$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/9DF3BC14E48011F0AC3D40BC426F56BC.roa File: 9DF3BC14E48011F0AC3D40BC426F56BC.roa (raw, json) Hash identifier: JXURRIGCfQgUbsf4xkg2h0l7S6Nocpc0/D/GetTSAW4= Subject key identifier: 10:84:CE:A7:8D:8E:C9:11:A4:C6:EF:DC:CA:A0:E5:A3:A2:4F:E8:0B Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 0694 Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/9DF3BC14E48011F0AC3D40BC426F56BC.roa Signing time: Mon 26 Oct 2026 07:20:55 +0000 ROA not before: Mon 26 Oct 2026 07:20:55 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 9009 IP address blocks: 43.226.228.0/24 maxlen: 24 43.226.230.0/24 maxlen: 24 43.226.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Nov 2026 22:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1684 (0x694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Oct 26 07:20:55 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6adeff56-9a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:22:f8:c1:41:f0:13:22:e0:6a:5f:fa:c7:ea: 42:8e:3f:83:d9:d5:22:41:82:ca:2c:40:ae:a0:f4: 2f:bd:42:36:28:c9:b2:33:23:81:ba:e1:5d:99:15: 62:10:91:f0:61:93:33:c4:12:e0:bc:60:b2:60:88: df:54:23:83:a2:2d:f2:a4:da:11:72:b4:4d:0c:33: 45:7b:25:fd:00:38:7d:d4:d0:df:8f:be:bf:20:c6: 20:d8:00:a8:e2:98:95:62:fc:4c:b5:c6:56:41:52: 90:6d:43:d1:e8:4e:e8:4f:66:0b:61:68:c0:eb:38: 98:2c:1a:db:cf:69:2b:e1:f9:51:f5:1f:a7:d9:58: 17:86:db:09:2e:16:66:2c:5d:b0:59:f3:7b:41:db: 25:bd:5f:94:bd:2c:35:24:2e:2d:6c:cb:cb:13:41: 18:40:04:f5:13:04:75:4d:2b:7a:6a:b8:92:fb:08: d0:86:dc:ce:33:81:cf:ac:cc:31:70:e6:4e:ee:1e: 77:c2:20:55:74:d8:bc:28:60:e1:4a:81:d3:39:5a: f2:aa:bc:8f:0b:78:18:b3:fd:9b:d7:f1:2e:29:67: c7:3a:ce:09:7f:a3:18:04:95:0c:e1:b2:66:83:01: ef:d9:24:24:d0:ec:c8:78:fe:dd:43:42:3c:ab:9f: ee:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:84:CE:A7:8D:8E:C9:11:A4:C6:EF:DC:CA:A0:E5:A3:A2:4F:E8:0B X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/9DF3BC14E48011F0AC3D40BC426F56BC.roa sbgp-ipAddrBlock: critical IPv4: 43.226.228.0/24 43.226.230.0/23 Signature Algorithm: sha256WithRSAEncryption 15:6e:52:67:64:f7:0c:e2:e5:d3:e4:8c:81:99:85:e3:61:27: db:63:ca:42:b5:da:be:9a:c2:38:6a:6c:a5:d8:f3:45:c5:8c: ed:c3:85:2d:bd:a1:50:11:62:c5:db:97:c0:e4:c2:00:82:31: 24:b9:38:ea:3b:77:17:2a:a7:f1:18:e3:c5:1a:36:79:2d:0e: 5c:45:58:5e:24:18:39:5f:2b:f0:c0:4b:c4:66:ad:0b:29:88: d2:86:83:c0:0c:a0:ee:45:93:bc:85:66:ca:54:b5:a6:99:99: 6f:98:0e:8d:db:6c:c9:79:8e:6a:e8:f7:21:5d:4f:4a:f1:24: d6:dd:2a:08:33:22:77:37:c4:c5:ab:02:13:a2:91:f8:ab:a6: 8e:0d:95:ce:e0:80:29:2b:3a:ae:fd:3f:f7:7c:93:b8:99:b6: 05:d5:77:71:6c:db:e5:bd:54:f9:8d:30:10:e5:fc:43:97:6b: f2:5f:02:f7:67:2e:12:b9:a2:15:9c:3c:8b:85:e4:51:85:aa: ba:b2:35:83:c2:c6:13:59:84:5b:c9:13:4e:f5:9c:55:9d:11: c0:46:7d:64:78:3a:bb:41:d1:4d:2d:bc:05:41:4e:c9:00:05: 6c:eb:f5:c5:c0:db:05:61:67:5c:6d:9f:29:c2:31:74:d5:da: 83:e5:67:4c -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjYxMDI2MDcyMDU1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWRlZmY1Ni05YTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SL4wUHwEyLgal/6x+pCjj+D2dUiQYLKLECuoPQvvUI2KMmyMyOBuuFdmRVi EJHwYZMzxBLgvGCyYIjfVCODoi3ypNoRcrRNDDNFeyX9ADh91NDfj76/IMYg2ACo 4piVYvxMtcZWQVKQbUPR6E7oT2YLYWjA6ziYLBrbz2kr4flR9R+n2VgXhtsJLhZm LF2wWfN7QdslvV+UvSw1JC4tbMvLE0EYQAT1EwR1TSt6ariS+wjQhtzOM4HPrMwx cOZO7h53wiBVdNi8KGDhSoHTOVryqryPC3gYs/2b1/EuKWfHOs4Jf6MYBJUM4bJm gwHv2SQk0OzIeP7dQ0I8q5/u/QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBCEzqeN jskRpMbv3Mqg5aOiT+gLMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhCRkEvMDRBMjRDMzQxMTQzMTFFQzk3MzY5RjczQzRGOUFFMDIvOURGM0JDMTRF NDgwMTFGMEFDM0Q0MEJDNDI2RjU2QkMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAK+LkAwQBK+LmMA0GCSqGSIb3DQEBCwUAA4IBAQAVblJnZPcM4uXT 5IyBmYXjYSfbY8pCtdq+msI4amyl2PNFxYztw4UtvaFQEWLF25fA5MIAgjEkuTjq O3cXKqfxGOPFGjZ5LQ5cRVheJBg5XyvwwEvEZq0LKYjShoPADKDuRZO8hWbKVLWm mZlvmA6N22zJeY5q6PchXU9K8STW3SoIMyJ3N8TFqwITopH4q6aODZXO4IApKzqu /T/3fJO4mbYF1XdxbNvlvVT5jTAQ5fxDl2vyXwL3Zy4SuaIVnDyLheRRhaq6sjWD wsYTWYRbyRNO9ZxVnRHARn1keDq7QdFNLbwFQU7JAAVs6/XFwNsFYWdcbZ8pwjF0 1dqD5WdM -----END CERTIFICATE-----Generated at Sat Nov 14 20:47:38 2026 by rpki-client