$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/D7120558A7ED11EA95BED565C4F9AE02.roa File: D7120558A7ED11EA95BED565C4F9AE02.roa (raw, json) Hash identifier: v8/LA8iLDwEiTe0PXMCijlgf4PJo7BysQG01+COmlK0= Subject key identifier: 83:0E:EC:14:5B:E5:4F:32:28:C8:5D:30:68:33:1A:95:D9:31:72:92 Certificate issuer: /CN=A9161A58/serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8 Certificate serial: 09B5 Authority key identifier: B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/D7120558A7ED11EA95BED565C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:20:30 +0000 ROA not before: Sat 31 May 2025 20:26:47 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135386 IP address blocks: 43.230.204.0/22 maxlen: 22 43.230.204.0/24 maxlen: 24 43.230.205.0/24 maxlen: 24 43.230.206.0/24 maxlen: 24 43.230.207.0/24 maxlen: 24 103.50.16.0/22 maxlen: 22 103.56.44.0/22 maxlen: 22 103.56.44.0/24 maxlen: 24 103.56.45.0/24 maxlen: 24 103.56.46.0/24 maxlen: 24 103.56.47.0/24 maxlen: 24 103.79.240.0/24 maxlen: 24 103.79.241.0/24 maxlen: 24 103.79.242.0/24 maxlen: 24 103.79.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2485 (0x9b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A58, serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8 Validity Not Before: May 31 20:26:47 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a42f0e-b34a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6f:91:ad:40:72:fa:d8:7c:ef:94:4e:c2:ab: 56:fc:e2:5d:97:6f:2b:28:f6:e6:c7:47:a7:87:7f: 96:a2:a7:d4:b1:3c:cf:e5:43:ca:e1:22:0d:80:23: 55:4d:c7:fb:dc:8b:b6:41:07:69:16:f9:bf:23:e4: df:ac:20:44:e1:00:10:63:4b:22:51:c6:01:f7:b1: 31:e6:a4:16:0e:6a:29:77:6d:94:6e:2d:e9:b8:62: 60:e3:d3:ec:03:db:e0:3c:d3:dc:0b:79:a6:b3:88: 2e:a0:b7:c7:53:17:49:f1:2a:96:f0:23:c2:62:fb: 1c:a7:c9:e7:0f:38:f4:82:63:c3:26:ab:ed:57:75: 9d:c1:7d:6e:05:f8:c4:c1:2c:35:0b:60:e5:e8:ce: d5:fe:f2:6b:55:94:46:32:5c:80:1c:b2:ed:29:ed: 17:ac:7e:bf:5c:40:25:14:e5:fe:cb:33:db:69:06: 20:aa:9b:6a:8b:ac:bd:92:d4:9a:44:ea:a2:7c:db: b0:14:ce:18:10:8b:cb:51:51:36:b7:97:4b:ce:61: 4f:04:b3:c7:a6:5c:69:4f:84:d0:1d:69:5e:c5:26: 7a:58:e4:c5:2f:b2:25:5c:dd:da:dc:30:d2:52:d1: 89:3c:89:ed:2b:9c:69:2e:2a:fc:93:39:5a:c8:46: 42:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0E:EC:14:5B:E5:4F:32:28:C8:5D:30:68:33:1A:95:D9:31:72:92 X509v3 Authority Key Identifier: keyid:B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/D7120558A7ED11EA95BED565C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.230.204.0/22 103.50.16.0/22 103.56.44.0/22 103.79.240.