg4MTU4RjA5QzRGOUFFMDIvN0ZDMkJBM0FD RUUyMTFFREFGNDFCQzI1QzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAw BAIAATAqAwQCK+TIAwQCK/zYAwQCZwyMAwQCZxagAwQCZxr4AwQCZ8JQAwQCozXg MA0EAgACMAcDBQAkAG6AMA0GCSqGSIb3DQEBCwUAA4IBAQAVoCI70sazo+eepO9D pPyujSCH8Nzy3mAqe1Po35FTfjSTeIhsBEoBfgomYwkkY7Jf33PRC6AOAhrgd6ML 6hx2bGcP/Q9/dFrIV8XTQQzyBr1cmyxXQhW16iO6gYjYNep18MpQMvBIMdXehPJj pfe9NKsAM4A2EXe2ILySHJfmT8ea/ZlnB3bpHv/3JZRiWc6sb3lwjMgpV5NZlcvI dVht9ZvLQxceOZdMaI/VoqGZGShwqk+OafdI9vsKvwN2kdiIw34sBmh5A/oD+6oH Aa8Jc94bY8K+hwZOd0xPM0cWWvWYxgmMss2ll+M/qrsWhCdWHEe4Yjew5ATUWM/I Yjyk -----END CERTIFICATE-----Generated at Wed Jul 29 07:03:08 2026 by rpki-client