$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/E4C4CC72EB8411F09FAB30C6536F56BC.roa File: E4C4CC72EB8411F09FAB30C6536F56BC.roa (raw, json) Hash identifier: m6A5k7GrCQsQt6UQStLqk4vDI2cF1RjOvSbk8wVUoVE= Subject key identifier: 29:A7:15:92:CD:F5:52:48:FE:2D:DE:30:D7:63:35:62:14:D3:5A:44 Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Certificate serial: 0BDD Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/E4C4CC72EB8411F09FAB30C6536F56BC.roa Signing time: Sun 01 Mar 2026 18:34:22 +0000 ROA not before: Wed 07 Jan 2026 04:54:06 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132827 IP address blocks: 43.249.92.0/24 maxlen: 24 43.249.93.0/24 maxlen: 24 43.249.94.0/23 maxlen: 23 43.249.95.0/24 maxlen: 24 103.246.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3037 (0xbdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571 Validity Not Before: Jan 7 04:54:06 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a486ae-4034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:66:f1:03:ad:ec:c3:38:60:30:53:29:bc:e9: 47:c0:f0:23:50:7d:53:e5:7d:e9:fa:a7:83:06:fa: 61:4e:74:ab:42:dc:9d:9f:37:d2:f8:c1:7a:2c:af: cd:20:11:cd:42:a5:34:5b:b0:3c:25:ac:f4:4e:ae: 86:d5:ee:5f:2e:33:9c:b5:d8:e9:30:90:a3:6c:20: d4:46:c4:55:88:37:f3:09:b6:15:c9:87:f7:77:94: fa:90:f4:39:ae:c1:e3:cd:e1:25:09:4e:13:b8:f7: 99:1a:0c:26:a8:3c:ce:26:42:b1:67:96:6c:7f:ff: 32:4b:3b:1f:58:da:2a:a1:95:22:ae:fd:73:22:e4: a3:6c:3d:0d:10:18:97:3c:e7:48:1b:ac:6a:50:64: 88:ed:e1:94:0e:06:6e:3b:d1:d4:c3:dd:2b:24:8f: 48:fc:47:2b:cc:65:54:88:ff:e9:74:44:9f:55:12: 06:7e:f0:ba:c9:95:80:91:41:ab:a2:37:b2:78:67: af:a8:8b:64:6b:1b:ec:0a:e3:7a:40:2a:6f:fc:62: 80:38:18:cc:45:6d:41:e3:72:44:4e:0d:8b:f3:12: 40:06:2a:0c:28:96:1b:e0:54:26:d5:4d:f6:f2:48: af:ec:7a:4a:26:2b:1e:db:17:2a:62:3a:c2:05:39: e1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A7:15:92:CD:F5:52:48:FE:2D:DE:30:D7:63:35:62:14:D3:5A:44 X509v3 Authority Key Identifier: keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/E4C4CC72EB8411F09FAB30C6536F56BC.roa sbgp-ipAddrBlock: critical IPv4: 43.249.92.0/22 103.246.254.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:79:d7:5b:7b:3c:1b:78:cd:82:f4:17:25:68:50:5c:00:0f: 92:ac:a2:68:34:ef:ed:d2:7f:a1:cc:bb:4f:41:15:2b:ea:c0: 93:21:01:c9:90:f0:58:63:72:e1:ec:30:13:2e:fb:20:58:bf: 43:7a:fa:e3:fa:14:91:fc:7a:b5:f1:83:15:d6:4e:3c:2b:6c: 36:05:e2:cc:a9:c4:27:d2:6b:b2:89:6e:62:ad:e6:15:bd:f3: c9:86:d4:bd:7d:34:c8:e4:c5:51:f7:21:fe:3a:48:c6:2c:4c: 17:1a:28:a4:be:a2:e8:8b:5a:63:a7:12:5f:86:c7:7c:50:67: fb:47:70:d6:a9:f7:1a:5d:7e:a4:27:5a:d0:7c:79:0a:ab:10: 30:0f:73:0d:6d:33:ed:e0:10:e4:f5:21:10:d2:18:65:81:bb: f6:24:d8:b4:d4:08:40:a2:79:ca:d2:01:f6:36:62:aa:d8:f9: af:2a:4d:df:5b:70:4d:b2:a4:b4:c3:76:49:b3:28:32:75:10: 3d:f9:28:3a:f6:4d:1e:f9:71:2b:92:fc:10:f8:ea:e5:89:cf: 45:16:bc:a2:3c:14:fd:9d:b4:79:83:ae:00:98:e6:69:21:d4: 80:43:4d:51:e6:76:2c:b7:0a:64:ec:4b:2d:fb:b1:2f:c0:93: 6b:65:2d:46 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICC90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNDAxMTAvBgNVBAUTKDE2MDFEODY1MERENTU2QjJBRkIwODNCMjMzRkY2NUFF M0RBRDE1NzEwHhcNMjYwMTA3MDQ1NDA2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODZhZS00MDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmbxA63swzhgMFMpvOlHwPAjUH1T5X3p+qeDBvphTnSrQtydnzfS+MF6LK/N IBHNQqU0W7A8Jaz0Tq6G1e5fLjOctdjpMJCjbCDURsRViDfzCbYVyYf3d5T6kPQ5 rsHjzeElCU4TuPeZGgwmqDzOJkKxZ5Zsf/8ySzsfWNoqoZUirv1zIuSjbD0NEBiX POdIG6xqUGSI7eGUDgZuO9HUw90rJI9I/EcrzGVUiP/pdESfVRIGfvC6yZWAkUGr ojeyeGevqItkaxvsCuN6QCpv/GKAOBjMRW1B43JETg2L8xJABioMKJYb4FQm1U32 8kiv7HpKJise2xcqYjrCBTnhSwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFCmnFZLN 9VJI/i3eMNdjNWIU01pEMB8GA1UdIwQYMBaAFBYB2GUN1Vayr7CDsjP/Za49rRVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM0MC82MTdGMzUzNjQw RTExMUVBQkM2MkRCMjZDNEY5QUUwMi9GZ0hZWlEzVlZyS3ZzSU95TV85bHJqMnRG WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSFlaUTNWVnJLdnNJT3lNXzlscmoydEZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZDNDAvNjE3RjM1MzY0MEUxMTFFQUJDNjJEQjI2QzRGOUFFMDIvRTRDNENDNzJF Qjg0MTFGMDlGQUIzMEM2NTM2RjU2QkMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/lcAwQAZ/b+MA0GCSqGSIb3DQEBCwUAA4IBAQCbeddbezwbeM2C 9BclaFBcAA+SrKJoNO/t0n+hzLtPQRUr6sCTIQHJkPBYY3Lh7DATLvsgWL9Devrj +hSR/Hq18YMV1k48K2w2BeLMqcQn0muyiW5ireYVvfPJhtS9fTTI5MVR9yH+OkjG LEwXGiikvqLoi1pjpxJfhsd8UGf7R3DWqfcaXX6kJ1rQfHkKqxAwD3MNbTPt4BDk 9SEQ0hhlgbv2JNi01AhAonnK0gH2NmKq2PmvKk3fW3BNsqS0w3ZJsygydRA9+Sg6 9k0e+XErkvwQ+Orlic9FFryiPBT9nbR5g64AmOZpIdSAQ01R5nYstwpk7Est+7Ev wJNrZS1G -----END CERTIFICATE-----Generated at Mon Mar 2 01:52:28 2026 by rpki-client