$ rpki-client -vvf rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/E9A9531644D611F0ABB89277C4F9AE02.roa File: E9A9531644D611F0ABB89277C4F9AE02.roa (raw, json) Hash identifier: LjrdfU8qKAjg1tNh6QbLgwWJcFgbeivFBKT0rfsVVGo= Subject key identifier: CC:BF:4E:A7:EE:F9:2D:E2:D3:07:5A:8E:42:A1:F2:49:50:27:4A:05 Certificate issuer: /CN=A9139555/serialNumber=4365D179D5B73E8A97EDE0505F29EF00C2D63EF9 Certificate serial: 0332 Authority key identifier: 43:65:D1:79:D5:B7:3E:8A:97:ED:E0:50:5F:29:EF:00:C2:D6:3E:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/E9A9531644D611F0ABB89277C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:22:54 +0000 ROA not before: Mon 09 Jun 2025 02:10:28 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 45269 IP address blocks: 43.225.144.0/22 maxlen: 24 103.31.112.0/22 maxlen: 24 180.148.176.0/22 maxlen: 24 202.14.147.0/24 maxlen: 24 203.176.184.0/22 maxlen: 24 2406:c200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.crl rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 818 (0x332) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139555, serialNumber=4365D179D5B73E8A97EDE0505F29EF00C2D63EF9 Validity Not Before: Jun 9 02:10:28 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3e94e-7341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:68:17:79:8f:a3:b6:46:6d:18:cc:ca:e4:8c: b1:40:f4:8f:6d:c6:cb:8b:ac:56:d3:37:00:77:2a: ea:9b:6f:ab:06:88:11:d2:9d:5e:aa:1e:ed:1e:d2: 26:78:39:b7:88:21:5b:f1:24:8c:7a:d7:b6:aa:46: b5:39:53:ae:cf:33:d3:3b:45:e5:1b:85:3b:4c:c8: d2:43:f0:e8:61:dd:23:a6:71:7a:a5:e3:3e:b9:57: c1:98:82:ef:a3:7f:0f:bb:e1:70:a1:19:2a:07:c9: da:5c:26:78:bd:16:d2:1b:9f:13:cd:8a:8a:38:71: 67:c8:8e:02:14:2c:cb:1a:31:27:97:db:49:6e:5b: 82:af:64:ab:3d:f1:28:85:90:c6:64:f0:e7:64:0b: 93:e5:41:f7:fe:26:19:e2:80:90:0a:af:4c:51:b3: 63:f9:4a:b0:70:37:10:6e:9d:46:a6:8c:89:09:2a: 9a:b8:6f:9b:f9:00:55:bb:27:25:14:cf:48:8e:dd: 61:04:d2:42:77:fb:30:b4:36:83:b4:be:04:7e:fb: f7:87:0f:d9:a2:57:80:1c:91:54:66:e9:87:ed:67: 6c:3e:8e:6d:46:77:8b:25:0d:dd:ae:dc:8f:87:9b: 58:5c:7d:82:1c:d5:63:20:2c:ea:88:58:e8:71:c8: c4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BF:4E:A7:EE:F9:2D:E2:D3:07:5A:8E:42:A1:F2:49:50:27:4A:05 X509v3 Authority Key Identifier: keyid:43:65:D1:79:D5:B7:3E:8A:97:ED:E0:50:5F:29:EF:00:C2:D6:3E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/E9A9531644D611F0ABB89277C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.225.144.0/22 103.31.112.0/22 180.148.176.0/22 202.14.147.0/24 203.176.184.0/22 IPv6: 2406:c200::/32 Signature