$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/57A84138605911EE8ABC9318C4F9AE02.roa File: 57A84138605911EE8ABC9318C4F9AE02.roa (raw, json) Hash identifier: M3/7gK5yasNkjST7Ays8iveBfXArPTJGdrFL1I2CXxU= Subject key identifier: 87:0D:F2:3C:1F:AF:6D:9C:8A:61:37:C5:AA:92:5B:67:C8:E0:FF:CE Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Certificate serial: 1301 Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/57A84138605911EE8ABC9318C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:55:00 +0000 ROA not before: Tue 06 Jan 2026 17:14:25 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 137074 IP address blocks: 43.224.188.0/22 maxlen: 24 43.226.4.0/22 maxlen: 24 103.18.64.0/22 maxlen: 24 103.43.212.0/22 maxlen: 24 103.104.16.0/22 maxlen: 24 103.113.40.0/22 maxlen: 24 116.89.246.0/23 maxlen: 24 203.28.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4865 (0x1301) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Validity Not Before: Jan 6 17:14:25 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a47d74-9350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1f:b8:78:60:37:c2:6f:1e:25:30:95:dd:f9: 27:ac:b3:c9:77:4a:90:9c:2b:83:6d:84:e1:fd:5a: 78:b6:29:fb:b2:a8:50:b4:45:c6:13:3d:5f:8a:18: 82:0a:fe:94:0f:76:87:65:39:a6:52:d7:27:6e:68: c7:0d:d5:7e:62:60:17:09:07:09:85:cd:b6:7d:2b: ad:a9:5a:13:6e:b0:12:05:9c:10:07:77:cd:0d:33: 2c:05:08:2d:9d:d2:f9:d6:70:c0:b8:cd:70:24:07: 28:0c:a0:c6:1b:51:03:75:e4:87:cc:3d:55:d2:0e: e0:bd:72:61:23:77:5d:9a:e9:f8:00:b8:b7:32:3d: ef:93:d0:04:1a:e1:99:45:3d:ff:6c:7d:57:ce:a6: 42:ed:b1:bd:c9:a1:ab:04:0d:70:da:09:3e:be:a4: 21:78:27:10:01:50:8f:f2:32:0a:12:0c:1f:4d:43: 35:44:6e:97:5c:f0:f6:00:2c:dd:0d:21:eb:0a:50: 2d:4e:3a:90:b1:0d:9a:9a:74:e2:8a:66:48:1b:ec: 07:96:1f:e1:65:fc:b7:ab:5b:94:44:f5:45:b2:f1: fb:0d:e5:ce:e7:87:e3:2a:f3:40:13:a4:b3:0e:e4: ab:1b:b1:e7:87:69:a2:5c:fa:d4:e0:7f:da:24:b8: cc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0D:F2:3C:1F:AF:6D:9C:8A:61:37:C5:AA:92:5B:67:C8:E0:FF:CE X509v3 Authority Key Identifier: keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/57A84138605911EE8ABC9318C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.188.0/22 43.226.4.0/22 103.18.64.0/22 103.43.212.0/22 103.104.16.0/22 103.113.40.0/22 116.89.246.0/23 203.28.64.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:7f:27:1e:28:15:c8:7c:09:99:b2:84:8a:ab:cc:07:c5:d5: bc:6a:13:ad:a5:68:4c:d2:f1:d2:e0:63:13:24:e1:29:22:34: f8:e1:19:d5:9d:90:4e:77:02:58:6b:fc:fb:18:79:00:84:ac: d6:c5:f4:93:e7:71:48:6a:b9:79:2f:54:f4:8c:0b:e2:da:77: de:67:b4:57:42:1f:6c:56:1f:9f:61:c4:ea:7d:6a:1e:6f:df: 7b:58:31:d8:2e:22:43:7e:24:e9:69:73:01:ce:05:a7:f3:44: 3c:45:df:83:07:c3:8b:ea:6c:6e:d4:5f:52:bb:55:27:a1:8d: d3:17:62:5f:2b:09:05:b8:60:e5:58:e8:e0:0a:40:8d:f9:65: 6f:31:96:da:c0:75:f2:b5:81:71:c3:1d:6c:7f:c0:9c:4a:0d: 1a:bc:ee:58:96:5b:d6:54:b8:a6:a8:de:3d:40:ae:ba:af:23: 16:04:03:d1:0e:b1:28:b5:49:7c:05:9e:a0:fe:9b:f4:02:be: 04:d1:6c:77:6a:d3:1d:c3:43:b2:20:e5:78:fc:6e:34:b7:c6: 34:ba:ea:da:e0:d9:32:0d:a7:93:51:21:82:85:4f:8f:12:69: 19:db:a1:30:ee:d4:20:81:a9:2e:1d:de:62:60:71:ca:40:14: 02:2b:a5:f5 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgICEwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy QkY2MEQ1MUUwHhcNMjYwMTA2MTcxNDI1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2Q3NC05MzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAth+4eGA3wm8eJTCV3fknrLPJd0qQnCuDbYTh/Vp4tin7sqhQtEXGEz1fihiC Cv6UD3aHZTmmUtcnbmjHDdV+YmAXCQcJhc22fSutqVoTbrASBZwQB3fNDTMsBQgt ndL51nDAuM1wJAcoDKDGG1EDdeSHzD1V0g7gvXJhI3ddmun4ALi3Mj3vk9AEGuGZ RT3/bH1XzqZC7bG9yaGrBA1w2gk+vqQheCcQAVCP8jIKEgwfTUM1RG6XXPD2ACzd DSHrClAtTjqQsQ2amnTiimZIG+wHlh/hZfy3q1uURPVFsvH7DeXO54fjKvNAE6Sz DuSrG7Hnh2miXPrU4H/aJLjMaQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFIcN8jwf r22cimE3xaqSW2fI4P/OMB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5 NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjQ4NjAvQjQwMUM5ODJFOTcwMTFFOEIwMzU5MzU5QzRGOUFFMDIvNTdBODQxMzg2 MDU5MTFFRThBQkM5MzE4QzRGOUFFMDIucm9hMEkGCCsGAQUFBwEHAQH/BDowODA2 BAIAATAwAwQCK+C8AwQCK+IEAwQCZxJAAwQCZyvUAwQCZ2gQAwQCZ3EoAwQBdFn2 AwQCyxxAMA0GCSqGSIb3DQEBCwUAA4IBAQA9fyceKBXIfAmZsoSKq8wHxdW8ahOt pWhM0vHS4GMTJOEpIjT44RnVnZBOdwJYa/z7GHkAhKzWxfST53FIarl5L1T0jAvi 2nfeZ7RXQh9sVh+fYcTqfWoeb997WDHYLiJDfiTpaXMBzgWn80Q8Rd+DB8OL6mxu 1F9Su1UnoY3TF2JfKwkFuGDlWOjgCkCN+WVvMZbawHXytYFxwx1sf8CcSg0avO5Y llvWVLimqN49QK66ryMWBAPRDrEotUl8BZ6g/pv0Ar4E0Wx3atMdw0OyIOV4/G40 t8Y0uura4NkyDaeTUSGChU+PEmkZ26Ew7tQggakuHd5iYHHKQBQCK6X1 -----END CERTIFICATE-----Generated at Mon Mar 2 17:30:15 2026 by rpki-client