$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/0198539E94F311EA9429BF86C4F9AE02.roa File: 0198539E94F311EA9429BF86C4F9AE02.roa (raw, json) Hash identifier: x6WdVTtqXyzo1or27OKiZdwiQ6/5q3EEmbhvmI/FqvM= Subject key identifier: CA:A6:6A:3A:53:2C:B1:F0:81:29:D0:09:CC:18:38:DE:B6:D8:59:CC Certificate issuer: /CN=A9148D52/serialNumber=68874254547B34B3AF89DDB5B48D02023F57AE17 Certificate serial: 0DEC Authority key identifier: 68:87:42:54:54:7B:34:B3:AF:89:DD:B5:B4:8D:02:02:3F:57:AE:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/0198539E94F311EA9429BF86C4F9AE02.roa Signing time: Fri 05 Jun 2026 02:42:49 +0000 ROA not before: Fri 05 Jun 2026 02:42:49 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 133111 IP address blocks: 43.252.48.0/24 maxlen: 24 2400:a980::/29 maxlen: 29 2400:a980:a000::/40 maxlen: 40 240d:4000::/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.crl rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 17:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3564 (0xdec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148D52, serialNumber=68874254547B34B3AF89DDB5B48D02023F57AE17 Validity Not Before: Jun 5 02:42:49 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a2237a9-fe8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c1:ba:2a:9f:36:c4:f8:09:a2:a1:6a:1e:2f: 6e:ff:2b:22:fa:ed:b3:b0:5a:16:31:4d:54:71:bf: fa:f1:1a:a1:a9:85:7e:a6:ed:cc:d0:72:e5:5b:5b: c9:ef:2f:b3:95:3b:16:46:2d:e5:81:68:02:23:b6: e9:66:be:6e:4e:ee:aa:19:14:df:04:7c:bc:c7:ed: 65:56:42:e5:b4:f2:cc:da:62:6d:35:f7:2d:f6:a3: b6:05:4a:ce:c6:3d:6e:21:60:cb:7c:ca:73:9f:89: b2:8a:0d:7a:fa:2f:09:80:b7:28:76:50:98:d6:3d: 8f:d4:42:b9:81:9d:f8:e5:40:c9:2d:0e:a3:f7:7d: d0:8e:22:5e:65:47:e3:8c:40:21:a2:6c:45:d8:1b: 55:7b:a8:0d:f2:5f:fb:54:e9:ab:9a:1a:ee:49:24: 51:0c:74:cf:59:98:bf:f5:d4:88:db:34:6e:90:a3: ff:a0:0b:b8:e8:82:b3:d0:3e:da:66:1b:f3:1c:22: e2:dd:02:68:4b:de:54:eb:ee:28:f9:e1:b9:5a:50: ff:ed:49:78:b7:ce:3c:df:df:a4:7a:fe:a4:ac:a0: 6a:32:a5:6c:69:a7:b5:be:2c:bc:49:81:e4:e1:ce: af:5d:96:ad:40:ae:1f:5d:25:7b:d8:62:9f:83:89: d8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A6:6A:3A:53:2C:B1:F0:81:29:D0:09:CC:18:38:DE:B6:D8:59:CC X509v3 Authority Key Identifier: keyid:68:87:42:54:54:7B:34:B3:AF:89:DD:B5:B4:8D:02:02:3F:57:AE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/0198539E94F311EA9429BF86C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.252.48.0/24 IPv6: 2400:a980::/29 240d:4000::/21 Signature Algorithm: sha256WithRSAEncryption