$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9962AC546EEC11EC94B6572FC4F9AE02.roa File: 9962AC546EEC11EC94B6572FC4F9AE02.roa (raw, json) Hash identifier: 8HWWiXB+UuoS66yewJ6H0fyBFwU8le93jMP9pbAUeQI= Subject key identifier: 72:7B:6B:05:2F:B9:12:1A:3B:6B:E4:29:16:7D:63:38:FF:DA:FC:63 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D1E2 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9962AC546EEC11EC94B6572FC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:17:15 +0000 ROA not before: Thu 08 May 2025 15:58:07 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133248 IP address blocks: 43.225.248.0/24 maxlen: 24 43.225.249.0/24 maxlen: 24 43.225.250.0/24 maxlen: 24 43.225.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53730 (0xd1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:58:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4baeb-7472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2f:32:cd:d8:df:f3:be:20:39:d0:8a:79:3b: b4:41:70:ac:de:93:c7:dc:af:5b:0f:79:c0:ff:cd: 33:db:ae:da:b8:e5:02:b8:3d:c6:f6:3c:cb:0a:2f: e9:2e:1b:0c:54:1e:bf:3d:93:8b:2c:2a:57:01:d4: b5:f8:46:b8:7f:de:76:d2:ec:fc:cb:2d:ed:dc:53: 62:48:0b:56:ca:3a:e9:6e:b7:14:24:42:47:c3:07: c7:15:6b:bd:0b:55:b6:a1:04:0b:bd:46:99:de:9c: 60:47:35:47:ff:49:c4:aa:48:45:e5:f9:df:e6:cf: d2:d9:b1:d7:8e:35:0f:54:3e:38:65:91:c5:c7:1c: 55:08:fe:a7:31:26:1a:bb:49:f8:48:ef:c5:da:b5: ec:e0:6d:f6:53:68:22:60:dd:a4:22:88:1a:79:39: 7b:57:48:62:f6:70:2a:6a:5e:6c:d9:d3:96:bf:95: 86:5f:06:f0:2a:f6:49:b9:d7:cd:b1:b2:84:5e:39: 96:9a:d3:e8:03:91:fc:51:82:19:5c:8f:5b:47:da: 56:ac:ea:09:18:4a:e8:f5:9e:2c:1d:1d:bd:9e:6c: 42:74:04:aa:f3:0d:4a:86:42:61:dc:5d:a6:e1:93: 60:a8:16:d9:1b:f8:e3:2b:f0:e5:a8:cf:e9:05:90: 5d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7B:6B:05:2F:B9:12:1A:3B:6B:E4:29:16:7D:63:38:FF:DA:FC:63 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9962AC546EEC11EC94B6572FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.225.248.0/22 Signature Algorithm: sha256WithRSAEncryption 61:38:fb:6b:4d:5e:ef:d7:29:5b:85:c2:2e:c5:1e:61:ce:4b: 57:82:05:69:e1:c9:35:88:b1:a1:b9:83:73:e6:b9:22:64:a6: 39:c7:70:c4:f5:c1:90:6d:ad:a0:5b:eb:20:3c:f3:fe:9f:72: ab:14:d9:ac:f2:7f:dd:87:27:9b:2e:e7:f2:9b:c5:0e:74:bd: c0:30:e7:cd:95:e7:bd:bf:6f:f8:24:f8:9c:81:62:71:51:d0: 67:74:1c:8c:48:0f:00:df:d2:9b:d2:96:c2:84:5f:7b:b8:a6: 0c:bd:fe:f5:03:6b:85:13:de:3e:56:d6:90:cf:64:31:2c:88: 16:26:41:f2:33:b4:50:2f:0c:7c:fa:ea:70:b7:01:b7:bf:bd: a2:5b:33:5d:93:c2:66:9c:0a:8a:09:8d:63:99:46:3a:eb:b1: fa:b4:22:81:ea:81:78:6e:da:2c:ef:21:20:82:ec:d7:c2:8f: 21:b5:fb:9e:34:76:11:35:f0:42:ee:96:01:a4:9b:67:b3:e7: 3a:85:d6:35:ba:5d:04:7c:09:dc:8b:98:c5:e2:73:b9:c4:7e: 7c:32:a7:d7:a0:9e:1a:7e:ee:fd:eb:24:79:35:7a:b3:37:61: 6f:55:b1:f5:67:7c:24:3c:c3:05:ad:b1:11:2c:c4:f1:d9:2e: c3:2b:c4:5c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDANHiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTgwN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJhZWItNzQ3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsvMs3Y3/O+IDnQink7tEFwrN6Tx9yvWw95wP/NM9uu2rjlArg9xvY8ywov 6S4bDFQevz2TiywqVwHUtfhGuH/edtLs/Mst7dxTYkgLVso66W63FCRCR8MHxxVr vQtVtqEEC71Gmd6cYEc1R/9JxKpIReX53+bP0tmx1441D1Q+OGWRxcccVQj+pzEm GrtJ+Ejvxdq17OBt9lNoImDdpCKIGnk5e1dIYvZwKmpebNnTlr+Vhl8G8Cr2SbnX zbGyhF45lprT6AOR/FGCGVyPW0faVqzqCRhK6PWeLB0dvZ5sQnQEqvMNSoZCYdxd puGTYKgW2Rv44yvw5ajP6QWQXfcCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRye2sF L7kSGjtr5CkWfWM4/9r8YzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk5NjJBQzU0 NkVFQzExRUM5NEI2NTcyRkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAivh+DANBgkqhkiG9w0BAQsFAAOCAQEAYTj7a01e79cpW4XCLsUe Yc5LV4IFaeHJNYixobmDc+a5ImSmOcdwxPXBkG2toFvrIDzz/p9yqxTZrPJ/3Ycn my7n8pvFDnS9wDDnzZXnvb9v+CT4nIFicVHQZ3QcjEgPAN/Sm9KWwoRfe7imDL3+ 9QNrhRPePlbWkM9kMSyIFiZB8jO0UC8MfPrqcLcBt7+9olszXZPCZpwKigmNY5lG Ouux+rQigeqBeG7aLO8hIILs18KPIbX7njR2ETXwQu6WAaSbZ7PnOoXWNbpdBHwJ 3IuYxeJzucR+fDKn16CeGn7u/eskeTV6szdhb1Wx9Wd8JDzDBa2xESzE8dkuwyvE XA== -----END CERTIFICATE-----Generated at Mon Mar 2 11:06:23 2026 by rpki-client