$ rpki-client -vvf rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/62AC0F740B1511F189F6F0D93B3D8C67.roa File: 62AC0F740B1511F189F6F0D93B3D8C67.roa (raw, json) Hash identifier: 3cQBG+eCngkux1xOr3AWliZdBv2QypSCmE9xW1mHxwE= Subject key identifier: C2:B0:EF:10:F0:65:3A:5C:D1:4A:1E:6E:FB:15:2C:E8:70:42:76:D8 Certificate issuer: /CN=A9193045/serialNumber=66E85461BB352A498DB55703646305CA37E74FB4 Certificate serial: 0463 Authority key identifier: 66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/62AC0F740B1511F189F6F0D93B3D8C67.roa Signing time: Mon 02 Mar 2026 13:01:39 +0000 ROA not before: Mon 02 Mar 2026 01:23:49 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 131995 IP address blocks: 43.245.212.0/23 maxlen: 23 103.29.152.0/23 maxlen: 23 103.29.152.0/24 maxlen: 24 103.29.153.0/24 maxlen: 24 103.29.154.0/24 maxlen: 24 103.29.155.0/24 maxlen: 24 2401:af00::/32 maxlen: 32 2401:af00:9559::/48 maxlen: 48 2401:af00:95ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1123 (0x463) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193045, serialNumber=66E85461BB352A498DB55703646305CA37E74FB4 Validity Not Before: Mar 2 01:23:49 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a58a33-03ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e8:27:e2:41:d8:8c:91:ec:7e:97:0f:7a:41: 36:1f:0a:8a:f5:1c:7f:8d:aa:25:ce:eb:05:ee:a8: a6:45:b9:db:3c:cb:8e:4a:65:7a:dc:eb:77:3d:ac: fb:88:fc:1b:d5:d7:a1:b6:35:27:23:c5:c9:c9:eb: 24:25:24:21:6c:02:39:19:dd:d6:8e:b7:b8:67:85: fb:54:2b:47:22:40:9a:74:c5:1a:b8:53:8e:f8:79: 37:da:59:9a:51:ca:22:68:26:80:01:63:92:a0:02: 1a:ca:38:ed:c3:cd:90:90:84:c7:08:8f:04:2b:7f: c7:18:f5:c5:3a:a5:e2:db:b3:0d:13:48:bb:0d:5c: d1:53:12:7f:db:ec:76:58:47:ef:d5:26:22:6c:15: ca:42:e2:79:2a:ce:5f:54:8e:13:9c:34:6f:f6:a8: 9a:59:f0:b7:e2:3c:43:07:46:78:df:13:b9:1a:29: d7:48:1f:fd:05:77:70:92:51:a3:c7:12:8d:87:44: 57:c0:66:48:dd:15:2b:b8:ec:70:2a:41:b8:34:59: e9:b8:30:29:1e:00:a1:4b:95:cd:46:62:f0:53:61: b1:3b:8c:91:9a:05:28:e4:de:5e:4d:23:f3:4f:88: 71:3f:ec:3c:dd:2f:ab:21:06:fe:6e:1a:37:94:21: 9c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B0:EF:10:F0:65:3A:5C:D1:4A:1E:6E:FB:15:2C:E8:70:42:76:D8 X509v3 Authority Key Identifier: keyid:66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/62AC0F740B1511F189F6F0D93B3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 43.245.212.0/23 103.29.152.0/22 IPv6: 2401:af00::/32 Signature Algorithm: sha256WithRSAEncryption 