$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/543CDDF0839011EAB5B82263C4F9AE02.roa File: 543CDDF0839011EAB5B82263C4F9AE02.roa (raw, json) Hash identifier: LPpHOK81C3pNsWyGa2Q2W3gfstRuGd26hh2KRKuaOPE= Subject key identifier: AA:B7:E2:72:34:CA:85:FC:AB:F2:B5:AE:4C:F1:76:6E:CA:18:64:FB Certificate issuer: /CN=A9195BA9/serialNumber=2245AD91543ADDAD78123DD415D659BB52D5FB62 Certificate serial: 0A5A Authority key identifier: 22:45:AD:91:54:3A:DD:AD:78:12:3D:D4:15:D6:59:BB:52:D5:FB:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/543CDDF0839011EAB5B82263C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:01:04 +0000 ROA not before: Tue 06 Jan 2026 19:16:39 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 134809 IP address blocks: 96.9.160.0/21 maxlen: 21 96.9.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.crl rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2650 (0xa5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=2245AD91543ADDAD78123DD415D659BB52D5FB62 Validity Not Before: Jan 6 19:16:39 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a462c0-e913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3d:22:ef:a2:1c:04:78:26:b4:be:3a:3a:18: 1d:5d:6f:b6:5e:a7:9c:38:aa:7f:7a:b8:b6:02:42: 0d:ee:1d:6c:0e:68:27:c1:aa:ef:5a:62:c4:9c:b7: 15:c4:c5:2b:e7:b7:4f:12:d0:25:98:41:69:a9:f1: 8c:7f:db:df:d0:c1:02:3a:e6:bc:f9:86:4f:99:c9: e0:c1:22:a6:78:67:15:c0:ce:fe:4f:9b:12:39:95: 24:fe:0a:98:34:dc:26:d5:92:b7:1c:19:b9:d1:ac: c1:7e:db:b9:96:1d:32:7f:33:cb:19:bd:9c:ee:a9: 61:8d:50:61:70:cb:3e:b1:68:ae:c7:e1:aa:8c:15: e5:34:3a:2f:8e:05:5b:19:82:fb:e9:2e:3a:17:f5: 34:26:d0:86:4d:5f:c8:4f:98:5a:5d:f5:58:eb:6a: a8:fb:96:02:62:33:6b:bd:c0:69:f7:07:dd:04:51: 90:dc:db:a2:6e:4c:d9:cf:bd:2c:6e:93:cf:55:90: a9:85:91:bb:87:6f:f1:2d:ed:29:c0:13:a7:21:da: 88:5e:bc:23:c4:90:98:5d:7c:11:fe:e2:6d:71:31: 61:94:8c:fb:33:2c:78:e5:17:87:97:33:c8:6b:9d: ae:0f:00:ac:8e:aa:d5:9d:8b:f5:1b:28:d5:5c:53: 35:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B7:E2:72:34:CA:85:FC:AB:F2:B5:AE:4C:F1:76:6E:CA:18:64:FB X509v3 Authority Key Identifier: keyid:22:45:AD:91:54:3A:DD:AD:78:12:3D:D4:15:D6:59:BB:52:D5:FB:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/IkWtkVQ63a14Ej3UFdZZu1LV-2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IkWtkVQ63a14Ej3UFdZZu1LV-2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/D891478C838E11EA8CEA0960C4F9AE02/543CDDF0839011EAB5B82263C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 96.9.160.0/20 