$ rpki-client -vvvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/3FD07A88D42011F1A733CE073266CEF9.roa File: 3FD07A88D42011F1A733CE073266CEF9.roa (raw, json) Hash identifier: Ih1q3SO1hXYNPJ3MPccYrMA8UbXp9p8yQrtqwXteZSQ= Subject key identifier: E7:22:B7:D9:05:86:92:D5:F7:76:0A:34:E2:E0:EB:36:AB:4D:B7:F9 Certificate issuer: /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33 Certificate serial: 0841 Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/3FD07A88D42011F1A733CE073266CEF9.roa Signing time: Sun 01 Nov 2026 11:15:22 +0000 ROA not before: Sun 01 Nov 2026 11:15:22 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 211392 IP address blocks: 43.250.172.0/22 maxlen: 24 103.42.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 21:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2113 (0x841) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919ECE7, serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33 Validity Not Before: Nov 1 11:15:22 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6ae71f4a-6b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:70:02:9c:ad:28:c9:1d:9f:38:53:8a:2d:08: b5:ec:be:c3:50:43:a1:49:b1:3b:3c:2a:0a:4a:4c: ae:99:35:4b:07:5a:b8:e4:35:21:e8:3d:fc:6c:56: 7d:5a:58:68:c8:4b:c9:b8:e7:74:31:de:d1:bb:09: 51:39:d6:e1:8f:a8:8b:42:a6:e2:f4:0d:49:81:8d: 03:24:45:d5:87:88:02:a0:93:85:a5:13:d0:ab:0a: 75:c5:fa:6d:e5:ec:13:ce:f9:82:e2:2a:f9:a9:99: 53:33:90:98:f2:81:f7:a7:d2:88:d1:19:87:f9:58: 92:f2:03:9d:62:ea:66:e9:81:15:09:ce:2e:e7:24: 92:1b:ae:9e:e4:b5:d3:ec:3f:c1:ec:33:56:16:4d: b0:e9:d9:04:31:db:c7:53:f9:dc:bf:d3:54:15:b8: 46:ad:83:5a:b6:6a:63:d8:f1:a6:d5:b5:65:a6:87: 30:b9:5d:82:22:6d:2a:8f:60:aa:0c:c5:1c:f5:37: 69:19:19:e3:dc:c9:be:90:0d:6a:af:a5:c4:21:50: 52:cb:29:39:36:1a:a6:e9:c6:3b:05:e2:f9:b6:18: 19:e1:ec:0e:9d:1c:10:ce:93:f2:b2:81:3b:bd:1a: a1:08:3e:bf:3a:f8:f3:e9:a1:86:24:54:99:ae:92: 72:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:22:B7:D9:05:86:92:D5:F7:76:0A:34:E2:E0:EB:36:AB:4D:B7:F9 X509v3 Authority Key Identifier: keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/3FD07A88D42011F1A733CE073266CEF9.roa sbgp-ipAddrBlock: critical IPv4: 43.250.172.0/22 103.42.28.0/22 Signature Algorithm: sha256WithRSAEncryption b7:01:d4:72:06:07:2c:78:15:76:b0:e2:0a:e9:bb:16:81:96: c0:88:d3:26:7d:c2:de:61:e5:59:72:0c:83:28:5f:40:e9:34: 41:84:4f:a2:db:87:83:c5:08:cb:58:23:8b:ba:1a:3c:4e:d2: 5f:22:f5:ed:95:c3:ee:79:c7:14:a6:97:55:71:b4:74:e6:96: ae:35:6a:52:6d:cd:1b:2a:74:60:c7:8c:29:83:7f:97:9c:17: a9:48:66:ed:07:d8:2c:12:cb:89:12:b2:3c:45:cb:5f:a9:64: 43:d5:93:a7:ee:92:5e:b4:f1:24:3f:32:de:83:3a:95:cf:08: e3:bd:88:0e:22:41:70:48:bc:9f:4c:36:db:1e:37:76:dc:20: 6d:fb:25:b3:c1:64:38:42:48:da:d3:55:07:50:c2:f5:71:e5: 86:65:d3:ed:61:10:65:5d:fe:bc:d5:8b:99:27:f3:f3:0a:3f: cb:b3:46:6f:14:c0:ff:0c:0d:0f:a0:ac:c5:1a:1d:64:2a:b5: a5:f0:dd:c7:2a:10:ea:3a:6d:4d:4c:86:96:77:08:63:e3:f8: df:6b:bc:ed:66:8b:37:50:f9:8e:95:57:2a:ee:a4:ff:9a:78: 01:24:f6:07:7d:f7:76:2d:e4:15:b1:d2:d0:34:b7:47:18:3c: d9:97:63:ad -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVDRTcxMTAvBgNVBAUTKDc3MzcwQkMwNzMwNUQxOURCREFDQ0U0QkY3MjA5RTFF QjZENDBFMzMwHhcNMjYxMTAxMTExNTIyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWU3MWY0YS02YjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnACnK0oyR2fOFOKLQi17L7DUEOhSbE7PCoKSkyumTVLB1q45DUh6D38bFZ9 WlhoyEvJuOd0Md7RuwlROdbhj6iLQqbi9A1JgY0DJEXVh4gCoJOFpRPQqwp1xfpt 5ewTzvmC4ir5qZlTM5CY8oH3p9KI0RmH+ViS8gOdYupm6YEVCc4u5ySSG66e5LXT 7D/B7DNWFk2w6dkEMdvHU/ncv9NUFbhGrYNatmpj2PGm1bVlpocwuV2CIm0qj2Cq DMUc9TdpGRnj3Mm+kA1qr6XEIVBSyyk5Nhqm6cY7BeL5thgZ4ewOnRwQzpPysoE7 vRqhCD6/Ovjz6aGGJFSZrpJytQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOcit9kF hpLV93YKNOLg6zarTbf5MB8GA1UdIwQYMBaAFHc3C8BzBdGdvazOS/cgnh621A4z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUNFNy81RTA1REJBNDVG QUMxMUVCODQ5NDQ1MkZDNEY5QUUwMi9kemNMd0hNRjBaMjlyTTVMOXlDZUhyYlVE ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R6Y0x3SE1GMFoyOXJNNUw5eUNlSHJiVURqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVDRTcvNUUwNURCQTQ1RkFDMTFFQjg0OTQ0NTJGQzRGOUFFMDIvM0ZEMDdBODhE NDIwMTFGMUE3MzNDRTA3MzI2NkNFRjkucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/qsAwQCZyocMA0GCSqGSIb3DQEBCwUAA4IBAQC3AdRyBgcseBV2 sOIK6bsWgZbAiNMmfcLeYeVZcgyDKF9A6TRBhE+i24eDxQjLWCOLuho8TtJfIvXt lcPueccUppdVcbR05pauNWpSbc0bKnRgx4wpg3+XnBepSGbtB9gsEsuJErI8Rctf qWRD1ZOn7pJetPEkPzLegzqVzwjjvYgOIkFwSLyfTDbbHjd23CBt+yWzwWQ4Qkja 01UHUML1ceWGZdPtYRBlXf681YuZJ/PzCj/Ls0ZvFMD/DA0PoKzFGh1kKrWl8N3H KhDqOm1NTIaWdwhj4/jfa7ztZos3UPmOlVcq7qT/mngBJPYHffd2LeQVsdLQNLdH GDzZl2Ot -----END CERTIFICATE-----Generated at Mon Nov 9 08:02:13 2026 by rpki-client