$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa File: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (raw, json) Hash identifier: P7WPsAlt6emyZ5vAc8JxQ/khIDaZIfITwrMOxUX7hHE= Subject key identifier: 57:BC:DF:60:EC:D0:77:70:C0:2A:50:C7:54:22:85:27:1D:77:90:E1 Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Certificate serial: 0827 Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:08:15 +0000 ROA not before: Mon 14 Jul 2025 22:02:47 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 55720 IP address blocks: 43.249.254.0/24 maxlen: 24 43.249.255.0/24 maxlen: 24 103.229.144.0/24 maxlen: 24 103.229.145.0/24 maxlen: 24 103.229.146.0/24 maxlen: 24 103.229.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2087 (0x827) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Validity Not Before: Jul 14 22:02:47 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a4484f-a1ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d0:6e:3e:5f:7b:12:8a:01:e8:e5:95:30:9f: 6b:78:8f:cc:e1:dc:82:1b:f9:1b:53:ab:18:1e:40: 7a:ee:a9:0b:3b:52:a6:cb:be:2c:d3:28:08:ca:91: a0:a8:83:52:b6:c5:2e:76:59:53:cc:3b:75:89:1f: c6:36:6a:6c:6d:95:2b:12:7a:ed:73:9c:12:e3:78: 36:16:35:ed:7d:8f:6a:ed:cc:2d:1f:d5:b0:9f:c4: e7:bf:8f:b3:5d:a2:b6:b6:32:93:76:d9:03:93:24: 43:2a:74:fe:b6:1b:98:a8:60:3a:6e:94:06:71:bd: 76:7c:cd:3a:c7:54:df:5a:68:8e:e9:31:2e:cb:02: 6e:89:5c:20:84:ee:a5:40:bc:da:3b:66:ca:de:5f: da:bb:b0:61:bf:bd:b5:da:8f:00:83:99:00:87:d1: 75:2a:fb:3b:5f:a6:b8:f6:f5:53:35:e6:7a:9f:d4: 79:8f:d7:64:92:18:69:18:65:86:84:32:e6:f5:ac: 62:6a:1d:86:6b:d7:d3:1a:95:05:a9:f8:89:60:36: f7:a4:e2:e1:bd:4f:0b:24:f5:d3:63:47:aa:85:38: c8:ac:58:9d:60:e6:cc:8c:8a:53:a1:da:01:32:be: 35:77:a5:22:3b:33:4d:e0:5c:c9:86:8d:51:68:88: fd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BC:DF:60:EC:D0:77:70:C0:2A:50:C7:54:22:85:27:1D:77:90:E1 X509v3 Authority Key Identifier: keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.249.254.0/23 103.229.144.0/22 Signature Algorithm: sha256WithRSAEncryption 35:82:cd:1e:3b:60:b1:35:d7:2c:06:74:be:f2:fc:b6:64:23: e7:5d:ab:10:8b:3c:b8:26:70:be:08:b8:3c:c6:07:56:c6:ce: 0d:0c:81:dc:1d:34:dc:77:31:2f:e8:17:32:71:f7:59:c8:fb: 4a:c4:42:cc:72:22:ca:c0:07:d8:f2:0a:e5:67:fe:32:eb:09: 65:4d:41:3a:e9:53:21:08:68:38:4b:4c:06:36:48:00:22:30: e3:1b:2c:53:ab:d5:92:2e:f4:af:62:af:3b:63:f4:9a:0f:d2: c7:d0:56:fb:5d:e6:2e:a1:d2:4c:5b:14:65:fc:38:5d:12:7e: e0:92:c4:a8:82:76:79:c9:30:bb:32:fa:36:3e:60:69:00:47: a6:63:41:01:d0:ab:d1:56:4b:55:3b:79:e7:4e:85:3b:e9:a6: 0e:ca:5b:66:ff:b2:97:e1:ac:3f:d2:ce:7a:c3:d8:e6:6a:1e: 06:9d:79:45:70:f9:ee:d0:b6:cd:70:be:b3:0d:d9:3a:02:56: 59:5f:87:4d:9d:44:7f:e5:5f:62:4d:00:49:70:c5:1d:ec:9f: fe:4a:9f:1a:78:91:3c:3d:3c:d9:c4:37:8a:cd:ea:a9:c9:8f: 1f:f8:a0:79:af:aa:a4:9a:6e:83:37:95:4f:80:da:14:9a:bc: 09:86:a8:0f -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFMDkxMTAvBgNVBAUTKDVGMUQzMEU5NzNCNUMxQzhBODBGNjA0N0RDNTI5Nzc4 OTQwNDRDM0YwHhcNMjUwNzE0MjIwMjQ3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDg0Zi1hMWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NBuPl97EooB6OWVMJ9reI/M4dyCG/kbU6sYHkB67qkLO1Kmy74s0ygIypGg qINStsUudllTzDt1iR/GNmpsbZUrEnrtc5wS43g2FjXtfY9q7cwtH9Wwn8Tnv4+z XaK2tjKTdtkDkyRDKnT+thuYqGA6bpQGcb12fM06x1TfWmiO6TEuywJuiVwghO6l QLzaO2bK3l/au7Bhv7212o8Ag5kAh9F1Kvs7X6a49vVTNeZ6n9R5j9dkkhhpGGWG hDLm9axiah2Ga9fTGpUFqfiJYDb3pOLhvU8LJPXTY0eqhTjIrFidYObMjIpTodoB Mr41d6UiOzNN4FzJho1RaIj9KwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFFe832Ds 0HdwwCpQx1QihScdd5DhMB8GA1UdIwQYMBaAFF8dMOlztcHIqA9gR9xSl3iUBEw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkUwOS8wMUE1ODM3QTBG NjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdjaW9EMkJIM0ZLWGVKUUVU RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4MHc2WE8xd2Npb0QyQkgzRktYZUpRRVREOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjJFMDkvMDFBNTgzN0EwRjY0MTFFQjlGRDUzNzQ5QzRGOUFFMDIvQkUzNUVERDgw Q0NBMTFFRjlBRURCOTZFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBK/n+AwQCZ+WQMA0GCSqGSIb3DQEBCwUAA4IBAQA1gs0eO2CxNdcs BnS+8vy2ZCPnXasQizy4JnC+CLg8xgdWxs4NDIHcHTTcdzEv6BcycfdZyPtKxELM ciLKwAfY8grlZ/4y6wllTUE66VMhCGg4S0wGNkgAIjDjGyxTq9WSLvSvYq87Y/Sa D9LH0Fb7XeYuodJMWxRl/DhdEn7gksSognZ5yTC7Mvo2PmBpAEemY0EB0KvRVktV O3nnToU76aYOyltm/7KX4aw/0s56w9jmah4GnXlFcPnu0LbNcL6zDdk6AlZZX4dN nUR/5V9iTQBJcMUd7J/+Sp8aeJE8PTzZxDeKzeqpyY8f+KB5r6qkmm6DN5VPgNoU mrwJhqgP -----END CERTIFICATE-----Generated at Mon Mar 2 05:48:43 2026 by rpki-client