Signature Algorithm: sha256WithRSAEncryption 6b:c4:1f:08:c4:9a:02:41:a1:a4:d2:2a:95:45:53:f7:83:6a: 5d:af:7b:12:ad:dd:ae:2f:ab:ea:44:d7:ce:7e:e7:c5:7d:3b: 95:59:80:e7:0c:63:f4:13:86:d8:c7:b9:cf:4b:ba:35:de:89: 8b:41:30:2b:d0:24:32:96:a4:4f:c8:b9:e5:1a:4a:91:96:5f: a6:4b:cd:d0:31:6e:14:e0:80:29:52:57:c5:82:92:c6:17:23: 44:eb:95:16:c9:d4:f0:54:38:c4:54:65:9a:71:55:80:e8:88: 7c:0c:4a:97:78:9a:c3:c7:c1:16:53:db:0f:53:6e:bb:40:94: cc:cb:3d:6e:af:b1:18:1b:b8:e5:21:0a:0b:ec:43:07:c7:b8: c2:49:a7:f8:a3:f1:c9:a2:22:a1:de:33:3a:1a:e0:8a:c6:22: dd:17:30:bb:6b:fd:87:50:bb:c0:ad:c3:6a:91:76:3b:8a:ad: eb:02:48:83:8b:68:a9:89:25:f2:ba:4e:0e:4b:27:f3:b4:e5: 90:f8:7c:94:7b:64:ba:66:54:d7:bc:90:9c:d2:bc:83:67:79: e1:cf:9b:9f:c4:f7:51:34:63:49:69:f6:ce:59:62:06:71:52: ba:6c:4c:5a:17:79:e8:5c:69:9f:ab:47:49:a8:8f:b1:3e:ba: 37:91:dd:99 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICClowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKDIyNDVBRDkxNTQzQUREQUQ3ODEyM0RENDE1RDY1OUJC NTJENUZCNjIwHhcNMjYwMTA2MTkxNjM5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjJjMC1lOTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyD0i76IcBHgmtL46OhgdXW+2XqecOKp/eri2AkIN7h1sDmgnwarvWmLEnLcV xMUr57dPEtAlmEFpqfGMf9vf0MECOua8+YZPmcngwSKmeGcVwM7+T5sSOZUk/gqY NNwm1ZK3HBm50azBftu5lh0yfzPLGb2c7qlhjVBhcMs+sWiux+GqjBXlNDovjgVb GYL76S46F/U0JtCGTV/IT5haXfVY62qo+5YCYjNrvcBp9wfdBFGQ3NuibkzZz70s bpPPVZCphZG7h2/xLe0pwBOnIdqIXrwjxJCYXXwR/uJtcTFhlIz7Myx45ReHlzPI a52uDwCsjqrVnYv1GyjVXFM1ewIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKq34nI0 yoX8q/K1rkzxdm7KGGT7MB8GA1UdIwQYMBaAFCJFrZFUOt2teBI91BXWWbtS1fti MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9EODkxNDc4Qzgz OEUxMUVBOENFQTA5NjBDNEY5QUUwMi9Ja1d0a1ZRNjNhMTRFajNVRmRaWnUxTFYt MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lrV3RrVlE2M2ExNEVqM1VGZFpadTFMVi0ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTVCQTkvRDg5MTQ3OEM4MzhFMTFFQThDRUEwOTYwQzRGOUFFMDIvNTQzQ0RERjA4 MzkwMTFFQUI1QjgyMjYzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEYAmgMA0GCSqGSIb3DQEBCwUAA4IBAQBrxB8IxJoCQaGk0iqVRVP3 g2pdr3sSrd2uL6vqRNfOfufFfTuVWYDnDGP0E4bYx7nPS7o13omLQTAr0CQylqRP yLnlGkqRll+mS83QMW4U4IApUlfFgpLGFyNE65UWydTwVDjEVGWacVWA6Ih8DEqX eJrDx8EWU9sPU267QJTMyz1ur7EYG7jlIQoL7EMHx7jCSaf4o/HJoiKh3jM6GuCK xiLdFzC7a/2HULvArcNqkXY7iq3rAkiDi2ipiSXyuk4OSyfztOWQ+HyUe2S6ZlTX vJCc0ryDZ3nhz5ufxPdRNGNJafbOWWIGcVK6bExaF3noXGmfq0dJqI+xPro3kd2Z -----END CERTIFICATE-----Generated at Mon Mar 2 07:39:33 2026 by rpki-client