$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/8BE9B1A03C8B11EC8947D982C4F9AE02.roa File: 8BE9B1A03C8B11EC8947D982C4F9AE02.roa (raw, json) Hash identifier: X2fqbOwNjfPVvOnATgu0zvqwWCe0l0CVElKSGtxJl4w= Subject key identifier: 44:47:4A:2B:E9:09:58:91:90:54:74:D9:2B:D4:AA:3B:EF:FD:31:87 Certificate issuer: /CN=A9120AC1/serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5 Certificate serial: 057C Authority key identifier: 8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/8BE9B1A03C8B11EC8947D982C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:37:39 +0000 ROA not before: Thu 05 Feb 2026 09:23:31 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 9744 IP address blocks: 43.225.196.0/22 maxlen: 24 103.44.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1404 (0x57c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1, serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5 Validity Not Before: Feb 5 09:23:31 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a46b52-77a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c8:b8:0b:f2:86:26:41:e8:39:47:e2:a5:83: e5:74:cf:f6:d4:3c:7b:0e:68:08:ec:32:97:1d:96: fa:56:d5:67:42:98:84:f0:d0:b3:fe:0d:b1:97:5b: ce:1e:8a:33:ac:42:3c:f4:ed:38:15:7b:de:ab:cc: dc:ef:88:9c:ee:93:74:f9:2a:12:d2:4c:be:c0:5b: d0:fc:d5:85:e2:34:8a:a5:c9:93:66:a6:ca:fb:b3: 0e:50:71:e5:44:90:63:b4:c9:41:94:c6:59:b5:27: 05:f8:49:39:5b:fa:ee:74:60:3b:f6:a3:f5:ec:42: 59:d1:ea:7c:ea:37:03:64:26:ff:f1:8a:b7:0d:48: 6e:66:9a:a9:9a:a1:35:9d:da:5e:65:09:07:e0:cd: cc:62:d6:45:e3:04:22:94:3d:49:02:19:02:f1:db: e4:31:d8:76:88:f1:52:39:5c:03:93:30:46:0b:ab: ef:d5:2e:de:67:ac:53:03:c4:89:39:46:d5:97:20: 4e:ba:32:dc:76:36:8e:5e:af:2b:66:5d:3c:30:b3: f7:b4:c7:b7:62:97:21:7b:6b:89:4a:a3:40:0b:85: 8d:5e:df:dd:24:52:14:b0:e4:c8:fd:02:c3:7a:61: 48:4a:e2:1f:e9:82:45:b2:59:2d:a2:90:22:82:87: 6d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:47:4A:2B:E9:09:58:91:90:54:74:D9:2B:D4:AA:3B:EF:FD:31:87 X509v3 Authority Key Identifier: keyid:8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/8BE9B1A03C8B11EC8947D982C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.225.196.0/22 103.44.160.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:4c:60:12:2c:5b:0b:e7:e0:6c:6b:1a:98:5c:10:79:c5:5a: 6c:f2:75:34:1c:f7:7b:c7:cc:58:7a:2f:ac:9f:70:90:d6:09: 98:7a:59:ec:2d:b5:75:f8:b8:ff:04:ac:4e:0a:fe:91:5d:33: c1:ca:10:9c:39:7b:93:29:87:19:a7:bb:16:e2:ee:40:76:45: 90:47:44:98:ea:50:d4:4c:b6:71:e1:00:c2:50:68:6c:76:29: ae:c3:d2:5b:24:02:ac:57:77:e0:1a:68:bd:e2:d0:91:27:7a: 0d:44:84:2d:c2:d3:cd:03:89:a2:48:7f:63:1e:99:db:f2:1d: f7:a0:2a:01:f8:4c:9f:37:39:a7:ca:55:96:3f:b9:2e:d4:47: 97:e0:44:b6:b0:6c:c7:26:de:4f:88:86:d5:7c:78:69:18:ea: 0a:21:be:2e:6f:17:35:26:f5:d8:ac:70:c5:8a:75:0e:f7:a8: 73:34:c4:17:89:14:9c:33:57:f2:cd:9d:a6:7e:b8:b6:d1:13: a3:6e:81:e8:cb:8f:ef:05:e7:b4:11:4c:f0:03:3a:65:86:a9: dc:61:39:d6:a5:87:5c:3c:86:20:70:5f:a5:7b:6e:a9:00:8f: e1:09:34:54:74:06:50:57:f8:0d:da:6a:16:2f:dd:8d:0f:c4: bc:c9:f9:bb -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKDhGMkJENEMxMjYzNkYwMDU5QjQwOEQwNzE2QUYzMkM4 RjU0MDY5QTUwHhcNMjYwMjA1MDkyMzMxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmI1Mi03N2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8i4C/KGJkHoOUfipYPldM/21Dx7DmgI7DKXHZb6VtVnQpiE8NCz/g2xl1vO HoozrEI89O04FXveq8zc74ic7pN0+SoS0ky+wFvQ/NWF4jSKpcmTZqbK+7MOUHHl RJBjtMlBlMZZtScF+Ek5W/rudGA79qP17EJZ0ep86jcDZCb/8Yq3DUhuZpqpmqE1 ndpeZQkH4M3MYtZF4wQilD1JAhkC8dvkMdh2iPFSOVwDkzBGC6vv1S7eZ6xTA8SJ OUbVlyBOujLcdjaOXq8rZl08MLP3tMe3Ypche2uJSqNAC4WNXt/dJFIUsOTI/QLD emFISuIf6YJFslktopAigodtbQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFERHSivp CViRkFR02SvUqjvv/TGHMB8GA1UdIwQYMBaAFI8r1MEmNvAFm0CNBxavMsj1QGml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS80ODAxN0QzODMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9qeXZVd1NZMjhBV2JRSTBIRnE4eXlQVkFh YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p5dlV3U1kyOEFXYlFJMEhGcTh5eVBWQWFhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjBBQzEvNDgwMTdEMzgzMDk3MTFFQ0IyODVBNjRCQzRGOUFFMDIvOEJFOUIxQTAz QzhCMTFFQzg5NDdEOTgyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK+HEAwQCZyygMA0GCSqGSIb3DQEBCwUAA4IBAQB9TGASLFsL5+Bs axqYXBB5xVps8nU0HPd7x8xYei+sn3CQ1gmYelnsLbV1+Lj/BKxOCv6RXTPByhCc OXuTKYcZp7sW4u5AdkWQR0SY6lDUTLZx4QDCUGhsdimuw9JbJAKsV3fgGmi94tCR J3oNRIQtwtPNA4miSH9jHpnb8h33oCoB+EyfNzmnylWWP7ku1EeX4ES2sGzHJt5P iIbVfHhpGOoKIb4ubxc1JvXYrHDFinUO96hzNMQXiRScM1fyzZ2mfri20ROjboHo y4/vBee0EUzwAzplhqncYTnWpYdcPIYgcF+le26pAI/hCTRUdAZQV/gN2moWL92N D8S8yfm7 -----END CERTIFICATE-----Generated at Mon Mar 2 04:14:51 2026 by rpki-client