$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/9CE444808F2811ECA311FF19C4F9AE02.roa File: 9CE444808F2811ECA311FF19C4F9AE02.roa (raw, json) Hash identifier: iIncNlkzDLncSdr4CvW4y2W5fyCiIPivB8IWCNWoJP0= Subject key identifier: B2:98:57:EA:D4:E0:04:12:C1:5A:52:48:8C:D9:F4:4B:92:1E:0E:BF Certificate issuer: /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85 Certificate serial: 3318 Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/9CE444808F2811ECA311FF19C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:10:55 +0000 ROA not before: Wed 30 Apr 2025 15:52:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 45820 IP address blocks: 59.161.160.0/24 maxlen: 24 115.117.191.0/24 maxlen: 24 115.118.66.0/24 maxlen: 24 121.242.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13080 (0x3318) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85 Validity Not Before: Apr 30 15:52:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a48f3f-8336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:80:a5:0c:98:3e:96:e9:24:85:89:a3:78:f6: 52:c6:4c:de:5b:5b:bd:b9:17:66:8e:35:d7:5c:9c: 2f:ff:b6:78:b9:ed:8c:69:9a:7e:ce:dc:93:69:55: 58:51:96:fe:2c:90:73:91:0b:56:37:d0:3c:c9:82: 67:fb:d2:d5:d0:e6:3a:fd:0b:96:7a:02:93:de:37: 0b:cc:58:c2:c8:13:21:10:a9:c0:15:18:f5:5e:b7: fd:ee:10:e5:a6:06:e4:fe:8e:16:00:62:c6:8d:6d: a2:93:4f:a9:fc:bd:dd:ac:4a:08:c1:7f:42:d5:e8: 8b:a3:dc:96:62:da:d0:0e:ee:16:65:20:ad:a4:0a: 92:5f:1e:57:3b:3e:6d:34:c8:c9:fd:e5:95:ff:47: fd:de:3b:13:92:a1:2f:4f:24:de:a7:ed:dc:13:75: bb:8b:1a:1c:00:8b:5a:f9:aa:1f:82:8d:73:57:13: e5:f1:61:44:99:1c:22:1d:b2:1b:97:3b:c2:ce:00: 27:bb:e8:91:30:58:0d:8e:79:3c:c7:09:f3:56:7a: 9b:da:65:8a:0b:b5:e1:67:19:ec:da:6b:d4:b6:5e: 1a:d6:96:be:76:0c:ce:9d:6c:11:61:37:a3:7a:48: e3:d5:ec:4a:9e:62:06:84:0a:42:bb:52:ea:55:8d: b0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:98:57:EA:D4:E0:04:12:C1:5A:52:48:8C:D9:F4:4B:92:1E:0E:BF X509v3 Authority Key Identifier: keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/9CE444808F2811ECA311FF19C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 59.161.160.0/24 115.117.191.0/24 115.118.66.0/24 121.242.21.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:c8:75:11:f9:d8:63:83:00:c4:a0:cc:4a:41:fa:50:1c:7b: 33:5a:62:14:a6:de:b0:31:18:56:a6:5d:54:48:f2:20:da:18: 6f:4b:5b:68:e9:f0:2a:8a:d2:ba:69:5b:72:4d:05:33:8d:87: 42:c6:a8:27:a4:f2:34:d8:f8:1d:9b:98:9f:ed:5e:9a:9f:cc: 0c:ac:f1:94:48:34:1f:f1:92:68:b8:0a:46:2f:88:78:6f:ba: c4:df:fb:37:63:0d:3b:60:04:67:f5:5f:c5:d4:33:fb:35:ba: c0:29:f8:3f:14:5e:60:2e:71:a8:e9:cf:aa:ea:8a:5c:14:f3: df:5c:d9:86:14:70:63:ee:84:aa:8b:38:04:32:f4:b7:fa:dc: fd:82:14:9e:75:f6:10:d9:e3:49:06:01:b2:20:83:60:5d:aa: 5d:b3:30:5e:36:d8:23:43:b3:f2:60:3d:fc:26:96:ab:99:a3: 11:af:60:60:f2:54:9f:04:6c:10:b7:98:38:23:b4:c8:ec:b8: ed:43:45:b6:14:3e:90:38:eb:4f:96:3c:80:e6:35:c5:b9:9c: ba:5a:a9:8e:8f:de:74:79:20:be:e0:f2:0f:2d:c7:7f:aa:d7: 51:99:16:be:34:ce:62:2a:88:a3:e2:3e:c9:25:9e:75:c5:75: 3e:be:9f:4b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICMxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3 OUJFQTZBODUwHhcNMjUwNDMwMTU1MjI2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGYzZi04MzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoClDJg+lukkhYmjePZSxkzeW1u9uRdmjjXXXJwv/7Z4ue2MaZp+ztyTaVVY UZb+LJBzkQtWN9A8yYJn+9LV0OY6/QuWegKT3jcLzFjCyBMhEKnAFRj1Xrf97hDl pgbk/o4WAGLGjW2ik0+p/L3drEoIwX9C1eiLo9yWYtrQDu4WZSCtpAqSXx5XOz5t NMjJ/eWV/0f93jsTkqEvTyTep+3cE3W7ixocAIta+aofgo1zVxPl8WFEmRwiHbIb lzvCzgAnu+iRMFgNjnk8xwnzVnqb2mWKC7XhZxns2mvUtl4a1pa+dgzOnWwRYTej ekjj1exKnmIGhApCu1LqVY2wSQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFLKYV+rU 4AQSwVpSSIzZ9EuSHg6/MB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NENFNzUvRDIyRUYzRDZGRjRCMTFFMjgxQkUwNjYyNTkxMUVBMzIvOUNFNDQ0ODA4 RjI4MTFFQ0EzMTFGRjE5QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAO6GgAwQAc3W/AwQAc3ZCAwQAefIVMA0GCSqGSIb3DQEBCwUAA4IB AQAvyHUR+dhjgwDEoMxKQfpQHHszWmIUpt6wMRhWpl1USPIg2hhvS1to6fAqitK6 aVtyTQUzjYdCxqgnpPI02Pgdm5if7V6an8wMrPGUSDQf8ZJouApGL4h4b7rE3/s3 Yw07YARn9V/F1DP7NbrAKfg/FF5gLnGo6c+q6opcFPPfXNmGFHBj7oSqizgEMvS3 +tz9ghSedfYQ2eNJBgGyIINgXapdszBeNtgjQ7PyYD38JparmaMRr2Bg8lSfBGwQ t5g4I7TI7LjtQ0W2FD6QOOtPljyA5jXFuZy6WqmOj950eSC+4PIPLcd/qtdRmRa+ NM5iKoij4j7JJZ51xXU+vp9L -----END CERTIFICATE-----Generated at Mon Mar 2 11:17:10 2026 by rpki-client