$ rpki-client -vvf rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/E9689162C8FE11F0BCA3A555C4F9AE02.roa File: E9689162C8FE11F0BCA3A555C4F9AE02.roa (raw, json) Hash identifier: ivbdN4NvvnbB10SMOQMCGpQDBPImMhiYIJBpIIj7B+I= Subject key identifier: F6:D6:EC:FA:0D:F7:BE:D2:10:37:B5:4F:5B:06:20:F4:8C:ED:71:50 Certificate issuer: /CN=A919AE6A/serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2 Certificate serial: 3D Authority key identifier: F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/E9689162C8FE11F0BCA3A555C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:05:43 +0000 ROA not before: Mon 24 Nov 2025 06:29:21 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 154261 IP address blocks: 43.240.54.0/23 maxlen: 23 43.240.54.0/24 maxlen: 24 43.240.55.0/24 maxlen: 24 2001:df6:2540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AE6A, serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2 Validity Not Before: Nov 24 06:29:21 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a3d737-7cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5b:6c:76:1a:f1:68:5b:43:6f:25:95:b9:e5: 24:05:12:81:69:fb:73:c5:89:80:ba:02:54:a6:3d: 87:14:d5:b4:d4:13:0f:ed:b4:d0:06:32:a3:bb:dd: 49:fb:b7:5b:51:4c:cb:9f:64:d0:c4:ea:47:7c:b9: 03:4e:0d:21:7e:d4:0a:0c:4f:34:08:3f:e8:84:e6: f2:76:1d:62:bd:8d:68:fc:e2:02:01:cf:ab:39:d5: 5f:35:ac:09:d1:5a:31:b4:6b:9e:10:43:50:c7:14: 43:ce:55:98:ef:8c:b3:75:f5:1a:8e:94:ad:1d:a7: 81:64:d8:22:96:e4:36:23:18:af:0d:a8:ac:19:97: ae:db:fd:7e:49:55:78:27:55:0d:a2:2e:16:09:10: e3:92:d2:a1:22:1d:1c:a1:01:3a:60:2a:6d:25:d5: 1e:a3:9b:f7:d2:6a:b1:0b:31:2c:13:ee:4c:09:98: e2:ef:3e:ae:f5:99:5c:73:ca:07:2b:26:0c:18:7c: 87:64:fa:2f:0c:8e:e0:dd:e6:29:d5:11:1d:26:e7: b2:45:8d:3d:23:c4:f3:52:d7:b7:22:65:86:49:87: fc:ed:10:eb:49:ef:f8:ba:33:ab:e8:d5:4e:2e:f1: 76:67:16:6e:cd:d2:11:11:7f:b1:46:7d:7b:10:50: a4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D6:EC:FA:0D:F7:BE:D2:10:37:B5:4F:5B:06:20:F4:8C:ED:71:50 X509v3 Authority Key Identifier: keyid:F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/E9689162C8FE11F0BCA3A555C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.240.54.0/23 IPv6: 2001:df6:2540::/48 Signature Algorithm: sha256WithRSAEncryption 46:88:da:c4:73:69:78:f6:fb:b4:9d:0d:97:13:3e:2e:d0:58: eb:21:38:4f:7d:d2:62:3f:3e:cb:31:e1:5c:36:60:7f:89:2c: 74:04:45:77:9c:b8:91:06:af:b1:28:82:31:61:90:82:80:84: 4e:b2:4c:4c:01:b2:5c:a1:b4:ce:ad:65:c8:44:8b:50:49:8b: 10:56:96:57:c4:9f:21:a3:00:d7:e6:81:b2:6e:12:85:18:d9: 65:83:11:94:7c:39:1c:91:de:0b:1b:63:82:a5:49:58:fa:71: 02:33:cc:31:3c:be:d1:4d:39:bc:52:7b:3f:44:ae:b8:b7:94: 8f:61:c2:9f:5e:d6:c2:e3:b7:26:0e:36:f3:eb:7e:91:b0:ab: d0:4d:5b:de:8e:c8:a6:2e:7e:26:89:5e:5a:1b:82:0d:b7:9b: 18:fe:e4:13:9d:d5:2b:d8:c8:08:24:0c:e1:5e:0e:8a:39:10: d7:53:60:cc:cc:96:d2:74:a0:ab:37:4f:16:6b:42:55:a0:18: 0a:31:6a:b6:ab:08:ce:a7:ea:d1:91:f8:84:e5:2f:98:53:4b: d6:43:cd:d9:d4:0b:05:3d:86:b8:37:64:f1:b4:d0:8c:66:e1: 74:4d:67:dc:78:e2:30:01:9f:eb:1a:6a:8e:02:3f:bf:8b:e4: 87:e5:43:65 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QUU2QTExMC8GA1UEBRMoRjA1MjFBNUI2REIwNEQ3NTZGQTI5NTJBMEYyOUEzOTEy MTJDNThCMjAeFw0yNTExMjQwNjI5MjFaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNzM3LTdjZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyW2x2GvFoW0NvJZW55SQFEoFp+3PFiYC6AlSmPYcU1bTUEw/ttNAGMqO73Un7 t1tRTMufZNDE6kd8uQNODSF+1AoMTzQIP+iE5vJ2HWK9jWj84gIBz6s51V81rAnR WjG0a54QQ1DHFEPOVZjvjLN19RqOlK0dp4Fk2CKW5DYjGK8NqKwZl67b/X5JVXgn VQ2iLhYJEOOS0qEiHRyhATpgKm0l1R6jm/fSarELMSwT7kwJmOLvPq71mVxzygcr JgwYfIdk+i8MjuDd5inVER0m57JFjT0jxPNS17ciZYZJh/ztEOtJ7/i6M6vo1U4u 8XZnFm7N0hERf7FGfXsQUKSrAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQU9tbs+g33 vtIQN7VPWwYg9IztcVAwHwYDVR0jBBgwFoAU8FIaW22wTXVvopUqDymjkSEsWLIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBRTZBLzIxOUQ3RDhBQkMx MjExRjA4NTVGRDg3QUM0RjlBRTAyLzhGSWFXMjJ3VFhWdm9wVXFEeW1qa1NFc1dM SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEZJYVcyMndUWFZ2b3BVcUR5bWprU0VzV0xJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUU2QS8yMTlEN0Q4QUJDMTIxMUYwODU1RkQ4N0FDNEY5QUUwMi9FOTY4OTE2MkM4 RkUxMUYwQkNBM0E1NTVDNEY5QUUwMi5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE AgABMAYDBAEr8DYwDwQCAAIwCQMHACABDfYlQDANBgkqhkiG9w0BAQsFAAOCAQEA RojaxHNpePb7tJ0NlxM+LtBY6yE4T33SYj8+yzHhXDZgf4ksdARFd5y4kQavsSiC MWGQgoCETrJMTAGyXKG0zq1lyESLUEmLEFaWV8SfIaMA1+aBsm4ShRjZZYMRlHw5 HJHeCxtjgqVJWPpxAjPMMTy+0U05vFJ7P0SuuLeUj2HCn17WwuO3Jg428+t+kbCr 0E1b3o7Ipi5+JoleWhuCDbebGP7kE53VK9jICCQM4V4OijkQ11NgzMyW0nSgqzdP FmtCVaAYCjFqtqsIzqfq0ZH4hOUvmFNL1kPN2dQLBT2GuDdk8bTQjGbhdE1n3Hji MAGf6xpqjgI/v4vkh+VDZQ== -----END CERTIFICATE-----Generated at Mon Mar 2 04:09:02 2026 by rpki-client