$ rpki-client -vvf rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/134623AC931511F092E28818C4F9AE02.roa File: 134623AC931511F092E28818C4F9AE02.roa (raw, json) Hash identifier: iyYZOLCHI+6eiOwfh/n6f5Arvc+24pHjjpC5RazXrAA= Subject key identifier: E5:F1:42:7E:4C:14:48:6D:E4:A7:0C:3A:A3:E2:E1:D8:E4:1E:73:4C Certificate issuer: /CN=A9171155/serialNumber=AD3FA6AF80E37311D0B3AEC94A757E54463C49B7 Certificate serial: 5A Authority key identifier: AD:3F:A6:AF:80:E3:73:11:D0:B3:AE:C9:4A:75:7E:54:46:3C:49:B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/134623AC931511F092E28818C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:14:00 +0000 ROA not before: Mon 22 Sep 2025 18:46:34 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 154235 IP address blocks: 43.225.130.0/23 maxlen: 24 2402:2ba0::/32 maxlen: 32 2402:2ba0::/34 maxlen: 34 2402:2ba0:4000::/34 maxlen: 34 2402:2ba0:8000::/34 maxlen: 34 2402:2ba0:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171155, serialNumber=AD3FA6AF80E37311D0B3AEC94A757E54463C49B7 Validity Not Before: Sep 22 18:46:34 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a3f548-b9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c6:ce:c3:12:b2:73:85:97:02:2f:d7:37:63: 3d:c0:b8:5e:ec:f7:df:dc:a8:a4:bb:c5:97:3b:ed: 01:c7:c1:d2:e7:74:26:f6:0e:31:39:79:4d:b4:f5: 7d:19:2c:5c:96:33:4d:14:68:e0:a4:c9:5f:6f:f1: f8:cd:ff:96:90:a0:b1:4d:6e:da:87:b2:45:1e:78: 8c:0d:46:ef:ca:9c:22:43:a9:ce:a5:d0:5b:1e:95: 47:68:54:62:d6:33:7b:01:4c:b7:13:ae:53:b5:6a: d6:0b:51:dc:7f:bd:af:2e:b7:ff:5c:c9:23:ee:60: 03:ea:1b:e9:4d:2b:65:2b:43:72:31:d4:ab:3a:79: 74:0f:b4:3f:2c:85:7c:5f:95:ad:e4:dc:78:d0:1a: e1:ac:36:56:8c:c4:7b:5b:8e:ad:87:a4:01:b9:da: fa:36:33:d6:fe:c7:4f:b3:0b:3b:da:43:bb:47:4e: 38:5e:37:01:6c:14:53:67:f4:b0:2b:4b:8b:b9:3b: 8f:76:38:b3:c7:a7:32:e0:c5:b1:58:98:c4:af:fc: 3e:1c:a5:b0:12:2c:00:92:df:94:02:e7:97:19:0e: 03:20:c6:09:c3:c8:8e:49:59:d8:22:50:fa:30:ce: f9:b6:12:3d:d2:8e:cf:4e:e9:a1:00:5b:c9:55:ca: f7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F1:42:7E:4C:14:48:6D:E4:A7:0C:3A:A3:E2:E1:D8:E4:1E:73:4C X509v3 Authority Key Identifier: keyid:AD:3F:A6:AF:80:E3:73:11:D0:B3:AE:C9:4A:75:7E:54:46:3C:49:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/134623AC931511F092E28818C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.225.130.0/23 IPv6: 2402:2ba0::/32 Signature Algorithm: sha256WithRSAEncryption 