Algorithm: sha256WithRSAEncryption 48:6e:06:01:64:cd:15:cb:1b:79:f4:0b:50:f9:11:7b:41:f0: dd:21:31:f8:73:af:c2:18:45:e8:e0:42:d0:e7:1a:2a:fb:f4: 0b:54:b1:ba:4d:3a:57:fa:6f:45:6f:31:3c:64:f5:78:38:0e: f2:ac:51:17:17:6e:f0:1d:10:f4:c7:a1:66:bd:c5:b0:72:a1: b1:bb:05:b9:8a:34:16:a0:a8:ef:43:51:56:65:86:fc:31:f9: a5:dd:bc:d6:46:bc:29:84:95:00:21:76:2a:32:55:4c:95:8b: c8:f3:8d:ea:20:c0:2d:a8:cc:7e:a4:7b:5c:af:81:08:9c:9a: c1:03:34:1d:cc:25:e7:0d:c0:d8:54:96:85:e4:77:34:39:fc: f0:c5:71:27:50:ee:d8:f6:c5:f0:d1:aa:17:6e:c9:f6:75:1c: 3a:c9:77:75:9f:da:a3:19:51:71:df:ee:a6:45:08:58:79:02: b5:fa:da:22:f8:0f:58:97:b2:c0:94:ab:52:68:9b:be:3c:d5: 0b:5a:3e:ef:92:49:a5:aa:80:80:e3:95:3d:31:02:3f:63:22: be:b1:9a:55:e9:88:7a:ba:ef:87:fc:94:2e:66:d3:a4:81:02: c1:7f:6d:ae:c8:74:b7:1c:f0:5d:88:aa:a9:e3:20:98:be:5b: f3:8a:cd:2a -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICAzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk1NTUxMTAvBgNVBAUTKDQzNjVEMTc5RDVCNzNFOEE5N0VERTA1MDVGMjlFRjAw QzJENjNFRjkwHhcNMjUwNjA5MDIxMDI4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTk0ZS03MzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmgXeY+jtkZtGMzK5IyxQPSPbcbLi6xW0zcAdyrqm2+rBogR0p1eqh7tHtIm eDm3iCFb8SSMete2qka1OVOuzzPTO0XlG4U7TMjSQ/DoYd0jpnF6peM+uVfBmILv o38Pu+FwoRkqB8naXCZ4vRbSG58TzYqKOHFnyI4CFCzLGjEnl9tJbluCr2SrPfEo hZDGZPDnZAuT5UH3/iYZ4oCQCq9MUbNj+UqwcDcQbp1GpoyJCSqauG+b+QBVuycl FM9Ijt1hBNJCd/swtDaDtL4Efvv3hw/ZoleAHJFUZumH7WdsPo5tRneLJQ3drtyP h5tYXH2CHNVjICzqiFjoccjEhwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFMy/Tqfu +S3i0wdajkKh8klQJ0oFMB8GA1UdIwQYMBaAFENl0XnVtz6Kl+3gUF8p7wDC1j75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTU1NS9EQzdEMTQ1QTAy MkQxMUVEOUQ2NDZCNTdDNEY5QUUwMi9RMlhSZWRXM1BvcVg3ZUJRWHludkFNTFdQ dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EyWFJlZFczUG9xWDdlQlFYeW52QU1MV1B2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzk1NTUvREM3RDE0NUEwMjJEMTFFRDlENjQ2QjU3QzRGOUFFMDIvRTlBOTUzMTY0 NEQ2MTFGMEFCQjg5Mjc3QzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQCK+GQAwQCZx9wAwQCtJSwAwQAyg6TAwQCy7C4MA0EAgACMAcDBQAk BsIAMA0GCSqGSIb3DQEBCwUAA4IBAQBIbgYBZM0Vyxt59AtQ+RF7QfDdITH4c6/C GEXo4ELQ5xoq+/QLVLG6TTpX+m9FbzE8ZPV4OA7yrFEXF27wHRD0x6FmvcWwcqGx uwW5ijQWoKjvQ1FWZYb8Mfml3bzWRrwphJUAIXYqMlVMlYvI843qIMAtqMx+pHtc r4EInJrBAzQdzCXnDcDYVJaF5Hc0OfzwxXEnUO7Y9sXw0aoXbsn2dRw6yXd1n9qj GVFx3+6mRQhYeQK1+toi+A9Yl7LAlKtSaJu+PNULWj7vkkmlqoCA45U9MQI/YyK+ sZpV6Yh6uu+H/JQuZtOkgQLBf22uyHS3HPBdiKqp4yCYvlvzis0q -----END CERTIFICATE-----Generated at Mon Mar 2 10:57:18 2026 by rpki-client