$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/6E32028AD48511EF8239D526C4F9AE02.roa File: 6E32028AD48511EF8239D526C4F9AE02.roa (raw, json) Hash identifier: +jMfdrNgrz1Nzrt0QgBnBGHQwacuV0bREddxSJbErg4= Subject key identifier: 72:9A:58:DF:8F:C8:2B:DC:1D:07:B9:98:67:4C:9A:B5:E0:57:70:1B Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Certificate serial: 03D8 Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/6E32028AD48511EF8239D526C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:03:45 +0000 ROA not before: Sun 11 May 2025 01:07:32 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 153494 IP address blocks: 43.241.152.0/22 maxlen: 24 43.242.44.0/22 maxlen: 24 103.37.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Validity Not Before: May 11 01:07:32 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a40f01-aae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b9:59:91:41:df:c8:c3:5f:7a:1f:17:a8:43: 6a:1a:9f:74:bb:5c:48:10:43:2c:f8:65:d4:af:ac: f4:e7:63:fb:47:7c:09:77:39:92:b1:55:f8:d2:8c: 93:1a:08:12:30:82:de:ea:22:f5:73:7f:8d:49:25: 82:a4:ed:e3:94:c0:89:a0:50:5d:a0:39:d7:0d:14: 11:1d:aa:0f:d3:0b:13:f9:9e:e5:a1:ce:da:c8:5f: 63:4d:95:38:17:ce:35:80:4b:ef:40:ff:6b:93:a4: 0c:c6:d5:a2:b6:5b:f5:ca:27:43:2b:0e:6b:77:ae: e3:65:23:2d:d7:eb:ff:93:d7:a7:0a:62:32:1a:f3: 53:81:7c:3f:3b:d2:df:73:e1:48:8b:60:33:7e:07: 36:93:05:63:b9:bb:11:6a:41:17:9b:76:a0:97:05: a1:5d:c6:45:f9:1d:c4:05:f1:af:14:4c:6b:4d:34: 0c:9a:2a:b2:c4:05:b6:32:ba:f4:8e:ad:f7:c7:95: a8:6b:68:8c:e0:e5:53:1b:37:6a:dc:bc:af:f6:6a: 6d:24:17:01:67:b1:9e:88:64:8c:b1:7a:76:16:79: d0:41:29:a5:29:07:a4:d1:76:ce:5b:d6:0b:69:6d: f7:58:10:16:d6:f0:0a:d9:b9:5e:1c:11:b9:49:08: eb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9A:58:DF:8F:C8:2B:DC:1D:07:B9:98:67:4C:9A:B5:E0:57:70:1B X509v3 Authority Key Identifier: keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/6E32028AD48511EF8239D526C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.241.152.0/22 43.242.44.0/22 103.37.248.0/22 Signature Algorithm: sha256WithRSAEncryption 02:84:9f:20:07:c7:83:e4:91:0e:cc:d8:32:13:09:bb:fb:be: df:7f:cb:a7:6d:d7:10:aa:85:fe:4c:d1:28:67:5d:1d:e1:9b: 90:05:e2:10:c0:a2:03:03:66:66:19:ab:13:43:f0:4c:4a:8b: e0:c5:19:57:79:8b:12:3f:50:0a:9f:8e:e0:9e:5a:63:d6:2a: c2:fb:af:b7:3e:f9:b8:0e:dc:dc:ff:f2:23:06:47:5f:52:53: 06:c1:92:a2:cf:9e:33:08:24:3a:e6:d3:90:8a:d9:4d:4a:9a: 60:4e:1c:a0:b8:b0:19:74:9c:ba:2b:2a:10:4e:39:67:cb:e9: 60:9d:32:da:a9:6f:aa:08:a9:fa:4f:1e:a7:0e:00:32:47:c4: 46:0e:8a:77:79:f9:3d:c5:ad:86:55:25:40:67:22:22:c2:c1: 6f:24:87:f8:a2:d7:c7:96:e5:3e:97:28:79:3d:f2:32:74:e4: 0f:25:eb:5d:a2:22:bb:9c:d3:ba:54:6f:69:d7:dd:6f:cd:37: 1a:77:70:b0:56:8a:1f:f7:e2:c0:f6:c9:64:80:02:93:2d:38: 9c:dd:a6:7e:06:46:51:f8:17:a9:c1:e3:7c:58:c1:1a:5c:b5: d6:64:47:9c:74:95:eb:7c:69:41:0c:79:bc:67:a9:f8:69:61: d2:7e:8a:21 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZDMkMxMTAvBgNVBAUTKDFBRDlCRDlEQzc3MzE1QkQxMDJEQUY1QUE5RjkyNTY2 QjJDMkZCOTkwHhcNMjUwNTExMDEwNzMyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGYwMS1hYWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLlZkUHfyMNfeh8XqENqGp90u1xIEEMs+GXUr6z052P7R3wJdzmSsVX40oyT GggSMILe6iL1c3+NSSWCpO3jlMCJoFBdoDnXDRQRHaoP0wsT+Z7loc7ayF9jTZU4 F841gEvvQP9rk6QMxtWitlv1yidDKw5rd67jZSMt1+v/k9enCmIyGvNTgXw/O9Lf c+FIi2Azfgc2kwVjubsRakEXm3aglwWhXcZF+R3EBfGvFExrTTQMmiqyxAW2Mrr0 jq33x5Woa2iM4OVTGzdq3Lyv9mptJBcBZ7GeiGSMsXp2FnnQQSmlKQek0XbOW9YL aW33WBAW1vAK2bleHBG5SQjr1QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFHKaWN+P yCvcHQe5mGdMmrXgV3AbMB8GA1UdIwQYMBaAFBrZvZ3HcxW9EC2vWqn5JWaywvuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkMyQy9CMDRFOTE5Q0M1 MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZiMFFMYTlhcWZrbFpyTEMt NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d0bTluY2R6RmIwUUxhOWFxZmtsWnJMQy01ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEZDMkMvQjA0RTkxOUNDNTMzMTFFQzk2REYzMTBGQzRGOUFFMDIvNkUzMjAyOEFE NDg1MTFFRjgyMzlENTI2QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCK/GYAwQCK/IsAwQCZyX4MA0GCSqGSIb3DQEBCwUAA4IBAQAChJ8g B8eD5JEOzNgyEwm7+77ff8unbdcQqoX+TNEoZ10d4ZuQBeIQwKIDA2ZmGasTQ/BM SovgxRlXeYsSP1AKn47gnlpj1irC+6+3Pvm4Dtzc//IjBkdfUlMGwZKiz54zCCQ6 5tOQitlNSppgThyguLAZdJy6KyoQTjlny+lgnTLaqW+qCKn6Tx6nDgAyR8RGDop3 efk9xa2GVSVAZyIiwsFvJIf4otfHluU+lyh5PfIydOQPJetdoiK7nNO6VG9p191v zTcad3CwVoof9+LA9slkgAKTLTic3aZ+BkZR+BepweN8WMEaXLXWZEecdJXrfGlB DHm8Z6n4aWHSfooh -----END CERTIFICATE-----Generated at Mon Mar 2 06:17:07 2026 by rpki-client