$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/9467361CFEAA11E89E73E75BC4F9AE02.roa File: 9467361CFEAA11E89E73E75BC4F9AE02.roa (raw, json) Hash identifier: rSIn+ZNNC6xv6esvJccL4Qb3tpchRQqRJ3vtYusQf6M= Subject key identifier: D1:4A:C1:AD:67:E3:97:68:16:83:20:F2:00:2A:D5:A8:2B:7C:52:3E Certificate issuer: /CN=A915D1F2/serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D Certificate serial: 1216 Authority key identifier: 07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/9467361CFEAA11E89E73E75BC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:46:45 +0000 ROA not before: Thu 02 Oct 2025 17:46:28 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 133043 IP address blocks: 43.245.172.0/22 maxlen: 24 103.240.184.0/22 maxlen: 24 2407:c300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4630 (0x1216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D1F2, serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D Validity Not Before: Oct 2 17:46:28 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a44344-5a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:04:3b:15:cc:d1:b8:f8:06:27:75:0b:84:13: fc:8f:be:9f:e8:61:74:55:d3:0d:58:f2:96:77:33: 99:41:0d:c5:d3:97:78:0d:6f:41:e6:f6:08:77:7d: 2f:ab:91:10:a8:20:0f:ec:e2:19:25:79:f6:cf:1e: d2:98:27:db:5d:53:a4:35:22:87:03:8c:b9:b6:62: 34:dc:80:72:1c:ac:db:2c:2a:0c:c2:f5:af:6a:c4: ea:fa:30:79:71:ba:d1:6f:67:8c:f9:e3:7b:db:1e: fd:8a:1c:d2:06:31:dc:d3:e7:76:6a:27:60:3d:88: 6b:a9:0e:2d:1c:2e:01:22:70:1e:4a:03:f0:bc:75: 03:d8:8f:4f:d2:5b:7e:ea:07:74:04:3e:99:64:62: b6:62:77:52:69:9a:99:00:d7:b7:93:09:ba:16:0d: 2e:05:60:44:08:a3:23:de:eb:ad:88:8d:8c:82:41: ce:d9:94:fb:d0:12:a9:a7:58:c7:d7:7a:f4:9b:c5: 5f:33:aa:d7:47:76:e9:1c:b8:ab:85:06:22:d0:0c: c2:e6:0f:df:28:29:d7:8b:6d:34:db:51:6e:ae:7a: 61:fa:73:b7:3a:78:8c:45:e2:be:ec:72:93:05:57: 91:27:6c:6e:72:1a:c7:15:39:84:d6:5c:92:7c:21: cb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4A:C1:AD:67:E3:97:68:16:83:20:F2:00:2A:D5:A8:2B:7C:52:3E X509v3 Authority Key Identifier: keyid:07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/9467361CFEAA11E89E73E75BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.172.0/22 103.240.184.0/22 IPv6: 2407:c300::/32 Signature Algorithm: sha256WithRSAEncryption 7b:c2:0a:0d:1c:cb:30:3f:c7:6d:4c:01:2d:08:42:d9:c5:a5: e5:da:b2:6f:b8:27:c5:8f:bf:ac:c0:f4:21:83:80:0a:37:a2: 11:4a:26:43:91:ca:5f:d5:6f:dc:1b:56:e4:aa:0e:71:a0:92: c9:b1:8c:11:6b:17:8b:8b:27:08:d4:d7:b5:3c:eb:4b:d4:e5: 4d:e1:0b:3a:f9:f8:e3:a1:71:71:a1:59:45:27:af:3a:5c:df: 07:81:85:e0:d0:da:0a:d0:49:f2:08:fb:57:6a:3b:be:62:45: 9d:8a:b4:cd:37:15:d7:47:92:28:0e:73:8e:ff:c4:99:9a:d2: 1a:55:10:9a:1f:fb:14:bc:be:19:c9:ea:37:90:f4:88:21:71: e0:a3:11:44:6d:bc:e4:a4:d4:31:6e:41:de:89:b4:cd:12:fa: 26:a5:a5:99:46:4d:19:fc:b2:f0:39:f2:5f:c0:08:cc:4a:26: 59:42:75:7c:97:84:94:bc:cf:4e:56:56:23:0e:12:40:e4:74: a6:e4:42:98:aa:07:2c:4c:da:02:99:f8:99:17:be:c5:be:c2: 38:32:94:04:b9:b9:6f:0a:db:d0:a5:8c:ec:d6:22:af:5b:9b: 4c:f4:5b:96:5d:b4:84:2d:3f:a1:fb:a6:70:69:36:78:aa:a4: b0:71:bb:8c -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICEhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxRjIxMTAvBgNVBAUTKDA3NTMyQ0Y2RDJCQzRDQTlEOTI3RjMwN0QwRTZCODI4 NzdEOEVFNEQwHhcNMjUxMDAyMTc0NjI4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDM0NC01YTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgQ7FczRuPgGJ3ULhBP8j76f6GF0VdMNWPKWdzOZQQ3F05d4DW9B5vYId30v q5EQqCAP7OIZJXn2zx7SmCfbXVOkNSKHA4y5tmI03IByHKzbLCoMwvWvasTq+jB5 cbrRb2eM+eN72x79ihzSBjHc0+d2aidgPYhrqQ4tHC4BInAeSgPwvHUD2I9P0lt+ 6gd0BD6ZZGK2YndSaZqZANe3kwm6Fg0uBWBECKMj3uutiI2MgkHO2ZT70BKpp1jH 13r0m8VfM6rXR3bpHLirhQYi0AzC5g/fKCnXi20021Furnph+nO3OniMReK+7HKT BVeRJ2xuchrHFTmE1lySfCHLMQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFNFKwa1n 45doFoMg8gAq1agrfFI+MB8GA1UdIwQYMBaAFAdTLPbSvEyp2SfzB9DmuCh32O5N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDFGMi9BRjMyMUQzQ0ZF N0MxMUU4ODY4OUM2NTVDNEY5QUUwMi9CMU1zOXRLOFRLblpKX01IME9hNEtIZlk3 azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IxTXM5dEs4VEtuWkpfTUgwT2E0S0hmWTdrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQxRjIvQUYzMjFEM0NGRTdDMTFFODg2ODlDNjU1QzRGOUFFMDIvOTQ2NzM2MUNG RUFBMTFFODlFNzNFNzVCQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCK/WsAwQCZ/C4MA0EAgACMAcDBQAkB8MAMA0GCSqGSIb3DQEBCwUA A4IBAQB7wgoNHMswP8dtTAEtCELZxaXl2rJvuCfFj7+swPQhg4AKN6IRSiZDkcpf 1W/cG1bkqg5xoJLJsYwRaxeLiycI1Ne1POtL1OVN4Qs6+fjjoXFxoVlFJ686XN8H gYXg0NoK0EnyCPtXaju+YkWdirTNNxXXR5IoDnOO/8SZmtIaVRCaH/sUvL4Zyeo3 kPSIIXHgoxFEbbzkpNQxbkHeibTNEvompaWZRk0Z/LLwOfJfwAjMSiZZQnV8l4SU vM9OVlYjDhJA5HSm5EKYqgcsTNoCmfiZF77FvsI4MpQEublvCtvQpYzs1iKvW5tM 9FuWXbSELT+h+6ZwaTZ4qqSwcbuM -----END CERTIFICATE-----Generated at Thu Mar 26 17:31:15 2026 by rpki-client