$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/D3A7743C19EA11EC9C11D95AC4F9AE02.roa File: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (raw, json) Hash identifier: u3QeAH/Xjc/phjAuXipIPbI5+ZQ8m+RjZgJwXpuM0m0= Subject key identifier: 57:3A:7C:1E:D8:DA:49:9C:08:FE:43:85:19:F1:9F:93:49:DA:DA:25 Certificate issuer: /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2 Certificate serial: 0597 Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/D3A7743C19EA11EC9C11D95AC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:59:48 +0000 ROA not before: Sat 11 Oct 2025 01:55:23 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 14537 IP address blocks: 45.127.116.0/22 maxlen: 24 103.81.128.0/22 maxlen: 23 103.81.129.0/24 maxlen: 24 103.81.130.0/23 maxlen: 24 124.109.4.0/22 maxlen: 23 124.109.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1431 (0x597) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186B80, serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2 Validity Not Before: Oct 11 01:55:23 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a45463-f6ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:48:4c:1b:a1:1f:ab:91:12:26:cd:ba:75:f5: 24:b6:06:88:1e:dd:5c:9c:36:30:2d:cb:18:4d:3f: 3d:af:db:d0:61:4b:63:16:5b:24:fc:1e:ba:41:71: 51:00:77:de:17:55:0c:99:8c:60:e9:2e:12:55:e6: 51:f4:97:73:c5:33:39:b7:fe:f1:6c:f1:cf:56:16: 59:14:ce:bb:33:52:58:17:17:2d:b5:48:b7:41:49: 2e:90:56:9b:80:94:a3:9e:bb:46:dd:9d:a8:91:f3: 0e:02:f9:8d:d9:b0:f5:5b:7e:ab:78:de:c1:a5:89: 45:f9:ec:dc:85:14:65:e4:2d:d4:51:db:04:99:13: 85:b7:35:9c:5a:74:10:7c:bc:26:06:db:03:e6:59: cd:06:80:c2:0e:fc:72:3a:c5:8d:ff:ae:9c:77:a4: a0:c2:9b:86:0e:04:2a:e1:21:49:24:51:a3:1d:9a: cb:ca:10:bf:75:dc:8c:c0:f1:8f:c2:dd:11:4a:07: 92:7c:fc:c6:da:ca:a2:c1:59:75:8b:1a:87:df:22: 66:94:d2:c9:5b:9b:dd:ef:51:07:e4:1f:f3:f2:79: 9f:e4:4e:37:ac:6a:ba:4a:ae:9d:6f:5c:1c:39:52: 65:64:46:99:ff:e2:64:59:3c:60:55:e9:75:4a:cb: c7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3A:7C:1E:D8:DA:49:9C:08:FE:43:85:19:F1:9F:93:49:DA:DA:25 X509v3 Authority Key Identifier: keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/D3A7743C19EA11EC9C11D95AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.127.116.0/22 103.81.128.0/22 124.109.4.0/22 Signature Algorithm: sha256WithRSAEncryption 04:fd:e6:d2:d6:78:7d:c2:ce:aa:35:cf:3d:04:33:31:6b:aa: cd:c8:d6:f9:5f:f9:55:36:f1:d7:fc:33:69:6f:d8:ea:f1:fd: d0:b0:20:35:70:35:b6:f1:66:2a:b5:6a:3b:8f:88:9e:32:8e: b5:77:d4:d0:eb:1d:f3:2f:26:fa:7f:df:53:20:8c:15:2e:38: d1:d1:9a:1c:ae:64:b6:48:1c:ca:e7:fc:83:88:e3:dd:58:00: 6b:ba:99:98:d9:75:e8:12:6c:6a:2c:b4:13:73:eb:dc:de:4f: 37:41:cc:9f:48:5d:54:75:89:3c:12:88:90:09:16:96:be:14: f5:61:1d:c7:1e:e5:22:a9:f9:cf:d7:05:5f:cb:f4:f7:bc:22: a1:b7:cd:09:c9:4a:ec:0d:45:e6:ee:81:4d:29:cb:f3:08:62: 9c:30:54:31:9d:86:0e:fc:94:b9:2b:d6:aa:b5:41:d9:76:75: d4:b1:1f:47:2f:69:19:cb:88:bb:53:94:7f:c0:4c:32:2a:02: de:ab:b6:a2:2a:1d:f0:cd:ef:6a:8b:d8:67:3a:7a:e7:b6:0f: 6e:87:44:d0:d2:88:e8:aa:f7:3c:5e:91:fc:e2:db:8d:5a:49: c3:a1:4d:d6:11:de:2e:d0:96:29:c9:82:73:63:e4:85:0d:4f: bb:b8:6d:17 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZCODAxMTAvBgNVBAUTKEE4RkMyNTlBMTAxRUFCODI2RUU4Q0JFQTJBMEJEQTVD REVDRkRBRjIwHhcNMjUxMDExMDE1NTIzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTQ2My1mNmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5EhMG6Efq5ESJs26dfUktgaIHt1cnDYwLcsYTT89r9vQYUtjFlsk/B66QXFR AHfeF1UMmYxg6S4SVeZR9JdzxTM5t/7xbPHPVhZZFM67M1JYFxcttUi3QUkukFab gJSjnrtG3Z2okfMOAvmN2bD1W36reN7BpYlF+ezchRRl5C3UUdsEmROFtzWcWnQQ fLwmBtsD5lnNBoDCDvxyOsWN/66cd6SgwpuGDgQq4SFJJFGjHZrLyhC/ddyMwPGP wt0RSgeSfPzG2sqiwVl1ixqH3yJmlNLJW5vd71EH5B/z8nmf5E43rGq6Sq6db1wc OVJlZEaZ/+JkWTxgVel1SsvHUQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFFc6fB7Y 2kmcCP5DhRnxn5NJ2tolMB8GA1UdIwQYMBaAFKj8JZoQHquCbujL6ioL2lzez9ry MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkI4MC9CODY5ODA1RTEy M0IxMUVDOEExMzVGNDJDNEY5QUUwMi9xUHdsbWhBZXE0SnU2TXZxS2d2YVhON1Ay dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FQd2xtaEFlcTRKdTZNdnFLZ3ZhWE43UDJ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODZCODAvQjg2OTgwNUUxMjNCMTFFQzhBMTM1RjQyQzRGOUFFMDIvRDNBNzc0M0Mx OUVBMTFFQzlDMTFEOTVBQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCLX90AwQCZ1GAAwQCfG0EMA0GCSqGSIb3DQEBCwUAA4IBAQAE/ebS 1nh9ws6qNc89BDMxa6rNyNb5X/lVNvHX/DNpb9jq8f3QsCA1cDW28WYqtWo7j4ie Mo61d9TQ6x3zLyb6f99TIIwVLjjR0ZocrmS2SBzK5/yDiOPdWABrupmY2XXoEmxq LLQTc+vc3k83QcyfSF1UdYk8EoiQCRaWvhT1YR3HHuUiqfnP1wVfy/T3vCKht80J yUrsDUXm7oFNKcvzCGKcMFQxnYYO/JS5K9aqtUHZdnXUsR9HL2kZy4i7U5R/wEwy KgLeq7aiKh3wze9qi9hnOnrntg9uh0TQ0ojoqvc8XpH84tuNWknDoU3WEd4u0JYp yYJzY+SFDU+7uG0X -----END CERTIFICATE-----Generated at Mon Mar 2 07:49:49 2026 by rpki-client