$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/5B7F22440AF811ECB423A671C4F9AE02.roa File: 5B7F22440AF811ECB423A671C4F9AE02.roa (raw, json) Hash identifier: 9GVylNABRiUF/bNFB+XBrQ4aT79hVzEVLhbNM6JQTPs= Subject key identifier: 07:06:F8:56:A8:0B:DA:C3:B0:AE:F7:51:7B:A5:FF:27:6C:A7:42:B1 Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Certificate serial: 288D Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/5B7F22440AF811ECB423A671C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:48:33 +0000 ROA not before: Thu 12 Feb 2026 07:38:05 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 17470 IP address blocks: 43.252.12.0/22 maxlen: 22 43.252.12.0/24 maxlen: 24 43.252.13.0/24 maxlen: 24 43.252.14.0/24 maxlen: 24 43.252.15.0/24 maxlen: 24 103.247.48.0/22 maxlen: 22 103.247.48.0/24 maxlen: 24 103.247.49.0/24 maxlen: 24 103.247.50.0/24 maxlen: 24 103.247.51.0/24 maxlen: 24 203.189.184.0/21 maxlen: 21 203.189.184.0/24 maxlen: 24 203.189.185.0/24 maxlen: 24 203.189.186.0/24 maxlen: 24 203.189.187.0/24 maxlen: 24 203.189.188.0/24 maxlen: 24 203.189.189.0/24 maxlen: 24 203.189.190.0/24 maxlen: 24 203.189.191.0/24 maxlen: 24 2404:8a00::/48 maxlen: 48 2404:8a00:64::/48 maxlen: 48 2404:8a00:65::/48 maxlen: 48 2404:8a00:66::/48 maxlen: 48 2404:8a00:67::/48 maxlen: 48 2404:8a00:68::/48 maxlen: 48 2404:8a00:69::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10381 (0x288d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Validity Not Before: Feb 12 07:38:05 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a47bf1-ce09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:7b:30:91:86:e0:07:64:a3:24:cb:5c:39: eb:6b:28:08:a9:9b:9a:3c:63:9e:aa:f6:bb:a2:b9: 89:c8:20:31:da:4c:9e:39:ef:41:aa:7c:07:47:24: 2e:aa:20:9a:da:b5:b6:15:a9:ed:fb:16:7d:ce:74: ad:1a:66:3f:e6:8d:3c:c4:ee:6b:18:54:e6:df:3a: 17:f8:34:a4:f7:0e:5a:d2:00:00:4e:d8:32:ec:58: 9c:0f:07:84:76:bf:ea:07:3e:98:3a:19:3d:70:17: 9d:81:a1:18:5e:bc:db:fd:2b:01:37:b3:d9:90:ac: ed:23:ce:e1:1e:7f:d2:25:e6:d4:58:86:59:17:51: 7c:23:66:1d:0a:f0:fd:54:30:1e:04:de:5e:e3:24: 69:f9:d5:b2:cd:39:86:5a:73:31:2b:1b:1a:a2:46: dc:97:54:b1:66:90:3a:f4:eb:64:30:03:63:15:8e: 05:4f:69:d1:70:92:96:0b:c1:8f:9b:85:63:15:be: 82:92:84:da:a3:b7:5b:3f:dc:03:dc:34:eb:f1:b7: 55:50:6c:49:5c:f6:be:3e:eb:ac:6e:73:68:85:aa: e1:b3:a9:53:be:48:f7:a9:0e:50:6c:09:0c:d3:55: 87:85:2e:ae:67:de:41:52:55:10:b5:b8:6e:2c:ce: c4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:06:F8:56:A8:0B:DA:C3:B0:AE:F7:51:7B:A5:FF:27:6C:A7:42:B1 X509v3 