$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/A5E69774485411F1907D205D9E833773.roa File: A5E69774485411F1907D205D9E833773.roa (raw, json) Hash identifier: Hf8RVmiLD+Lgc8VE9E8an2tv+ZmF6P6heQtkZtWGmpQ= Subject key identifier: 2F:2E:A8:24:E8:92:18:07:E8:43:D7:B5:F5:0B:F2:66:92:F1:AB:4B Certificate issuer: /CN=A9166D02/serialNumber=F649A3A0B631C569CABF33E3CE45C8AA5958DC05 Certificate serial: 3A Authority key identifier: F6:49:A3:A0:B6:31:C5:69:CA:BF:33:E3:CE:45:C8:AA:59:58:DC:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/A5E69774485411F1907D205D9E833773.roa Signing time: Tue 05 May 2026 07:34:22 +0000 ROA not before: Tue 05 May 2026 07:34:22 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 136160 IP address blocks: 43.251.100.0/22 maxlen: 24 103.82.52.0/22 maxlen: 22 103.82.52.0/23 maxlen: 24 103.82.54.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.crl rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 08:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166D02, serialNumber=F649A3A0B631C569CABF33E3CE45C8AA5958DC05 Validity Not Before: May 5 07:34:22 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69f99d7e-b565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1e:8b:36:be:b1:ae:0b:eb:1f:66:76:8c:3e: 82:59:79:14:ae:01:a8:16:82:15:86:6f:78:ef:6d: c1:93:6a:5f:31:b7:b8:28:d8:08:e8:42:fb:34:29: 1d:63:17:f9:f9:dc:42:6d:6a:79:4a:c4:d3:4d:42: 83:c6:75:06:44:4b:2c:0c:8c:f0:b8:a9:1b:f8:3f: 97:9f:1c:95:b6:e3:86:d6:3c:8e:1d:49:a8:ae:ec: 48:be:a7:99:09:03:30:08:ff:7c:25:14:db:83:b1: 9b:27:06:02:68:3f:1f:96:49:af:12:de:f4:00:db: 69:1f:d1:a1:0a:73:7d:50:1a:07:e9:4a:0e:25:c5: 88:85:85:a1:40:be:9c:b5:38:f6:1c:21:38:f9:1d: 8b:10:5a:9a:09:e2:98:ba:a2:23:8a:48:3a:d7:f1: fb:5f:21:24:d5:05:8c:32:57:80:5d:01:cf:f7:5a: 50:53:b8:b9:69:e6:29:c6:bc:7e:cb:e5:a1:65:16: 50:4d:41:fa:ff:9c:16:a3:b0:44:c7:f7:d9:06:57: f7:18:8c:5c:10:65:1d:bc:9a:cb:bd:8f:60:bd:60: a5:5a:4c:a1:5a:ac:4f:f4:84:9c:f8:00:8b:4e:85: f3:41:41:f8:16:9f:d0:7a:e6:b4:18:5b:a9:bf:67: 07:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2E:A8:24:E8:92:18:07:E8:43:D7:B5:F5:0B:F2:66:92:F1:AB:4B X509v3 Authority Key Identifier: keyid:F6:49:A3:A0:B6:31:C5:69:CA:BF:33:E3:CE:45:C8:AA:59:58:DC:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/A5E69774485411F1907D205D9E833773.roa sbgp-ipAddrBlock: critical IPv4: 43.251.100.0/22 103.82.52.0/22 Signature Algorithm: sha256WithRSAEncryption 