$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/8CBE22F8D33911EF9F576474C4F9AE02.roa File: 8CBE22F8D33911EF9F576474C4F9AE02.roa (raw, json) Hash identifier: 1LHfqTOaLKQVkCd0oczoYrc20lDMyV5N0+iERGH3Aeg= Subject key identifier: B9:81:24:62:70:87:E2:A7:80:3B:B3:85:DE:65:86:9A:67:74:18:B3 Certificate issuer: /CN=A916AC30/serialNumber=72E8860B2B473365BF261420D06B58A804C296B2 Certificate serial: 0120 Authority key identifier: 72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/8CBE22F8D33911EF9F576474C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:12:58 +0000 ROA not before: Tue 03 Feb 2026 05:24:59 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 59253 IP address blocks: 43.249.38.0/23 maxlen: 23 43.249.38.0/24 maxlen: 24 43.249.39.0/24 maxlen: 24 103.254.152.0/22 maxlen: 22 103.254.154.0/23 maxlen: 23 2001:df1:800::/48 maxlen: 48 2402:a7c0::/32 maxlen: 32 2402:a7c0:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AC30, serialNumber=72E8860B2B473365BF261420D06B58A804C296B2 Validity Not Before: Feb 3 05:24:59 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a43b5a-c231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:98:34:23:ba:d1:66:74:e6:9b:a1:b5:67:93: 97:07:a7:78:07:bf:69:ad:34:9d:d6:54:17:19:55: 87:ff:0d:86:98:01:ce:ef:c7:63:ac:44:ef:94:b6: 17:e2:fc:18:46:48:c4:60:ac:2d:0f:09:a3:0e:76: 78:02:4f:6e:5d:80:17:93:8f:72:c9:8f:08:82:c4: 13:4d:44:11:36:d2:be:2e:6d:db:eb:9f:69:fc:9f: 41:4c:a2:a3:77:7f:80:76:24:4d:5f:72:e2:8f:ab: 89:d9:a7:5c:5b:49:0a:d9:f7:d8:56:0e:03:9e:37: 90:28:b1:e5:b0:eb:10:15:4b:1c:57:6d:79:11:86: 4c:33:c4:70:fa:45:3a:67:e7:5c:2e:9c:8b:89:68: cc:3a:ac:55:a7:14:cd:b5:64:e2:c7:01:bb:8f:eb: dc:a3:18:a0:c2:c5:6b:14:21:6e:16:29:9f:7b:0e: c5:bc:16:52:7f:be:3c:d2:73:b8:21:9a:ed:52:92: ec:cc:22:28:86:86:9b:3f:95:57:67:04:13:41:ca: 98:76:9a:2f:f8:ea:3e:3c:e1:0e:24:22:47:c9:e0: 5f:3f:b4:44:52:f2:b6:15:66:82:56:d3:81:70:3c: de:c5:be:95:b7:1e:60:83:c6:52:a6:f2:5a:0e:d8: 2a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:81:24:62:70:87:E2:A7:80:3B:B3:85:DE:65:86:9A:67:74:18:B3 X509v3 Authority Key Identifier: keyid:72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/8CBE22F8D33911EF9F576474C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.249.38.0/23 103.254.152.0/22 IPv6: 2001:df1:800::/48 2402:a7c0::/32 Signature Algorithm: sha256WithRSAEncryption 7a:0c:46:ad:3c:2e:84:30:fe:87:73:2f:a3:65:40:b8:97:0b: 