$ rpki-client -vvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/31A1996898F711EEB7B27877C4F9AE02.roa File: 31A1996898F711EEB7B27877C4F9AE02.roa (raw, json) Hash identifier: hHCyyzGsEC8V5KG9Wg3TJOVPDzSEhYHLIpTWQTIziHs= Subject key identifier: 12:13:CE:34:2C:20:C3:95:E1:0F:EA:0B:18:EE:DD:9B:16:29:71:96 Certificate issuer: /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B Certificate serial: 01D6 Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/31A1996898F711EEB7B27877C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:05:10 +0000 ROA not before: Tue 17 Jun 2025 03:42:41 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 55532 IP address blocks: 43.245.40.0/24 maxlen: 24 43.245.41.0/24 maxlen: 24 43.245.42.0/24 maxlen: 24 43.245.43.0/24 maxlen: 24 103.1.192.0/24 maxlen: 24 103.1.193.0/24 maxlen: 24 103.1.194.0/24 maxlen: 24 103.1.195.0/24 maxlen: 24 202.9.94.0/23 maxlen: 24 203.25.173.0/24 maxlen: 24 2001:df0:a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158620, serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B Validity Not Before: Jun 17 03:42:41 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a43985-8dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4b:cc:f3:bf:1f:ce:25:cc:81:95:42:b5:dd: 04:ee:8b:ee:a8:d4:36:8f:e9:54:23:c4:0f:aa:92: e3:be:08:21:df:b7:bb:87:74:fe:df:d8:55:63:8e: 2e:74:00:9a:7c:e1:6f:2c:42:31:d7:94:8d:02:b0: 21:87:eb:1e:af:8d:e0:e5:53:32:bc:3a:49:0d:0b: 25:bd:37:f3:89:9b:43:3f:08:fc:2e:be:06:30:02: a4:6a:b7:29:dd:40:4b:db:56:84:e7:9c:22:4d:78: b3:70:74:9f:2a:0a:28:93:7b:43:f2:75:ff:40:2b: aa:32:73:7a:b9:39:bf:53:35:44:55:1d:1f:3e:6a: 09:c8:a8:c7:0e:37:93:55:91:15:fd:92:2f:63:0a: 8e:85:4a:31:60:ef:30:bd:6b:75:44:9e:ea:9e:87: eb:1c:02:8c:d8:14:fb:06:be:17:c0:9b:85:98:d2: e5:90:40:59:0d:25:2c:70:2c:e7:89:9f:73:a6:de: 79:99:98:0d:c8:a5:40:60:e5:f7:bd:6a:56:57:55: 7d:7d:05:95:c1:4a:81:8a:06:82:19:ef:8c:51:2f: 4b:2b:ad:ef:2f:ec:91:bf:1a:87:2a:68:db:34:23: 4b:61:3d:3a:10:79:1b:3f:c2:8b:d8:45:58:e5:ba: f0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:13:CE:34:2C:20:C3:95:E1:0F:EA:0B:18:EE:DD:9B:16:29:71:96 X509v3 Authority Key Identifier: keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/31A1996898F711EEB7B27877C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.40.0/22 103.1.192.0/22 202.9.94.0/23 203.25.173.0/24 IPv6: 2001:df0:a1::/48 Signature Algorithm: sha256WithRSAEncryption 