43:94:b6:69:77:a2:bb:9f:d2:f6:39:ab:3e:03:3a:cb:c6:fa: df:3e:8d:3e:4d:bb:04:f1:b3:5b:4e:c3:99:29:63:e3:66:9c: f3:af:2f:59:71:fa:44:72:cc:4c:0a:0a:a8:d3:49:41:81:5c: 92:73:a3:89:bf:17:5a:a8:3c:82:98:e1:b4:83:76:03:dd:ba: 8f:68:a5:06:b3:47:76:0b:ef:bc:79:aa:ef:9d:bd:79:70:81: 2b:9a:eb:cb:92:c6:2e:7b:83:b5:a6:fe:13:40:ed:58:34:19: 01:f9:10:c9:29:d5:e5:40:b2:54:52:84:94:26:ff:93:b0:f9: eb:71:f7:b7:2d:85:cb:be:0b:75:f4:52:99:40:cb:77:4c:b5: 07:62:84:2f:22:dd:93:1c:71:38:fe:2b:a3:3f:0d:44:f4:94: dd:d6:cb:d0:5b:35:ef:6a:b6:54:70:ed:82:2a:ec:45:ab:c6: f0:23:4e:b2:e3:d3:0d:fd:2a:26:e4:78:16:2a:f1:25:a8:56: 83:89:76:0b:57:fc:35:d9:31:5e:f4:d8:cf:99:54:e1:92:ec: 4a:8d:22:34:d4:f0:23:1e:4d:c5:de:6d:52:12:f1:ba:27:6e: 6c:98:01:34:9d:81:5d:18:e9:24:97:5e:15:2d:b2:17:a3:cd: 5b:4c:ad:19 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NkQwMjExMC8GA1UEBRMoRjY0OUEzQTBCNjMxQzU2OUNBQkYzM0UzQ0U0NUM4QUE1 OTU4REMwNTAeFw0yNjA1MDUwNzM0MjJaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY5Zjk5ZDdlLWI1NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVHos2vrGuC+sfZnaMPoJZeRSuAagWghWGb3jvbcGTal8xt7go2AjoQvs0KR1j F/n53EJtanlKxNNNQoPGdQZESywMjPC4qRv4P5efHJW244bWPI4dSaiu7Ei+p5kJ AzAI/3wlFNuDsZsnBgJoPx+WSa8S3vQA22kf0aEKc31QGgfpSg4lxYiFhaFAvpy1 OPYcITj5HYsQWpoJ4pi6oiOKSDrX8ftfISTVBYwyV4BdAc/3WlBTuLlp5inGvH7L 5aFlFlBNQfr/nBajsETH99kGV/cYjFwQZR28msu9j2C9YKVaTKFarE/0hJz4AItO hfNBQfgWn9B65rQYW6m/ZwcfAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQULy6oJOiS GAfoQ9e19QvyZpLxq0swHwYDVR0jBBgwFoAU9kmjoLYxxWnKvzPjzkXIqllY3AUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2RDAyL0M3QjBBM0JDMDBE RTExRjFCMzRFQUQ4NDc1NkY1NkJDLzlrbWpvTFl4eFduS3Z6UGp6a1hJcWxsWTNB VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWttam9MWXh4V25LdnpQanprWElxbGxZM0FVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkQwMi9DN0IwQTNCQzAwREUxMUYxQjM0RUFEODQ3NTZGNTZCQy9BNUU2OTc3NDQ4 NTQxMUYxOTA3RDIwNUQ5RTgzMzc3My5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAIr+2QDBAJnUjQwDQYJKoZIhvcNAQELBQADggEBAEOUtml3oruf0vY5 qz4DOsvG+t8+jT5NuwTxs1tOw5kpY+NmnPOvL1lx+kRyzEwKCqjTSUGBXJJzo4m/ F1qoPIKY4bSDdgPduo9opQazR3YL77x5qu+dvXlwgSua68uSxi57g7Wm/hNA7Vg0 GQH5EMkp1eVAslRShJQm/5Ow+etx97cthcu+C3X0UplAy3dMtQdihC8i3ZMccTj+ K6M/DUT0lN3Wy9BbNe9qtlRw7YIq7EWrxvAjTrLj0w39KibkeBYq8SWoVoOJdgtX /DXZMV702M+ZVOGS7EqNIjTU8CMeTcXebVIS8bonbmyYATSdgV0Y6SSXXhUtshej zVtMrRk= -----END CERTIFICATE-----Generated at Wed May 13 17:32:39 2026 by rpki-client