$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/F539311C7DA011F08A71610EC4F9AE02.roa File: F539311C7DA011F08A71610EC4F9AE02.roa (raw, json) Hash identifier: zuOnKl7Ra5fTAdkhJCdRbWwvMsV4axmICBuK3Fon6uM= Subject key identifier: 48:8D:90:1F:6E:22:9A:BE:A9:1D:BE:08:96:76:45:6F:96:BC:C6:30 Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Certificate serial: 08DC Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/F539311C7DA011F08A71610EC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:43:20 +0000 ROA not before: Thu 29 Jan 2026 23:50:48 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 134202 IP address blocks: 43.225.39.0/24 maxlen: 24 61.4.96.0/24 maxlen: 24 103.246.115.0/24 maxlen: 24 118.107.212.0/24 maxlen: 24 118.107.213.0/24 maxlen: 24 118.107.214.0/24 maxlen: 24 118.107.215.0/24 maxlen: 24 202.9.37.0/24 maxlen: 24 202.9.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2268 (0x8dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Validity Not Before: Jan 29 23:50:48 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a488c8-7108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e3:e6:6f:62:38:1b:32:dc:61:53:9d:78:3e: 3c:34:b1:52:fa:f0:76:9b:4d:71:0c:b5:40:1b:28: 3d:3e:95:61:23:e9:49:f6:87:e5:8b:67:68:1f:41: d9:72:fc:59:82:de:7c:33:ee:d8:0b:22:e0:2b:3c: b9:cf:3b:20:79:9a:35:69:10:db:36:b4:69:21:b7: df:0f:1f:21:f8:40:79:cb:11:7e:b1:59:6b:ad:44: 6f:a8:d4:9d:27:c4:85:ad:94:37:27:9e:5f:ff:7e: e2:f7:fe:12:54:e0:5d:56:e2:4b:65:a0:d8:cf:02: 9f:24:ca:74:ba:8a:17:8f:b6:cf:25:bf:5c:bb:c6: 23:c1:47:d6:41:76:e3:15:fc:57:b1:ed:10:86:f5: d1:19:e9:91:6e:bf:c9:d1:b9:7a:52:cc:ab:7e:f1: 22:e5:85:15:b4:3f:62:b9:ef:05:c0:76:e3:93:f3: c0:80:17:d8:93:3f:9d:d8:9d:01:82:36:e3:f5:40: d3:7c:0d:ff:66:06:c8:60:06:77:27:0f:fd:26:84: 1a:cb:a5:f3:33:5a:5d:87:30:58:67:06:81:08:bd: d0:da:7d:cf:67:7b:7e:f9:6f:9a:33:45:34:51:07: ad:45:cc:33:c2:40:20:02:da:88:84:a9:e8:58:11: 7b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8D:90:1F:6E:22:9A:BE:A9:1D:BE:08:96:76:45:6F:96:BC:C6:30 X509v3 Authority Key Identifier: keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/F539311C7DA011F08A71610EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.225.39.0/24 61.4.96.0/24 103.246.115.0/24 118.107.212.0/22 202.9.37.0-202.9.38.255 Signature Algorithm: sha256WithRSAEncryption 1c:37:71:53:97:7f:57:4a:b8:be:ab:e8:c2:94:42:d1:a2:71: 54:2b:ee:31:3b:4d:08:ad:71:cb:62:49:f2:33:d2:35:1b:4f: 72:42:6c:45:2f:3f:e9:2b:20:2d:9f:37:27:59:16:69:09:40: b9:5c:2c:e4:0a:f4:74:e2:30:0e:c1:d2:96:5d:97:33:64:ee: d8:ee:53:71:35:ec:0c:b9:e6:82:d1:37:22:f2:75:87:05:b6: c8:3c:20:77:13:cd:04:4a:38:41:8a:d3:a6:2b:fe:4f:6e:6c: d5:88:be:b6:42:46:1f:1a:73:0a:57:b3:89:0d:97:54:8a:e4: d7:98:c7:40:bd:ff:8d:0d:26:f2:24:a5:d8:70:92:b8:60:60: 42:5b:d8:bc:cb:53:f6:bd:87:c3:86:eb:13:4c:fb:e5:42:75: 1f:51:de:43:e1:c8:46:78:9e:8a:de:97:ef:29:fa:a2:d4:d6: 36:46:e1:41:97:e0:c3:72:0e:05:ef:77:cb:32:07:6d:d4:8f: c8:36:3a:31:df:71:24:48:c8:cc:6e:84:44:da:4b:81:c2:b4: 87:98:67:c0:7b:59:54:e7:b9:35:58:f5:a4:af:a5:a1:10:94: 83:74:c5:9a:4e:2a:47:af:08:c3:26:cf:9d:9e:57:6d:ef:99: c7:fd:df:58 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICCNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1 MzIzM0U1OTUwHhcNMjYwMTI5MjM1MDQ4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODhjOC03MTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2uPmb2I4GzLcYVOdeD48NLFS+vB2m01xDLVAGyg9PpVhI+lJ9ofli2doH0HZ cvxZgt58M+7YCyLgKzy5zzsgeZo1aRDbNrRpIbffDx8h+EB5yxF+sVlrrURvqNSd J8SFrZQ3J55f/37i9/4SVOBdVuJLZaDYzwKfJMp0uooXj7bPJb9cu8YjwUfWQXbj FfxXse0QhvXRGemRbr/J0bl6UsyrfvEi5YUVtD9iue8FwHbjk/PAgBfYkz+d2J0B gjbj9UDTfA3/ZgbIYAZ3Jw/9JoQay6XzM1pdhzBYZwaBCL3Q2n3PZ3t++W+aM0U0 UQetRcwzwkAgAtqIhKnoWBF7xQIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFEiNkB9u Ipq+qR2+CJZ2RW+WvMYwMB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2 QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjE3NkQvOTNEMTdDRDAwNkEwMTFFQkI0MDkwODU5QzRGOUFFMDIvRjUzOTMxMUM3 REEwMTFGMDhBNzE2MTBFQzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAs BAIAATAmAwQAK+EnAwQAPQRgAwQAZ/ZzAwQCdmvUMAwDBADKCSUDBADKCSYwDQYJ KoZIhvcNAQELBQADggEBABw3cVOXf1dKuL6r6MKUQtGicVQr7jE7TQitcctiSfIz 0jUbT3JCbEUvP+krIC2fNydZFmkJQLlcLOQK9HTiMA7B0pZdlzNk7tjuU3E17Ay5 5oLRNyLydYcFtsg8IHcTzQRKOEGK06Yr/k9ubNWIvrZCRh8acwpXs4kNl1SK5NeY x0C9/40NJvIkpdhwkrhgYEJb2LzLU/a9h8OG6xNM++VCdR9R3kPhyEZ4norel+8p +qLU1jZG4UGX4MNyDgXvd8syB23Uj8g2OjHfcSRIyMxuhETaS4HCtIeYZ8B7WVTn uTVY9aSvpaEQlIN0xZpOKkevCMMmz52eV23vmcf931g= -----END CERTIFICATE-----Generated at Mon Mar 2 15:50:32 2026 by rpki-client