$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/B811CFA2BF7811EE80314533C4F9AE02.roa File: B811CFA2BF7811EE80314533C4F9AE02.roa (raw, json) Hash identifier: WzKy9u9B88D10HY+ConM6LT0I2T55QHznbzlIn3dfH4= Subject key identifier: C6:30:76:9E:1D:70:B4:3E:D5:03:FB:FB:1C:07:33:EF:1E:04:22:92 Certificate issuer: /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21 Certificate serial: 08AE Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/B811CFA2BF7811EE80314533C4F9AE02.roa Signing time: Wed 16 Sep 2026 02:51:06 +0000 ROA not before: Wed 16 Sep 2026 02:51:06 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 132825 IP address blocks: 43.251.112.0/24 maxlen: 24 43.251.113.0/24 maxlen: 24 43.251.114.0/24 maxlen: 24 43.251.115.0/24 maxlen: 24 119.42.32.0/24 maxlen: 24 119.42.34.0/24 maxlen: 24 119.42.35.0/24 maxlen: 24 2001:df0:fbc0::/48 maxlen: 48 2402:5c60::/36 maxlen: 36 2402:5c60:1000::/36 maxlen: 36 2402:5c60:2000::/36 maxlen: 36 2402:5c60:3000::/36 maxlen: 36 2402:5c60:4000::/36 maxlen: 36 2402:5c60:5000::/36 maxlen: 36 2402:5c60:6000::/36 maxlen: 36 2402:5c60:7000::/36 maxlen: 36 2402:5c60:8000::/36 maxlen: 36 2402:5c60:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 20:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2222 (0x8ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EE77, serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21 Validity Not Before: Sep 16 02:51:06 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6aaa041a-0972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:2c:63:3a:fc:6c:59:f6:ec:2d:07:81:94: 9f:48:c7:83:e6:47:c5:41:6b:d5:88:e3:92:a7:02: 97:0e:ea:c7:44:56:b3:2d:0b:4b:f0:fd:fb:b2:eb: 80:9c:9c:e9:b4:c3:70:13:c5:e9:ab:4f:d2:ad:bb: ec:b9:e5:ec:cb:b7:d6:7d:6d:89:50:0b:59:54:fa: a5:0a:c0:02:5f:92:76:60:0e:d0:4d:e6:8b:ef:61: d9:7d:46:39:8c:f2:37:1f:b7:63:08:32:2c:f8:4b: 0a:e7:27:bf:9d:20:80:cb:e8:20:b2:73:46:da:98: 55:d7:7d:98:97:c9:c2:a3:08:5a:79:2f:f2:c5:46: fe:3d:8b:30:58:9b:f4:6a:93:71:92:67:03:39:e6: a1:16:1f:b5:4d:bf:b3:9a:cd:08:eb:a7:9a:e8:70: 4b:6d:48:cc:ee:6c:ee:24:8c:b3:79:d7:d4:c6:44: a0:7c:3d:d1:d6:c6:86:48:8e:f9:3f:82:11:70:7d: eb:ff:9f:2b:33:97:2f:7c:36:a8:5b:f6:1f:c1:09: 0c:2d:09:bd:53:c2:fb:ef:69:78:8a:4e:ef:7a:77: 31:0c:06:8f:49:f4:4f:56:1f:b2:d1:75:1a:4f:01: ba:59:af:33:e6:ad:01:b9:8f:0b:ec:12:f1:5a:f9: c9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:30:76:9E:1D:70:B4:3E:D5:03:FB:FB:1C:07:33:EF:1E:04:22:92 X509v3 Authority Key Identifier: keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/B811CFA2BF7811EE80314533C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.251.112.0/22 119.42.32.0/24 