$ rpki-client -vvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa File: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (raw, json) Hash identifier: IJ2tS5zh75Ix9kpknsYxaCFNOcdydMZlDx/emMQgKZE= Subject key identifier: 37:2A:DF:F0:D3:2D:FA:28:45:B4:AA:DD:90:52:FB:E4:CA:B0:F7:3D Certificate issuer: /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Certificate serial: BC Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa Signing time: Sun 01 Mar 2026 08:05:41 +0000 ROA not before: Fri 09 May 2025 07:01:19 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135357 IP address blocks: 43.240.144.0/22 maxlen: 22 43.240.144.0/24 maxlen: 24 43.240.145.0/24 maxlen: 24 43.240.146.0/24 maxlen: 24 43.240.147.0/24 maxlen: 24 103.215.48.0/22 maxlen: 22 103.215.48.0/24 maxlen: 24 103.215.49.0/24 maxlen: 24 103.215.50.0/24 maxlen: 24 103.215.51.0/24 maxlen: 24 144.48.220.0/22 maxlen: 22 144.48.220.0/24 maxlen: 24 144.48.221.0/24 maxlen: 24 144.48.222.0/24 maxlen: 24 144.48.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Validity Not Before: May 9 07:01:19 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3f355-2f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5f:39:c3:6d:7a:c1:93:96:59:ec:f8:ec:60: 62:16:cc:d1:31:0c:73:43:81:ac:38:3d:34:38:8f: 4b:fc:7c:b1:60:aa:d1:b1:d8:0b:f6:83:e6:99:f7: 12:9f:5b:d6:d8:61:46:72:4d:78:e0:e6:3b:43:f7: 45:eb:33:d3:e4:e9:1b:79:9d:38:20:6b:c1:99:85: 4e:b5:aa:bb:3b:18:f3:f0:6e:81:d7:2b:5b:87:3e: 9b:95:b1:fd:eb:89:2c:e3:a0:58:83:03:b3:08:c9: 0c:c5:0c:36:4c:7a:a5:d6:94:bd:64:85:dd:3e:47: d2:ff:e9:89:a4:fd:74:30:a4:4a:03:c7:92:aa:20: bd:d2:71:70:b7:7f:ed:6c:89:69:74:0d:bb:ce:ac: 1b:50:ca:fe:0f:08:0a:60:8b:46:85:a8:ec:65:cb: cb:4f:5d:1b:89:23:dd:7c:60:40:5a:b0:e9:d8:5b: 5f:b2:9c:8a:b8:9d:f2:96:c0:41:31:8a:fb:2c:f8: 44:67:e7:2a:e2:cd:50:d0:d3:40:1f:bc:de:da:66: 9a:b9:6a:aa:b4:48:7c:4f:d6:5d:2e:58:7f:a7:40: 24:d9:c5:d1:25:dc:6e:b8:2a:c4:76:32:8f:78:84: 0d:ed:37:02:7f:4b:ea:34:01:ed:a5:bd:ff:f4:36: e9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2A:DF:F0:D3:2D:FA:28:45:B4:AA:DD:90:52:FB:E4:CA:B0:F7:3D X509v3 Authority Key Identifier: keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.240.144.0/22 103.215.48.0/22 144.48.220.0/22 Signature Algorithm: sha256WithRSAEncryption 22:f9:ce:62:99:5e:11:32:f6:09:a1:bf:4a:75:61:3d:d0:56: 