$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/CE15A7B409D911EA80E56E21C4F9AE02.roa File: CE15A7B409D911EA80E56E21C4F9AE02.roa (raw, json) Hash identifier: 5VCD3u27qrdHl1/jyodbt5Z/BUjwXQ94Xf36xQbvpgs= Subject key identifier: 1E:7E:7A:08:36:65:13:6C:F2:13:E1:C7:6C:C9:44:EC:F9:B5:25:79 Certificate issuer: /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Certificate serial: 0CD5 Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/CE15A7B409D911EA80E56E21C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:35:56 +0000 ROA not before: Mon 06 Oct 2025 18:49:14 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 58682 IP address blocks: 43.224.112.0/22 maxlen: 24 43.228.208.0/22 maxlen: 24 103.15.40.0/22 maxlen: 24 103.124.224.0/22 maxlen: 24 103.230.16.0/22 maxlen: 24 103.249.0.0/22 maxlen: 24 2404:c900::/32 maxlen: 36 2404:c900::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3285 (0xcd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Validity Not Before: Oct 6 18:49:14 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a45cdc-6122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ea:fb:5e:e3:d7:82:f3:d3:df:80:1d:78:0f: 4a:9c:26:66:32:4f:18:2a:c3:db:50:63:f6:ae:26: d4:df:d9:9c:49:49:91:42:59:03:49:61:70:33:b0: 96:a5:9d:a3:71:02:92:57:a9:fe:ba:b5:fe:8c:e8: 90:73:51:d7:39:b2:d7:37:fd:1d:6e:37:21:79:25: 80:ed:cd:37:b7:72:d2:96:d3:9e:27:7b:83:a1:f0: 7d:03:c3:ad:16:b7:2d:dd:e0:73:28:dd:8f:98:02: 86:06:28:08:f0:9e:0b:8c:3c:05:25:fb:f7:d0:32: b8:07:30:c7:a9:a8:03:79:a1:f5:db:e9:2c:af:ab: 81:3c:81:38:68:67:40:f8:da:6a:9a:f5:0f:37:a3: 4b:84:35:58:54:6e:0a:52:00:60:e4:a1:7d:82:f4: b4:0f:36:73:c3:8e:2f:15:82:b8:8a:b9:6e:a0:1f: 81:19:11:63:52:a3:9c:78:1d:08:5a:75:cf:6e:09: e5:ce:75:23:04:ff:ec:8c:38:50:ff:c0:3c:2e:b0: 5e:03:81:21:3a:84:87:46:82:81:7b:81:da:9f:f5: 5a:c4:3d:b9:87:da:7f:06:62:68:e6:19:ad:da:49: 59:f8:2f:57:06:bf:be:81:80:c2:7e:64:0a:79:dd: cb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7E:7A:08:36:65:13:6C:F2:13:E1:C7:6C:C9:44:EC:F9:B5:25:79 X509v3 Authority Key Identifier: keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/CE15A7B409D911EA80E56E21C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.112.0/22 43.228.208.0/22 103.15.40.0/22 103.124.224.0/22 103.230.16.0/22 103.249.0.0/22 IPv6: 2404:c900::/32 Signature Algorithm: sha256WithRSAEncryption 8a:80:39:31:ab:8a:23:46:73:d1:66:b1:5e:61:b3:5a:6c:1e: