$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/9A7071C0462E11ED90035452C4F9AE02.roa File: 9A7071C0462E11ED90035452C4F9AE02.roa (raw, json) Hash identifier: VOHh+ssncP1FDRjkZmMf0XUMa05f8S3klU4wKyghAMM= Subject key identifier: 0E:CD:92:2B:94:5F:62:CD:66:2A:11:4E:7A:B9:9F:06:A8:97:91:20 Certificate issuer: /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Certificate serial: 0297 Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/9A7071C0462E11ED90035452C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:29:20 +0000 ROA not before: Thu 27 Nov 2025 00:17:51 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133748 IP address blocks: 43.249.248.0/22 maxlen: 24 103.41.128.0/22 maxlen: 24 203.208.22.0/24 maxlen: 24 2401:b080::/32 maxlen: 32 2401:b080:1::/48 maxlen: 48 2401:b080:63::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74, serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Validity Not Before: Nov 27 00:17:51 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a44d40-d889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:01:4e:4f:6a:6c:80:98:dc:f2:4c:28:1c:2c: ad:82:c2:5a:da:23:a1:36:55:a9:3a:91:02:d1:bd: a9:23:13:77:9e:95:c6:d3:0a:69:c2:46:b7:fa:cb: ac:3d:fc:3a:2d:43:36:8f:04:4c:e6:e1:f9:c5:90: 68:88:6a:bd:ed:53:44:08:ae:d0:ae:29:6e:ee:e0: 11:13:9b:fa:56:b4:1d:9f:52:48:11:20:39:89:03: 10:b7:75:b7:78:f6:25:05:21:13:38:2c:3b:7d:39: f6:0b:03:b0:93:12:3a:d3:af:63:3b:15:0a:ce:b5: 5a:7f:15:4d:db:06:ef:06:b4:69:3c:ff:af:41:b5: a6:c6:87:99:fe:ba:5f:e8:f0:3a:24:38:45:61:99: 43:c5:09:f7:e6:9e:86:e6:a7:d2:f7:76:7f:33:51: 59:10:8f:e4:a5:e2:d4:79:58:f8:d3:20:8c:ae:c9: 7d:20:49:af:f9:52:e9:fc:be:00:f1:d7:cf:d1:0d: 25:4a:bf:0a:f6:d0:6e:d9:8d:c9:bd:b7:00:87:c1: fa:9e:4a:1c:f7:34:4a:65:91:83:d9:ec:9f:ad:33: 5f:9e:fe:c0:a6:e1:8c:07:88:23:39:8f:5e:98:3b: a6:31:65:50:d9:b1:fe:e0:bc:1f:39:98:95:e6:be: 3a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CD:92:2B:94:5F:62:CD:66:2A:11:4E:7A:B9:9F:06:A8:97:91:20 X509v3 Authority Key Identifier: keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/9A7071C0462E11ED90035452C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.249.248.0/22 103.41.128.0/22 203.208.22.0/24 IPv6: 2401:b080::/32 Signature Algorithm: sha256WithRSAEncryption 6f:8d:4f:17:88:3f:0b:b3:62:6c:ab:66:f9:26:7e:b0:2a:c1: d4:8b:26:e5:7c:56:0b:e8:65:e5:fb:10:81:db:b5:3f:1e:52: 29:90:70:cb:e5:8a:9e:81:bc:6d:ca:9c:c8:de:f3:92:c1:9d: a3:17:14:5e:84:dc:d4:6c:da:62:91:7b:b6:e8:32:cf:ea:85: cd:4d:be:8e:8d:ab:b4:0b:15:09:8e:bb:9b:05:82:c7:d6:1e: 7e:0b:b0:0e:74:08:3d:77:f9:72:d9:6c:e7:af:87:cf:c3:d4: 8a:85:7c:8e:42:b6:c0:a3:e3:30:90:c0:d6:14:d2:e6:ef:c7: 8a:e7:9f:59:9a:45:8f:47:63:23:4c:9f:da:fe:e6:43:c2:32: d4:83:e8:fa:bf:ab:84:22:f5:55:f3:bd:a7:e3:12:c8:9d:97: 8a:ce:8d:4f:39:7e:51:68:b2:32:f4:8b:39:59:f2:7f:55:a6: 0b:ef:88:c9:98:15:04:4c:01:7e:6c:d7:b1:d5:3f:24:1b:6d: 30:3b:cb:ce:7c:6a:38:22:85:a1:a2:84:c7:53:d5:af:f0:f4: fd:28:e4:74:48:80:40:28:9f:a0:7d:c7:3a:cb:9c:29:9b:5e: 05:6b:1f:2b:aa:43:9e:e7:e9:6b:62:97:6f:2e:5c:d5:af:41: 77:d9:fc:e5 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKERFQ0ZDNzUzNDM5OEM0ODU3OEI5RTQ3NEFFQjgwQjFD OTRDQkM1QkEwHhcNMjUxMTI3MDAxNzUxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGQ0MC1kODg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygFOT2psgJjc8kwoHCytgsJa2iOhNlWpOpEC0b2pIxN3npXG0wppwka3+sus Pfw6LUM2jwRM5uH5xZBoiGq97VNECK7Qrilu7uARE5v6VrQdn1JIESA5iQMQt3W3 ePYlBSETOCw7fTn2CwOwkxI6069jOxUKzrVafxVN2wbvBrRpPP+vQbWmxoeZ/rpf 6PA6JDhFYZlDxQn35p6G5qfS93Z/M1FZEI/kpeLUeVj40yCMrsl9IEmv+VLp/L4A 8dfP0Q0lSr8K9tBu2Y3JvbcAh8H6nkoc9zRKZZGD2eyfrTNfnv7ApuGMB4gjOY9e mDumMWVQ2bH+4LwfOZiV5r46fwIDAQABo4ICezCCAncwHQYDVR0OBBYEFA7NkiuU X2LNZioRTnq5nwaol5EgMB8GA1UdIwQYMBaAFN7Px1NDmMSFeLnkdK64CxyUy8W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9FNDJDQkM0QzQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJVjR1ZVIwcnJnTEhKVEx4 Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNzX0hVME9ZeElWNHVlUjBycmdMSEpUTHhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OURDNzQvRTQyQ0JDNEM0NjI5MTFFREFFNzhCMjM1QzRGOUFFMDIvOUE3MDcxQzA0 NjJFMTFFRDkwMDM1NDUyQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCK/n4AwQCZymAAwQAy9AWMA0EAgACMAcDBQAkAbCAMA0GCSqGSIb3 DQEBCwUAA4IBAQBvjU8XiD8Ls2Jsq2b5Jn6wKsHUiyblfFYL6GXl+xCB27U/HlIp kHDL5YqegbxtypzI3vOSwZ2jFxRehNzUbNpikXu26DLP6oXNTb6Ojau0CxUJjrub BYLH1h5+C7AOdAg9d/ly2Wznr4fPw9SKhXyOQrbAo+MwkMDWFNLm78eK559ZmkWP R2MjTJ/a/uZDwjLUg+j6v6uEIvVV872n4xLInZeKzo1POX5RaLIy9Is5WfJ/VaYL 74jJmBUETAF+bNex1T8kG20wO8vOfGo4IoWhooTHU9Wv8PT9KOR0SIBAKJ+gfcc6 y5wpm14Fax8rqkOe5+lrYpdvLlzVr0F32fzl -----END CERTIFICATE-----Generated at Mon Mar 2 11:59:03 2026 by rpki-client