c6:2e:0a:00:58:8f:24:6f:3c:f4:89:fc:31:e8:90:29:17:85: 5d:c3:8e:f6:f4:11:ad:9e:49:b5:f8:5b:c4:ae:b7:63:4e:18: a7:cd:16:2d:9c:ea:d2:57:d0:59:9a:00:a2:b8:40:72:00:19: 49:ac:d6:9f:00:43:d4:d0:e7:32:20:5b:a5:38:db:95:ba:67: 46:6d:a8:e0:98:0d:1c:c4:54:35:86:c3:f1:37:fc:e1:04:da: 52:45:74:77:1b:58:89:14:da:71:af:05:1f:a5:1d:c7:3f:03: 00:95:bb:41:3b:ea:54:f0:3e:c8:a1:7c:e5:1e:8d:15:99:df: 9f:c7:c8:53:85:55:3e:8f:e6:77:63:2d:4e:a8:5a:dc:f4:16: c4:3b:5f:be:bc:78:9c:c2:b0:87:7f:d5:28:8d:c0:9d:76:89: c8:44:84:39:d2:09:0c:af:94:b9:1b:f1:13:65:2a:df:21:1f: 68:75:18:77:52:b9:53:25:61:b4:43:46:f4:7c:f9:46:7a:5e: 77:39:88:7c:1f:d5:9a:1b:0d:d7:58:9b:f7:ea:13:21:6e:61: 28:bc:85:3b:ce:0f:29:5c:27:df:c5:1c:c8:17:a0:48:26:e9: 3a:36:38:2b:fe:26:98:74:5c:46:a9:e7:84:65:96:b2:5f:38: 99:40:9f:50 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICDewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhENTIxMTAvBgNVBAUTKDY4ODc0MjU0NTQ3QjM0QjNBRjg5RERCNUI0OEQwMjAy M0Y1N0FFMTcwHhcNMjYwNjA1MDI0MjQ5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTIyMzdhOS1mZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9sG6Kp82xPgJoqFqHi9u/ysi+u2zsFoWMU1Ucb/68RqhqYV+pu3M0HLlW1vJ 7y+zlTsWRi3lgWgCI7bpZr5uTu6qGRTfBHy8x+1lVkLltPLM2mJtNfct9qO2BUrO xj1uIWDLfMpzn4myig16+i8JgLcodlCY1j2P1EK5gZ345UDJLQ6j933QjiJeZUfj jEAhomxF2BtVe6gN8l/7VOmrmhruSSRRDHTPWZi/9dSI2zRukKP/oAu46IKz0D7a ZhvzHCLi3QJoS95U6+4o+eG5WlD/7Ul4t84839+kev6krKBqMqVsaae1viy8SYHk 4c6vXZatQK4fXSV72GKfg4nYjQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFMqmajpT LLHwgSnQCcwYON622FnMMB8GA1UdIwQYMBaAFGiHQlRUezSzr4ndtbSNAgI/V64X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ1Mi8xRDRCNDRFRURC NkIxMUU5OTI5ODdGNDFDNEY5QUUwMi9hSWRDVkZSN05MT3ZpZDIxdEkwQ0FqOVhy aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJZENWRlI3TkxPdmlkMjF0STBDQWo5WHJoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhENTIvMUQ0QjQ0RUVEQjZCMTFFOTkyOTg3RjQxQzRGOUFFMDIvMDE5ODUzOUU5 NEYzMTFFQTk0MjlCRjg2QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAM BAIAATAGAwQAK/wwMBMEAgACMA0DBQMkAKmAAwQDJA1AMA0GCSqGSIb3DQEBCwUA A4IBAQDGLgoAWI8kbzz0ifwx6JApF4Vdw4729BGtnkm1+FvErrdjThinzRYtnOrS V9BZmgCiuEByABlJrNafAEPU0OcyIFulONuVumdGbajgmA0cxFQ1hsPxN/zhBNpS RXR3G1iJFNpxrwUfpR3HPwMAlbtBO+pU8D7IoXzlHo0Vmd+fx8hThVU+j+Z3Yy1O qFrc9BbEO1++vHicwrCHf9UojcCddonIRIQ50gkMr5S5G/ETZSrfIR9odRh3UrlT JWG0Q0b0fPlGel53OYh8H9WaGw3XWJv36hMhbmEovIU7zg8pXCffxRzIF6BIJuk6 Njgr/iaYdFxGqeeEZZayXziZQJ9Q -----END CERTIFICATE-----Generated at Sat Jun 13 08:48:46 2026 by rpki-client