119.42.34.0/23 IPv6: 2001:df0:fbc0::/48 2402:5c60::-2402:5c60:9fff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption b2:b7:41:d1:36:3b:53:c4:ad:79:c3:ce:6a:37:80:6f:cc:45: 37:35:47:ed:96:90:e3:5e:ed:fc:b1:f6:62:fe:46:66:db:e6: 21:58:9d:10:7f:e0:43:b9:53:bf:7c:1d:6b:52:e3:18:7d:39: 42:01:3e:54:2f:e4:cb:52:d2:8a:6b:34:17:32:ba:4c:32:68: e8:c9:63:9e:1a:e5:a2:f1:69:69:45:f2:dc:d6:03:82:7f:75: 24:99:8f:d4:44:38:d9:65:5d:b8:e9:5f:ca:47:64:e6:0f:93: f8:8e:6d:34:7b:11:e6:04:50:2c:34:1a:25:c1:d0:28:eb:df: 46:e7:4b:06:72:f7:76:04:94:da:a3:c2:ea:da:ba:3a:9e:92: 1b:66:5b:01:16:4f:0f:7d:4f:2c:cd:75:5c:8a:43:07:3f:6a: 6a:16:99:a1:41:a4:00:37:ad:1c:7f:37:9f:c6:4b:5e:c4:86: c1:e4:c5:c4:f5:47:e7:e6:01:fb:32:f2:64:b8:26:39:b0:79: bc:42:dd:22:1f:e4:1d:3f:d8:40:98:94:02:70:68:13:6b:cb: db:d2:2f:36:37:3b:b6:2d:c9:c5:ad:f9:1d:3c:e9:21:bc:ca: 03:ed:f2:15:16:4d:a3:0b:a0:5d:ee:e5:a5:e1:78:ad:43:43: 80:aa:af:2a -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgICCK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVFNzcxMTAvBgNVBAUTKEI3ODFBMkU3RDkxRURDQThCMDMwREUzRUE4OUZBNEZB RjE3OTFGMjEwHhcNMjYwOTE2MDI1MTA2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFhMDQxYS0wOTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQgsYzr8bFn27C0HgZSfSMeD5kfFQWvViOOSpwKXDurHRFazLQtL8P37suuA nJzptMNwE8Xpq0/SrbvsueXsy7fWfW2JUAtZVPqlCsACX5J2YA7QTeaL72HZfUY5 jPI3H7djCDIs+EsK5ye/nSCAy+ggsnNG2phV132Yl8nCowhaeS/yxUb+PYswWJv0 apNxkmcDOeahFh+1Tb+zms0I66ea6HBLbUjM7mzuJIyzedfUxkSgfD3R1saGSI75 P4IRcH3r/58rM5cvfDaoW/YfwQkMLQm9U8L772l4ik7vencxDAaPSfRPVh+y0XUa TwG6Wa8z5q0BuY8L7BLxWvnJNQIDAQABo4ICjjCCAoowHQYDVR0OBBYEFMYwdp4d cLQ+1QP7+xwHM+8eBCKSMB8GA1UdIwQYMBaAFLeBoufZHtyosDDePqifpPrxeR8h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUU3Ny9EOUJFMDdCQTBD RUQxMUVCQTdGMTExNUJDNEY5QUUwMi90NEdpNTlrZTNLaXdNTjQtcUotay12RjVI eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q0R2k1OWtlM0tpd01ONC1xSi1rLXZGNUh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVFNzcvRDlCRTA3QkEwQ0VEMTFFQkE3RjExMTVCQzRGOUFFMDIvQjgxMUNGQTJC Rjc4MTFFRTgwMzE0NTMzQzRGOUFFMDIucm9hME0GCCsGAQUFBwEHAQH/BD4wPDAY BAIAATASAwQCK/twAwQAdyogAwQBdyoiMCAEAgACMBoDBwAgAQ3w+8AwDwMFBSQC XGADBgUkAlxggDANBgkqhkiG9w0BAQsFAAOCAQEAsrdB0TY7U8StecPOajeAb8xF NzVH7ZaQ417t/LH2Yv5GZtvmIVidEH/gQ7lTv3wda1LjGH05QgE+VC/ky1LSims0 FzK6TDJo6MljnhrlovFpaUXy3NYDgn91JJmP1EQ42WVduOlfykdk5g+T+I5tNHsR 5gRQLDQaJcHQKOvfRudLBnL3dgSU2qPC6tq6Op6SG2ZbARZPD31PLM11XIpDBz9q ahaZoUGkADetHH83n8ZLXsSGweTFxPVH5+YB+zLyZLgmObB5vELdIh/kHT/YQJiU AnBoE2vL29IvNjc7ti3Jxa35HTzpIbzKA+3yFRZNowugXe7lpeF4rUNDgKqvKg== -----END CERTIFICATE-----Generated at Mon Sep 21 09:15:02 2026 by rpki-client