$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/78D1DAC8E45E11E681F82341C4F9AE02.roa File: 78D1DAC8E45E11E681F82341C4F9AE02.roa (raw, json) Hash identifier: 1+3PiyURCQ1dCtokVNGr5D8JpB6WOiYHI8MxHAWll5Y= Subject key identifier: 4B:91:3C:4B:6A:7E:64:1B:4E:56:3D:26:DA:3C:A8:62:24:0E:5B:5B Certificate issuer: /CN=A9145519/serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06 Certificate serial: 1CDE Authority key identifier: 7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/78D1DAC8E45E11E681F82341C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:41:26 +0000 ROA not before: Wed 22 Oct 2025 16:34:05 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132167 IP address blocks: 43.224.84.0/22 maxlen: 22 43.224.84.0/24 maxlen: 24 43.224.85.0/24 maxlen: 24 43.224.86.0/24 maxlen: 24 103.242.96.0/22 maxlen: 22 103.242.97.0/24 maxlen: 24 103.242.98.0/24 maxlen: 24 103.242.99.0/24 maxlen: 24 2407:f300::/32 maxlen: 32 2407:f300:100::/44 maxlen: 44 2407:f300:100::/48 maxlen: 48 2407:f300:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7390 (0x1cde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145519, serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06 Validity Not Before: Oct 22 16:34:05 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a44206-ab00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7f:4f:f7:17:b0:34:0e:55:10:26:a2:59:e5: 54:27:2f:55:65:75:18:78:be:5f:28:3d:29:11:01: 28:86:b4:c2:1a:e4:f4:a8:75:bc:bd:ec:b3:b4:ac: 26:9c:49:3d:bb:a7:07:ff:7b:b8:8a:7d:6d:2b:b5: ad:79:b3:98:76:ee:66:45:7a:70:d0:f5:43:2c:5b: 98:12:f8:8c:4d:02:eb:8f:6a:d4:08:6a:7c:bb:21: 5d:63:0a:ba:03:10:a9:56:8c:73:b2:3a:ce:8a:0a: 47:f0:ab:24:5f:f4:37:1e:f3:c8:27:11:22:4b:1a: 51:f3:db:3a:3d:d0:aa:92:cf:e0:a0:cf:b9:4b:f4: 9b:fb:5e:48:21:97:c5:19:a2:e2:77:42:1c:f1:1f: 9c:61:37:7c:cf:b7:a9:b1:d6:e0:a3:45:3d:aa:8c: bb:07:6d:74:8a:ee:38:0f:a2:6d:da:30:b1:94:3f: c6:be:5f:b6:a5:cb:ce:ae:98:bc:b3:41:58:e8:3b: 84:55:0b:d6:e1:49:63:6d:cd:67:e1:0a:56:44:fc: d7:62:b4:0e:e8:e9:54:1b:c7:12:27:25:ad:c5:e3: cd:77:fd:be:44:a4:45:53:c4:57:1b:03:f2:b3:77: 19:75:83:15:af:5f:5c:87:e9:02:fe:bf:3e:b9:f0: 14:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:91:3C:4B:6A:7E:64:1B:4E:56:3D:26:DA:3C:A8:62:24:0E:5B:5B X509v3 Authority Key Identifier: keyid:7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/78D1DAC8E45E11E681F82341C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.84.0/22 103.242.96.0/22 IPv6: 2407:f300::/32 Signature Algorithm: