$ rpki-client -vvf rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/1F63D776D29011EDA849876CC4F9AE02.roa File: 1F63D776D29011EDA849876CC4F9AE02.roa (raw, json) Hash identifier: tZ63o1g3IldNHhkmg5TTRgfGnpiBQBmReAtOz5r0fx8= Subject key identifier: 10:2A:1B:81:3C:BA:02:F6:95:30:7A:EA:74:92:65:61:03:16:ED:F0 Certificate issuer: /CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Certificate serial: 0229 Authority key identifier: A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/1F63D776D29011EDA849876CC4F9AE02.roa Signing time: Sun 01 Mar 2026 06:33:38 +0000 ROA not before: Thu 03 Apr 2025 03:30:40 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 45352 IP address blocks: 36.255.140.0/24 maxlen: 24 36.255.141.0/24 maxlen: 24 36.255.142.0/23 maxlen: 23 103.209.156.0/22 maxlen: 22 103.209.156.0/23 maxlen: 24 103.209.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140B3F, serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173 Validity Not Before: Apr 3 03:30:40 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a3ddc2-9db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:06:ac:88:07:c8:2c:4c:5b:58:bb:7e:6c:8d: 92:74:8b:47:bc:7a:67:48:f3:46:dd:6e:9a:56:14: fc:05:37:29:69:4f:c1:70:be:d5:a4:a6:96:9e:e6: be:9c:66:2b:b3:a6:f5:ab:dd:48:e4:a3:05:c5:f0: 1b:c7:25:89:e9:c6:2b:8c:06:51:0b:c9:02:53:83: f1:73:f9:60:2a:e6:c1:12:f5:86:18:06:e3:2d:32: 42:76:45:2e:63:70:da:a3:45:e3:5d:20:e7:ec:e9: e4:51:3c:5d:6a:2d:1a:28:fa:4f:5e:26:18:ab:c9: 61:eb:56:cf:81:71:9d:e9:a1:61:f1:66:8e:c9:b6: 5b:48:67:bd:a7:07:e7:13:ac:8d:be:64:ef:8c:7c: dc:3c:e2:e8:67:5b:94:47:f9:f6:1c:68:03:52:19: 86:70:c1:45:96:99:e9:df:f4:2b:98:8f:ee:49:5b: a7:6d:fd:a1:ef:09:3d:84:df:34:48:2d:d5:c5:3c: 25:02:7e:b7:21:5c:ed:60:ea:d2:33:c3:57:a8:d2: 53:42:e5:a4:54:50:7a:8c:47:9a:c5:f2:62:6c:f9: 81:04:fe:99:f9:99:77:4e:c6:26:48:39:0b:28:e4: b9:69:10:c0:04:b4:55:28:a6:31:c5:c6:9b:31:2c: 73:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2A:1B:81:3C:BA:02:F6:95:30:7A:EA:74:92:65:61:03:16:ED:F0 X509v3 Authority Key Identifier: keyid:A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/1F63D776D29011EDA849876CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.255.140.0/22 103.209.156.0/22 Signature Algorithm: sha256WithRSAEncryption 84:87:17:a5:23:7f:2e:87:6a:81:5b:a3:42:b8:00:40:f1:72: 7b:2e:ea:db:ab:6c:72:98:43:ad:46:73:fd:d0:cd:a3:7e:e2: f6:66:38:cc:13:e1:37:35:64:27:2e:28:24:6f:79:46:c9:d3: cb:b5:90:01:5b:07:ac:4b:d6:2d:86:53:d9:9a:9d:e6:c2:c0: 4c:d4:11:e9:25:0e:1e:6e:00:82:96:8a:f2:a3:75:4f:6e:fc: 73:8a:ca:a4:4e:4a:51:37:be:e3:e6:95:31:16:cd:86:2a:2a: c5:d2:7d:76:16:c7:d9:23:21:6b:b9:29:60:39:55:97:74:c0: 52:09:69:87:f4:91:82:ee:c3:2a:19:25:ca:0c:6a:97:82:8e: 17:d3:aa:07:cb:bf:1f:53:02:e5:ef:79:ca:1b:7d:3d:a7:d0: 56:25:00:15:35:2f:04:fd:46:92:ef:77:e0:fe:49:4c:43:79: 07:24:01:75:eb:27:75:a0:e3:d1:83:25:64:e5:20:85:12:1a: 3b:3f:0e:5b:28:12:f7:37:ed:5e:7d:03:d9:dc:4e:c9:30:e9: 93:64:0b:ef:55:ca:3a:c8:08:8e:19:9c:23:93:d9:b0:89:0a: ed:fe:f6:2f:af:35:99:3a:a1:47:e3:3b:74:12:9e:74:d5:53: 94:4f:02:3d -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCM0YxMTAvBgNVBAUTKEEwRkJGREUzNTE1OTcwOTJCNjg3RUNDNjQwRUM4NURD MjlGMjAxNzMwHhcNMjUwNDAzMDMzMDQwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZGRjMi05ZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAasiAfILExbWLt+bI2SdItHvHpnSPNG3W6aVhT8BTcpaU/BcL7VpKaWnua+ nGYrs6b1q91I5KMFxfAbxyWJ6cYrjAZRC8kCU4Pxc/lgKubBEvWGGAbjLTJCdkUu Y3Dao0XjXSDn7OnkUTxdai0aKPpPXiYYq8lh61bPgXGd6aFh8WaOybZbSGe9pwfn E6yNvmTvjHzcPOLoZ1uUR/n2HGgDUhmGcMFFlpnp3/QrmI/uSVunbf2h7wk9hN80 SC3VxTwlAn63IVztYOrSM8NXqNJTQuWkVFB6jEeaxfJibPmBBP6Z+Zl3TsYmSDkL KOS5aRDABLRVKKYxxcabMSxzhwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBAqG4E8 ugL2lTB66nSSZWEDFu3wMB8GA1UdIwQYMBaAFKD7/eNRWXCStofsxkDshdwp8gFz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEIzRi9GOEQ3MkNEQ0Qy OEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNKSzJoLXpHUU95RjNDbnlB WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Qdjk0MUZaY0pLMmgtekdRT3lGM0NueUFYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDBCM0YvRjhENzJDRENEMjhDMTFFREJBRTlFRTZBQzRGOUFFMDIvMUY2M0Q3NzZE MjkwMTFFREE4NDk4NzZDQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCJP+MAwQCZ9GcMA0GCSqGSIb3DQEBCwUAA4IBAQCEhxelI38uh2qB W6NCuABA8XJ7Lurbq2xymEOtRnP90M2jfuL2ZjjME+E3NWQnLigkb3lGydPLtZAB WwesS9YthlPZmp3mwsBM1BHpJQ4ebgCCloryo3VPbvxzisqkTkpRN77j5pUxFs2G KirF0n12FsfZIyFruSlgOVWXdMBSCWmH9JGC7sMqGSXKDGqXgo4X06oHy78fUwLl 73nKG309p9BWJQAVNS8E/UaS73fg/klMQ3kHJAF16yd1oOPRgyVk5SCFEho7Pw5b KBL3N+1efQPZ3E7JMOmTZAvvVco6yAiOGZwjk9mwiQrt/vYvrzWZOqFH4zt0Ep50 1VOUTwI9 -----END CERTIFICATE-----Generated at Mon Mar 2 12:14:37 2026 by rpki-client