Authority Key Identifier: keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/5B7F22440AF811ECB423A671C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.252.12.0/22 103.247.48.0/22 203.189.184.0/21 IPv6: 2404:8a00::/48 2404:8a00:64::-2404:8a00:69:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 06:8b:c0:fe:1f:4c:af:38:bd:87:d5:d8:ff:f3:67:1e:19:77: ee:ec:19:4d:10:a2:0f:45:b5:38:69:c0:e9:ed:4a:bb:85:69: df:68:2c:25:d2:63:9a:a8:50:c4:2b:8a:08:6b:b7:3d:c7:db: 32:43:34:5f:66:bb:24:54:9d:e0:00:12:78:d8:c5:57:ec:34: 6b:0a:7b:03:23:48:6b:f7:33:15:3c:ee:b9:0c:18:3b:cf:da: de:5f:ab:94:f3:b5:14:ef:4b:3c:6c:20:42:40:5d:92:0d:9e: 3c:52:18:5e:7b:42:15:f8:66:df:7a:04:60:0a:29:14:3f:c6: 61:48:e0:e6:78:0b:fd:77:46:3d:cd:08:34:38:80:e6:60:14: db:98:70:45:69:fc:24:3d:0c:ce:cc:58:42:77:f5:68:31:28: ee:12:66:36:ba:b5:17:4e:db:4f:07:8e:cc:fe:eb:2d:4f:20: 05:2a:67:f3:1d:d3:23:c1:3c:49:17:73:fe:d4:9c:7e:d1:14: ce:25:b8:3b:65:07:30:90:23:01:eb:7b:c0:f3:09:f1:bc:35: 2c:68:09:63:5c:cb:4e:75:6c:47:7a:92:95:3d:00:31:64:15: 35:1f:a1:77:da:db:0f:1b:97:53:67:94:b7:b7:b8:37:be:79: 17:5e:de:62 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgICKI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2 QzdDMjA2NTAwHhcNMjYwMjEyMDczODA1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2JmMS1jZTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusJ7MJGG4AdkoyTLXDnraygIqZuaPGOeqva7ormJyCAx2kyeOe9BqnwHRyQu qiCa2rW2Fant+xZ9znStGmY/5o08xO5rGFTm3zoX+DSk9w5a0gAATtgy7FicDweE dr/qBz6YOhk9cBedgaEYXrzb/SsBN7PZkKztI87hHn/SJebUWIZZF1F8I2YdCvD9 VDAeBN5e4yRp+dWyzTmGWnMxKxsaokbcl1SxZpA69OtkMANjFY4FT2nRcJKWC8GP m4VjFb6CkoTao7dbP9wD3DTr8bdVUGxJXPa+PuusbnNoharhs6lTvkj3qQ5QbAkM 01WHhS6uZ95BUlUQtbhuLM7E5QIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFAcG+Fao C9rDsK73UXul/ydsp0KxMB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRBNkIvNzUyNDRCNjJBMTYzMTFFNEI5NjZERDBGQzRGOUFFMDIvNUI3RjIyNDQw QUY4MTFFQ0I0MjNBNjcxQzRGOUFFMDIucm9hMFAGCCsGAQUFBwEHAQH/BEEwPzAY BAIAATASAwQCK/wMAwQCZ/cwAwQDy724MCMEAgACMB0DBwAkBIoAAAAwEgMHAiQE igAAZAMHASQEigAAaDANBgkqhkiG9w0BAQsFAAOCAQEABovA/h9Mrzi9h9XY//Nn Hhl37uwZTRCiD0W1OGnA6e1Ku4Vp32gsJdJjmqhQxCuKCGu3PcfbMkM0X2a7JFSd 4AASeNjFV+w0awp7AyNIa/czFTzuuQwYO8/a3l+rlPO1FO9LPGwgQkBdkg2ePFIY XntCFfhm33oEYAopFD/GYUjg5ngL/XdGPc0INDiA5mAU25hwRWn8JD0MzsxYQnf1 aDEo7hJmNrq1F07bTweOzP7rLU8gBSpn8x3TI8E8SRdz/tScftEUziW4O2UHMJAj Aet7wPMJ8bw1LGgJY1zLTnVsR3qSlT0AMWQVNR+hd9rbDxuXU2eUt7e4N755F17e Yg== -----END CERTIFICATE-----Generated at Mon Mar 2 18:25:12 2026 by rpki-client