sha256WithRSAEncryption 6e:71:3e:ab:c5:31:05:0b:93:a4:c8:00:28:4a:0f:7d:af:2e: d3:6c:2d:39:5d:b8:eb:0a:ee:6f:c4:f3:9e:c1:b9:4c:7f:ee: fa:be:37:f1:4b:f0:6f:88:87:b0:4d:ec:0e:93:17:1d:b4:9a: 58:29:8a:fb:49:53:c3:bb:77:57:67:49:fc:46:c8:34:2c:98: 28:28:7e:56:37:cf:15:63:82:bd:50:8c:8d:c6:57:98:4e:d5: 39:cd:9f:3e:d1:0b:5f:13:81:8a:c6:d0:4c:d4:2a:0d:ea:fe: e6:56:ea:0e:3b:06:fe:65:d3:77:46:dd:8e:cb:35:f3:03:db: 29:b5:60:c3:50:87:1f:f9:bf:97:81:47:ea:7d:b5:c2:b7:c6: ed:37:49:c4:6f:ba:79:09:e4:4e:35:d3:e1:05:f7:ac:c1:1e: 80:48:46:c3:8e:6e:3d:b1:93:a0:5d:1d:f4:31:17:9d:1b:f4: c1:52:fc:95:af:a9:72:bb:6d:4b:ee:26:57:05:b3:ea:47:e7: 7a:cc:25:01:d6:d5:10:c6:25:f4:61:df:78:73:dc:c7:88:0a: 3f:f9:97:db:f7:d1:77:aa:95:c7:76:2e:4e:30:52:ff:2d:85: 3a:6f:03:be:33:90:dc:a8:dc:da:3f:73:c5:aa:42:0b:b3:ca: c9:d8:18:30 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICHN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTkxMTAvBgNVBAUTKDdENkEzMzBGMEQwMTI0OTQyN0M3RkM5RERERENGNEE4 Mjg3NjBCMDYwHhcNMjUxMDIyMTYzNDA1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDIwNi1hYjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAln9P9xewNA5VECaiWeVUJy9VZXUYeL5fKD0pEQEohrTCGuT0qHW8veyztKwm nEk9u6cH/3u4in1tK7WtebOYdu5mRXpw0PVDLFuYEviMTQLrj2rUCGp8uyFdYwq6 AxCpVoxzsjrOigpH8KskX/Q3HvPIJxEiSxpR89s6PdCqks/goM+5S/Sb+15IIZfF GaLid0Ic8R+cYTd8z7epsdbgo0U9qoy7B210iu44D6Jt2jCxlD/Gvl+2pcvOrpi8 s0FY6DuEVQvW4Uljbc1n4QpWRPzXYrQO6OlUG8cSJyWtxePNd/2+RKRFU8RXGwPy s3cZdYMVr19ch+kC/r8+ufAU6wIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFEuRPEtq fmQbTlY9Jto8qGIkDltbMB8GA1UdIwQYMBaAFH1qMw8NASSUJ8f8nd3c9KgodgsG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BRDA4QUYyNkU0 NUMxMUU2OENFREZBM0VDNEY5QUUwMi9mV296RHcwQkpKUW54X3lkM2R6MHFDaDJD d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZXb3pEdzBCSkpRbnhfeWQzZHowcUNoMkN3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDU1MTkvQUQwOEFGMjZFNDVDMTFFNjhDRURGQTNFQzRGOUFFMDIvNzhEMURBQzhF NDVFMTFFNjgxRjgyMzQxQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK+BUAwQCZ/JgMA0EAgACMAcDBQAkB/MAMA0GCSqGSIb3DQEBCwUA A4IBAQBucT6rxTEFC5OkyAAoSg99ry7TbC05XbjrCu5vxPOewblMf+76vjfxS/Bv iIewTewOkxcdtJpYKYr7SVPDu3dXZ0n8Rsg0LJgoKH5WN88VY4K9UIyNxleYTtU5 zZ8+0QtfE4GKxtBM1CoN6v7mVuoOOwb+ZdN3Rt2OyzXzA9sptWDDUIcf+b+XgUfq fbXCt8btN0nEb7p5CeRONdPhBfeswR6ASEbDjm49sZOgXR30MRedG/TBUvyVr6ly u21L7iZXBbPqR+d6zCUB1tUQxiX0Yd94c9zHiAo/+Zfb99F3qpXHdi5OMFL/LYU6 bwO+M5DcqNzaP3PFqkILs8rJ2Bgw -----END CERTIFICATE-----Generated at Mon Mar 2 08:02:15 2026 by rpki-client