$ rpki-client -vvf rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/52EF768073C511EB98AF9867C4F9AE02.roa File: 52EF768073C511EB98AF9867C4F9AE02.roa (raw, json) Hash identifier: Bm3y0DJFCkO/S/0sT/0qvItblZkyKv9YD3bBQrpZv2s= Subject key identifier: 04:6D:40:30:2C:8D:4F:95:2F:4B:EC:D0:9A:BC:4E:6B:6E:9B:10:64 Certificate issuer: /CN=A9185F82/serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Certificate serial: 0720 Authority key identifier: 81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/52EF768073C511EB98AF9867C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:30:52 +0000 ROA not before: Wed 24 Sep 2025 22:43:47 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132347 IP address blocks: 43.224.120.0/24 maxlen: 24 43.224.121.0/24 maxlen: 24 43.224.122.0/24 maxlen: 24 43.224.123.0/24 maxlen: 24 103.14.140.0/24 maxlen: 24 103.14.141.0/24 maxlen: 24 103.14.142.0/24 maxlen: 24 103.14.143.0/24 maxlen: 24 2404:ab00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 21:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1824 (0x720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185F82, serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Validity Not Before: Sep 24 22:43:47 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a4317c-f70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:aa:1c:dd:bb:d7:44:e8:a0:df:6b:43:97:48: 74:2f:21:be:73:ca:e5:52:d0:6e:42:6a:eb:1a:9e: 7f:38:12:98:06:45:5e:a1:7b:9a:1f:25:5d:9d:35: bd:37:b2:47:1f:cb:32:a4:02:45:03:c8:3d:29:db: d4:89:61:21:ba:43:22:1b:41:21:cd:a6:40:c5:bb: 78:f2:aa:a2:c4:42:5c:6a:f5:b7:d8:01:c5:3a:af: 88:02:82:90:c9:a9:68:d2:8f:3d:50:8a:71:82:b7: 40:f9:ff:7d:39:af:53:a4:7d:16:cc:f8:92:0f:0f: f5:0c:ff:d3:c1:fa:52:e2:a6:b0:d6:af:bf:32:29: 43:0f:40:15:cc:f5:aa:01:e1:b7:48:41:a8:6c:5b: 1d:ef:ee:70:f8:3e:1d:84:75:a5:33:0b:78:5e:c4: bd:38:1f:f0:1e:a9:1e:9b:6b:17:0c:c3:85:85:16: b9:78:2c:13:83:d2:c5:71:ce:10:ab:85:e5:ad:ab: 6e:0a:03:b1:fb:08:33:a1:f9:5e:2c:2c:41:04:d7: 26:10:ac:d2:a5:c9:fc:34:5d:da:46:f3:ad:5d:db: eb:a8:a2:68:10:fb:dd:c7:69:52:21:ad:e8:7a:09: 2c:52:29:95:cb:f6:c1:97:fd:87:56:d7:74:20:74: f5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6D:40:30:2C:8D:4F:95:2F:4B:EC:D0:9A:BC:4E:6B:6E:9B:10:64 X509v3 Authority Key Identifier: keyid:81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/52EF768073C511EB98AF9867C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.120.0/22 103.14.140.0/22 IPv6: 2404:ab00::/32 Signature Algorithm: sha256WithRSAEncryption 