$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/9343CE6EE07211E7995BD42EC4F9AE02.roa File: 9343CE6EE07211E7995BD42EC4F9AE02.roa (raw, json) Hash identifier: zsd1YPRYIIbXeUvGCOJGUA1HAh90PsLIwSx0tabJHcU= Subject key identifier: 15:65:D0:24:D3:46:A6:E4:3C:80:7E:8E:78:54:E1:16:83:93:25:C5 Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Certificate serial: 355F Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/9343CE6EE07211E7995BD42EC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:58:26 +0000 ROA not before: Thu 31 Jul 2025 15:20:55 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 45437 IP address blocks: 14.1.16.0/22 maxlen: 22 14.1.16.0/24 maxlen: 24 45.116.108.0/22 maxlen: 24 103.16.96.0/22 maxlen: 24 103.210.76.0/22 maxlen: 24 103.228.213.0/24 maxlen: 24 103.228.214.0/24 maxlen: 24 103.228.215.0/24 maxlen: 24 114.141.96.0/20 maxlen: 24 203.170.88.0/23 maxlen: 23 2406:4d40::/32 maxlen: 32 2406:a800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13663 (0x355f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Validity Not Before: Jul 31 15:20:55 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a47032-5f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0b:ea:16:5a:6d:87:23:01:2d:d6:eb:57:da: d8:d6:f4:67:e2:60:09:e7:77:88:15:19:6a:59:a0: a8:52:84:eb:0f:01:8d:67:18:27:90:49:eb:af:15: 03:6c:3a:30:d4:a3:f0:28:90:70:96:76:c7:92:83: 53:ab:36:fc:b9:07:c4:1e:10:86:8e:09:e3:c2:e0: d2:da:3e:08:c2:5b:8d:b7:45:eb:30:49:c1:a0:a2: 1d:70:2a:6a:88:3d:7a:4c:79:3f:4f:d7:29:63:93: 4e:bf:66:25:ba:9a:ca:c9:bc:af:fa:53:8e:03:2e: 6b:81:e2:79:37:56:55:7d:df:21:d9:50:d0:0a:c7: 7d:f8:c8:6a:11:db:ad:a2:18:16:2e:12:84:05:9a: 68:be:a9:49:db:70:10:67:fb:d0:52:9a:fb:fd:51: a1:7a:71:17:e8:dc:13:9d:26:6c:c8:45:fa:0f:d8: cd:cc:9b:a8:3a:e6:74:12:e5:48:b5:8b:52:09:47: 01:82:13:30:4b:94:ac:d5:b7:9f:2a:0d:18:47:10: d9:5c:e9:44:43:0f:a2:c9:88:14:fa:fb:74:df:b3: a7:61:12:7c:92:32:9e:36:34:b6:b1:a4:59:c0:84: d2:b3:e0:50:49:81:23:f3:7c:c5:9f:ae:77:07:16: b7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:65:D0:24:D3:46:A6:E4:3C:80:7E:8E:78:54:E1:16:83:93:25:C5 X509v3 Authority Key Identifier: keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/9343CE6EE07211E7995BD42EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 14.1.16.0/22 45.116.108.0/22 103.16.96.0/22 103.210.76.0/22 103.228.213.0-103.228.215.255 114.141.96.0/20 203.170.88.0/23 IPv6: 2406:4d40::/32 2406:a800::/32 Signature Algorithm: sha256WithRSAEncryption 18:cf:70:ab:44:8f:80:2c:6c:ea:43:99:b7:29:36:76:17:02: bc:d3:55:b9:af:6b:c6:11:1b:92:9d:e3:34:6a:da:d8:39:a0: 0a:7f:97:9f:42:db:b6:13:44:94:be:3a:87:d2:bf:1a:0c:25: ff:a7:26:37:51:d5:c6:54:5d:19:1f:b3:58:5f:c3:95:b3:10: ce:1f:d3:0e:c7:e2:74:cf:21:83:7d:40:e6:a8:bc:3f:54:6c: 7a:06:a3:13:7e:2e:78:78:14:7c:38:ef:ec:f0:fe:f6:38:ea: d7:c0:05:4b:bd:44:de:2a:6c:cd:54:1a:f9:62:36:cf:93:77: bc:f6:12:30:72:e7:27:a4:19:6a:f1:7e:3b:fd:50:d8:29:d3: 49:6e:72:18:0b:d0:08:52:3d:ef:c2:c9:9a:f0:69:e8:7c:8f: c7:4b:e5:22:8c:5b:b2:fd:6f:ab:fb:93:19:ed:ab:3d:f5:84: c7:eb:32:0d:3b:74:01:c3:d7:31:8d:8f:c5:b3:f1:a5:f9:e1: a3:d7:56:3c:5b:68:3e:d5:1f:8d:64:1a:c9:8c:19:76:c7:29: fb:cd:98:e9:e0:9f:62:5e:bf:86:f5:f1:62:5b:fe:2a:68:55: ad:bd:6c:b6:23:1a:96:a2:a7:f2:62:8f:a9:0e:85:d3:ff:37: c8:f5:1e:8c -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgICNV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2M0MxMTAvBgNVBAUTKDI1ODVEQTBCOTgwQTQ3RkVCQTBFMjM1MjA1REVFRTQw MkYyMEIzQ0IwHhcNMjUwNzMxMTUyMDU1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzAzMi01ZjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgvqFlpthyMBLdbrV9rY1vRn4mAJ53eIFRlqWaCoUoTrDwGNZxgnkEnrrxUD bDow1KPwKJBwlnbHkoNTqzb8uQfEHhCGjgnjwuDS2j4IwluNt0XrMEnBoKIdcCpq iD16THk/T9cpY5NOv2YluprKybyv+lOOAy5rgeJ5N1ZVfd8h2VDQCsd9+MhqEdut ohgWLhKEBZpovqlJ23AQZ/vQUpr7/VGhenEX6NwTnSZsyEX6D9jNzJuoOuZ0EuVI tYtSCUcBghMwS5Ss1befKg0YRxDZXOlEQw+iyYgU+vt037OnYRJ8kjKeNjS2saRZ wITSs+BQSYEj83zFn653Bxa3FQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBVl0CTT RqbkPIB+jnhU4RaDkyXFMB8GA1UdIwQYMBaAFCWF2guYCkf+ug4jUgXe7kAvILPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjYzQy9CN0FDQzI2QzFE OTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1JfNjZEaU5TQmQ3dVFDOGdz OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZWGFDNWdLUl82NkRpTlNCZDd1UUM4Z3M4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUI2M0MvQjdBQ0MyNkMxRDk4MTFFMjhGMTBGMDgyMDhCMDJDRDIvOTM0M0NFNkVF MDcyMTFFNzk5NUJENDJFQzRGOUFFMDIucm9hMGEGCCsGAQUFBwEHAQH/BFIwUDA4 BAIAATAyAwQCDgEQAwQCLXRsAwQCZxBgAwQCZ9JMMAwDBABn5NUDBANn5NADBARy jWADBAHLqlgwFAQCAAIwDgMFACQGTUADBQAkBqgAMA0GCSqGSIb3DQEBCwUAA4IB AQAYz3CrRI+ALGzqQ5m3KTZ2FwK801W5r2vGERuSneM0atrYOaAKf5efQtu2E0SU vjqH0r8aDCX/pyY3UdXGVF0ZH7NYX8OVsxDOH9MOx+J0zyGDfUDmqLw/VGx6BqMT fi54eBR8OO/s8P72OOrXwAVLvUTeKmzNVBr5YjbPk3e89hIwcucnpBlq8X47/VDY KdNJbnIYC9AIUj3vwsma8GnofI/HS+UijFuy/W+r+5MZ7as99YTH6zINO3QBw9cx jY/Fs/Gl+eGj11Y8W2g+1R+NZBrJjBl2xyn7zZjp4J9iXr+G9fFiW/4qaFWtvWy2 IxqWoqfyYo+pDoXT/zfI9R6M -----END CERTIFICATE-----Generated at Mon Mar 2 07:10:35 2026 by rpki-client