$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/7F7231ACE18011EF8702D74DC4F9AE02.roa File: 7F7231ACE18011EF8702D74DC4F9AE02.roa (raw, json) Hash identifier: W/zwkT3q1SimSGPL2qz0EdwTK1p2ucrY5Ozs9Diao7A= Subject key identifier: 66:26:0C:08:22:CD:C6:2B:4B:C1:44:BD:B2:52:CE:5F:33:E0:23:4C Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Certificate serial: 0E45 Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/7F7231ACE18011EF8702D74DC4F9AE02.roa Signing time: Thu 26 Mar 2026 18:22:44 +0000 ROA not before: Thu 26 Mar 2026 18:22:44 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 149765 IP address blocks: 43.246.200.0/24 maxlen: 24 43.246.201.0/24 maxlen: 24 103.109.56.0/24 maxlen: 24 103.109.57.0/24 maxlen: 24 103.109.59.0/24 maxlen: 24 103.111.13.0/24 maxlen: 24 2402:76c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3653 (0xe45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Validity Not Before: Mar 26 18:22:44 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69c57974-e28b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:76:a9:61:bb:92:8a:07:f7:a2:1d:41:97:ef: ba:0b:09:8b:c4:25:59:3b:44:84:94:1c:43:6b:69: 41:22:ce:38:79:c4:fe:1d:12:9c:19:7a:63:73:ac: a4:67:c0:d0:4a:53:13:e3:ea:43:43:0e:b0:dd:96: 7d:5b:c1:0d:04:bb:d1:01:e4:80:a5:c1:08:61:c3: d5:39:29:52:e5:02:90:39:19:c4:15:f5:ba:82:9f: c4:7d:17:48:d7:a5:25:5a:05:71:a2:b8:2c:c9:69: a2:0e:1e:5b:f2:87:22:b6:52:3e:e9:03:d9:bc:2e: f7:76:4b:0b:e0:ae:1b:2c:52:c9:f1:49:3e:76:50: 8e:f4:1a:4b:17:65:1c:7a:17:28:2c:b7:92:4f:4e: cf:8e:d3:61:13:fd:05:b2:d7:d3:94:6a:56:f6:19: 93:87:ee:6f:d1:c5:da:53:b4:bd:79:c5:fe:c2:f9: 4c:2f:0a:d2:55:f0:76:27:57:a5:48:2c:0a:c7:8e: bb:c6:11:36:73:87:d7:1c:b7:15:e1:7a:56:fb:af: 99:20:7a:47:ec:d1:0b:2b:9e:30:76:45:1f:c2:ad: 77:c3:ec:57:15:fc:9c:82:92:e5:ca:0d:5e:bf:94: e7:a8:10:1d:ca:ce:78:da:9c:43:11:7a:62:92:7f: 1b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:26:0C:08:22:CD:C6:2B:4B:C1:44:BD:B2:52:CE:5F:33:E0:23:4C X509v3 Authority Key Identifier: keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/7F7231ACE18011EF8702D74DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.246.200.0/23 103.109.56.0/23 103.109.59.0/24 103.111.13.0/24 IPv6: 2402:76c0::/32 Signature Algorithm: sha256WithRSAEncryption 24:e1:90:9b:cc:a4:56:46:29:41:a6:14:e5:a5:16:59:98:a8: bf:b9:be:d1:4a:84:17:24:16:9b:23:32:44:e5:1b:4d:eb:19: 3b:b3:1a:c9:7d:4e:ef:ca:52:85:34:ac:12:73:ab:fc:c9:d5: 8d:da:18:39:76:87:dd:ba:0f:3f:76:71:3f:4b:0a:ec:1b:1a: dd:9a:bf:da:df:f1:b5:eb:0d:0f:40:a9:36:87:6b:4b:9d:37: 9b:06:08:70:2d:e3:b8:e9:10:14:85:1b:73:fe:ad:68:99:50: f6:12:8c:70:76:f2:bd:b3:5d:3c:66:29:9b:64:5a:d3:10:eb: e7:dc:75:8a:db:df:12:c0:8b:9e:74:94:27:3a:8c:0b:9b:b9: e2:9a:db:bc:e1:c6:5c:16:2e:36:9b:3d:95:4b:91:57:02:d1: dc:d3:19:20:f8:fd:26:5e:95:76:7e:ba:eb:b4:16:49:9e:28: 05:0c:d3:85:c1:06:ec:2d:a3:39:39:7a:af:5b:57:7e:dc:5f: 4b:c0:04:58:3a:99:ec:01:34:b4:08:75:b1:ff:f0:e7:56:3f: 47:8c:6e:fd:6e:45:ab:4c:4a:fe:23:13:d8:2e:a3:36:94:76: 81:38:cb:ad:5d:60:11:69:f6:9a:2f:03:41:e3:39:c0:10:7d: 4f:a6:48:46 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICDkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1 MTJBMzNGNDEwHhcNMjYwMzI2MTgyMjQ0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWM1Nzk3NC1lMjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl3apYbuSigf3oh1Bl++6CwmLxCVZO0SElBxDa2lBIs44ecT+HRKcGXpjc6yk Z8DQSlMT4+pDQw6w3ZZ9W8ENBLvRAeSApcEIYcPVOSlS5QKQORnEFfW6gp/EfRdI 16UlWgVxorgsyWmiDh5b8ocitlI+6QPZvC73dksL4K4bLFLJ8Uk+dlCO9BpLF2Uc ehcoLLeST07PjtNhE/0FstfTlGpW9hmTh+5v0cXaU7S9ecX+wvlMLwrSVfB2J1el SCwKx467xhE2c4fXHLcV4XpW+6+ZIHpH7NELK54wdkUfwq13w+xXFfycgpLlyg1e v5TnqBAdys542pxDEXpikn8bJQIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFGYmDAgi zcYrS8FEvbJSzl8z4CNMMB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3 ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTg4NDcvRERGQkIwQjhENzgxMTFFOUI0MjNBQzRCQzRGOUFFMDIvN0Y3MjMxQUNF MTgwMTFFRjg3MDJENzREQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQBK/bIAwQBZ204AwQAZ207AwQAZ28NMA0EAgACMAcDBQAkAnbAMA0G CSqGSIb3DQEBCwUAA4IBAQAk4ZCbzKRWRilBphTlpRZZmKi/ub7RSoQXJBabIzJE 5RtN6xk7sxrJfU7vylKFNKwSc6v8ydWN2hg5dofdug8/dnE/SwrsGxrdmr/a3/G1 6w0PQKk2h2tLnTebBghwLeO46RAUhRtz/q1omVD2EoxwdvK9s108ZimbZFrTEOvn 3HWK298SwIuedJQnOowLm7nimtu84cZcFi42mz2VS5FXAtHc0xkg+P0mXpV2frrr tBZJnigFDNOFwQbsLaM5OXqvW1d+3F9LwARYOpnsATS0CHWx//DnVj9HjG79bkWr TEr+IxPYLqM2lHaBOMutXWARafaaLwNB4znAEH1PpkhG -----END CERTIFICATE-----Generated at Fri Apr 17 21:22:58 2026 by rpki-client