$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/9C1DF7FC434311ECBE4BAA38C4F9AE02.roa File: 9C1DF7FC434311ECBE4BAA38C4F9AE02.roa (raw, json) Hash identifier: YbJqZlDc5DhntXvk0RSJHoPR1oURQ03ROlcVicrPr9A= Subject key identifier: 87:42:25:84:EF:31:19:E0:E2:2A:FA:86:5C:F4:54:35:7B:16:95:55 Certificate issuer: /CN=A916ED18/serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Certificate serial: 19DD Authority key identifier: 1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/9C1DF7FC434311ECBE4BAA38C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:42:36 +0000 ROA not before: Thu 24 Apr 2025 16:44:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132712 IP address blocks: 43.243.196.0/22 maxlen: 24 103.24.28.0/22 maxlen: 24 2406:a900::/32 maxlen: 32 2406:a900:103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6621 (0x19dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18, serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Validity Not Before: Apr 24 16:44:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4424c-c055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e9:0a:fe:e0:f7:d8:84:10:98:08:bc:47:93: df:71:a5:3d:05:39:88:71:2a:55:01:96:1c:29:f7: 09:d6:3e:a1:5f:fc:7e:63:04:41:d0:d0:a6:f6:37: d4:0d:5c:78:dc:af:83:2d:b1:c2:04:27:71:67:b1: e8:5f:cd:34:0a:e0:7b:e6:0a:c5:c4:f6:a4:0f:fd: 90:3e:45:2d:2c:60:d9:1d:16:8d:56:02:fc:ed:0a: 3d:d3:84:ec:43:fb:2d:d1:fb:69:e0:66:05:bb:82: eb:a4:81:2f:66:07:00:d2:db:9f:81:ef:bd:6a:ee: dc:89:c0:cd:a0:28:1e:b3:14:e8:4d:05:2b:96:7c: ab:16:b2:03:fd:cc:9a:67:22:0a:8f:c7:5c:27:b1: 46:36:bf:12:a7:7c:10:5d:74:52:e8:77:9a:47:0a: d8:24:80:2c:e6:b9:47:9f:a6:45:95:a7:5c:6b:c8: 3c:e3:eb:48:27:a4:07:68:6e:2b:ea:c9:a2:13:f2: 7c:e6:f7:4b:32:42:91:c4:37:d5:93:cb:55:5f:87: 6b:53:dc:21:ae:2d:6e:64:18:db:80:76:37:e5:a4: 29:fa:2f:85:1b:3e:8f:f4:b8:2d:f3:b1:5b:31:d2: c3:46:8f:33:a0:35:ca:47:3f:ec:3c:22:b7:7a:31: 72:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:42:25:84:EF:31:19:E0:E2:2A:FA:86:5C:F4:54:35:7B:16:95:55 X509v3 Authority Key Identifier: keyid:1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/9C1DF7FC434311ECBE4BAA38C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.243.196.0/22 103.24.28.0/22 IPv6: 2406:a900::/32 Signature Algorithm: sha256WithRSAEncryption 0f:3e:c8:e9:ba:2b:79:aa:20:ba:3a:28:ab:c5:3f:17:56:b5: dc:52:fa:91:61:19:65:26:0f:cd:c9:ca:69:97:99:3e:06:df: 4d:29:8d:36:17:4d:28:32:6f:54:94:54:d2:de:3b:48:74:01: 90:56:89:fd:c0:46:be:00:77:9c:8a:76:79:07:c0:8b:29:56: 0e:fa:ce:ec:80:f7:3a:16:4c:7e:9a:d3:ba:cf:7e:41:91:92: 04:27:d4:66:08:2d:3c:c3:1d:f4:0b:8e:b8:8c:d9:79:0f:bb: 4b:ac:17:69:ce:c2:17:e3:af:9a:4a:4e:93:35:fd:a1:e1:02: a4:e7:9c:19:85:6d:96:da:59:5a:35:ae:e0:c7:45:e6:76:c0: fe:7d:a5:55:fe:ca:46:67:e3:4d:72:8e:36:1a:d1:cf:6e:54: 7c:99:45:09:e8:43:27:62:70:f5:ad:f0:28:d1:b2:d0:fd:56: 47:48:28:e8:92:b9:30:16:0d:59:9a:67:48:6a:92:d0:24:a7: c4:a6:c1:14:cc:ca:87:91:a9:a0:40:fe:5c:6f:da:d4:07:8f: e5:0d:97:ee:a8:1d:b7:4d:15:74:1f:99:4d:2c:a3:38:d0:7f: 06:4d:69:e0:33:aa:11:c2:13:7b:2c:5e:29:07:6d:13:4d:59: 6e:0b:88:aa -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICGd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDFDNjJEQzFEODBDQkFCMDMwMzUzRTFGNTc0QjM2MDAx OThGQjZCNzEwHhcNMjUwNDI0MTY0NDMxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDI0Yy1jMDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtekK/uD32IQQmAi8R5PfcaU9BTmIcSpVAZYcKfcJ1j6hX/x+YwRB0NCm9jfU DVx43K+DLbHCBCdxZ7HoX800CuB75grFxPakD/2QPkUtLGDZHRaNVgL87Qo904Ts Q/st0ftp4GYFu4LrpIEvZgcA0tufge+9au7cicDNoCgesxToTQUrlnyrFrID/cya ZyIKj8dcJ7FGNr8Sp3wQXXRS6HeaRwrYJIAs5rlHn6ZFladca8g84+tIJ6QHaG4r 6smiE/J85vdLMkKRxDfVk8tVX4drU9whri1uZBjbgHY35aQp+i+FGz6P9Lgt87Fb MdLDRo8zoDXKRz/sPCK3ejFyDQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFIdCJYTv MRng4ir6hlz0VDV7FpVVMB8GA1UdIwQYMBaAFBxi3B2Ay6sDA1Ph9XSzYAGY+2tx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GRkZFQzExQTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9IR0xjSFlETHF3TURVLUgxZExOZ0Faajdh M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hHTGNIWURMcXdNRFUtSDFkTE5nQVpqN2EzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkVEMTgvRkZGRUMxMUE3QUY4MTFFNzg5OEE2RjJFQzRGOUFFMDIvOUMxREY3RkM0 MzQzMTFFQ0JFNEJBQTM4QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK/PEAwQCZxgcMA0EAgACMAcDBQAkBqkAMA0GCSqGSIb3DQEBCwUA A4IBAQAPPsjpuit5qiC6OiirxT8XVrXcUvqRYRllJg/Nycppl5k+Bt9NKY02F00o Mm9UlFTS3jtIdAGQVon9wEa+AHecinZ5B8CLKVYO+s7sgPc6Fkx+mtO6z35BkZIE J9RmCC08wx30C464jNl5D7tLrBdpzsIX46+aSk6TNf2h4QKk55wZhW2W2llaNa7g x0XmdsD+faVV/spGZ+NNco42GtHPblR8mUUJ6EMnYnD1rfAo0bLQ/VZHSCjokrkw Fg1ZmmdIapLQJKfEpsEUzMqHkamgQP5cb9rUB4/lDZfuqB23TRV0H5lNLKM40H8G TWngM6oRwhN7LF4pB20TTVluC4iq -----END CERTIFICATE-----Generated at Mon Mar 2 03:49:19 2026 by rpki-client