$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/4AC8B7E8A29D11F1A26B6F213311F970.roa File: 4AC8B7E8A29D11F1A26B6F213311F970.roa (raw, json) Hash identifier: dxMdek+58sIZa90avTdWzvPwFD/txWFdftq82oLuB4g= Subject key identifier: 1F:9F:2A:C7:EE:F3:6D:1F:F1:09:67:BF:F2:C9:1E:C4:DC:56:F7:58 Certificate issuer: /CN=A914E801/serialNumber=628125351377C5906B849BA05267987E17AE2DE4 Certificate serial: 47 Authority key identifier: 62:81:25:35:13:77:C5:90:6B:84:9B:A0:52:67:98:7E:17:AE:2D:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoElNRN3xZBrhJugUmeYfheuLeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/4AC8B7E8A29D11F1A26B6F213311F970.roa Signing time: Fri 28 Aug 2026 04:59:47 +0000 ROA not before: Fri 28 Aug 2026 04:59:47 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 63888 IP address blocks: 43.229.36.0/22 maxlen: 22 43.229.36.0/24 maxlen: 24 43.229.37.0/24 maxlen: 24 43.229.38.0/24 maxlen: 24 103.41.124.0/22 maxlen: 22 103.41.124.0/24 maxlen: 24 103.41.126.0/24 maxlen: 24 103.41.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.crl rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoElNRN3xZBrhJugUmeYfheuLeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E801, serialNumber=628125351377C5906B849BA05267987E17AE2DE4 Validity Not Before: Aug 28 04:59:47 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a9115c3-084d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b6:01:83:cd:0c:c0:80:9b:66:c3:f8:0c:3a: d2:81:58:8d:aa:68:b3:53:55:ce:f5:16:fe:6a:be: 63:6d:34:8a:4b:8f:de:ac:80:57:74:07:f3:29:25: 00:0b:ff:e6:c4:f1:0d:f6:5c:6c:76:f6:68:a3:b2: 8e:f5:39:d1:d1:7e:f5:ed:42:8f:25:24:b4:45:0a: 95:54:96:ca:43:2d:6e:98:63:43:72:23:00:00:71: 57:77:c8:11:5d:20:da:72:5a:f2:57:e0:ff:5b:9d: c0:c6:20:ad:ad:74:f3:8c:00:68:28:e8:ff:18:86: 98:4f:24:44:8a:19:a0:e4:7f:73:dd:28:04:08:c9: b4:20:aa:76:b7:c9:15:77:bf:ff:58:1e:30:b9:1f: 77:cf:ba:c4:41:f3:37:97:bc:f6:d9:50:eb:b4:c2: 18:80:c6:0f:e3:8a:15:96:3c:60:a8:9d:ec:14:41: 21:71:30:73:10:20:aa:64:bb:af:ff:30:90:75:22: 7a:57:d1:1a:ff:9a:8c:f8:5e:31:fb:b5:e9:49:d6: 89:89:65:8c:cf:21:7b:47:9f:6e:83:b9:cd:59:ff: 9b:2b:fb:b8:95:3e:62:3e:b7:9a:a5:55:ce:c0:8e: 1a:ca:45:ec:e7:64:a2:76:5c:b1:49:23:97:46:01: ea:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9F:2A:C7:EE:F3:6D:1F:F1:09:67:BF:F2:C9:1E:C4:DC:56:F7:58 X509v3 Authority Key Identifier: keyid:62:81:25:35:13:77:C5:90:6B:84:9B:A0:52:67:98:7E:17:AE:2D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoElNRN3xZBrhJugUmeYfheuLeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/4AC8B7E8A29D11F1A26B6F213311F970.roa