$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/CD9372E687F811F0B5B27636C4F9AE02.roa File: CD9372E687F811F0B5B27636C4F9AE02.roa (raw, json) Hash identifier: Fyh7P6oqmOOyJ34gbgs/JxKWOwPEy0yGTJ3XbEdFAmc= Subject key identifier: B0:B6:09:C6:FF:4E:4A:EB:45:FF:D8:3B:B0:36:AD:21:18:5F:A2:8E Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 0243 Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/CD9372E687F811F0B5B27636C4F9AE02.roa Signing time: Mon 13 Apr 2026 04:38:05 +0000 ROA not before: Mon 13 Apr 2026 04:38:05 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 382 IP address blocks: 43.231.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Validity Not Before: Apr 13 04:38:05 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69dc732d-e9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:99:5b:60:06:3a:17:6d:e4:52:36:29:1a:26: 04:0b:4d:77:2d:f9:9b:73:cd:1e:f1:03:c8:9a:d6: 8d:d6:ff:aa:32:cc:1f:4f:49:84:f4:14:bf:61:d9: 33:5c:65:c5:93:40:74:0d:0c:db:d1:c1:4c:33:56: c3:3a:d4:1e:8e:ab:78:b9:9e:2c:af:65:f2:5b:75: 12:1f:d0:4a:d4:ba:8a:40:40:7a:b5:78:fc:71:ec: 9e:2d:22:97:fb:e7:6d:b6:09:46:27:b5:36:65:72: 00:eb:4a:ef:0d:fe:29:09:c8:d5:cc:3e:2c:bc:85: c2:b1:90:3f:4a:72:f9:88:97:f0:c2:fd:ff:af:bc: f6:0e:2c:a1:c1:a6:f0:22:13:48:a6:36:ee:8e:fa: 4b:2d:ab:a2:99:c2:e2:2c:73:07:d4:47:e2:1b:8d: a6:d8:bd:33:6f:f5:11:45:5b:e3:e5:32:c1:a3:2d: 7d:ef:21:5a:30:a3:ec:aa:03:0f:3e:0a:b3:a8:33: ca:b3:86:bd:92:05:4f:db:25:78:1c:9e:4b:b6:c4: 2a:20:9f:6e:6c:ee:de:ba:98:07:36:58:8a:3a:cc: 52:56:f0:ab:c3:17:d2:5b:6a:d2:95:0b:b1:8a:d0: 29:0b:bf:90:07:b0:c0:2f:ba:9a:81:96:9e:b6:23: 4a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B6:09:C6:FF:4E:4A:EB:45:FF:D8:3B:B0:36:AD:21:18:5F:A2:8E X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/CD9372E687F811F0B5B27636C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.231.207.0/24 Signature Algorithm: sha256WithRSAEncryption 71:d7:18:cc:20:20:b4:4d:4b:35:96:0e:0b:3b:d7:ea:9c:4c: 71:cb:db:69:04:6f:aa:71:1b:9c:c3:4a:6f:77:04:5f:cb:6e: ad:57:64:a4:c7:b5:6f:89:3b:08:45:f8:fa:54:f4:a5:a9:7a: 65:d6:02:bd:5c:89:b1:8d:4d:09:c7:89:df:29:3d:44:7f:e4: d5:ac:11:e4:7c:be:7f:54:da:0d:5c:95:d3:34:d4:a3:65:38: 6e:f2:03:41:7e:55:fc:50:47:6c:68:19:3c:b6:ff:3a:a0:9b: cc:ae:af:62:a3:a8:94:1c:8b:ca:ef:12:74:77:9e:cf:0b:e6: 35:eb:3f:8e:8b:d2:60:5c:07:87:52:3e:01:33:bd:0a:5f:66: 6a:5d:2f:a4:c8:3c:fa:68:f6:a7:2c:00:91:aa:0e:8f:3e:ef: db:fa:a2:4c:45:76:bf:74:64:ae:45:32:2c:65:3b:91:f1:40: 82:d4:60:c5:e2:3e:2e:c3:49:67:08:9a:67:9d:dc:c9:d8:62: 8c:6b:5f:e4:45:92:55:3d:48:43:bb:de:08:0a:87:b3:47:b8: 04:5c:a6:19:09:22:47:e3:20:1f:48:80:63:ae:2c:ed:28:64: c0:e9:ad:fd:0d:ce:62:4e:1e:f9:21:bc:7c:3f:1f:bd:32:da: 5e:29:09:63 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw MEQ3ODhCRkIwHhcNMjYwNDEzMDQzODA1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWRjNzMyZC1lOWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5lbYAY6F23kUjYpGiYEC013Lfmbc80e8QPImtaN1v+qMswfT0mE9BS/Ydkz XGXFk0B0DQzb0cFMM1bDOtQejqt4uZ4sr2XyW3USH9BK1LqKQEB6tXj8ceyeLSKX ++dttglGJ7U2ZXIA60rvDf4pCcjVzD4svIXCsZA/SnL5iJfwwv3/r7z2Diyhwabw IhNIpjbujvpLLauimcLiLHMH1EfiG42m2L0zb/URRVvj5TLBoy197yFaMKPsqgMP PgqzqDPKs4a9kgVP2yV4HJ5LtsQqIJ9ubO7eupgHNliKOsxSVvCrwxfSW2rSlQux itApC7+QB7DAL7qagZaetiNKiwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLC2Ccb/ TkrrRf/YO7A2rSEYX6KOMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTU2NDcvOTA1QzEwNDZGMzZGMTFFRTk5NzJFQjc5QzRGOUFFMDIvQ0Q5MzcyRTY4 N0Y4MTFGMEI1QjI3NjM2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK+fPMA0GCSqGSIb3DQEBCwUAA4IBAQBx1xjMICC0TUs1lg4LO9fq nExxy9tpBG+qcRucw0pvdwRfy26tV2Skx7VviTsIRfj6VPSlqXpl1gK9XImxjU0J x4nfKT1Ef+TVrBHkfL5/VNoNXJXTNNSjZThu8gNBflX8UEdsaBk8tv86oJvMrq9i o6iUHIvK7xJ0d57PC+Y16z+Oi9JgXAeHUj4BM70KX2ZqXS+kyDz6aPanLACRqg6P Pu/b+qJMRXa/dGSuRTIsZTuR8UCC1GDF4j4uw0lnCJpnndzJ2GKMa1/kRZJVPUhD u94ICoezR7gEXKYZCSJH4yAfSIBjriztKGTA6a39Dc5iTh75Ibx8Px+9MtpeKQlj -----END CERTIFICATE-----Generated at Sun Apr 19 11:30:35 2026 by rpki-client