$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/E52708AADFCE11EFBC4CD631C4F9AE02.roa File: E52708AADFCE11EFBC4CD631C4F9AE02.roa (raw, json) Hash identifier: 7mdn7K/pFTz7Pj5x+lPuobQnpXFUmB94xMoVdDvQnh8= Subject key identifier: 4E:DC:A9:E3:56:9E:D2:56:A1:8C:48:61:0B:A9:A6:46:C4:39:26:A0 Certificate issuer: /CN=A9157DA0/serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44 Certificate serial: 3590 Authority key identifier: 88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/E52708AADFCE11EFBC4CD631C4F9AE02.roa Signing time: Thu 23 Jul 2026 04:28:19 +0000 ROA not before: Thu 23 Jul 2026 04:28:19 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 38875 IP address blocks: 43.248.156.0/23 maxlen: 23 119.252.120.0/23 maxlen: 23 119.252.120.0/24 maxlen: 24 119.252.121.0/24 maxlen: 24 124.109.12.0/22 maxlen: 22 2407:4800:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13712 (0x3590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DA0, serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44 Validity Not Before: Jul 23 04:28:19 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a619863-59b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:08:1e:35:b9:51:b2:0f:6c:2a:c0:44:ba:ef: 32:8a:c3:5b:a8:71:40:73:4d:38:80:b9:8d:b1:a6: ee:ed:2f:73:d8:e4:e3:08:73:ce:5b:d5:6c:f7:fc: ef:e2:d0:8d:b8:3e:24:52:d3:40:c2:66:bd:26:8a: b0:1e:fd:01:2f:d2:a3:b7:d3:5b:84:63:4c:06:31: 36:ee:75:01:eb:fe:e0:90:5f:46:f4:6d:4d:76:5c: 2d:c1:87:ac:5f:76:10:60:5f:72:1a:d5:d8:73:6c: 31:8c:e7:d4:62:ed:24:75:aa:d8:b5:68:79:e2:b2: a4:ae:48:8d:86:42:d5:2e:0c:cf:4e:f4:75:d9:ba: ba:c2:4b:62:dd:c3:81:37:5e:0d:ec:46:3c:ed:0f: 72:8b:e3:c8:3a:d1:7a:06:0e:be:ea:c6:18:5e:ad: 69:86:e0:08:88:75:43:c4:23:57:04:4d:79:64:b7: 8d:36:ee:f4:5a:75:46:ec:ab:7a:53:8c:ce:46:e1: e0:dd:bc:4b:ad:b9:15:b5:fe:ec:f7:15:17:f4:e1: 30:ea:e4:91:d2:17:d3:92:4c:68:be:80:7c:48:ab: b3:0c:32:95:fe:af:37:58:3b:18:a0:00:3c:d1:f4: b4:d5:3a:a6:be:63:6f:db:c6:22:98:53:22:ac:39: dd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DC:A9:E3:56:9E:D2:56:A1:8C:48:61:0B:A9:A6:46:C4:39:26:A0 X509v3 Authority Key Identifier: keyid:88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/E52708AADFCE11EFBC4CD631C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.248.156.0/23 119.252.120.0/23 124.109.12.0/22 IPv6: 2407:4800:4000::/36 Signature Algorithm: sha256WithRSAEncryption 43:a3:cb:13:4a:e8:4e:2a:f8:cf:eb:8e:91:d9:8b:78:d5:c7: 