$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/71CCFDEEB52311F0BF19FE49C4F9AE02.roa File: 71CCFDEEB52311F0BF19FE49C4F9AE02.roa (raw, json) Hash identifier: HF60M4UR0qBSzchNjzkDTlntoArnEIk3YR2rQBWdtag= Subject key identifier: AD:7B:7F:C7:C1:55:5D:F0:30:96:5B:E1:42:04:85:72:47:11:18:07 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3C3E Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/71CCFDEEB52311F0BF19FE49C4F9AE02.roa Signing time: Sun 01 Mar 2026 21:26:58 +0000 ROA not before: Tue 24 Feb 2026 00:19:30 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 18328 IP address blocks: 45.120.65.0/24 maxlen: 24 45.120.66.0/24 maxlen: 24 103.31.180.0/24 maxlen: 24 103.31.181.0/24 maxlen: 24 103.31.182.0/24 maxlen: 24 103.31.183.0/24 maxlen: 24 121.0.96.0/24 maxlen: 24 121.0.97.0/24 maxlen: 24 121.0.127.0/24 maxlen: 24 203.210.16.0/24 maxlen: 24 203.210.20.0/24 maxlen: 24 203.210.21.0/24 maxlen: 24 203.210.22.0/24 maxlen: 24 203.210.23.0/24 maxlen: 24 203.210.26.0/24 maxlen: 24 203.210.27.0/24 maxlen: 24 203.210.31.0/24 maxlen: 24 210.87.198.0/24 maxlen: 24 210.87.200.0/24 maxlen: 24 210.87.201.0/24 maxlen: 24 210.87.202.0/24 maxlen: 24 210.87.205.0/24 maxlen: 24 210.87.206.0/24 maxlen: 24 210.87.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15422 (0x3c3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Feb 24 00:19:30 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4af22-2827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:09:2f:76:7b:cb:52:68:bb:fb:3a:f2:13:f2: 61:c6:69:db:e1:82:b2:f5:18:b5:c0:44:6a:b7:ee: bd:b6:ee:3a:ea:29:74:9e:b5:bc:98:8d:c9:1b:f8: ec:d3:09:a0:8f:df:ec:55:57:3a:12:3a:9e:b4:3d: eb:91:84:a8:87:d2:5e:c9:e0:29:b2:98:bd:a6:12: 05:f5:57:9e:a2:53:28:17:3a:64:a6:6d:7f:d1:47: 20:c1:dc:99:29:dc:f8:cb:17:ff:36:c7:46:21:47: ae:d8:a1:1d:d7:5d:5e:10:93:d1:19:b8:54:34:21: 19:63:8a:e4:e2:0f:31:b2:57:f6:5d:3a:c0:bd:5a: 6e:c1:b8:f3:7d:7f:7c:d6:6d:21:2f:a5:ab:7a:86: 73:5a:e5:a5:f1:27:b2:51:9a:83:a1:04:8b:ce:03: 31:3c:12:5d:98:6e:9e:6f:cb:a5:c5:3d:c7:07:a7: 54:c3:3d:14:d0:e5:ab:93:30:4e:0b:62:82:95:23: 73:18:92:cd:a4:f0:54:32:a4:92:30:5e:60:13:57: f8:63:01:0b:66:6e:22:12:fc:a8:2f:ab:2a:04:5a: c2:af:b7:5f:0c:b9:d7:d7:8a:3a:3d:fe:af:bf:c9: 52:29:a1:62:f9:cb:e2:c9:3a:49:4b:57:40:f5:c6: a2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7B:7F:C7:C1:55:5D:F0:30:96:5B:E1:42:04:85:72:47:11:18:07 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/71CCFDEEB52311F0BF19FE49C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.120.65.0-45.120.66.255 