$ rpki-client -vvf rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa File: 5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa (raw, json) Hash identifier: 7ymgcj6P1279S5XXSpCepa419faVvXeGcEB15wSWpx8= Subject key identifier: 56:12:EF:7C:0B:D5:1A:7D:59:93:AB:E8:DE:05:FC:DA:5F:65:2B:FA Certificate issuer: /CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85 Certificate serial: 07E1 Authority key identifier: 03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:56:51 +0000 ROA not before: Sat 10 May 2025 21:40:10 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 132245 IP address blocks: 43.231.200.0/24 maxlen: 24 43.231.201.0/24 maxlen: 24 43.231.202.0/24 maxlen: 24 43.231.203.0/24 maxlen: 24 103.8.132.0/24 maxlen: 24 103.8.133.0/24 maxlen: 24 103.8.134.0/24 maxlen: 24 103.8.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2017 (0x7e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141620, serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85 Validity Not Before: May 10 21:40:10 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a42983-57a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d8:df:cd:ed:22:d5:00:1b:06:91:1b:2f:85: ac:b1:c5:4e:ef:ec:34:61:79:1c:e2:e6:b7:17:3c: 16:95:c3:1d:f0:2d:0d:2c:06:54:8b:e7:ee:94:40: 94:f0:4c:d8:70:1d:bd:ae:e3:02:04:13:75:d3:74: 11:ba:a4:d3:fc:d4:82:38:8d:cb:24:09:d6:4d:b3: b2:2d:b7:10:61:10:38:ed:07:6e:ea:fd:d6:58:9c: c6:c9:0c:65:0b:4c:b2:a7:7e:b3:8b:46:68:d7:48: 23:f0:3c:a4:ea:c8:58:d9:14:64:b1:c2:f4:09:4a: c4:d3:80:e6:a7:a9:f6:c8:bb:7c:69:8e:e7:35:76: 51:ed:d4:cb:f8:73:7c:ed:c5:99:b6:ec:80:e8:1e: 59:bc:7d:d6:04:71:0e:cf:22:01:bd:64:ba:2b:97: a4:cd:74:5f:a4:4a:fd:25:70:7f:5e:0e:bf:4e:d3: d7:ef:53:59:aa:59:e4:00:99:61:ca:5f:5d:91:4f: ac:83:c5:76:c4:f3:e8:f5:9a:98:50:0c:85:0d:96: c9:c5:3c:d2:77:95:a8:16:32:3d:dc:69:73:9e:97: 01:ce:14:f0:f2:79:2f:a7:8a:b9:02:8c:7b:07:59: 73:c4:c7:b8:30:c2:d9:8b:6f:f0:54:87:6a:a4:88: a2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:12:EF:7C:0B:D5:1A:7D:59:93:AB:E8:DE:05:FC:DA:5F:65:2B:FA X509v3 Authority Key Identifier: keyid:03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.231.200.0/22 103.8.132.0/22 Signature Algorithm: sha256WithRSAEncryption 06:d7:03:2e:42:21:04:62:89:3b:db:ce:5f:6e:e8:f6:15:e8: 12:d7:67:14:b1:ac:d1:3e:25:ba:78:25:1f:a2:4c:33:97:a4: ac:2c:2d:75:81:6f:53:af:70:b8:18:f0:da:7d:95:c9:b5:7f: 23:75:75:2e:7c:1a:b3:59:89:f1:68:6d:46:fb:d3:89:30:e7: 7d:29:2f:7e:81:07:31:17:75:f4:43:f7:2c:80:7c:37:8e:45: ef:0c:95:cd:71:1a:9f:1c:3a:a8:98:db:fc:6b:87:16:84:88: 0d:ae:12:66:b3:f5:cf:d7:20:47:77:88:36:d5:85:73:8f:ae: 8e:4b:7b:67:3a:92:b3:8d:2e:12:8e:50:e6:16:36:09:5c:d7: 9e:71:ae:bf:ba:b7:5e:c1:9f:58:1f:43:6e:66:01:e2:e0:08: 6b:99:ae:04:33:14:17:89:7f:94:f5:35:b2:ad:02:16:1e:93: 9d:3c:ef:87:75:ef:bd:c5:e1:97:7b:97:93:6b:b9:6f:58:83: ed:4a:70:a4:e5:c9:15:6e:9e:56:53:df:e4:81:d2:65:af:e1: 74:e8:0d:dc:f2:dd:ca:2e:d2:d9:55:45:ac:6e:f5:ca:0e:34: d7:ca:e0:4c:f2:14:4c:80:15:e2:4b:40:c3:13:ca:a7:07:83: cb:24:66:80 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICB+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE2MjAxMTAvBgNVBAUTKDAzNjY4QTIxRjBGMDFGMDZCMjc0RkQ4OENDOUUwQTZF ODNENTVGODUwHhcNMjUwNTEwMjE0MDEwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Mjk4My01N2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9jfze0i1QAbBpEbL4WsscVO7+w0YXkc4ua3FzwWlcMd8C0NLAZUi+fulECU 8EzYcB29ruMCBBN103QRuqTT/NSCOI3LJAnWTbOyLbcQYRA47Qdu6v3WWJzGyQxl C0yyp36zi0Zo10gj8Dyk6shY2RRkscL0CUrE04Dmp6n2yLt8aY7nNXZR7dTL+HN8 7cWZtuyA6B5ZvH3WBHEOzyIBvWS6K5ekzXRfpEr9JXB/Xg6/TtPX71NZqlnkAJlh yl9dkU+sg8V2xPPo9ZqYUAyFDZbJxTzSd5WoFjI93GlznpcBzhTw8nkvp4q5Aox7 B1lzxMe4MMLZi2/wVIdqpIii8wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFFYS73wL 1Rp9WZOr6N4F/NpfZSv6MB8GA1UdIwQYMBaAFANmiiHw8B8GsnT9iMyeCm6D1V+F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTYyMC8yMTk4MTZBQTI5 M0QxMUVCQkZDMTQ3NzFDNEY5QUUwMi9BMmFLSWZEd0h3YXlkUDJJeko0S2JvUFZY NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EyYUtJZkR3SHdheWRQMkl6SjRLYm9QVlg0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDE2MjAvMjE5ODE2QUEyOTNEMTFFQkJGQzE0NzcxQzRGOUFFMDIvNURERTZCQzIy OTNFMTFFQjlERkEzQzcyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK+fIAwQCZwiEMA0GCSqGSIb3DQEBCwUAA4IBAQAG1wMuQiEEYok7 285fbuj2FegS12cUsazRPiW6eCUfokwzl6SsLC11gW9Tr3C4GPDafZXJtX8jdXUu fBqzWYnxaG1G+9OJMOd9KS9+gQcxF3X0Q/csgHw3jkXvDJXNcRqfHDqomNv8a4cW hIgNrhJms/XP1yBHd4g21YVzj66OS3tnOpKzjS4SjlDmFjYJXNeeca6/urdewZ9Y H0NuZgHi4Ahrma4EMxQXiX+U9TWyrQIWHpOdPO+Hde+9xeGXe5eTa7lvWIPtSnCk 5ckVbp5WU9/kgdJlr+F06A3c8t3KLtLZVUWsbvXKDjTXyuBM8hRMgBXiS0DDE8qn B4PLJGaA -----END CERTIFICATE-----Generated at Mon Mar 2 23:41:25 2026 by rpki-client