$ rpki-client -vvf rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/CDB922F074AF11EFA0B26646C4F9AE02.roa File: CDB922F074AF11EFA0B26646C4F9AE02.roa (raw, json) Hash identifier: QEHeDKXl3W219yRsuSOY/SsIE0BE8LgnZaquYZmmgt8= Subject key identifier: 93:A0:EE:57:51:30:FA:09:DA:A5:D5:74:82:8B:91:60:49:8D:2F:1C Certificate issuer: /CN=A9133F6B/serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F Certificate serial: 0113 Authority key identifier: 34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/CDB922F074AF11EFA0B26646C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:53:00 +0000 ROA not before: Sat 03 May 2025 06:12:57 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132300 IP address blocks: 103.212.36.0/22 maxlen: 22 103.212.36.0/24 maxlen: 24 103.212.37.0/24 maxlen: 24 103.212.38.0/24 maxlen: 24 103.212.39.0/24 maxlen: 24 139.5.144.0/24 maxlen: 24 139.5.145.0/24 maxlen: 24 139.5.146.0/24 maxlen: 24 139.5.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133F6B, serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F Validity Not Before: May 3 06:12:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3e24c-4bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d3:e5:6d:f6:f1:a8:f9:eb:45:57:db:7f:47: 21:67:07:41:f3:53:d2:11:04:d5:48:3a:42:40:e9: 4a:91:22:f9:46:01:64:65:17:e4:c0:05:a9:ef:3b: 31:aa:dd:26:e5:9c:e2:3b:d0:41:f6:35:ee:b3:0a: 3c:7c:c9:62:c6:4d:a3:eb:5c:e2:f7:be:5c:ae:a7: a1:35:1c:71:52:6d:b3:c3:bb:9e:20:f0:dd:86:79: 3c:6a:07:03:62:05:25:28:e4:84:b7:38:b8:d4:3b: 4d:51:7c:4a:d7:06:34:44:a3:7a:6f:db:b0:b3:6d: 15:bd:83:68:8e:da:5a:5c:47:78:1d:f0:28:fe:5d: 37:f1:05:16:0e:44:db:7c:4a:09:bd:80:ed:14:17: 38:fb:ef:ce:6d:26:13:7c:3a:4e:a2:a8:02:b3:75: ef:eb:62:97:3f:c0:05:2b:d7:13:d6:76:62:85:ef: dd:24:55:e5:89:86:52:ae:7d:76:a0:2e:d1:d4:84: 68:f1:5e:38:70:04:a6:6f:c9:ff:9c:e4:c4:12:a9: 82:11:a1:4a:a4:33:11:f9:2c:a7:94:0e:48:81:01: 8a:64:74:4d:17:f7:0e:59:cb:30:2b:81:7b:96:16: 6e:f3:ba:c0:3b:c7:36:59:1e:b0:12:24:db:5d:fe: 40:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A0:EE:57:51:30:FA:09:DA:A5:D5:74:82:8B:91:60:49:8D:2F:1C X509v3 Authority Key Identifier: keyid:34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/CDB922F074AF11EFA0B26646C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.212.36.0/22 139.5.144.0/22 Signature Algorithm: sha256WithRSAEncryption 94:c4:f7:a4:61:56:66:93:11:13:17:79:e3:d2:49:a8:1f:d3: 5f:cd:d5:58:39:4d:35:e6:9e:5a:e6:cd:94:8b:2c:91:e3:13: 02:33:6d:4b:9f:ea:77:10:a6:95:59:31:be:8a:72:06:c4:d9: e3:c5:bb:13:b0:9b:19:cd:d9:97:7e:f4:8f:da:9f:e7:1f:0f: 35:79:ce:fc:94:c2:fa:7d:34:0f:86:de:69:69:d6:b8:fc:65: 67:a2:80:f6:a6:1a:fc:d0:44:b5:eb:98:63:e4:07:ae:17:ce: 74:38:82:d9:d3:c6:87:d5:1f:ae:85:e8:ec:da:f1:8a:95:8f: f0:59:48:a2:c2:8f:5a:57:07:60:98:37:12:fc:35:70:3d:0f: c3:3d:b9:1a:93:d0:ff:ad:77:e9:9a:51:dd:30:ca:0a:f1:e1: 77:ec:e2:d4:0b:e3:e0:79:0e:4d:e8:74:02:ff:25:fa:8d:f6: 9f:48:3b:52:79:b7:2d:e1:8d:4d:41:77:b1:5a:fb:36:67:33: c8:e1:16:cf:0a:d3:26:76:81:53:3e:55:89:56:f7:cc:5d:35: 6b:c2:4d:e6:c3:ec:ba:47:f5:dd:2a:19:65:e2:75:7c:98:ab: 81:31:4b:fe:d7:d0:65:d2:ca:c1:c4:28:d4:2d:5e:73:8d:a5: 4d:52:d9:9c -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNGNkIxMTAvBgNVBAUTKDM0RDdCRDYxNDM5NkFFNDQ1MTcwRTA1OEUwQUVEQ0VC QUQ0OTQwNUYwHhcNMjUwNTAzMDYxMjU3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTI0Yy00YmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNPlbfbxqPnrRVfbf0chZwdB81PSEQTVSDpCQOlKkSL5RgFkZRfkwAWp7zsx qt0m5ZziO9BB9jXuswo8fMlixk2j61zi975crqehNRxxUm2zw7ueIPDdhnk8agcD YgUlKOSEtzi41DtNUXxK1wY0RKN6b9uws20VvYNojtpaXEd4HfAo/l038QUWDkTb fEoJvYDtFBc4++/ObSYTfDpOoqgCs3Xv62KXP8AFK9cT1nZihe/dJFXliYZSrn12 oC7R1IRo8V44cASmb8n/nOTEEqmCEaFKpDMR+SynlA5IgQGKZHRNF/cOWcswK4F7 lhZu87rAO8c2WR6wEiTbXf5AIQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJOg7ldR MPoJ2qXVdIKLkWBJjS8cMB8GA1UdIwQYMBaAFDTXvWFDlq5EUXDgWOCu3OutSUBf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0Y2Qi85ODUyOTMzRTc0 QTYxMUVGQUI0QjA1M0NDNEY5QUUwMi9OTmU5WVVPV3JrUlJjT0JZNEs3YzY2MUpR RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05OZTlZVU9XcmtSUmNPQlk0SzdjNjYxSlFGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzNGNkIvOTg1MjkzM0U3NEE2MTFFRkFCNEIwNTNDQzRGOUFFMDIvQ0RCOTIyRjA3 NEFGMTFFRkEwQjI2NjQ2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ9QkAwQCiwWQMA0GCSqGSIb3DQEBCwUAA4IBAQCUxPekYVZmkxET F3nj0kmoH9NfzdVYOU015p5a5s2UiyyR4xMCM21Ln+p3EKaVWTG+inIGxNnjxbsT sJsZzdmXfvSP2p/nHw81ec78lML6fTQPht5pada4/GVnooD2phr80ES165hj5Aeu F850OILZ08aH1R+uhejs2vGKlY/wWUiiwo9aVwdgmDcS/DVwPQ/DPbkak9D/rXfp mlHdMMoK8eF37OLUC+PgeQ5N6HQC/yX6jfafSDtSebct4Y1NQXexWvs2ZzPI4RbP CtMmdoFTPlWJVvfMXTVrwk3mw+y6R/XdKhll4nV8mKuBMUv+19Bl0srBxCjULV5z jaVNUtmc -----END CERTIFICATE-----Generated at Mon Mar 2 00:42:54 2026 by rpki-client