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:de:25:5b:3d:91:07:84:f7:54:ea:e4:d3:03:d8:69:b7:8b: 45:69:5f:54:43:2a:4a:18:35:b7:bf:76:dc:5f:8f:1b:e1:55: 56:73:c7:d8:bd:9e:9c:be:83:66:f5:ee:56:8f:4b:34:3c:1c: 34:46:7c:f9:de:93:ef:87:05:57:15:df:3d:70:2d:c5:10:0c: 4b:cd:03:42:4d:b1:3f:a3:98:7d:d7:36:20:94:d9:54:6c:c1: a6:ff:b0:24:83:16:9e:6b:88:88:78:bb:65:81:e9:91:cf:8f: 6c:27:5a:c5:ad:bc:0c:7a:79:89:8c:6e:e9:c5:4a:da:02:d1: e7:08:52:da:a0:91:60:c6:94:24:b5:73:22:19:8c:da:d3:5d: 1e:19:d8:83:6c:9f:bf:dd:1c:3f:01:38:32:f2:e7:8e:da:f5: 03:1d:7b:85:a6:2b:14:2c:50:6c:79:45:e7:88:9a:6c:b4:de: 43:75:2d:dd:4f:f3:eb:32:c9:01:53:5d:e8:1b:02:1e:54:be: e6:0d:85:42:8c:0e:4a:bb:7a:27:2d:a5:59:ad:30:04:89:b8: 52:93:4b:dc:30:03:2c:51:6a:24:87:9a:c5:50:bb:5e:ab:b4: 30:7a:30:ef:e4:fa:af:12:d8:38:83:ef:17:2a:1a:57:17:09: c3:17:8b:8b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICCbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFBNTgxMTAvBgNVBAUTKEI0NjY5RDMwRDIxMEU0OTA3Q0QyODg4QkU3NEI4OUE2 REQzQ0I2QzgwHhcNMjUwNTMxMjAyNjQ3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmYwZS1iMzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2+RrUBy+th875ROwqtW/OJdl28rKPbmx0enh3+WoqfUsTzP5UPK4SINgCNV Tcf73Iu2QQdpFvm/I+TfrCBE4QAQY0siUcYB97Ex5qQWDmopd22Ubi3puGJg49Ps A9vgPNPcC3mms4guoLfHUxdJ8SqW8CPCYvscp8nnDzj0gmPDJqvtV3WdwX1uBfjE wSw1C2Dl6M7V/vJrVZRGMlyAHLLtKe0XrH6/XEAlFOX+yzPbaQYgqptqi6y9ktSa ROqifNuwFM4YEIvLUVE2t5dLzmFPBLPHplxpT4TQHWlexSZ6WOTFL7IlXN3a3DDS UtGJPIntK5xpLir8kzlayEZC3QIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFIMO7BRb 5U8yKMhdMGgzGpXZMXKSMB8GA1UdIwQYMBaAFLRmnTDSEOSQfNKIi+dLiabdPLbI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE1OC9CMzg5MzA0RUE3 RUMxMUVBODA0ODU4NjRDNEY5QUUwMi90R2FkTU5JUTVKQjgwb2lMNTB1SnB0MDh0 c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RHYWRNTklRNUpCODBvaUw1MHVKcHQwOHRzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjFBNTgvQjM4OTMwNEVBN0VDMTFFQTgwNDg1ODY0QzRGOUFFMDIvRDcxMjA1NThB N0VEMTFFQTk1QkVENTY1QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQCK+bMAwQCZzIQAwQCZzgsAwQCZ0/wMA0GCSqGSIb3DQEBCwUAA4IB AQAN3iVbPZEHhPdU6uTTA9hpt4tFaV9UQypKGDW3v3bcX48b4VVWc8fYvZ6cvoNm 9e5Wj0s0PBw0Rnz53pPvhwVXFd89cC3FEAxLzQNCTbE/o5h91zYglNlUbMGm/7Ak gxaea4iIeLtlgemRz49sJ1rFrbwMenmJjG7pxUraAtHnCFLaoJFgxpQktXMiGYza 010eGdiDbJ+/3Rw/ATgy8ueO2vUDHXuFpisULFBseUXniJpstN5DdS3dT/PrMskB U13oGwIeVL7mDYVCjA5Ku3onLaVZrTAEibhSk0vcMAMsUWokh5rFULteq7QwejDv 5PqvEtg4g+8XKhpXFwnDF4uL -----END CERTIFICATE-----Generated at Mon Mar 2 14:38:15 2026 by rpki-client