14:74:c1:f5:26:d6:df:6b:80:6e:91:46:89:33:e9:d6:be:03: b6:ed:3e:a6:d0:0c:d6:83:56:5a:7b:75:09:8c:47:a3:1a:ef: 72:31:04:a0:11:84:15:a6:39:e9:5a:82:78:bf:f4:5e:b1:4e: 5a:e8:f2:e4:da:18:d9:33:ef:e2:f9:43:e8:ae:6a:9e:a8:fa: ed:c2:c6:d1:b2:5b:22:c7:ca:5c:d1:4a:55:cb:d9:11:a9:fb: 49:3c:96:5f:33:e3:6a:61:1b:39:fe:bb:e3:c5:d6:c4:97:38: 5a:67:c6:85:65:0d:45:d9:7c:5a:4a:56:01:d5:0e:e0:02:a8: 3a:02:f3:1c:30:27:f6:0b:08:62:3d:0c:24:55:a5:4f:a0:66: 30:0a:0e:d2:69:4b:cd:7e:2e:db:85:d7:ce:c7:1e:75:95:80: 10:b1:41:19:6a:9a:31:4f:8f:90:2f:33:59:d1:ba:d6:74:04: 47:27:67:32:9c:08:ce:29:3a:75:a7:5c:c9:e4:ad:47:90:30: eb:41:de:39:6a:a4:31:bf:7f:8d:2b:1d:29:e9:da:6d:47:e8: 7e:20:48:63:2e:f3:38:14:59:bc:92:3e:5d:c9:0a:09:03:bf: a3:b9:1e:15:46:03:8c:bc:2c:72:a2:39:57:3f:77:84:81:73: 6c:c6:b5:4b -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICBGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMwNDUxMTAvBgNVBAUTKDY2RTg1NDYxQkIzNTJBNDk4REI1NTcwMzY0NjMwNUNB MzdFNzRGQjQwHhcNMjYwMzAyMDEyMzQ5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGEzMy0wM2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Ogn4kHYjJHsfpcPekE2HwqK9Rx/jaolzusF7qimRbnbPMuOSmV63Ot3Paz7 iPwb1dehtjUnI8XJyeskJSQhbAI5Gd3Wjre4Z4X7VCtHIkCadMUauFOO+Hk32lma UcoiaCaAAWOSoAIayjjtw82QkITHCI8EK3/HGPXFOqXi27MNE0i7DVzRUxJ/2+x2 WEfv1SYibBXKQuJ5Ks5fVI4TnDRv9qiaWfC34jxDB0Z43xO5GinXSB/9BXdwklGj xxKNh0RXwGZI3RUruOxwKkG4NFnpuDApHgChS5XNRmLwU2GxO4yRmgUo5N5eTSPz T4hxP+w83S+rIQb+bho3lCGc3QIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFMKw7xDw ZTpc0UoebvsVLOhwQnbYMB8GA1UdIwQYMBaAFGboVGG7NSpJjbVXA2RjBco350+0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzA0NS9CRkFEQzYxMDlG MjkxMUVDOUMyRDY3ODVDNEY5QUUwMi9adWhVWWJzMUtrbU50VmNEWkdNRnlqZm5U N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1aFVZYnMxS2ttTnRWY0RaR01GeWpmblQ3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTMwNDUvQkZBREM2MTA5RjI5MTFFQzlDMkQ2Nzg1QzRGOUFFMDIvNjJBQzBGNzQw QjE1MTFGMTg5RjZGMEQ5M0IzRDhDNjcucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBK/XUAwQCZx2YMA0EAgACMAcDBQAkAa8AMA0GCSqGSIb3DQEBCwUA A4IBAQAUdMH1Jtbfa4BukUaJM+nWvgO27T6m0AzWg1Zae3UJjEejGu9yMQSgEYQV pjnpWoJ4v/ResU5a6PLk2hjZM+/i+UPormqeqPrtwsbRslsix8pc0UpVy9kRqftJ PJZfM+NqYRs5/rvjxdbElzhaZ8aFZQ1F2XxaSlYB1Q7gAqg6AvMcMCf2CwhiPQwk VaVPoGYwCg7SaUvNfi7bhdfOxx51lYAQsUEZapoxT4+QLzNZ0brWdARHJ2cynAjO KTp1p1zJ5K1HkDDrQd45aqQxv3+NKx0p6dptR+h+IEhjLvM4FFm8kj5dyQoJA7+j uR4VRgOMvCxyojlXP3eEgXNsxrVL -----END CERTIFICATE-----Generated at Mon Mar 2 23:51:48 2026 by rpki-client