$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/919E2B20E52811ED863E8C34C4F9AE02.roa File: 919E2B20E52811ED863E8C34C4F9AE02.roa (raw, json) Hash identifier: uqXR4tajUjvjhq8tbrewxksJEX9qbU6dwdNONUj5iNY= Subject key identifier: CB:2B:A9:3A:8E:1C:49:DD:E5:BD:E2:9C:12:90:6D:95:BE:BA:C8:46 Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 07DE Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/919E2B20E52811ED863E8C34C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:42:55 +0000 ROA not before: Sun 18 Jan 2026 14:40:19 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 42960 IP address blocks: 43.254.164.0/22 maxlen: 24 43.255.120.0/22 maxlen: 24 43.255.156.0/23 maxlen: 24 43.255.159.0/24 maxlen: 24 103.24.216.0/22 maxlen: 24 103.30.76.0/22 maxlen: 24 103.171.34.0/23 maxlen: 24 103.231.56.0/22 maxlen: 24 103.240.196.0/22 maxlen: 24 2001:df7:3480::/48 maxlen: 48 2401:2660::/36 maxlen: 36 2401:2660:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:13:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2014 (0x7de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Jan 18 14:40:19 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a488af-7098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:31:a0:86:dc:5e:aa:a2:bf:23:d7:14:08:58: 84:5f:75:b9:ba:6e:b9:8d:38:a4:cd:ed:63:16:d0: ee:a7:66:c3:42:1c:84:42:a5:01:4e:60:06:87:8d: 22:bb:9e:d8:55:10:ab:86:18:fe:fc:ba:bc:22:0a: b3:2e:82:61:c5:d0:39:2c:f8:67:d2:56:79:0e:28: 3b:38:64:22:6e:84:27:9c:4d:57:8b:df:1f:72:e7: 2f:3a:6b:ea:9a:4a:e3:2a:f2:c9:7d:92:8f:b3:cf: c1:13:e1:f0:48:1e:91:54:4e:ea:48:0d:2f:2a:ca: 7a:eb:95:f7:1f:f9:17:32:7d:35:5b:62:04:6b:0d: 4e:8d:43:20:39:c7:24:1f:45:74:6a:f9:fd:3c:f9: b5:10:cc:95:c0:2f:1c:76:cf:a8:b0:0d:72:3b:b3: b7:37:63:34:4c:53:6d:d9:be:da:d1:a7:21:46:45: 0e:10:79:ed:08:30:62:b5:41:a9:53:ff:7e:3c:dc: 2b:4b:fd:9a:b7:7b:5e:e3:c5:26:c9:33:92:23:a1: 69:2f:7e:d5:6b:f9:b4:9d:75:cc:45:f5:f3:29:f9: 26:b1:24:6e:df:ff:3d:2b:d9:f1:a6:96:b3:b7:31: fe:6a:6e:70:ef:8e:24:0d:1a:74:51:74:39:02:59: e9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2B:A9:3A:8E:1C:49:DD:E5:BD:E2:9C:12:90:6D:95:BE:BA:C8:46 X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/919E2B20E52811ED863E8C34C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.254.164.0/22 43.255.120.0/22 43.255.156.0/23 43.255.159.0/24 103.24.216.0/22 103.30.76.0/22 103.171.34.0/23 103.231.56.0/22 103.240.196.0/22 IPv6: 2001:df7:3480::/48 2401:2660::/35 Signature Algorithm: sha256WithRSAEncryption b2:77:a2:99:48:32:4d:d4:fe:37:27:ba:1a:79:6e:10:dd:b8: 4f:4b:40:7b:c9:27:03:c5:98:ac:87:b2:3c:e0:9b:c3:32:61: 3c:04:1b:49:b1:1f:47:b5:07:9e:d6:a6:c3:e8:47:20:f9:ed: 50:5d:70:ea:7d:42:f5:ae:dc:5f:d1:ac:9a:ff:55:0f:fc:00: b9:d9:50:d0:5e:d1:b1:33:3a:cd:62:7f:24:5c:aa:fa:8b:27: 90:38:07:76:82:dc:39:a9:c2:53:18:e5:71:6c:88:06:e0:e5: 4a:98:6b:d0:ce:0f:d7:83:eb:e8:bf:fe:30:22:53:86:e4:92: d2:33:77:96:bd:90:41:03:e6:20:6f:da:33:28:8d:32:be:af: 30:f7:ce:f2:52:77:40:c5:80:24:bb:38:64:a0:3a:ff:d4:29: c2:46:56:a8:47:a9:85:fb:e4:9b:7f:81:4d:58:6b:16:9d:33: b0:d7:1e:39:77:60:49:8a:ea:be:29:29:a8:7a:97:72:0d:7e: 71:3f:63:35:17:80:49:26:5e:81:7f:a9:f1:b3:12:ea:25:39: 47:09:52:6c:76:d1:23:77:c2:55:56:f4:30:8c:bd:94:eb:ea: 8a:42:1e:25:c0:d1:77:c5:0d:ce:6e:52:90:07:92:ce:a5:6e: 22:c7:d8:12 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICB94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjYwMTE4MTQ0MDE5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODhhZi03MDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTGghtxeqqK/I9cUCFiEX3W5um65jTikze1jFtDup2bDQhyEQqUBTmAGh40i u57YVRCrhhj+/Lq8IgqzLoJhxdA5LPhn0lZ5Dig7OGQiboQnnE1Xi98fcucvOmvq mkrjKvLJfZKPs8/BE+HwSB6RVE7qSA0vKsp665X3H/kXMn01W2IEaw1OjUMgOcck H0V0avn9PPm1EMyVwC8cds+osA1yO7O3N2M0TFNt2b7a0achRkUOEHntCDBitUGp U/9+PNwrS/2at3te48UmyTOSI6FpL37Va/m0nXXMRfXzKfkmsSRu3/89K9nxppaz tzH+am5w744kDRp0UXQ5AlnpoQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFMsrqTqO HEnd5b3inBKQbZW+ushGMB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvOTE5RTJCMjBF NTI4MTFFRDg2M0U4QzM0QzRGOUFFMDIucm9hMGgGCCsGAQUFBwEHAQH/BFkwVzA8 BAIAATA2AwQCK/6kAwQCK/94AwQBK/+cAwQAK/+fAwQCZxjYAwQCZx5MAwQBZ6si AwQCZ+c4AwQCZ/DEMBcEAgACMBEDBwAgAQ33NIADBgUkASZgADANBgkqhkiG9w0B AQsFAAOCAQEAsneimUgyTdT+Nye6GnluEN24T0tAe8knA8WYrIeyPOCbwzJhPAQb SbEfR7UHntamw+hHIPntUF1w6n1C9a7cX9Gsmv9VD/wAudlQ0F7RsTM6zWJ/JFyq +osnkDgHdoLcOanCUxjlcWyIBuDlSphr0M4P14Pr6L/+MCJThuSS0jN3lr2QQQPm IG/aMyiNMr6vMPfO8lJ3QMWAJLs4ZKA6/9QpwkZWqEephfvkm3+BTVhrFp0zsNce OXdgSYrqvikpqHqXcg1+cT9jNReASSZegX+p8bMS6iU5RwlSbHbRI3fCVVb0MIy9 lOvqikIeJcDRd8UNzm5SkAeSzqVuIsfYEg== -----END CERTIFICATE-----Generated at Mon Mar 2 05:50:15 2026 by rpki-client