$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/4532BD9C14EF11ECA529523DC4F9AE02.roa File: 4532BD9C14EF11ECA529523DC4F9AE02.roa (raw, json) Hash identifier: 2IX9G4OV8Ryb3IfNLa83GKbrkZZU9ZFrDQ7HXBTkjwY= Subject key identifier: F7:A8:D5:AE:E9:4C:F1:48:78:42:41:B1:4E:32:4F:61:6D:9D:C8:97 Certificate issuer: /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005 Certificate serial: 1AA9 Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/4532BD9C14EF11ECA529523DC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:24:09 +0000 ROA not before: Sat 12 Apr 2025 16:25:07 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9901 IP address blocks: 203.98.42.0/23 maxlen: 23 203.98.50.0/24 maxlen: 24 2001:4400::/30 maxlen: 30 2001:4403:0:10a::/126 maxlen: 126 2001:4403:0:10a::4/126 maxlen: 126 2001:4403:0:116::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6825 (0x1aa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005 Validity Not Before: Apr 12 16:25:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a48449-07f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:18:14:52:d5:56:23:0c:32:c4:f3:b6:7c:a3: 69:cc:2e:37:c8:53:69:96:e8:ea:45:b6:7c:3b:f8: dc:11:38:71:1f:0f:69:a2:fd:3d:d2:cd:40:1e:2f: ff:da:1b:a1:71:08:7d:4d:06:c0:9a:47:d2:53:3c: 5c:e7:c4:2b:bd:ec:dd:69:80:98:c8:f3:11:a6:77: bd:79:32:40:8d:b6:66:28:4e:85:ff:ac:f9:53:1d: 73:4c:b2:22:c8:3e:c7:b3:75:b1:7b:b3:88:f4:11: 72:37:08:76:fa:5f:24:9d:d7:72:e8:c9:2e:e1:1a: 44:4a:68:ed:a9:ec:3f:80:26:c3:7e:72:ab:3b:f8: 10:1a:12:c6:7e:3a:3b:2e:40:6c:91:9a:c9:a7:f3: fb:6a:c0:28:a3:09:59:1a:d3:90:17:2c:33:01:2e: d4:7b:20:aa:1e:c8:03:ee:57:c8:f7:50:8a:cd:8e: 7d:15:5a:b7:01:1a:2e:71:72:72:dd:ff:80:28:88: e2:91:fb:7a:4e:cb:62:c3:0c:0c:52:50:b9:f4:85: 9d:c6:a0:10:b0:ca:f9:f2:ce:32:e0:6a:9e:42:c7: 35:a1:bf:b7:f6:a1:7a:1f:48:9a:34:bb:96:b7:be: cf:3d:48:32:f6:d2:c2:bd:37:bf:c6:be:60:e4:6b: b4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A8:D5:AE:E9:4C:F1:48:78:42:41:B1:4E:32:4F:61:6D:9D:C8:97 X509v3 Authority Key Identifier: keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/4532BD9C14EF11ECA529523DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.98.42.0/23 203.98.50.0/24 IPv6: 2001:4400::/30 Signature Algorithm: sha256WithRSAEncryption 45:41:a7:a3:f3:fe:da:fa:ab:66:fa:cb:03:91:04:bd:eb:11: 4a:e7:75:22:24:a2:fe:76:9f:b9:d0:0f:30:63:6b:3e:8d:2d: 65:8b:61:ba:5e:3a:5e:49:4b:93:14:e5:c9:9a:41:13:a6:bc: be:a3:90:e0:ff:9b:0f:f1:6c:d3:39:2a:e0:28:bc:61:25:59: 76:74:a7:bb:7d:ae:59:16:47:8c:6e:c0:cd:e9:5d:96:d2:66: 89:d9:07:0d:d1:0f:f2:fc:e4:ac:e4:e3:e3:42:73:19:ed:ca: 0f:ba:6d:64:42:bd:4b:3e:37:27:90:6a:d0:98:73:e6:3b:b4: ae:e0:d8:f1:4c:36:b0:48:b6:b7:c1:d9:74:33:93:1b:f1:7c: 0a:c4:a5:12:66:57:0f:78:d5:3a:d5:5b:14:6d:60:3d:33:4a: af:e0:87:ed:6a:40:01:ff:ee:65:58:07:c4:43:9a:9d:fd:63: 5f:9b:16:21:c0:a7:24:88:75:a2:81:02:3a:e6:1f:a3:ab:86: db:a3:36:42:aa:0f:86:0a:65:00:c4:e2:68:c9:eb:1b:ce:09: d0:ee:1a:aa:74:33:5d:e3:0d:7b:4b:7d:59:c0:ed:76:00:4a: b1:9d:cb:47:49:1f:97:2f:44:2c:0a:be:c1:66:49:9d:de:2a: 8b:d7:5d:36 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICGqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBRDcxMTAvBgNVBAUTKEJBRjVBREEzMkNBMEQzNENGM0NDRjUzQUJERjg2REU2 RjhFRDkwMDUwHhcNMjUwNDEyMTYyNTA3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODQ0OS0wN2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRgUUtVWIwwyxPO2fKNpzC43yFNplujqRbZ8O/jcEThxHw9pov090s1AHi// 2huhcQh9TQbAmkfSUzxc58QrvezdaYCYyPMRpne9eTJAjbZmKE6F/6z5Ux1zTLIi yD7Hs3Wxe7OI9BFyNwh2+l8knddy6Mku4RpESmjtqew/gCbDfnKrO/gQGhLGfjo7 LkBskZrJp/P7asAoowlZGtOQFywzAS7UeyCqHsgD7lfI91CKzY59FVq3ARoucXJy 3f+AKIjikft6TstiwwwMUlC59IWdxqAQsMr58s4y4GqeQsc1ob+39qF6H0iaNLuW t77PPUgy9tLCvTe/xr5g5Gu03wIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFPeo1a7p TPFIeEJBsU4yT2FtnciXMB8GA1UdIwQYMBaAFLr1raMsoNNM88z1Or34beb47ZAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkFENy9GOEJBQkFDQThC ODkxMUU3OTAxMTVDM0ZDNEY5QUUwMi91dld0b3l5ZzAwenp6UFU2dmZodDV2anRr QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V2V3RveXlnMDB6enpQVTZ2Zmh0NXZqdGtBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZBRDcvRjhCQUJBQ0E4Qjg5MTFFNzkwMTE1QzNGQzRGOUFFMDIvNDUzMkJEOUMx NEVGMTFFQ0E1Mjk1MjNEQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBy2IqAwQAy2IyMA0EAgACMAcDBQIgAUQAMA0GCSqGSIb3DQEBCwUA A4IBAQBFQaej8/7a+qtm+ssDkQS96xFK53UiJKL+dp+50A8wY2s+jS1li2G6Xjpe SUuTFOXJmkETpry+o5Dg/5sP8WzTOSrgKLxhJVl2dKe7fa5ZFkeMbsDN6V2W0maJ 2QcN0Q/y/OSs5OPjQnMZ7coPum1kQr1LPjcnkGrQmHPmO7Su4NjxTDawSLa3wdl0 M5Mb8XwKxKUSZlcPeNU61VsUbWA9M0qv4IftakAB/+5lWAfEQ5qd/WNfmxYhwKck iHWigQI65h+jq4bbozZCqg+GCmUAxOJoyesbzgnQ7hqqdDNd4w17S31ZwO12AEqx nctHSR+XL0QsCr7BZkmd3iqL1102 -----END CERTIFICATE-----Generated at Mon Mar 2 06:16:20 2026 by rpki-client