$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/DB020E9C010D11EAA82AD83CC4F9AE02.roa File: DB020E9C010D11EAA82AD83CC4F9AE02.roa (raw, json) Hash identifier: tCbmhz8Xdtfw+YZ6cKJPC3exzeqwAMNaQLxry2e2mdI= Subject key identifier: 18:E9:A8:65:EA:07:74:58:B4:12:44:DE:A4:26:06:55:1D:C9:AF:4E Certificate issuer: /CN=A9153C27/serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Certificate serial: 0CF7 Authority key identifier: 54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/DB020E9C010D11EAA82AD83CC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:40:36 +0000 ROA not before: Wed 28 Jan 2026 18:15:17 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 136039 IP address blocks: 43.229.124.0/22 maxlen: 24 103.80.108.0/22 maxlen: 24 2400:50c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 18:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3319 (0xcf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C27, serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Validity Not Before: Jan 28 18:15:17 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a44fe4-5a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c5:d8:99:1d:e4:c5:1f:93:0a:4c:a2:dd:4b: 88:e7:4b:b0:df:7e:33:c6:bd:45:af:a8:cf:25:5c: 79:bb:fb:03:bb:9b:b5:b4:e0:c8:e0:79:8f:8d:6f: 71:cf:17:96:1f:a0:cf:7f:8d:5b:a5:69:77:7d:06: 5c:61:19:48:de:76:35:31:d7:b3:5f:6e:a1:c6:6f: de:c1:9d:b5:5e:b3:58:06:bf:c3:ea:0d:15:02:be: 65:36:a1:8c:2e:a4:55:2a:94:99:7c:04:76:e9:92: 37:4f:64:6d:ad:e2:95:fe:7d:cc:83:96:32:7a:34: df:67:a0:16:68:60:54:d5:36:d8:cc:c8:31:3e:e1: d5:ed:34:04:d6:9a:92:69:a6:ad:45:9e:ed:fe:d0: 58:ac:39:03:29:7e:8e:83:8d:96:71:a5:69:48:11: 70:26:e6:98:14:92:31:e6:72:04:3b:ba:52:d9:c9: 74:9f:66:84:72:5a:0b:3a:de:23:bf:fd:25:81:10: 82:8f:75:70:43:1b:0d:87:ba:5a:90:2c:8f:a0:57: 3d:8f:f0:3b:d8:8d:8c:e9:ab:46:1e:05:bc:5e:38: ea:51:84:b3:46:b1:be:17:fb:69:88:28:bb:da:b5: d3:44:75:b5:dd:0b:24:de:4d:db:fd:58:63:c8:ad: b4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E9:A8:65:EA:07:74:58:B4:12:44:DE:A4:26:06:55:1D:C9:AF:4E X509v3 Authority Key Identifier: keyid:54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/DB020E9C010D11EAA82AD83CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.229.124.0/22 103.80.108.0/22 IPv6: 2400:50c0::/32 Signature Algorithm: sha256WithRSAEncryption 5b:3f:20:7f:84:85:1f:2b:96:34:8e:db:0c:2c:c7:20:ac:44: 62:14:47:ca:c1:7c:9c:d1:51:b1:5e:b1:5d:49:5e:7b:69:1c: 64:6b:e5:ff:b5:89:07:fd:c3:bf:82:59:55:73:d4:c6:df:a3: cd:c6:3f:d8:32:91:a1:2a:5c:fc:04:6a:9a:e8:a4:40:a8:b4: bf:62:89:9e:5a:54:69:81:af:c1:29:d7:a2:cc:4b:a4:b3:aa: 92:d6:c5:8a:95:21:65:d4:49:b6:84:a4:84:a1:ac:4d:4e:98: 79:ea:6c:dc:73:8f:a2:44:2e:23:f2:80:83:14:2c:4c:e3:c7: 0a:9a:94:c4:6b:86:36:75:05:84:cd:85:f1:6b:2d:6f:ae:78: 35:55:c8:1b:d7:78:47:05:c9:8f:fc:f6:2f:9c:92:22:70:0e: 1e:3b:0a:ae:c2:13:8f:bd:62:0e:96:ec:7a:17:52:46:d4:e9: ec:c8:71:f9:eb:d4:dd:c2:7a:43:08:9c:6b:d3:f2:77:1d:4d: 5e:b3:2d:c3:bd:3f:00:4d:ed:4a:11:8b:75:25:f5:f7:5b:aa: 51:87:50:a7:e5:94:8c:60:aa:c0:aa:d6:5c:c0:e1:5e:41:2e: e8:cb:c3:aa:f6:21:e3:04:d2:e1:3f:1e:3a:e0:ea:97:c5:2c: 79:72:6a:a3 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICDPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDMjcxMTAvBgNVBAUTKDU0NThDNDU2MjlDMTA0QUFBN0E1ODcyODY4NkY4RDFF Mjg3MkE5MkEwHhcNMjYwMTI4MTgxNTE3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGZlNC01YTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMXYmR3kxR+TCkyi3UuI50uw334zxr1Fr6jPJVx5u/sDu5u1tODI4HmPjW9x zxeWH6DPf41bpWl3fQZcYRlI3nY1MdezX26hxm/ewZ21XrNYBr/D6g0VAr5lNqGM LqRVKpSZfAR26ZI3T2RtreKV/n3Mg5YyejTfZ6AWaGBU1TbYzMgxPuHV7TQE1pqS aaatRZ7t/tBYrDkDKX6Og42WcaVpSBFwJuaYFJIx5nIEO7pS2cl0n2aEcloLOt4j v/0lgRCCj3VwQxsNh7pakCyPoFc9j/A72I2M6atGHgW8XjjqUYSzRrG+F/tpiCi7 2rXTRHW13Qsk3k3b/VhjyK20UwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFBjpqGXq B3RYtBJE3qQmBlUdya9OMB8GA1UdIwQYMBaAFFRYxFYpwQSqp6WHKGhvjR4ocqkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0MyNy82NUJCNDg5QzAw NEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJLcW5wWWNvYUctTkhpaHlx U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGakVWaW5CQktxbnBZY29hRy1OSGloeXFTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTNDMjcvNjVCQjQ4OUMwMDRBMTFFQTk4MEYyQTdDQzRGOUFFMDIvREIwMjBFOUMw MTBEMTFFQUE4MkFEODNDQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK+V8AwQCZ1BsMA0EAgACMAcDBQAkAFDAMA0GCSqGSIb3DQEBCwUA A4IBAQBbPyB/hIUfK5Y0jtsMLMcgrERiFEfKwXyc0VGxXrFdSV57aRxka+X/tYkH /cO/gllVc9TG36PNxj/YMpGhKlz8BGqa6KRAqLS/YomeWlRpga/BKdeizEuks6qS 1sWKlSFl1Em2hKSEoaxNTph56mzcc4+iRC4j8oCDFCxM48cKmpTEa4Y2dQWEzYXx ay1vrng1Vcgb13hHBcmP/PYvnJIicA4eOwquwhOPvWIOlux6F1JG1OnsyHH569Td wnpDCJxr0/J3HU1esy3DvT8ATe1KEYt1JfX3W6pRh1Cn5ZSMYKrAqtZcwOFeQS7o y8Oq9iHjBNLhPx464OqXxSx5cmqj -----END CERTIFICATE-----Generated at Tue Mar 3 01:48:29 2026 by rpki-client