$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/73AF033CF4DA11EFA82A4918C4F9AE02.roa File: 73AF033CF4DA11EFA82A4918C4F9AE02.roa (raw, json) Hash identifier: wQsVzhGxALrSJM330+fjhnBQYwE8erc6hKI8qp8CPlo= Subject key identifier: 3C:FA:E7:5B:2A:F9:DC:20:F1:54:58:58:82:D0:D4:1B:7E:2D:10:A3 Certificate issuer: /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Certificate serial: 042C Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/73AF033CF4DA11EFA82A4918C4F9AE02.roa Signing time: Wed 09 Sep 2026 00:50:24 +0000 ROA not before: Wed 09 Sep 2026 00:50:24 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 132742 IP address blocks: 43.239.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1068 (0x42c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D1A4, serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Validity Not Before: Sep 9 00:50:24 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa0ad50-8bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:53:ba:7e:a9:6f:b2:e6:6d:cd:df:c4:44:11: 14:a7:d2:4f:c8:6e:03:53:46:dd:16:2c:01:fb:a4: 52:ce:ba:39:24:56:03:05:9b:47:c0:dd:16:a3:8b: 7b:b7:1c:2c:1f:31:af:79:53:d6:60:f1:84:7a:54: d8:b6:26:de:83:c6:06:27:9b:c9:12:8b:75:49:de: 10:c5:31:6f:86:08:b3:5b:83:e7:b3:e1:59:bd:c4: 4d:b1:97:da:b0:3b:e8:57:cb:72:41:8c:2e:4b:cb: 03:58:67:83:36:05:c6:d7:ea:40:3b:25:31:c0:0f: cd:2e:83:45:e5:47:9a:b3:17:b3:52:c5:f3:ab:c0: a1:39:d7:c3:16:88:a6:eb:1c:38:21:25:55:6e:14: 1c:62:e4:9c:10:87:ac:14:83:1d:a8:2e:bd:f7:b9: 88:ae:73:c7:e8:ef:fa:f9:b0:a1:c4:c5:73:01:20: ff:d8:e1:67:42:71:e9:5c:52:8f:ae:84:e4:50:68: d3:b3:48:db:7f:67:99:aa:e7:03:86:18:a8:92:cb: ce:c0:44:a7:12:80:3d:00:0a:e5:b4:27:10:40:84: 31:9f:7a:90:8b:07:d5:c7:cd:bf:35:f8:d0:f2:01: 6d:5c:ea:15:bd:1d:c7:b2:51:70:cb:40:6e:69:8d: 27:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FA:E7:5B:2A:F9:DC:20:F1:54:58:58:82:D0:D4:1B:7E:2D:10:A3 X509v3 Authority Key Identifier: keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/73AF033CF4DA11EFA82A4918C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.164.0/22 Signature Algorithm: sha256WithRSAEncryption 07:d4:41:cb:8a:85:a3:c5:cb:3f:7a:bb:41:0e:ba:75:46:75: 55:c7:60:3d:31:02:5d:cb:0f:7e:b6:f6:00:0d:2c:1f:1d:0f: 7b:07:67:7e:50:79:a4:0e:1b:4a:4e:07:51:4a:e7:06:cb:cd: 01:76:5b:fb:2c:c8:8f:05:b9:b7:a6:eb:7d:c5:ca:77:d6:3f: a4:ce:06:dd:01:ce:a1:65:0a:47:f2:c8:66:bd:e2:51:a0:9d: ce:ae:db:ff:27:73:9d:f7:8b:88:78:27:b7:37:84:f1:ef:74: 6e:b3:7a:de:e9:22:a9:e2:aa:bb:1c:92:77:19:cb:9b:66:e4: 17:c7:2b:5b:90:35:21:ca:65:4f:d4:eb:01:64:c1:b9:a0:60: 07:03:d5:d8:d0:3d:da:69:f8:0c:63:93:1c:73:e2:09:95:05: 51:26:ec:37:6a:6d:89:46:27:d7:15:96:1c:1a:58:f7:0f:42: 53:b6:0c:3a:1d:9e:65:f5:ac:be:ac:fd:36:37:16:23:f7:3b: 5d:06:98:e5:da:cf:95:b7:36:08:20:20:16:65:63:4e:88:f7: 1a:85:a0:67:7b:98:d1:02:61:da:00:5b:69:65:08:af:36:1c: 7f:a1:fd:5d:51:ef:78:ec:ab:03:b3:91:11:4b:e8:ac:45:eb: 23:72:af:e0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxQTQxMTAvBgNVBAUTKEIyREJBRDA1QjY5RjQ3OTdFRUY3MUYwM0Q2NUFCRUFE RDI4OTJDODAwHhcNMjYwOTA5MDA1MDI0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEwYWQ1MC04YmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1O6fqlvsuZtzd/ERBEUp9JPyG4DU0bdFiwB+6RSzro5JFYDBZtHwN0Wo4t7 txwsHzGveVPWYPGEelTYtibeg8YGJ5vJEot1Sd4QxTFvhgizW4Pns+FZvcRNsZfa sDvoV8tyQYwuS8sDWGeDNgXG1+pAOyUxwA/NLoNF5UeasxezUsXzq8ChOdfDFoim 6xw4ISVVbhQcYuScEIesFIMdqC6997mIrnPH6O/6+bChxMVzASD/2OFnQnHpXFKP roTkUGjTs0jbf2eZqucDhhioksvOwESnEoA9AArltCcQQIQxn3qQiwfVx82/NfjQ 8gFtXOoVvR3HslFwy0BuaY0nQQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDz651sq +dwg8VRYWILQ1Bt+LRCjMB8GA1UdIwQYMBaAFLLbrQW2n0eX7vcfA9Zavq3SiSyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDFBNC8xRUI5RTNBNkM2 QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1ZnU5eDhEMWxxLXJkS0pM SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N0dXRCYmFmUjVmdTl4OEQxbHEtcmRLSkxJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQxQTQvMUVCOUUzQTZDNkMwMTFFQzk2QzBERDIzQzRGOUFFMDIvNzNBRjAzM0NG NERBMTFFRkE4MkE0OTE4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK++kMA0GCSqGSIb3DQEBCwUAA4IBAQAH1EHLioWjxcs/ertBDrp1 RnVVx2A9MQJdyw9+tvYADSwfHQ97B2d+UHmkDhtKTgdRSucGy80Bdlv7LMiPBbm3 put9xcp31j+kzgbdAc6hZQpH8shmveJRoJ3Ortv/J3Od94uIeCe3N4Tx73Rus3re 6SKp4qq7HJJ3GcubZuQXxytbkDUhymVP1OsBZMG5oGAHA9XY0D3aafgMY5Mcc+IJ lQVRJuw3am2JRifXFZYcGlj3D0JTtgw6HZ5l9ay+rP02NxYj9ztdBpjl2s+VtzYI ICAWZWNOiPcahaBne5jRAmHaAFtpZQivNhx/of1dUe947KsDs5ERS+isResjcq/g -----END CERTIFICATE-----Generated at Tue Sep 22 06:33:44 2026 by rpki-client