103.31.180.0/22 121.0.96.0/23 121.0.127.0/24 203.210.16.0/24 203.210.20.0/22 203.210.26.0/23 203.210.31.0/24 210.87.198.0/24 210.87.200.0-210.87.202.255 210.87.205.0-210.87.207.255 Signature Algorithm: sha256WithRSAEncryption 8d:81:ef:81:b1:94:43:4e:86:e8:a7:a7:9f:43:23:b0:3f:87: 9d:ee:0a:de:61:1b:fb:d6:a9:cf:44:97:2b:76:58:18:de:54: d2:0d:c7:2d:96:b0:ce:6a:1f:0f:76:4a:d7:f3:69:9b:ed:bb: 89:64:a3:9f:02:d4:ad:1b:b6:0c:7d:f5:90:48:ff:84:d0:55: e5:ec:74:e5:a3:db:c0:e4:35:9a:b4:c8:48:bc:ed:68:77:f6: 11:96:37:6f:c4:eb:15:49:4c:a9:0d:e5:40:6e:00:26:01:e7: 61:ad:e3:ac:ea:68:40:ff:5d:c0:d4:d4:d9:63:95:de:82:ad: 0a:27:44:c9:33:01:33:df:5d:f0:75:d3:cf:f0:40:b0:50:a4: db:91:d1:b5:7f:c7:e2:d8:a8:56:e6:e3:91:28:cd:39:62:dc: 70:25:d2:1d:93:1b:97:60:6c:6f:07:65:4d:63:ca:2f:d8:56: d5:e3:6a:e9:1d:8b:0e:96:7a:5c:c6:57:ac:fe:d3:50:f0:3c: f1:d0:76:b9:dd:f6:95:f1:56:d1:03:41:91:80:4a:c0:88:e8: 06:fa:25:18:4c:de:fb:68:78:0d:15:c0:13:1e:b8:73:aa:a9: 29:e1:4f:11:12:bd:c4:e4:45:8b:2d:ec:d3:f0:c4:f4:f7:03: c4:c0:d5:f8 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgICPD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwMjI0MDAxOTMwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWYyMi0yODI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgkvdnvLUmi7+zryE/Jhxmnb4YKy9Ri1wERqt+69tu466il0nrW8mI3JG/js 0wmgj9/sVVc6EjqetD3rkYSoh9JeyeApspi9phIF9VeeolMoFzpkpm1/0UcgwdyZ Kdz4yxf/NsdGIUeu2KEd111eEJPRGbhUNCEZY4rk4g8xslf2XTrAvVpuwbjzfX98 1m0hL6WreoZzWuWl8SeyUZqDoQSLzgMxPBJdmG6eb8ulxT3HB6dUwz0U0OWrkzBO C2KClSNzGJLNpPBUMqSSMF5gE1f4YwELZm4iEvyoL6sqBFrCr7dfDLnX14o6Pf6v v8lSKaFi+cviyTpJS1dA9cai2QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFK17f8fB VV3wMJZb4UIEhXJHERgHMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNzFDQ0ZERUVC NTIzMTFGMEJGMTlGRTQ5QzRGOUFFMDIucm9hMHMGCCsGAQUFBwEHAQH/BGQwYjBg BAIAATBaMAwDBAAteEEDBAAteEIDBAJnH7QDBAF5AGADBAB5AH8DBADL0hADBALL 0hQDBAHL0hoDBADL0h8DBADSV8YwDAMEA9JXyAMEANJXyjAMAwQA0lfNAwQE0lfA MA0GCSqGSIb3DQEBCwUAA4IBAQCNge+BsZRDTobop6efQyOwP4ed7greYRv71qnP RJcrdlgY3lTSDcctlrDOah8PdkrX82mb7buJZKOfAtStG7YMffWQSP+E0FXl7HTl o9vA5DWatMhIvO1od/YRljdvxOsVSUypDeVAbgAmAedhreOs6mhA/13A1NTZY5Xe gq0KJ0TJMwEz313wddPP8ECwUKTbkdG1f8fi2KhW5uORKM05YtxwJdIdkxuXYGxv B2VNY8ov2FbV42rpHYsOlnpcxles/tNQ8Dzx0Ha53faV8VbRA0GRgErAiOgG+iUY TN77aHgNFcATHrhzqqkp4U8REr3E5EWLLezT8MT09wPEwNX4 -----END CERTIFICATE-----Generated at Mon Mar 2 18:26:43 2026 by rpki-client