$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/448119B0DAEA11EA8773CC58C4F9AE02.roa File: 448119B0DAEA11EA8773CC58C4F9AE02.roa (raw, json) Hash identifier: a8A+sLpfbwO2ibV68drjvFW0LBjdEV4/UHX7R/nBWwQ= Subject key identifier: 0A:99:38:9A:81:F3:54:7B:0C:6D:62:A6:95:8E:8B:F1:05:D5:6A:1F Certificate issuer: /CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Certificate serial: 08AD Authority key identifier: 2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/448119B0DAEA11EA8773CC58C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:55:04 +0000 ROA not before: Tue 20 May 2025 20:58:36 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 132426 IP address blocks: 43.239.252.0/22 maxlen: 24 103.20.224.0/22 maxlen: 24 2405:4700::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2221 (0x8ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CDB, serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Validity Not Before: May 20 20:58:36 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a42918-16fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:f1:79:a0:eb:b5:97:5d:b5:94:a6:44:6a: cd:04:46:68:ab:dc:80:db:10:82:0f:c8:4a:d4:36: 06:83:ea:c1:04:ab:5a:19:10:91:0b:7d:f3:c1:b0: 85:01:cf:78:2a:38:64:ec:d5:46:c8:48:4c:ee:13: a3:f2:1b:e4:93:a1:c2:41:be:69:61:8b:74:77:86: d7:8d:0e:7c:ae:19:21:4e:8f:6b:d2:2e:bc:95:01: f2:cd:ed:6e:db:76:f1:6a:e7:6f:24:a2:a9:4e:8f: bd:65:c3:df:11:b5:41:76:07:5a:c8:d2:7e:15:a1: ea:07:91:41:73:97:9e:98:48:5e:f5:a9:13:6a:6f: 85:59:2a:e2:6b:79:bb:73:8d:fe:71:ce:92:f3:0f: 7c:48:14:5c:36:2a:7a:43:a3:bd:80:c9:a6:02:ad: e6:f5:31:81:14:61:2b:c0:6e:b8:25:8b:00:70:44: 84:6e:9d:8f:61:30:eb:af:73:04:38:2e:c9:ec:30: 2c:89:14:d2:66:d4:50:a1:db:47:c0:e8:43:70:7f: bf:b4:9e:a9:ff:5d:33:b8:33:09:ae:b1:47:14:d4: 64:ab:56:85:07:02:d9:e6:37:ec:2f:d8:64:e3:69: ec:67:2f:6e:96:e5:60:9e:25:d9:11:02:34:58:2e: 04:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:99:38:9A:81:F3:54:7B:0C:6D:62:A6:95:8E:8B:F1:05:D5:6A:1F X509v3 Authority Key Identifier: keyid:2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/448119B0DAEA11EA8773CC58C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.252.0/22 103.20.224.0/22 IPv6: 2405:4700::/32 Signature Algorithm: sha256WithRSAEncryption 7e:18:bd:c9:36:57:30:dd:c7:a4:1c:b3:ba:8a:bf:fc:c1:12: 13:d6:5b:bb:8b:43:c5:f9:f7:4d:6d:a0:4d:a8:ca:6c:d8:c3: 41:ab:15:95:39:37:36:c5:98:46:fb:59:49:b1:d8:0e:76:6d: 71:76:cc:1d:70:a6:07:eb:c6:b8:d1:5b:23:ae:2e:3f:84:5a: 52:1a:3e:92:70:30:dc:b6:af:cf:19:cc:2a:25:3c:ec:50:44: 62:57:5c:c0:51:54:6f:34:75:b6:1c:69:24:20:c4:82:6e:91: ae:bb:48:06:01:f1:7b:7a:05:e6:2b:b8:7f:e8:51:2d:57:51: e2:d6:d2:62:15:89:5b:6c:93:f6:9f:3c:bf:5d:38:b8:b7:59: 14:4a:7a:e2:92:df:02:2d:fe:2b:d6:f9:6f:1c:bb:68:1d:d8: a1:12:99:a1:36:73:45:84:60:7a:d9:fa:02:35:70:52:ef:3a: 38:9f:c2:8f:c6:06:8c:ae:55:d2:4b:e3:ef:5c:3b:2c:5f:06: f0:82:e1:b2:a6:0b:d3:03:ef:42:08:44:d6:d8:41:6c:08:b7: aa:03:86:dd:5f:a3:59:38:3c:d9:5c:97:08:18:8d:0c:41:54: 55:8a:7b:33:f8:1e:56:e7:14:a1:f6:66:b2:47:36:c4:8d:71: 09:db:43:11 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDREIxMTAvBgNVBAUTKDJDNEU1QjA1NDI3M0EzQzFFRTQxNkE0MkRGOUUyMzYy MjYzNzM5NjEwHhcNMjUwNTIwMjA1ODM2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjkxOC0xNmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPDxeaDrtZddtZSmRGrNBEZoq9yA2xCCD8hK1DYGg+rBBKtaGRCRC33zwbCF Ac94Kjhk7NVGyEhM7hOj8hvkk6HCQb5pYYt0d4bXjQ58rhkhTo9r0i68lQHyze1u 23bxaudvJKKpTo+9ZcPfEbVBdgdayNJ+FaHqB5FBc5eemEhe9akTam+FWSria3m7 c43+cc6S8w98SBRcNip6Q6O9gMmmAq3m9TGBFGErwG64JYsAcESEbp2PYTDrr3ME OC7J7DAsiRTSZtRQodtHwOhDcH+/tJ6p/10zuDMJrrFHFNRkq1aFBwLZ5jfsL9hk 42nsZy9uluVgniXZEQI0WC4E4QIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFAqZOJqB 81R7DG1ippWOi/EF1WofMB8GA1UdIwQYMBaAFCxOWwVCc6PB7kFqQt+eI2ImNzlh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENEQi9CREFGNjBFNERB RTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84SHVRV3BDMzU0allpWTNP V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNWJCVUp6bzhIdVFXcEMzNTRqWWlZM09XRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzRDREIvQkRBRjYwRTREQUU1MTFFQThBMjU1QTREQzRGOUFFMDIvNDQ4MTE5QjBE QUVBMTFFQTg3NzNDQzU4QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK+/8AwQCZxTgMA0EAgACMAcDBQAkBUcAMA0GCSqGSIb3DQEBCwUA A4IBAQB+GL3JNlcw3cekHLO6ir/8wRIT1lu7i0PF+fdNbaBNqMps2MNBqxWVOTc2 xZhG+1lJsdgOdm1xdswdcKYH68a40Vsjri4/hFpSGj6ScDDctq/PGcwqJTzsUERi V1zAUVRvNHW2HGkkIMSCbpGuu0gGAfF7egXmK7h/6FEtV1Hi1tJiFYlbbJP2nzy/ XTi4t1kUSnrikt8CLf4r1vlvHLtoHdihEpmhNnNFhGB62foCNXBS7zo4n8KPxgaM rlXSS+PvXDssXwbwguGypgvTA+9CCETW2EFsCLeqA4bdX6NZODzZXJcIGI0MQVRV insz+B5W5xSh9mayRzbEjXEJ20MR -----END CERTIFICATE-----Generated at Mon Mar 2 10:52:23 2026 by rpki-client