32:e1:c4:94:71:91:35:22:41:86:c1:64:70:db:51:82:d7:59: 1a:d1:f0:9b:d2:41:d2:fd:4e:19:27:6e:5d:8a:ff:54:e4:4d: 03:cc:fc:99:2a:b1:5a:dd:96:4d:dd:f3:b6:cf:ad:42:c4:73: ce:04:c2:39:fd:ec:55:22:61:c5:e8:4c:83:8c:74:47:f9:2d: 10:6d:ef:25:cb:a1:2d:ae:9f:33:28:bc:63:35:78:c0:47:b4: 43:99:e1:e1:ae:2a:06:93:d2:68:88:7f:83:de:ea:87:30:e8: de:56:3e:01:a2:dd:ac:c9:b8:08:c2:16:25:fa:6d:80:f0:d2: df:51:12:d3:d2:7c:3f:d6:76:3a:7b:9a:d2:33:99:11:84:90: db:3b:23:fa:71:ed:46:60:a3:d1:a9:40:0a:1b:fd:72:22:54: 5e:1e:43:63:d5:70:c0:5d:0d:f8:45:da:3a:39:fa:8f:5d:e5: 13:c7:a1:91:cc:08:7a:60:f4:d4:dd:90:00:b9:25:22:70:ae: 6e:11:af:b8:c6:ea:d2:d4:7f:7f:13:88:7b:f1:e6:46:69:7c: 40:da:81:50:c1:3c:d0:a9:51:be:83:51:7c:e3:44:f5:1f:ee: d3:32:b8:1f:63:d6:3e:48:90:41:b8:78:9c:d0:bd:4e:7b:6e: 6b:c6:2b:50 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MTE1NTExMC8GA1UEBRMoQUQzRkE2QUY4MEUzNzMxMUQwQjNBRUM5NEE3NTdFNTQ0 NjNDNDlCNzAeFw0yNTA5MjIxODQ2MzRaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNmNTQ4LWI5ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsxs7DErJzhZcCL9c3Yz3AuF7s99/cqKS7xZc77QHHwdLndCb2DjE5eU209X0Z LFyWM00UaOCkyV9v8fjN/5aQoLFNbtqHskUeeIwNRu/KnCJDqc6l0FselUdoVGLW M3sBTLcTrlO1atYLUdx/va8ut/9cySPuYAPqG+lNK2UrQ3Ix1Ks6eXQPtD8shXxf la3k3HjQGuGsNlaMxHtbjq2HpAG52vo2M9b+x0+zCzvaQ7tHTjheNwFsFFNn9LAr S4u5O492OLPHpzLgxbFYmMSv/D4cpbASLACS35QC55cZDgMgxgnDyI5JWdgiUPow zvm2Ej3Sjs9O6aEAW8lVyvfFAgMBAAGjggJvMIICazAdBgNVHQ4EFgQU5fFCfkwU SG3kpww6o+Lh2OQec0wwHwYDVR0jBBgwFoAUrT+mr4DjcxHQs67JSnV+VEY8Sbcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxMTU1LzA5RDM2QzkwOTMw NTExRjBCRUVBQzYxMUM0RjlBRTAyL3JULW1yNERqY3hIUXM2N0pTblYtVkVZOFNi Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvclQtbXI0RGpjeEhRczY3SlNuVi1WRVk4U2JjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTE1NS8wOUQzNkM5MDkzMDUxMUYwQkVFQUM2MTFDNEY5QUUwMi8xMzQ2MjNBQzkz MTUxMUYwOTJFMjg4MThDNEY5QUUwMi5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE AgABMAYDBAEr4YIwDQQCAAIwBwMFACQCK6AwDQYJKoZIhvcNAQELBQADggEBADLh xJRxkTUiQYbBZHDbUYLXWRrR8JvSQdL9Thknbl2K/1TkTQPM/JkqsVrdlk3d87bP rULEc84Ewjn97FUiYcXoTIOMdEf5LRBt7yXLoS2unzMovGM1eMBHtEOZ4eGuKgaT 0miIf4Pe6ocw6N5WPgGi3azJuAjCFiX6bYDw0t9REtPSfD/Wdjp7mtIzmRGEkNs7 I/px7UZgo9GpQAob/XIiVF4eQ2PVcMBdDfhF2jo5+o9d5RPHoZHMCHpg9NTdkAC5 JSJwrm4Rr7jG6tLUf38TiHvx5kZpfEDagVDBPNCpUb6DUXzjRPUf7tMyuB9j1j5I kEG4eJzQvU57bmvGK1A= -----END CERTIFICATE-----Generated at Mon Mar 2 10:02:09 2026 by rpki-client