0a:7f:08:da:fe:e3:f9:64:00:2f:c4:3d:e1:72:9c:84:10:75: 2f:ea:03:b5:79:ee:5f:55:07:b0:55:ef:69:14:f8:66:ca:20: df:40:bd:76:65:47:e8:61:dc:01:2d:d9:eb:f9:83:d4:c6:dd: bf:60:06:24:a1:cc:13:04:4b:f4:78:34:df:99:cb:0f:df:35: e5:26:57:8a:13:a9:c2:d4:2f:dc:7b:ae:7a:2c:7c:c7:7c:ee: ec:79:93:2d:27:b1:5a:d9:7e:ae:31:ec:ab:69:b9:2f:68:25: b3:bc:5d:41:66:73:46:c1:99:6e:dd:0c:32:1d:e3:74:89:f8: 96:68:3d:62:2d:e3:54:5d:45:c5:2d:28:37:2d:0a:49:d8:e8: 2a:b8:e7:85:76:66:7c:38:b3:b0:74:92:39:07:23:68:b8:17: 15:46:a6:b7:d3:da:61:d9:02:07:ba:bb:06:f8:91:a6:92:cc: 28:7f:3c:88:b9:06:52:75:3e:a2:14:f6:3c:9e:38:85:03:6c: bb:87:53:c0:bb:34:3c:4a:21:4c:0f:fe:9e:87:ea:0c:ec:17: 43:e4:bd:15:66:bf:4b:45:a8:a3:83:25:3c:ea:d0:0b:47:fa: f8:e1:d9:c3:a8:cf:a5:14:49:f5:51:40:78:df:0a:0c:41:55: 90:10:6b:4d -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICByAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVGODIxMTAvBgNVBAUTKDgxMkM2MzVBQjgzMTI2NjE1RUM5MzQ0RTdFQzZFOTAy RURBQzY5RjUwHhcNMjUwOTI0MjI0MzQ3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzE3Yy1mNzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqoc3bvXROig32tDl0h0LyG+c8rlUtBuQmrrGp5/OBKYBkVeoXuaHyVdnTW9 N7JHH8sypAJFA8g9KdvUiWEhukMiG0EhzaZAxbt48qqixEJcavW32AHFOq+IAoKQ yalo0o89UIpxgrdA+f99Oa9TpH0WzPiSDw/1DP/TwfpS4qaw1q+/MilDD0AVzPWq AeG3SEGobFsd7+5w+D4dhHWlMwt4XsS9OB/wHqkem2sXDMOFhRa5eCwTg9LFcc4Q q4XlratuCgOx+wgzofleLCxBBNcmEKzSpcn8NF3aRvOtXdvrqKJoEPvdx2lSIa3o egksUimVy/bBl/2HVtd0IHT1cQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFARtQDAs jU+VL0vs0Jq8TmtumxBkMB8GA1UdIwQYMBaAFIEsY1q4MSZhXsk0Tn7G6QLtrGn1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUY4Mi80MDkxQkM3MDcz QzMxMUVCQjgzOUU2NjRDNEY5QUUwMi9nU3hqV3JneEptRmV5VFJPZnNicEF1MnNh ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dTeGpXcmd4Sm1GZXlUUk9mc2JwQXUyc2FmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODVGODIvNDA5MUJDNzA3M0MzMTFFQkI4MzlFNjY0QzRGOUFFMDIvNTJFRjc2ODA3 M0M1MTFFQjk4QUY5ODY3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK+B4AwQCZw6MMA0EAgACMAcDBQAkBKsAMA0GCSqGSIb3DQEBCwUA A4IBAQAKfwja/uP5ZAAvxD3hcpyEEHUv6gO1ee5fVQewVe9pFPhmyiDfQL12ZUfo YdwBLdnr+YPUxt2/YAYkocwTBEv0eDTfmcsP3zXlJleKE6nC1C/ce656LHzHfO7s eZMtJ7Fa2X6uMeyrabkvaCWzvF1BZnNGwZlu3QwyHeN0ifiWaD1iLeNUXUXFLSg3 LQpJ2OgquOeFdmZ8OLOwdJI5ByNouBcVRqa309ph2QIHursG+JGmkswofzyIuQZS dT6iFPY8njiFA2y7h1PAuzQ8SiFMD/6eh+oM7BdD5L0VZr9LRaijgyU86tALR/r4 4dnDqM+lFEn1UUB43woMQVWQEGtN -----END CERTIFICATE-----Generated at Tue Mar 3 04:25:35 2026 by rpki-client