$ rpki-client -vvf rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/74087358355111E99EC82E0AC4F9AE02.roa File: 74087358355111E99EC82E0AC4F9AE02.roa (raw, json) Hash identifier: 24e0wUeqirfw8YK8UbxY/Mf86F6th/m2omMNiomkb4g= Subject key identifier: 25:12:8B:42:5C:2F:DB:CA:28:74:A1:B9:B2:17:EF:7E:45:9C:9F:72 Certificate issuer: /CN=A919D49F/serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Certificate serial: 10F8 Authority key identifier: 70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/74087358355111E99EC82E0AC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:47:46 +0000 ROA not before: Thu 30 Oct 2025 17:36:16 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132449 IP address blocks: 43.249.196.0/24 maxlen: 24 43.249.197.0/24 maxlen: 24 43.249.198.0/24 maxlen: 24 43.249.199.0/24 maxlen: 24 103.21.172.0/23 maxlen: 23 103.21.174.0/24 maxlen: 24 103.21.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4344 (0x10f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D49F, serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Validity Not Before: Oct 30 17:36:16 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a44381-bfe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5c:23:ad:4d:26:72:67:e2:23:00:71:6b:1d: 58:a9:c2:a5:4d:9c:83:69:61:c4:fa:f3:0b:16:77: dd:97:dc:48:49:78:02:cd:33:df:7a:87:dd:ea:20: 35:cb:ce:f5:cc:a1:89:f5:d6:01:8c:94:6c:19:37: a3:37:12:39:64:73:3d:70:bf:03:51:47:b7:11:ed: 11:eb:73:8b:ad:69:a7:f1:d5:2f:59:47:05:f5:03: cc:68:41:f6:11:e1:bf:8b:89:10:0d:4c:2a:ae:0c: 9b:8c:62:03:c0:e6:03:03:b8:cb:d0:86:f7:8a:59: e3:23:a2:ec:25:f7:80:21:64:9e:aa:53:33:ec:cc: 4e:31:18:93:45:94:0a:99:97:b6:f0:f1:e6:2b:28: 02:95:05:e8:6c:18:16:63:79:66:57:42:36:0c:c6: 3d:8e:55:62:91:ea:50:4f:da:29:e7:98:e6:34:2f: 28:ff:4f:70:16:53:d0:40:91:06:6a:6d:85:da:b9: 64:84:fc:b9:40:05:24:92:c3:8d:de:89:94:35:af: a0:08:5a:36:3d:be:4a:4e:41:a7:e1:a9:c5:b9:24: 4f:48:43:58:8f:0e:30:78:da:85:e1:0a:bb:55:6c: f9:60:6a:d5:86:71:f3:75:0f:28:48:8f:54:6a:da: f1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:12:8B:42:5C:2F:DB:CA:28:74:A1:B9:B2:17:EF:7E:45:9C:9F:72 X509v3 Authority Key Identifier: keyid:70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/74087358355111E99EC82E0AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.249.196.0/22 103.21.172.0/22 Signature Algorithm: sha256WithRSAEncryption 98:13:59:82:e3:03:c3:0f:26:18:2e:ad:6f:57:a7:95:7e:35: 8a:de:66:dd:66:a5:7a:1e:aa:8f:67:95:ac:74:d6:5c:e2:ef: c1:ae:fc:52:62:9f:78:a2:7b:17:30:18:3a:4e:76:69:7c:38: 57:bc:5f:5c:d3:d8:80:d4:37:e4:86:35:a5:6d:d0:01:33:40: 7c:db:b0:24:65:11:51:80:6a:0d:4c:cf:df:72:19:a7:80:d9: 77:92:52:83:71:22:3c:a7:93:95:05:84:75:56:45:e8:95:c3: 3a:c4:34:ba:ef:7e:9f:b9:93:5f:91:7d:3d:53:4a:de:58:7d: 69:82:d0:da:ef:10:19:a4:b9:7f:2e:ab:31:17:06:86:ca:73: 67:db:03:cf:cf:7c:46:0f:91:74:e8:96:bd:13:bb:a0:57:fb: fe:12:05:80:51:07:4a:2f:7b:d4:24:9d:bf:38:b1:5b:85:23: bb:51:83:a3:62:85:94:1a:68:4f:19:89:3d:b3:32:50:55:8b: 20:81:78:8a:06:43:d1:d3:ed:b6:5c:e5:da:78:0d:62:10:f3: a1:85:be:27:59:f9:75:45:2b:2c:57:18:a1:4a:29:78:ed:1d: 84:11:a2:0e:29:74:b8:cb:44:12:48:a3:d4:cf:cb:2a:6c:99: a6:86:b9:45 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICEPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ0OUYxMTAvBgNVBAUTKDcwN0Q0ODYwNUEwRDg1NzcyRjkwREM0QjExNzJCRUYz MDI5NEEwODcwHhcNMjUxMDMwMTczNjE2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDM4MS1iZmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1wjrU0mcmfiIwBxax1YqcKlTZyDaWHE+vMLFnfdl9xISXgCzTPfeofd6iA1 y871zKGJ9dYBjJRsGTejNxI5ZHM9cL8DUUe3Ee0R63OLrWmn8dUvWUcF9QPMaEH2 EeG/i4kQDUwqrgybjGIDwOYDA7jL0Ib3ilnjI6LsJfeAIWSeqlMz7MxOMRiTRZQK mZe28PHmKygClQXobBgWY3lmV0I2DMY9jlVikepQT9op55jmNC8o/09wFlPQQJEG am2F2rlkhPy5QAUkksON3omUNa+gCFo2Pb5KTkGn4anFuSRPSENYjw4weNqF4Qq7 VWz5YGrVhnHzdQ8oSI9UatrxXwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFCUSi0Jc L9vKKHShubIX735FnJ9yMB8GA1UdIwQYMBaAFHB9SGBaDYV3L5DcSxFyvvMClKCH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDQ5Ri8wQkFDODU1NjM1 NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhYY3ZrTnhMRVhLLTh3S1Vv SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NIMUlZRm9OaFhjdmtOeExFWEstOHdLVW9JYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQ0OUYvMEJBQzg1NTYzNTUxMTFFOTk4QTUwQTBBQzRGOUFFMDIvNzQwODczNTgz NTUxMTFFOTlFQzgyRTBBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/nEAwQCZxWsMA0GCSqGSIb3DQEBCwUAA4IBAQCYE1mC4wPDDyYY Lq1vV6eVfjWK3mbdZqV6HqqPZ5WsdNZc4u/BrvxSYp94onsXMBg6TnZpfDhXvF9c 09iA1DfkhjWlbdABM0B827AkZRFRgGoNTM/fchmngNl3klKDcSI8p5OVBYR1VkXo lcM6xDS6736fuZNfkX09U0reWH1pgtDa7xAZpLl/LqsxFwaGynNn2wPPz3xGD5F0 6Ja9E7ugV/v+EgWAUQdKL3vUJJ2/OLFbhSO7UYOjYoWUGmhPGYk9szJQVYsggXiK BkPR0+22XOXaeA1iEPOhhb4nWfl1RSssVxihSil47R2EEaIOKXS4y0QSSKPUz8sq bJmmhrlF -----END CERTIFICATE-----Generated at Mon Mar 2 13:49:10 2026 by rpki-client