13:01:23:19:15:ce:96:36:d3:89:b4:15:6e:1e:ee:4b:30:32: 79:3e:e6:c3:1a:95:5d:70:c2:d4:0e:0d:17:9d:4c:f7:ad:4c: 1f:a2:52:4b:af:1f:a1:41:cf:c5:46:31:b4:21:7c:85:b7:24: aa:ed:91:55:de:2c:74:0e:c8:aa:e1:f4:ef:85:00:f2:89:2a: a6:83:e8:7d:f6:f5:3d:64:ef:30:e1:00:07:0f:b3:04:bf:6d: bf:54:8d:16:2a:c3:69:86:eb:9b:49:95:dc:15:8f:36:b2:3e: 28:17:b3:9a:b5:96:bd:5f:69:d4:ae:69:2a:00:58:0c:fd:cc: 13:a2:80:9e:d1:b4:b5:56:d7:82:c0:d8:11:5f:39:aa:1a:ea: 29:0a:b2:9b:b6:39:7d:89:08:c0:63:23:bc:79:1c:b9:05:14: 3a:d6:d6:29:8d:17:be:ef:31:16:f1:ec:97:d5:93:81:8d:c3: 75:2b:5a:ac:16:63:49:c6:c7:93:bc:d1:0d:57:5c:b9:da:45: ec:1f:fb:ec:1d:63:5b:40:77:8c:ac:e0:80:c0:ba:41:17:3e: bd:29:af:9e:58:6a:0e:48:d5:14:a3:64:f5:eb:bc:09:12:98: af:3d:8d:db -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgICNZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQTAxMTAvBgNVBAUTKDg4ODdDRjZDRjUxMDJGMEZCNzEzRjRDNEExQkRFMzg5 NDgxRjFDNDQwHhcNMjYwNzIzMDQyODE5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYxOTg2My01OWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAgeNblRsg9sKsBEuu8yisNbqHFAc004gLmNsabu7S9z2OTjCHPOW9Vs9/zv 4tCNuD4kUtNAwma9JoqwHv0BL9Kjt9NbhGNMBjE27nUB6/7gkF9G9G1NdlwtwYes X3YQYF9yGtXYc2wxjOfUYu0kdarYtWh54rKkrkiNhkLVLgzPTvR12bq6wkti3cOB N14N7EY87Q9yi+PIOtF6Bg6+6sYYXq1phuAIiHVDxCNXBE15ZLeNNu70WnVG7Kt6 U4zORuHg3bxLrbkVtf7s9xUX9OEw6uSR0hfTkkxovoB8SKuzDDKV/q83WDsYoAA8 0fS01TqmvmNv28YimFMirDndswIDAQABo4ICfDCCAngwHQYDVR0OBBYEFE7cqeNW ntJWoYxIYQuppkbEOSagMB8GA1UdIwQYMBaAFIiHz2z1EC8PtxP0xKG944lIHxxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBMC8zQTBEOTMxMDFE OEMxMUUyOEVGRjU3RTcwOEIwMkNEMi9pSWZQYlBVUUx3LTNFX1RFb2IzamlVZ2ZI RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lJZlBiUFVRTHctM0VfVEVvYjNqaVVnZkhFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQTAvM0EwRDkzMTAxRDhDMTFFMjhFRkY1N0U3MDhCMDJDRDIvRTUyNzA4QUFE RkNFMTFFRkJDNENENjMxQzRGOUFFMDIucm9hMDsGCCsGAQUFBwEHAQH/BCwwKjAY BAIAATASAwQBK/icAwQBd/x4AwQCfG0MMA4EAgACMAgDBgQkB0gAQDANBgkqhkiG 9w0BAQsFAAOCAQEAQ6PLE0roTir4z+uOkdmLeNXHEwEjGRXOljbTibQVbh7uSzAy eT7mwxqVXXDC1A4NF51M961MH6JSS68foUHPxUYxtCF8hbckqu2RVd4sdA7IquH0 74UA8okqpoPoffb1PWTvMOEABw+zBL9tv1SNFirDaYbrm0mV3BWPNrI+KBezmrWW vV9p1K5pKgBYDP3ME6KAntG0tVbXgsDYEV85qhrqKQqym7Y5fYkIwGMjvHkcuQUU OtbWKY0Xvu8xFvHsl9WTgY3DdStarBZjScbHk7zRDVdcudpF7B/77B1jW0B3jKzg gMC6QRc+vSmvnlhqDkjVFKNk9eu8CRKYrz2N2w== -----END CERTIFICATE-----Generated at Wed Jul 29 05:40:43 2026 by rpki-client