07:4e:f3:58:b4:cd:e8:9a:05:ea:fe:d6:ab:76:5c:95:ed:bb: 48:aa:ac:e7:d7:11:43:19:ab:f8:51:f7:b5:a0:6b:77:d5:95: e9:6e:6a:63:61:37:bf:40:c6:6e:3c:6b:5b:f1:e7:b3:52:8e: 2d:2b:aa:f6:63:ec:32:f8:10:35:e9:ee:76:14:8c:96:25:e9: 06:9d:d5:26:62:f8:7a:54:a3:d3:4c:32:31:d6:5e:10:0a:03: 8e:2a:b5:e6:e5:f4:69:fe:f8:c1:ed:0e:c5:5b:0b:7b:ae:91: ea:ef:9d:70:26:bb:6d:ed:e5:f8:79:6d:0a:8b:ad:71:23:5e: 53:fe:96:8f:a1:6a:f7:c9:22:79:88:68:0c:7c:99:fa:e1:80: 1b:c9:16:d0:98:12:1d:af:47:77:7b:c8:81:6d:ec:bb:e2:16: f5:e3:f3:f9:03:45:56:f2:16:87:f0:4e:e5:4b:ba:35:7d:d9: e1:8a:ea:b5:e5:12:b6:da:d6:d5:a9:e7:c7:1f:a9:02:4a:06: dc:44:c6:cc:04:d2:2a:8d:fc:e8:f6:c2:e1:0e:b3:ef:98:73: 00:03:ae:01:6a:9c:21:31:0d:5e:89:79:28:a1:90:2b:5b:9f: 30:a2:e4:db:89:0b:67:da:d6:2d:45:31:22:2c:b5:e5:6e:9e: 37:e2:07:c8 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2MjAxMTAvBgNVBAUTKEE0MDhBQzk0QTBEMzM2RjQ3MzI0OTA1QTkxOEFGMjQ5 MDJGMERFOEIwHhcNMjUwNjE3MDM0MjQxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Mzk4NS04ZGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10vM878fziXMgZVCtd0E7ovuqNQ2j+lUI8QPqpLjvggh37e7h3T+39hVY44u dACafOFvLEIx15SNArAhh+ser43g5VMyvDpJDQslvTfziZtDPwj8Lr4GMAKkarcp 3UBL21aE55wiTXizcHSfKgook3tD8nX/QCuqMnN6uTm/UzVEVR0fPmoJyKjHDjeT VZEV/ZIvYwqOhUoxYO8wvWt1RJ7qnofrHAKM2BT7Br4XwJuFmNLlkEBZDSUscCzn iZ9zpt55mZgNyKVAYOX3vWpWV1V9fQWVwUqBigaCGe+MUS9LK63vL+yRvxqHKmjb NCNLYT06EHkbP8KL2EVY5brwpwIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFBITzjQs IMOV4Q/qCxju3ZsWKXGWMB8GA1UdIwQYMBaAFKQIrJSg0zb0cySQWpGK8kkC8N6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODYyMC8wRTkxOTkzNDg4 NDIxMUVFQTdEOEM4MTRDNEY5QUUwMi9wQWlzbEtEVE52UnpKSkJha1lyeVNRTHcz b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BBaXNsS0RUTnZSekpKQmFrWXJ5U1FMdzNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTg2MjAvMEU5MTk5MzQ4ODQyMTFFRUE3RDhDODE0QzRGOUFFMDIvMzFBMTk5Njg5 OEY3MTFFRUI3QjI3ODc3QzRGOUFFMDIucm9hMEIGCCsGAQUFBwEHAQH/BDMwMTAe BAIAATAYAwQCK/UoAwQCZwHAAwQBygleAwQAyxmtMA8EAgACMAkDBwAgAQ3wAKEw DQYJKoZIhvcNAQELBQADggEBAAdO81i0zeiaBer+1qt2XJXtu0iqrOfXEUMZq/hR 97Wga3fVleluamNhN79Axm48a1vx57NSji0rqvZj7DL4EDXp7nYUjJYl6Qad1SZi +HpUo9NMMjHWXhAKA44qtebl9Gn++MHtDsVbC3uukervnXAmu23t5fh5bQqLrXEj XlP+lo+havfJInmIaAx8mfrhgBvJFtCYEh2vR3d7yIFt7LviFvXj8/kDRVbyFofw TuVLujV92eGK6rXlErba1tWp58cfqQJKBtxExswE0iqN/Oj2wuEOs++YcwADrgFq nCExDV6JeSihkCtbnzCi5NuJC2fa1i1FMSIsteVunjfiB8g= -----END CERTIFICATE-----Generated at Mon Mar 2 07:52:19 2026 by rpki-client