$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/93DAAB4612BA11EF901ACD28C4F9AE02.roa File: 93DAAB4612BA11EF901ACD28C4F9AE02.roa (raw, json) Hash identifier: l7Qd9q+JWXL9sQ4Jr7CNDbb+BXG9V5k2ZQl4V+DIHCQ= Subject key identifier: A9:4B:93:40:6B:70:B6:5E:EA:34:1A:2D:32:54:E3:FC:B2:C6:06:40 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 058F Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/93DAAB4612BA11EF901ACD28C4F9AE02.roa Signing time: Tue 16 Sep 2025 13:39:19 +0000 ROA not before: Tue 16 Sep 2025 13:39:19 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 9009 IP address blocks: 43.226.228.0/24 maxlen: 24 43.226.230.0/24 maxlen: 24 103.46.142.0/24 maxlen: 24 103.46.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1423 (0x58f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Sep 16 13:39:19 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68c96886-32d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:63:cf:65:6a:b9:79:88:94:1b:99:54:c4:0d: 19:62:5a:97:bf:44:50:5a:06:36:ca:41:aa:74:53: bf:fa:20:89:10:dc:c0:94:01:9a:9b:cd:05:76:0e: 6b:3d:90:d6:f6:97:3f:85:d1:fe:1e:4e:cc:12:b8: fd:cc:1f:8e:ca:77:01:2e:90:b6:eb:8e:e7:d6:10: 3b:5a:67:39:43:e3:b7:50:ff:7f:9c:ea:dc:6d:e4: e3:e6:c8:4e:2c:bc:17:bb:9a:bd:93:d7:ca:f1:d3: 01:af:90:b6:7e:67:6d:ce:67:3e:6e:ec:65:42:72: e1:79:cd:18:a7:14:6c:37:4d:b3:94:44:93:0b:2d: 49:73:76:82:52:27:a0:8c:5d:26:cf:b4:2f:7f:5e: 4c:3d:03:da:45:14:d6:ab:bb:b8:1b:e2:37:8c:c4: d6:7b:68:72:e3:fc:89:40:e8:29:ad:dc:61:ca:e6: 08:69:50:79:76:40:c7:ba:43:4f:78:00:c0:ea:cb: 9f:51:3f:f2:61:f8:ef:4a:26:fb:e1:dd:91:56:db: f5:dc:58:3e:d6:e3:e1:55:70:77:10:45:27:e7:74: a6:4d:84:2f:03:c4:3c:e6:a1:7a:93:f4:54:af:50: 44:eb:42:f6:11:8a:4c:41:23:f5:67:58:a9:18:bc: 47:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4B:93:40:6B:70:B6:5E:EA:34:1A:2D:32:54:E3:FC:B2:C6:06:40 X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/93DAAB4612BA11EF901ACD28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.226.228.0/24 43.226.230.0/24 103.46.142.0/23 Signature Algorithm: sha256WithRSAEncryption 48:b5:24:93:29:d4:b8:43:1b:7c:51:d5:bb:c2:cc:96:b5:72: 5b:22:bc:b8:37:c1:90:05:4e:e5:08:23:35:52:76:40:3c:16: 2c:83:09:c0:c5:16:0d:84:d1:f4:a9:a4:8d:aa:fa:1b:2b:26: 72:75:c0:34:60:c5:8b:74:9e:95:fd:12:6a:1d:99:87:72:ac: 6b:6b:57:c8:c1:5f:b9:a6:71:70:94:3a:b7:12:40:08:60:ae: 92:6d:20:4d:9f:02:9a:ad:98:ba:30:d4:1e:74:53:a0:10:9d: ad:84:d1:c5:05:ba:5e:7d:9b:e3:94:b8:0d:b1:6e:bc:fc:74: b5:84:32:04:36:64:f8:a9:8b:83:01:9f:10:fa:0d:2c:6d:d4: ea:eb:cf:d1:52:73:bc:f2:62:e6:73:7c:4d:e3:7a:5f:13:58: 05:a0:4e:21:e5:12:f0:13:2d:76:9c:50:c5:02:a9:dc:ed:9b: 57:c1:03:a0:07:12:7a:a4:e9:74:c4:5a:82:b7:3a:ed:1b:9d: 37:ff:25:f9:fe:df:c2:c3:d4:e0:c5:84:b9:75:5d:f3:42:e5: ee:86:f5:e3:64:a5:33:96:7f:fd:6b:47:c7:0f:9e:df:b4:39: 4c:f2:5e:f1:29:a9:5d:43:d5:99:15:e4:08:90:04:24:6f:ba: b1:ef:1c:aa -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjUwOTE2MTMzOTE5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM5Njg4Ni0zMmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGPPZWq5eYiUG5lUxA0ZYlqXv0RQWgY2ykGqdFO/+iCJENzAlAGam80Fdg5r PZDW9pc/hdH+Hk7MErj9zB+OyncBLpC2647n1hA7Wmc5Q+O3UP9/nOrcbeTj5shO LLwXu5q9k9fK8dMBr5C2fmdtzmc+buxlQnLhec0YpxRsN02zlESTCy1Jc3aCUieg jF0mz7Qvf15MPQPaRRTWq7u4G+I3jMTWe2hy4/yJQOgprdxhyuYIaVB5dkDHukNP eADA6sufUT/yYfjvSib74d2RVtv13Fg+1uPhVXB3EEUn53SmTYQvA8Q85qF6k/RU r1BE60L2EYpMQSP1Z1ipGLxHrQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFKlLk0Br cLZe6jQaLTJU4/yyxgZAMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhCRkEvMDRBMjRDMzQxMTQzMTFFQzk3MzY5RjczQzRGOUFFMDIvOTNEQUFCNDYx MkJBMTFFRjkwMUFDRDI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAAr4uQDBAAr4uYDBAFnLo4wDQYJKoZIhvcNAQELBQADggEB AEi1JJMp1LhDG3xR1bvCzJa1clsivLg3wZAFTuUIIzVSdkA8FiyDCcDFFg2E0fSp pI2q+hsrJnJ1wDRgxYt0npX9EmodmYdyrGtrV8jBX7mmcXCUOrcSQAhgrpJtIE2f ApqtmLow1B50U6AQna2E0cUFul59m+OUuA2xbrz8dLWEMgQ2ZPipi4MBnxD6DSxt 1Orrz9FSc7zyYuZzfE3jel8TWAWgTiHlEvATLXacUMUCqdztm1fBA6AHEnqk6XTE WoK3Ou0bnTf/Jfn+38LD1ODFhLl1XfNC5e6G9eNkpTOWf/1rR8cPnt+0OUzyXvEp qV1D1ZkV5AiQBCRvurHvHKo= -----END CERTIFICATE-----Generated at Wed Nov 5 21:42:12 2025 by rpki-client