f9:58:89:d4:2e:44:5e:10:4e:b5:4f:71:00:a7:73:08:e9:4d: 45:d8:47:47:d9:dd:94:c3:59:f3:2b:0f:80:07:b5:f4:97:17: 84:02:1d:ba:a4:97:39:93:58:b8:3b:f7:f8:ea:91:07:4d:03: cd:a9:a6:aa:4e:cf:06:23:ef:89:78:38:17:d1:58:df:9e:9c: 26:94:fe:26:ca:72:b6:6a:50:a7:5f:fa:50:4d:19:e6:dd:25: 44:54:e9:67:1c:e2:26:a4:73:94:c0:d3:a2:ff:c2:5c:5c:5d: d8:69:d6:4c:ac:a2:11:ee:ae:5d:c2:1f:72:17:9f:53:ff:e1: 2f:66:35:76:cf:f0:4b:1f:08:eb:4b:26:ef:9d:8d:d3:2f:1a: a8:0e:cc:40:38:35:0c:8c:5b:50:e8:13:34:2b:21:4f:c1:ac: cf:c7:0c:8d:8a:f9:89:9b:89:93:11:44:d8:8c:66:3a:f8:a8: 4d:7c:6b:bb:59:04:2b:aa:84:3f:ac:0f:41:c7:91:56:cc:91: ba:d8:a2:69:40:d3:6a:d3:04:58:7c:6c:f5:82:b8:02:70:d6: 7e:a1:23:00:f6:7f:bc:91:53:3e:4b:c6:ff:df:92:b9:a3:c2: 0c:5a:b2:da -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgICDNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDOTIxMTAvBgNVBAUTKDk0NUQwOTdGMjI2M0QxNEMzNkI3QjY1QzJEQzBDMjVG OUVFNzcxOTIwHhcNMjUxMDA2MTg0OTE0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWNkYy02MTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+r7XuPXgvPT34AdeA9KnCZmMk8YKsPbUGP2ribU39mcSUmRQlkDSWFwM7CW pZ2jcQKSV6n+urX+jOiQc1HXObLXN/0dbjcheSWA7c03t3LSltOeJ3uDofB9A8Ot Frct3eBzKN2PmAKGBigI8J4LjDwFJfv30DK4BzDHqagDeaH12+ksr6uBPIE4aGdA +NpqmvUPN6NLhDVYVG4KUgBg5KF9gvS0DzZzw44vFYK4irluoB+BGRFjUqOceB0I WnXPbgnlznUjBP/sjDhQ/8A8LrBeA4EhOoSHRoKBe4Han/VaxD25h9p/BmJo5hmt 2klZ+C9XBr++gYDCfmQKed3L+QIDAQABo4ICjTCCAokwHQYDVR0OBBYEFB5+egg2 ZRNs8hPhx2zJROz5tSV5MB8GA1UdIwQYMBaAFJRdCX8iY9FMNre2XC3Awl+e53GS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM5Mi8wRjREN0I0NjA5 RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBVdzJ0N1pjTGNEQ1g1N25j WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGMEpmeUpqMFV3MnQ3WmNMY0RDWDU3bmNaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkRDOTIvMEY0RDdCNDYwOUQ4MTFFQTlGRThEQjFFQzRGOUFFMDIvQ0UxNUE3QjQw OUQ5MTFFQTgwRTU2RTIxQzRGOUFFMDIucm9hMEwGCCsGAQUFBwEHAQH/BD0wOzAq BAIAATAkAwQCK+BwAwQCK+TQAwQCZw8oAwQCZ3zgAwQCZ+YQAwQCZ/kAMA0EAgAC MAcDBQAkBMkAMA0GCSqGSIb3DQEBCwUAA4IBAQCKgDkxq4ojRnPRZrFeYbNabB75 WInULkReEE61T3EAp3MI6U1F2EdH2d2Uw1nzKw+AB7X0lxeEAh26pJc5k1i4O/f4 6pEHTQPNqaaqTs8GI++JeDgX0VjfnpwmlP4mynK2alCnX/pQTRnm3SVEVOlnHOIm pHOUwNOi/8JcXF3YadZMrKIR7q5dwh9yF59T/+EvZjV2z/BLHwjrSybvnY3TLxqo DsxAODUMjFtQ6BM0KyFPwazPxwyNivmJm4mTEUTYjGY6+KhNfGu7WQQrqoQ/rA9B x5FWzJG62KJpQNNq0wRYfGz1grgCcNZ+oSMA9n+8kVM+S8b/35K5o8IMWrLa -----END CERTIFICATE-----Generated at Thu Mar 26 11:30:51 2026 by rpki-client