5c:82:22:7e:55:d1:b0:c6:7e:c3:05:94:b8:87:38:9a:c6:5f: eb:0a:92:3c:fc:b4:0f:5e:dc:d8:02:0c:eb:9f:2c:0f:aa:d8: e5:10:15:74:07:8c:51:1a:35:02:b7:28:6d:05:94:55:de:e7: bb:65:b8:e9:42:d8:34:17:58:32:5d:8f:ad:60:a1:a2:17:03: 16:a5:2a:c0:b1:25:4d:91:94:48:8f:27:d7:42:32:46:ed:be: 82:b4:85:13:e1:2a:1a:2b:4f:70:5c:22:7f:9c:4e:8c:41:4f: e2:92:76:c6:23:a3:61:78:f5:be:c9:5e:83:6b:ee:b1:83:b6: 04:06:7f:55:22:88:36:c4:bf:b5:54:f2:31:87:83:66:d6:d9: e9:1f:05:6a:12:1d:4c:df:74:c2:6c:4a:d6:b6:3b:1e:52:cf: 4d:b1:21:79:fb:a9:8b:4b:84:e7:85:d9:63:04:bd:3f:9a:bd: 6b:19:8b:03:ae:0d:27:e1:53:3c:fe:c1:f2:57:44:72:6f:34: 40:a6:19:59:06:76:67:c6:a8:52:90:56:db:b8:a3:95:df:cb: 43:42:aa:b9:93:3c:61:77:bf:3a:9c:f3:25:58:03:97:46:1e: 79:52:90:4a -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI5NzQxMTAvBgNVBAUTKDkwQjJGMTJCRTdBNTg2NjNCRjE1REM3MTdFN0Q0MEIz MDI0MUI4RUEwHhcNMjUwNTA5MDcwMTE5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZjM1NS0yZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApV85w216wZOWWez47GBiFszRMQxzQ4GsOD00OI9L/HyxYKrRsdgL9oPmmfcS n1vW2GFGck144OY7Q/dF6zPT5OkbeZ04IGvBmYVOtaq7Oxjz8G6B1ytbhz6blbH9 64ks46BYgwOzCMkMxQw2THql1pS9ZIXdPkfS/+mJpP10MKRKA8eSqiC90nFwt3/t bIlpdA27zqwbUMr+DwgKYItGhajsZcvLT10biSPdfGBAWrDp2FtfspyKuJ3ylsBB MYr7LPhEZ+cq4s1Q0NNAH7ze2maauWqqtEh8T9ZdLlh/p0Ak2cXRJdxuuCrEdjKP eIQN7TcCf0vqNAHtpb3/9DbpUwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDcq3/DT LfooRbSq3ZBS++TKsPc9MB8GA1UdIwQYMBaAFJCy8SvnpYZjvxXccX59QLMCQbjq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk3NC9FNEU4OTAwRUZC NjUxMUVGOUJCQUVFNDlDNEY5QUUwMi9rTEx4Sy1lbGhtT19GZHh4Zm4xQXN3SkJ1 T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tMTHhLLWVsaG1PX0ZkeHhmbjFBc3dKQnVPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI5NzQvRTRFODkwMEVGQjY1MTFFRjlCQkFFRTQ5QzRGOUFFMDIvN0QxRjFGQkVG QjY2MTFFRkIxRkIwMjRCQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCK/CQAwQCZ9cwAwQCkDDcMA0GCSqGSIb3DQEBCwUAA4IBAQAi+c5i mV4RMvYJob9KdWE90FZcgiJ+VdGwxn7DBZS4hziaxl/rCpI8/LQPXtzYAgzrnywP qtjlEBV0B4xRGjUCtyhtBZRV3ue7ZbjpQtg0F1gyXY+tYKGiFwMWpSrAsSVNkZRI jyfXQjJG7b6CtIUT4SoaK09wXCJ/nE6MQU/iknbGI6NhePW+yV6Da+6xg7YEBn9V Iog2xL+1VPIxh4Nm1tnpHwVqEh1M33TCbErWtjseUs9NsSF5+6mLS4TnhdljBL0/ mr1rGYsDrg0n4VM8/sHyV0RybzRAphlZBnZnxqhSkFbbuKOV38tDQqq5kzxhd786 nPMlWAOXRh55UpBK -----END CERTIFICATE-----Generated at Mon Mar 2 09:18:37 2026 by rpki-client