36:9b:34:52:ea:0d:c3:25:9c:7f:77:98:78:9f:de:1f:80:90: 85:c0:aa:fb:12:bd:cb:01:b0:c0:db:6c:f8:e4:b3:c9:ce:3c: ad:ea:0f:e0:f1:17:78:d9:41:bb:c8:05:11:67:9e:87:69:f9: e4:c8:1c:88:87:57:54:3f:1f:d9:8c:1f:55:00:7d:7a:99:ce: bf:65:0d:56:9d:78:33:9e:8b:fc:70:7c:82:93:b3:87:61:bf: c6:60:87:9a:8a:d0:95:47:4a:b9:cd:2d:a5:c9:0e:44:f1:8d: bf:b4:25:64:62:15:6a:9b:0f:74:ac:a4:50:60:71:4d:b6:fb: 28:6a:00:62:ac:59:15:fe:21:57:0f:09:1c:ac:7f:97:5f:4c: ef:3a:14:39:4a:17:fb:22:35:ff:d1:25:0f:f3:95:23:21:fc: 6c:b2:43:02:2a:8a:d8:eb:a4:12:e3:63:36:64:c4:9a:b2:af: 92:9f:43:ef:b1:2d:ba:f4:bc:6d:a2:a3:b0:dc:2a:3e:22:33: 35:c4:a5:66:56:f1:64:cd:59:a0:33:1a:b2:54:6e:e5:5b:92: 6e:49:01:b3:c5:4c:96:c4:6a:b4:d1:20:c3:d7:bc:87:3f:00: 68:4f:4e:4b -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFDMzAxMTAvBgNVBAUTKDcyRTg4NjBCMkI0NzMzNjVCRjI2MTQyMEQwNkI1OEE4 MDRDMjk2QjIwHhcNMjYwMjAzMDUyNDU5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0M2I1YS1jMjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkJg0I7rRZnTmm6G1Z5OXB6d4B79prTSd1lQXGVWH/w2GmAHO78djrETvlLYX 4vwYRkjEYKwtDwmjDnZ4Ak9uXYAXk49yyY8IgsQTTUQRNtK+Lm3b659p/J9BTKKj d3+AdiRNX3Lij6uJ2adcW0kK2ffYVg4DnjeQKLHlsOsQFUscV215EYZMM8Rw+kU6 Z+dcLpyLiWjMOqxVpxTNtWTixwG7j+vcoxigwsVrFCFuFimfew7FvBZSf7480nO4 IZrtUpLszCIohoabP5VXZwQTQcqYdpov+Oo+POEOJCJHyeBfP7REUvK2FWaCVtOB cDzexb6Vtx5gg8ZSpvJaDtgqQQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFLmBJGJw h+KngDuzhd5lhppndBizMB8GA1UdIwQYMBaAFHLohgsrRzNlvyYUINBrWKgEwpay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUMzMC83NjBENkE2NDhD NjIxMUVGOTk0NjQwODVDNEY5QUUwMi9jdWlHQ3l0SE0yV19KaFFnMEd0WXFBVENs ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N1aUdDeXRITTJXX0poUWcwR3RZcUFUQ2xySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkFDMzAvNzYwRDZBNjQ4QzYyMTFFRjk5NDY0MDg1QzRGOUFFMDIvOENCRTIyRjhE MzM5MTFFRjlGNTc2NDc0QzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAS BAIAATAMAwQBK/kmAwQCZ/6YMBYEAgACMBADBwAgAQ3xCAADBQAkAqfAMA0GCSqG SIb3DQEBCwUAA4IBAQB6DEatPC6EMP6Hcy+jZUC4lws2mzRS6g3DJZx/d5h4n94f gJCFwKr7Er3LAbDA22z45LPJzjyt6g/g8Rd42UG7yAURZ56HafnkyByIh1dUPx/Z jB9VAH16mc6/ZQ1WnXgznov8cHyCk7OHYb/GYIeaitCVR0q5zS2lyQ5E8Y2/tCVk YhVqmw90rKRQYHFNtvsoagBirFkV/iFXDwkcrH+XX0zvOhQ5Shf7IjX/0SUP85Uj IfxsskMCKorY66QS42M2ZMSasq+Sn0PvsS269LxtoqOw3Co+IjM1xKVmVvFkzVmg MxqyVG7lW5JuSQGzxUyWxGq00SDD17yHPwBoT05L -----END CERTIFICATE-----Generated at Mon Mar 2 08:04:08 2026 by rpki-client