$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/CCE5BAAA09D911EA80E56E21C4F9AE02.roa File: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (raw, json) Hash identifier: v8VLFEHYfImy14LaG54KuMHpNg3eB1auJxQ0qkii+Dc= Subject key identifier: 49:A2:57:A6:F8:2B:15:4C:49:AF:3A:1F:2D:C6:68:8B:0D:1B:05:A4 Certificate issuer: /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Certificate serial: 0CD4 Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/CCE5BAAA09D911EA80E56E21C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:35:55 +0000 ROA not before: Mon 06 Oct 2025 18:49:14 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132580 IP address blocks: 43.228.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3284 (0xcd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Validity Not Before: Oct 6 18:49:14 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a45cdb-f05f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5b:30:88:d3:3b:96:47:83:9d:ee:99:5f:0a: e9:0d:b8:f6:51:b1:cc:30:47:68:49:5b:ea:42:6c: 6e:59:11:7a:b0:c3:9d:fc:8a:95:9a:a6:15:c3:22: 2c:17:f8:94:d2:2d:02:83:dd:10:b9:1c:dd:85:cf: 0b:a8:66:15:4e:3d:cb:cb:0b:0d:f5:6b:fe:1e:22: df:72:fa:df:60:da:70:03:62:ad:7e:84:c3:cc:fb: ab:33:6c:01:9c:8b:6c:94:5a:71:96:db:68:be:e0: bc:35:8d:88:cb:6d:44:48:1e:61:03:a5:45:8e:54: 06:78:41:75:32:48:93:be:db:a2:93:78:6a:26:67: cd:f2:bd:26:0a:3d:32:f8:af:b2:a3:aa:ba:0b:07: 4d:9c:37:0c:c1:78:6c:d5:d0:e7:9d:09:c3:cc:95: 43:ac:b0:e5:38:a9:8c:4b:b6:18:0d:a1:a2:56:ac: de:bc:67:7f:56:9f:88:ef:96:87:ea:00:6c:f1:a4: 85:e4:dd:69:c9:21:81:c3:20:7f:57:13:11:84:a9: 51:c4:59:3f:f8:b8:b8:f7:94:d9:9d:dc:7f:21:a5: b0:89:bc:97:55:3e:03:b6:23:96:99:ab:48:23:63: 81:1c:7f:32:a7:ca:cc:13:a6:8e:2e:ed:b3:86:97: 8a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A2:57:A6:F8:2B:15:4C:49:AF:3A:1F:2D:C6:68:8B:0D:1B:05:A4 X509v3 Authority Key Identifier: keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/CCE5BAAA09D911EA80E56E21C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.228.211.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:ac:e5:de:48:ab:a4:83:81:6e:33:ce:07:77:34:95:63:cf: 69:03:f6:44:ea:fc:9d:84:62:7c:94:ad:72:8f:10:60:c2:b7: 1d:25:07:15:a3:90:a8:fb:63:0d:6a:f9:b9:69:c3:c0:79:1d: 8e:d3:e1:76:76:1c:b8:f7:56:ff:99:63:80:5a:b5:ec:cd:07: 43:41:f0:df:3c:dd:6a:b3:67:29:c5:11:94:49:6c:73:a6:3b: 5e:2f:58:e3:f0:02:05:41:6b:71:e6:0a:e7:df:99:60:1a:30: fe:ac:3d:8a:cf:e9:73:d2:4d:02:2a:c9:c4:91:86:b9:e9:44: 17:fe:ab:ad:a7:b3:8d:81:c0:06:d5:e0:28:2d:d6:e4:57:af: 45:68:e4:3d:6a:c8:ce:34:49:15:e6:e4:90:e4:87:53:05:ae: a8:af:07:8e:5c:e9:c2:80:20:df:5b:36:1d:04:2c:99:3c:9a: ea:eb:ed:ef:c8:7d:a3:12:50:9c:f9:a5:d0:65:42:ce:20:48: b0:f6:b7:dc:b7:49:65:74:61:df:ea:cb:b4:6b:09:3a:05:fe: 9a:49:fa:df:3f:e5:7d:95:9d:d0:be:9d:59:81:ad:c5:04:bd: 24:3e:db:a7:08:14:cf:98:e8:34:78:94:fc:6b:39:74:8b:7c: bd:3b:09:20 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDOTIxMTAvBgNVBAUTKDk0NUQwOTdGMjI2M0QxNEMzNkI3QjY1QzJEQzBDMjVG OUVFNzcxOTIwHhcNMjUxMDA2MTg0OTE0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWNkYi1mMDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylswiNM7lkeDne6ZXwrpDbj2UbHMMEdoSVvqQmxuWRF6sMOd/IqVmqYVwyIs F/iU0i0Cg90QuRzdhc8LqGYVTj3LywsN9Wv+HiLfcvrfYNpwA2KtfoTDzPurM2wB nItslFpxlttovuC8NY2Iy21ESB5hA6VFjlQGeEF1MkiTvtuik3hqJmfN8r0mCj0y +K+yo6q6CwdNnDcMwXhs1dDnnQnDzJVDrLDlOKmMS7YYDaGiVqzevGd/Vp+I75aH 6gBs8aSF5N1pySGBwyB/VxMRhKlRxFk/+Li495TZndx/IaWwibyXVT4DtiOWmatI I2OBHH8yp8rME6aOLu2zhpeKLwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEmiV6b4 KxVMSa86Hy3GaIsNGwWkMB8GA1UdIwQYMBaAFJRdCX8iY9FMNre2XC3Awl+e53GS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM5Mi8wRjREN0I0NjA5 RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBVdzJ0N1pjTGNEQ1g1N25j WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGMEpmeUpqMFV3MnQ3WmNMY0RDWDU3bmNaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkRDOTIvMEY0RDdCNDYwOUQ4MTFFQTlGRThEQjFFQzRGOUFFMDIvQ0NFNUJBQUEw OUQ5MTFFQTgwRTU2RTIxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK+TTMA0GCSqGSIb3DQEBCwUAA4IBAQAPrOXeSKukg4FuM84HdzSV Y89pA/ZE6vydhGJ8lK1yjxBgwrcdJQcVo5Co+2MNavm5acPAeR2O0+F2dhy491b/ mWOAWrXszQdDQfDfPN1qs2cpxRGUSWxzpjteL1jj8AIFQWtx5grn35lgGjD+rD2K z+lz0k0CKsnEkYa56UQX/qutp7ONgcAG1eAoLdbkV69FaOQ9asjONEkV5uSQ5IdT Ba6orweOXOnCgCDfWzYdBCyZPJrq6+3vyH2jElCc+aXQZULOIEiw9rfct0lldGHf 6su0awk6Bf6aSfrfP+V9lZ3Qvp1Zga3FBL0kPtunCBTPmOg0eJT8azl0i3y9Owkg -----END CERTIFICATE-----Generated at Mon Mar 2 07:39:43 2026 by rpki-client