$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/9FCAD654781E11EB808A544BC4F9AE02.roa File: 9FCAD654781E11EB808A544BC4F9AE02.roa (raw, json) Hash identifier: gVcn2SvZaK2nbxle9CZzKz71vAlE+GFSMyND+4DCZiA= Subject key identifier: 70:89:74:51:A6:6C:3E:0E:FC:99:68:A2:62:52:A5:DA:D0:EE:52:BC Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Certificate serial: 0983 Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/9FCAD654781E11EB808A544BC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:41:09 +0000 ROA not before: Tue 02 Sep 2025 20:41:08 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141742 IP address blocks: 43.246.216.0/22 maxlen: 22 43.246.216.0/24 maxlen: 24 43.246.217.0/24 maxlen: 24 43.246.218.0/24 maxlen: 24 43.246.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2435 (0x983) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Validity Not Before: Sep 2 20:41:08 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a45e15-2470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7c:74:e7:56:c7:39:9e:99:66:4b:e8:fb:fa: 6e:c4:88:6b:b2:c6:98:ee:1c:e6:6d:9d:86:de:40: 5d:0c:85:ce:1c:0d:c7:aa:27:03:83:55:17:4f:df: dd:d2:de:94:9a:ae:0e:4f:77:14:14:66:92:bc:c7: 7d:c7:d6:21:ab:06:88:b4:8a:84:1d:24:e4:e6:cd: 17:c2:7c:62:3c:35:48:af:54:fe:03:e1:69:a2:e3: f8:e9:8f:1c:9d:27:97:3b:45:65:9b:fc:84:f0:9f: 7f:8d:12:4b:16:07:0a:8d:da:08:02:5d:84:17:dc: 78:72:98:2e:e1:d9:f1:95:6b:12:f8:7f:ca:94:bf: 88:2d:b3:09:94:0c:92:06:6c:d2:8d:b4:82:6c:66: ba:50:12:30:5b:71:aa:91:a8:0d:e9:b3:a5:be:1f: d4:d2:dd:03:be:35:32:70:71:6b:9a:0a:1e:fb:a3: e4:e5:e8:7f:c7:3f:c6:e4:b0:f6:3a:f3:91:4c:d2: fa:1b:f1:31:68:f9:e0:a3:d7:7b:13:20:d9:cf:fd: dc:35:40:87:fa:b2:af:5d:0e:6b:a4:8a:59:b3:62: 0e:4e:28:16:2e:1e:94:d3:7a:ec:22:2f:72:48:16: 45:ff:02:c1:bd:eb:af:9b:d6:52:1a:40:ad:81:10: 91:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:89:74:51:A6:6C:3E:0E:FC:99:68:A2:62:52:A5:DA:D0:EE:52:BC X509v3 Authority Key Identifier: keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/9FCAD654781E11EB808A544BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.246.216.0/22 Signature Algorithm: sha256WithRSAEncryption 17:fa:25:43:fc:3c:c9:bb:ef:00:2b:9a:03:c1:fd:4c:c4:69: 65:78:58:1d:92:7d:34:8c:91:14:f6:17:bb:84:8d:47:78:f4: ed:58:fd:a1:08:8a:52:a9:cd:d7:a7:be:51:12:cc:56:43:9b: df:c2:f2:26:e2:b1:4b:7f:1a:92:91:72:12:e4:60:4c:de:c3: 86:69:53:28:72:bb:f3:1f:0f:7d:6c:79:1f:67:b8:67:ad:98: d9:97:21:8c:b7:1a:e5:56:86:f8:c5:6e:78:33:8b:84:8b:7d: b7:fa:7f:3d:23:2c:4c:eb:8d:15:75:01:5c:9a:8e:8e:e4:ce: a4:2d:e8:71:1b:6d:f6:69:c4:ac:f9:8b:07:81:fc:f4:09:c6: 4b:8d:7f:80:e0:0d:60:ab:07:e8:2b:06:01:c2:d0:f3:27:d8: 27:15:cc:14:eb:d0:79:7d:6f:16:7b:5a:18:c0:77:92:f0:46: 02:ba:6e:de:c9:b4:73:ea:de:b6:5a:db:05:90:6c:54:4f:bc: f0:d9:13:1f:ee:dd:03:b9:5a:4b:a7:99:6e:65:1a:7e:7d:57: 3a:9b:07:ba:6e:28:23:fa:97:29:82:ff:81:59:1b:4c:3d:8d: 47:23:28:0b:5d:96:c3:6a:24:c1:3b:1a:c8:40:95:49:d1:c3: 86:20:42:0d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB RDBBRkMzMDUwHhcNMjUwOTAyMjA0MTA4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWUxNS0yNDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunx051bHOZ6ZZkvo+/puxIhrssaY7hzmbZ2G3kBdDIXOHA3HqicDg1UXT9/d 0t6Umq4OT3cUFGaSvMd9x9YhqwaItIqEHSTk5s0XwnxiPDVIr1T+A+FpouP46Y8c nSeXO0Vlm/yE8J9/jRJLFgcKjdoIAl2EF9x4cpgu4dnxlWsS+H/KlL+ILbMJlAyS BmzSjbSCbGa6UBIwW3GqkagN6bOlvh/U0t0DvjUycHFrmgoe+6Pk5eh/xz/G5LD2 OvORTNL6G/ExaPngo9d7EyDZz/3cNUCH+rKvXQ5rpIpZs2IOTigWLh6U03rsIi9y SBZF/wLBveuvm9ZSGkCtgRCRDQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHCJdFGm bD4O/JloomJSpdrQ7lK8MB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0 NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUxMkYvNEI4QkZGRUNCNDY5MTFFQUFCQTcxQzc1QzRGOUFFMDIvOUZDQUQ2NTQ3 ODFFMTFFQjgwOEE1NDRCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK/bYMA0GCSqGSIb3DQEBCwUAA4IBAQAX+iVD/DzJu+8AK5oDwf1M xGlleFgdkn00jJEU9he7hI1HePTtWP2hCIpSqc3Xp75REsxWQ5vfwvIm4rFLfxqS kXIS5GBM3sOGaVMocrvzHw99bHkfZ7hnrZjZlyGMtxrlVob4xW54M4uEi323+n89 IyxM640VdQFcmo6O5M6kLehxG232acSs+YsHgfz0CcZLjX+A4A1gqwfoKwYBwtDz J9gnFcwU69B5fW8We1oYwHeS8EYCum7eybRz6t62WtsFkGxUT7zw2RMf7t0DuVpL p5luZRp+fVc6mwe6bigj+pcpgv+BWRtMPY1HIygLXZbDaiTBOxrIQJVJ0cOGIEIN -----END CERTIFICATE-----Generated at Mon Mar 2 21:12:29 2026 by rpki-client