$ rpki-client -vvf rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/2DC3DC54D54E11EF8C5B1651C4F9AE02.roa File: 2DC3DC54D54E11EF8C5B1651C4F9AE02.roa (raw, json) Hash identifier: QpiN7xo5vbbiecoxrdRCGbnh2zridFdffb3erbBLZ/w= Subject key identifier: 85:EC:27:E5:B3:A8:5A:75:EB:3C:26:BD:69:6E:D9:A0:70:0F:DE:9E Certificate issuer: /CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Certificate serial: 03C8 Authority key identifier: A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/2DC3DC54D54E11EF8C5B1651C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:24:40 +0000 ROA not before: Sat 11 Oct 2025 03:27:22 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 153494 IP address blocks: 43.243.64.0/22 maxlen: 24 103.38.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 968 (0x3c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150E55, serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Validity Not Before: Oct 11 03:27:22 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a44c27-4649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c1:b9:c3:11:88:a7:4a:74:0c:b6:64:3e:24: 58:6b:98:c1:a1:87:cf:4c:d4:1c:97:d1:a2:76:47: 71:e8:3a:b7:00:be:86:ff:60:8b:8e:61:05:af:a5: fa:d7:ce:e2:b5:a5:ef:d9:43:67:80:fa:a9:c1:6d: 7c:75:76:1a:7a:de:47:22:7f:e3:4e:fa:98:74:dd: 5a:1d:bc:bd:58:11:d9:3f:43:0a:72:1e:9f:88:62: b8:66:f3:c8:6d:e4:ca:f5:4e:d4:be:c1:47:d1:50: a0:06:cf:fa:e0:a6:a3:6a:f3:b2:ae:13:14:07:aa: 97:dc:f8:45:bc:f6:01:76:0b:2e:ae:2d:66:29:c6: 15:c5:34:fb:8c:1f:24:a9:14:66:33:21:2e:85:ea: 73:f6:80:9b:3c:e6:0b:ec:ea:51:25:4f:a3:21:a2: 2b:e3:96:7c:35:31:10:9c:ca:fb:30:0c:40:68:55: 6a:34:27:90:bf:72:1c:c2:05:10:e5:fa:74:c9:a8: d8:2e:7d:e3:f1:98:2e:d3:74:d4:57:30:44:fd:2b: 9c:13:f1:51:4f:88:08:0b:e4:a7:0b:23:fc:5f:d0: 08:66:0e:10:a3:f0:c7:2d:fc:46:ac:9e:8e:fe:fa: 41:d7:0c:55:d7:f8:69:e8:07:2a:9a:3a:38:ae:fa: 1f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EC:27:E5:B3:A8:5A:75:EB:3C:26:BD:69:6E:D9:A0:70:0F:DE:9E X509v3 Authority Key Identifier: keyid:A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/2DC3DC54D54E11EF8C5B1651C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.243.64.0/22 103.38.168.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:60:1c:9b:66:2b:36:e7:ee:01:0d:fb:7d:46:68:83:ae:e8: 28:5c:08:d9:20:4e:1a:15:cd:45:ab:8a:cf:dd:24:39:52:06: 51:e5:a8:e8:96:71:26:2d:38:8f:2f:c2:54:1b:2a:9f:95:11: e6:e8:98:72:f8:a6:ed:4e:b7:1a:39:4b:13:0b:ed:0d:f4:e6: 34:60:1c:5e:d5:59:31:57:d8:46:8b:5c:bd:66:9c:d7:ec:0c: 46:cb:bf:62:d5:a1:bc:01:6e:a6:5f:ff:17:f2:80:e5:ac:4e: 22:01:cc:1b:ac:6a:05:61:e5:95:d2:52:02:7f:23:37:0d:9c: ae:28:f1:f3:5f:45:a6:47:a9:32:1b:00:01:11:c0:31:a4:4e: 52:59:1b:66:d7:26:76:68:3d:6e:d8:0f:19:6c:02:2c:83:5b: 3e:22:f4:14:df:1d:b6:4e:3f:c6:e9:bd:0f:ea:db:54:eb:8e: 40:bc:5a:68:0b:67:a1:3b:24:52:51:6b:2d:46:69:1e:e1:24: d1:f3:50:52:e8:e3:17:6c:dd:83:d6:dc:6c:6e:87:48:78:e2: 95:f9:63:2f:f7:4a:f6:31:2f:ab:01:62:db:0a:54:89:1f:07: 32:11:ff:84:df:f2:c7:76:05:3b:1c:0c:6d:30:09:67:43:67: 6d:21:1e:11 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFNTUxMTAvBgNVBAUTKEEwMUEwRjA2RTMxMEIzODEzMDEzMUQ3ODgyOTcwQkYx NjJERDBENjYwHhcNMjUxMDExMDMyNzIyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGMyNy00NjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8G5wxGIp0p0DLZkPiRYa5jBoYfPTNQcl9Gidkdx6Dq3AL6G/2CLjmEFr6X6 187itaXv2UNngPqpwW18dXYaet5HIn/jTvqYdN1aHby9WBHZP0MKch6fiGK4ZvPI beTK9U7UvsFH0VCgBs/64KajavOyrhMUB6qX3PhFvPYBdgsuri1mKcYVxTT7jB8k qRRmMyEuhepz9oCbPOYL7OpRJU+jIaIr45Z8NTEQnMr7MAxAaFVqNCeQv3IcwgUQ 5fp0yajYLn3j8Zgu03TUVzBE/SucE/FRT4gIC+SnCyP8X9AIZg4Qo/DHLfxGrJ6O /vpB1wxV1/hp6Acqmjo4rvofrQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFIXsJ+Wz qFp16zwmvWlu2aBwD96eMB8GA1UdIwQYMBaAFKAaDwbjELOBMBMdeIKXC/Fi3Q1m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEU1NS83RDMyQTc0RUM2 MDAxMUVDODcwMDVDN0RDNEY5QUUwMi9vQm9QQnVNUXM0RXdFeDE0Z3BjTDhXTGRE V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Cb1BCdU1RczRFd0V4MTRncGNMOFdMZERXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTBFNTUvN0QzMkE3NEVDNjAwMTFFQzg3MDA1QzdEQzRGOUFFMDIvMkRDM0RDNTRE NTRFMTFFRjhDNUIxNjUxQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/NAAwQCZyaoMA0GCSqGSIb3DQEBCwUAA4IBAQB7YBybZis25+4B Dft9RmiDrugoXAjZIE4aFc1Fq4rP3SQ5UgZR5ajolnEmLTiPL8JUGyqflRHm6Jhy +KbtTrcaOUsTC+0N9OY0YBxe1VkxV9hGi1y9ZpzX7AxGy79i1aG8AW6mX/8X8oDl rE4iAcwbrGoFYeWV0lICfyM3DZyuKPHzX0WmR6kyGwABEcAxpE5SWRtm1yZ2aD1u 2A8ZbAIsg1s+IvQU3x22Tj/G6b0P6ttU645AvFpoC2ehOyRSUWstRmke4STR81BS 6OMXbN2D1txsbodIeOKV+WMv90r2MS+rAWLbClSJHwcyEf+E3/LHdgU7HAxtMAln Q2dtIR4R -----END CERTIFICATE-----Generated at Mon Mar 2 05:39:17 2026 by rpki-client