sbgp-ipAddrBlock: critical IPv4: 43.229.36.0/22 103.41.124.0/22 Signature Algorithm: sha256WithRSAEncryption 46:16:14:a8:dd:4f:1f:bf:40:d2:8b:e3:b1:de:12:eb:42:36: 83:4c:02:7b:93:23:53:35:d7:06:42:8d:49:b6:fd:47:bd:e4: 06:2f:9b:ee:43:77:6c:6e:53:a6:4e:03:82:5f:8f:22:30:2d: 59:6e:d5:a9:71:57:f1:57:04:12:cd:0f:d2:f9:b3:83:21:d0: 03:0e:1c:24:a8:df:35:7a:ca:a3:00:a6:d5:56:fb:74:dc:fd: d6:81:02:a0:ae:4a:2f:60:93:c9:d9:a7:91:81:17:61:22:07: ac:9f:6d:8e:be:80:42:f3:d0:86:82:3e:48:0c:36:01:bd:5b: 09:2c:ed:ea:dc:4f:52:9c:39:b1:f6:fb:06:9f:02:a6:38:87: fe:3b:0b:88:35:cd:ca:4e:71:23:24:a3:ae:86:be:43:81:e3: 2d:cf:fc:f6:3a:06:33:dc:b0:d8:aa:0c:c8:54:1b:16:cb:46: 05:56:1c:ba:df:6c:99:8e:94:1d:eb:69:20:f9:24:81:aa:f3: fc:c1:a7:22:2b:76:2b:60:74:73:ae:78:3e:20:4e:47:8a:ef: 1a:98:95:3f:aa:10:1c:d8:81:33:e7:3f:21:2f:b7:04:d5:3a: f2:fb:e0:4e:2c:11:b9:99:d2:ad:44:02:32:fe:34:ae:0a:43: e0:55:26:66 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTgwMTExMC8GA1UEBRMoNjI4MTI1MzUxMzc3QzU5MDZCODQ5QkEwNTI2Nzk4N0Ux N0FFMkRFNDAeFw0yNjA4MjgwNDU5NDdaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOTExNWMzLTA4NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCstgGDzQzAgJtmw/gMOtKBWI2qaLNTVc71Fv5qvmNtNIpLj96sgFd0B/MpJQAL /+bE8Q32XGx29mijso71OdHRfvXtQo8lJLRFCpVUlspDLW6YY0NyIwAAcVd3yBFd INpyWvJX4P9bncDGIK2tdPOMAGgo6P8YhphPJESKGaDkf3PdKAQIybQgqna3yRV3 v/9YHjC5H3fPusRB8zeXvPbZUOu0whiAxg/jihWWPGConewUQSFxMHMQIKpku6// MJB1InpX0Rr/moz4XjH7telJ1omJZYzPIXtHn26Duc1Z/5sr+7iVPmI+t5qlVc7A jhrKReznZKJ2XLFJI5dGAeopAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUH58qx+7z bR/xCWe/8skexNxW91gwHwYDVR0jBBgwFoAUYoElNRN3xZBrhJugUmeYfheuLeQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFODAxLzEwOEVCMDYyM0Uy NzExRjE5RTlCNzM5N0I1ODMzNzczL1lvRWxOUk4zeFpCcmhKdWdVbWVZZmhldUxl US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWW9FbE5STjN4WkJyaEp1Z1VtZVlmaGV1TGVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTgwMS8xMDhFQjA2MjNFMjcxMUYxOUU5QjczOTdCNTgzMzc3My80QUM4QjdFOEEy OUQxMUYxQTI2QjZGMjEzMzExRjk3MC5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAIr5SQDBAJnKXwwDQYJKoZIhvcNAQELBQADggEBAEYWFKjdTx+/QNKL 47HeEutCNoNMAnuTI1M11wZCjUm2/Ue95AYvm+5Dd2xuU6ZOA4JfjyIwLVlu1alx V/FXBBLND9L5s4Mh0AMOHCSo3zV6yqMAptVW+3Tc/daBAqCuSi9gk8nZp5GBF2Ei B6yfbY6+gELz0IaCPkgMNgG9Wwks7ercT1KcObH2+wafAqY4h/47C4g1zcpOcSMk o66GvkOB4y3P/PY6BjPcsNiqDMhUGxbLRgVWHLrfbJmOlB3raSD5JIGq8/zBpyIr ditgdHOueD4gTkeK7xqYlT+qEBzYgTPnPyEvtwTVOvL74E4sEbmZ0q1EAjL+NK4K Q+BVJmY= -----END CERTIFICATE-----Generated at Tue Sep 22 23:08:00 2026 by rpki-client