$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/B589332C498611EF90B46962C4F9AE02.roa File: B589332C498611EF90B46962C4F9AE02.roa (raw, json) Hash identifier: qQDURXc4miq6wSpyJJAXvi86X+8AWTAJoPUGTUH+F/w= Subject key identifier: C8:49:34:21:53:4A:4A:79:EA:E9:BF:E6:C7:F9:78:81:6C:0E:D8:C1 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 0606 Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/B589332C498611EF90B46962C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:27:35 +0000 ROA not before: Fri 02 Jan 2026 23:18:48 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 137409 IP address blocks: 43.226.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1542 (0x606) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Jan 2 23:18:48 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a48517-f3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e7:2c:dc:f7:df:16:21:2e:19:e7:6d:62:0f: f6:28:c4:c3:31:c2:a6:24:f2:e2:d4:ef:3d:db:ff: e0:d1:be:ca:e3:92:73:e7:9a:c6:64:95:55:85:9e: 69:99:8c:d6:69:79:5e:89:20:3a:31:ce:81:ea:6a: e9:7a:b0:2a:ad:83:0a:3d:dd:c2:5c:85:ed:63:51: c9:0c:3c:91:48:a4:34:31:76:03:de:64:a2:0b:a7: ef:53:98:a2:d1:df:5d:d2:35:58:7a:ee:1f:a9:02: 9f:65:01:c6:0f:5f:ec:93:47:bc:5b:59:22:f7:0c: 04:bc:00:d4:01:86:51:1d:1a:50:d8:05:1a:dc:22: a8:c5:44:9d:46:f2:68:67:8a:33:cf:89:fd:f8:d8: 94:e1:56:8b:a0:50:ec:01:13:85:36:02:58:f4:07: fe:9e:d9:53:3b:48:30:32:e6:44:bb:8a:aa:84:54: 6b:ea:4c:88:f5:9e:dc:95:35:0d:ed:35:37:ba:fd: f1:a7:20:31:63:61:ee:c0:f8:28:63:20:f9:9d:2e: f5:6e:d6:81:9d:74:f2:68:3b:43:31:cc:15:81:e4: 52:e8:fa:fe:48:cc:17:3f:60:3d:76:89:b9:bd:c7: 17:66:3d:65:46:38:a9:87:d2:68:4f:95:58:b9:d3: 55:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:49:34:21:53:4A:4A:79:EA:E9:BF:E6:C7:F9:78:81:6C:0E:D8:C1 X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/B589332C498611EF90B46962C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.226.229.0/24 Signature Algorithm: sha256WithRSAEncryption 05:91:52:1d:6c:72:99:89:9e:e6:94:f3:64:8b:9a:c6:3d:f0: 59:10:26:2c:9d:a5:2c:1c:81:e1:27:27:29:ea:88:f7:e4:79: bd:10:ea:a7:70:f8:29:34:60:3b:65:00:a9:f6:46:a7:c9:38: 92:d6:df:85:be:92:6e:52:9e:77:ec:23:58:59:73:db:bb:9e: fa:33:be:2b:41:15:9c:fd:20:6c:c1:c0:9a:f3:c0:57:46:0d: 92:ec:3e:1f:9f:9d:30:6f:17:2e:5e:6c:a6:6e:4f:5c:9e:8d: 36:a8:2b:d7:68:64:a5:59:c9:32:bb:61:85:4e:1d:09:71:16: b3:be:e2:ad:e7:68:86:80:b8:ae:ca:22:30:46:3a:61:f4:97: 1f:52:a0:75:4b:ec:84:22:3d:2d:5f:29:a7:79:c4:d8:32:ee: 78:20:86:09:f8:64:3c:f9:5e:58:fa:37:d3:97:9d:75:0f:88: fa:d1:c6:ae:62:ca:d9:74:29:a7:b6:4e:7c:f9:e6:f6:18:1f: 22:a2:33:40:70:06:2d:f7:ec:93:70:a1:43:b3:82:9b:11:e2: 44:be:dc:b7:35:e5:78:dd:5d:15:86:7c:98:47:b6:5d:ec:8c: 50:d5:b6:de:85:75:96:ad:c9:9f:6d:dc:a4:f2:13:ae:cb:fc: e8:3f:1f:0e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjYwMTAyMjMxODQ4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODUxNy1mM2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ucs3PffFiEuGedtYg/2KMTDMcKmJPLi1O892//g0b7K45Jz55rGZJVVhZ5p mYzWaXleiSA6Mc6B6mrperAqrYMKPd3CXIXtY1HJDDyRSKQ0MXYD3mSiC6fvU5ii 0d9d0jVYeu4fqQKfZQHGD1/sk0e8W1ki9wwEvADUAYZRHRpQ2AUa3CKoxUSdRvJo Z4ozz4n9+NiU4VaLoFDsAROFNgJY9Af+ntlTO0gwMuZEu4qqhFRr6kyI9Z7clTUN 7TU3uv3xpyAxY2HuwPgoYyD5nS71btaBnXTyaDtDMcwVgeRS6Pr+SMwXP2A9dom5 vccXZj1lRjiph9JoT5VYudNVxwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMhJNCFT Skp56um/5sf5eIFsDtjBMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhCRkEvMDRBMjRDMzQxMTQzMTFFQzk3MzY5RjczQzRGOUFFMDIvQjU4OTMzMkM0 OTg2MTFFRjkwQjQ2OTYyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK+LlMA0GCSqGSIb3DQEBCwUAA4IBAQAFkVIdbHKZiZ7mlPNki5rG PfBZECYsnaUsHIHhJycp6oj35Hm9EOqncPgpNGA7ZQCp9kanyTiS1t+FvpJuUp53 7CNYWXPbu576M74rQRWc/SBswcCa88BXRg2S7D4fn50wbxcuXmymbk9cno02qCvX aGSlWckyu2GFTh0JcRazvuKt52iGgLiuyiIwRjph9JcfUqB1S+yEIj0tXymnecTY Mu54IIYJ+GQ8+V5Y+jfTl511D4j60cauYsrZdCmntk58+eb2GB8iojNAcAYt9+yT cKFDs4KbEeJEvty3NeV43V0VhnyYR7Zd7IxQ1bbehXWWrcmfbdyk8hOuy/zoPx8O -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:11 2026 by rpki-client