$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/0B0485A250B811EBA8A3C670C4F9AE02.roa File: 0B0485A250B811EBA8A3C670C4F9AE02.roa (raw, json) Hash identifier: 9YeNPbkEMr49smUkWp5OvMYw8mMpgYiATLaFT0UeorU= Subject key identifier: E6:3A:68:E2:E1:02:08:DE:9D:8C:95:FD:AA:2C:FC:B3:BD:A6:AC:6F Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F Certificate serial: 0B6B Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/0B0485A250B811EBA8A3C670C4F9AE02.roa Signing time: Fri 08 May 2026 20:24:43 +0000 ROA not before: Fri 08 May 2026 20:24:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 43.251.21.0/24 maxlen: 24 43.251.22.0/23 maxlen: 23 202.155.221.0/24 maxlen: 24 218.253.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2923 (0xb6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F Validity Not Before: May 8 20:24:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69fe468b-b8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:1b:64:fe:65:32:ce:8d:9c:ef:cd:19:5c:53: c2:56:9b:d2:62:52:da:39:3b:e9:2b:81:eb:e4:71: c1:8a:14:87:ed:e5:af:7b:b1:05:a8:87:f9:6c:e4: e0:e4:72:9f:7a:5b:30:29:01:30:78:a2:16:d8:94: 98:a0:ab:09:a1:ed:11:2e:14:18:1c:6d:66:6a:46: dd:55:0e:26:85:27:dd:2e:72:34:b1:87:1e:f7:6c: 99:68:93:9e:f2:c7:f6:e0:86:df:ca:44:ba:43:6b: 44:5f:63:1a:1d:4c:51:a9:75:7b:ae:10:ee:aa:6b: d6:5f:02:2f:ac:ff:44:09:43:9e:e9:9c:b8:ea:f2: db:36:0f:33:3a:89:30:3e:72:88:12:86:05:a4:dc: 00:15:e4:91:24:62:3c:af:ca:33:1b:97:50:35:32: cc:5a:c0:78:dd:54:6e:a3:03:5a:e4:55:5b:38:c8: e7:26:24:b5:a6:4e:4e:5a:31:b2:08:82:16:b0:6e: 23:fd:98:ae:02:b1:a6:ed:b5:a4:ce:f2:10:a7:b5: 97:c7:33:2e:13:9e:12:03:6c:02:7d:79:4c:6b:8c: 17:0b:fd:99:e1:39:23:53:2a:fd:7a:1a:bb:35:5d: 49:78:50:e2:44:ad:f2:59:d4:c2:9c:19:c6:0d:24: 3f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3A:68:E2:E1:02:08:DE:9D:8C:95:FD:AA:2C:FC:B3:BD:A6:AC:6F X509v3 Authority Key Identifier: keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/0B0485A250B811EBA8A3C670C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.251.21.0-43.251.23.255 202.155.221.0/24 218.253.207.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:bb:d0:53:91:c0:fa:b8:42:14:43:5a:5d:36:f4:e5:51:3c: 3d:65:35:e8:4c:07:23:36:4b:32:c7:72:d1:c5:fd:d7:14:13: ca:8e:8a:5d:11:2e:ce:0a:bf:16:75:d1:4a:a7:31:5c:c5:4b: 95:6c:43:b9:de:25:13:88:47:a1:42:07:b4:54:3c:fe:f3:1a: 0b:f8:5c:f0:18:c9:b2:aa:97:c9:f6:47:9b:53:8a:02:8f:b0: a1:17:e5:f8:09:bb:db:d8:05:82:7f:7f:04:80:70:86:7f:57: d5:70:f3:c6:33:27:07:5e:34:04:fd:8c:0b:8c:1e:5b:b9:f6: f3:e2:18:42:2c:24:8c:b4:45:5f:e0:3b:82:54:72:c2:bd:af: 2b:cc:00:49:59:25:40:e4:b1:ae:d6:4a:e7:99:3d:d1:aa:83: 4c:b6:b9:69:40:a5:6a:0d:ed:9c:25:62:85:f0:9f:63:59:08: f6:e4:e0:2f:12:26:fc:97:bb:72:48:70:6e:cf:1e:12:55:67: 58:63:7a:bb:38:2a:21:d4:0b:ce:f1:d4:78:9d:bd:18:da:07: 63:00:f0:a5:24:2a:1a:6e:69:17:1a:19:12:8a:85:db:23:ce: 0b:c7:36:c8:0b:5d:fc:31:ec:f9:cb:41:81:85:10:f5:8a:15: 20:e5:ce:e2 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICC2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCMUUxMTAvBgNVBAUTKEFCRDQzNTQ4NjU5Q0JCMjc2RUY4RDM1QjgyMTJGODM4 RThDRUI3NUYwHhcNMjYwNTA4MjAyNDQzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWZlNDY4Yi1iOGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Btk/mUyzo2c780ZXFPCVpvSYlLaOTvpK4Hr5HHBihSH7eWve7EFqIf5bOTg 5HKfelswKQEweKIW2JSYoKsJoe0RLhQYHG1makbdVQ4mhSfdLnI0sYce92yZaJOe 8sf24IbfykS6Q2tEX2MaHUxRqXV7rhDuqmvWXwIvrP9ECUOe6Zy46vLbNg8zOokw PnKIEoYFpNwAFeSRJGI8r8ozG5dQNTLMWsB43VRuowNa5FVbOMjnJiS1pk5OWjGy CIIWsG4j/ZiuArGm7bWkzvIQp7WXxzMuE54SA2wCfXlMa4wXC/2Z4TkjUyr9ehq7 NV1JeFDiRK3yWdTCnBnGDSQ/JwIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFOY6aOLh AgjenYyV/aos/LO9pqxvMB8GA1UdIwQYMBaAFKvUNUhlnLsnbvjTW4IS+Djozrdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkIxRS84OTM2Q0MwNDg4 MzIxMUVBODQ4NjFCNzBDNEY5QUUwMi9xOVExU0dXY3V5ZHUtTk5iZ2hMNE9Pak90 MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E5UTFTR1djdXlkdS1OTmJnaEw0T09qT3QxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzJCMUUvODkzNkNDMDQ4ODMyMTFFQTg0ODYxQjcwQzRGOUFFMDIvMEIwNDg1QTI1 MEI4MTFFQkE4QTNDNjcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaMAwDBAAr+xUDBAMr+xADBADKm90DBADa/c8wDQYJKoZIhvcNAQELBQAD ggEBAAy70FORwPq4QhRDWl029OVRPD1lNehMByM2SzLHctHF/dcUE8qOil0RLs4K vxZ10UqnMVzFS5VsQ7neJROIR6FCB7RUPP7zGgv4XPAYybKql8n2R5tTigKPsKEX 5fgJu9vYBYJ/fwSAcIZ/V9Vw88YzJwdeNAT9jAuMHlu59vPiGEIsJIy0RV/gO4JU csK9ryvMAElZJUDksa7WSueZPdGqg0y2uWlApWoN7ZwlYoXwn2NZCPbk4C8SJvyX u3JIcG7PHhJVZ1hjers4KiHUC87x1HidvRjaB2MA8KUkKhpuaRcaGRKKhdsjzgvH NsgLXfwx7PnLQYGFEPWKFSDlzuI= -----END CERTIFICATE-----Generated at Wed May 13 14:46:09 2026 by rpki-client