$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/BB799DA8844011F09054B049C4F9AE02.roa File: BB799DA8844011F09054B049C4F9AE02.roa (raw, json) Hash identifier: VrRFOlut3uTJjQcCOu3xElVoNRFtaOUQQFsO7k9dNnQ= Subject key identifier: B2:21:17:0E:92:63:49:E0:1B:EC:C6:0F:1B:F1:0C:CF:70:5F:FC:39 Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Certificate serial: 2BC4 Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/BB799DA8844011F09054B049C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:01:48 +0000 ROA not before: Tue 28 Oct 2025 14:15:08 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 31898 IP address blocks: 43.245.96.0/22 maxlen: 24 43.245.108.0/22 maxlen: 24 101.100.192.0/18 maxlen: 24 103.9.100.0/22 maxlen: 24 103.11.188.0/22 maxlen: 24 103.15.232.0/22 maxlen: 24 103.104.196.0/24 maxlen: 24 111.235.136.0/22 maxlen: 24 119.31.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11204 (0x2bc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Validity Not Before: Oct 28 14:15:08 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a47f0b-f617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a3:a0:b2:28:d4:7e:b6:4e:46:cf:1e:42:2b: 0b:34:20:4f:e1:ab:61:a0:74:88:52:7f:c2:8c:a2: 45:3b:d8:7b:b7:71:89:d6:84:eb:85:a7:6a:a3:fd: ce:4d:61:9d:52:21:48:2a:10:f9:18:b9:0b:ba:d5: 28:78:35:bd:f6:8e:e7:3c:c5:35:ee:c2:34:7d:d2: d5:71:06:96:0b:87:29:99:a5:36:60:46:69:95:5c: a2:2d:53:3e:4a:ea:e9:8c:05:2c:bd:e0:df:a2:3d: 5f:04:6c:f3:c8:d2:3e:8b:30:0c:64:12:c8:6c:bf: 34:6b:3e:c9:ea:e1:c0:57:69:12:00:23:f6:88:c2: 42:3e:e5:29:4a:b4:a9:b6:24:50:d2:4a:33:85:d3: e0:a7:bb:d3:23:4c:c9:dd:cc:19:fe:69:8a:74:66: d1:9f:d5:54:d0:49:7c:38:52:23:d7:0b:79:1d:01: c8:ae:d3:ad:2e:c7:cb:3f:53:93:fb:da:e7:ec:29: 45:c1:62:17:bf:dc:90:37:75:37:93:f9:12:c5:28: 0b:8e:62:31:0a:45:a2:66:4c:16:5f:46:80:cb:12: 64:db:82:e9:a7:1b:0a:12:d3:81:2b:e2:86:32:80: 74:de:0b:a4:b6:eb:df:55:be:a7:30:1b:2d:73:8a: 67:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:21:17:0E:92:63:49:E0:1B:EC:C6:0F:1B:F1:0C:CF:70:5F:FC:39 X509v3 Authority Key Identifier: keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/BB799DA8844011F09054B049C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.96.0/22 43.245.108.0/22 101.100.192.0/18 103.9.100.0/22 103.11.188.0/22 103.15.232.0/22 103.104.196.0/24 111.235.136.0/22 119.31.232.0/21 Signature Algorithm: sha256WithRSAEncryption a5:dd:e3:98:12:9b:fc:9f:c5:8b:57:1f:46:9b:0f:c9:8a:b1: 27:42:f8:7d:9c:e9:d3:db:8c:af:7e:55:0a:98:54:18:44:21: e5:eb:91:c3:3b:60:d4:b4:7b:7c:3c:7b:37:55:9c:e9:d9:7d: f4:f8:e5:b7:ce:03:b7:65:c5:0e:ad:39:67:d0:c7:c5:ae:82: 6d:01:bb:7b:5a:d5:1c:07:fe:a7:8d:57:d3:15:50:ab:34:f7: 8d:05:e3:f5:8e:4f:ca:01:59:a5:22:11:24:21:83:93:0b:6d: 82:02:2d:28:8e:e8:71:ad:d5:46:fd:50:46:a4:e0:86:7a:de: 2b:1b:7f:52:d6:3a:15:be:dc:c6:e8:89:ff:41:05:a1:ee:fa: 53:62:73:12:6b:34:7b:24:7c:16:c2:ea:14:11:f2:40:49:89: fc:0f:26:3d:96:78:13:03:00:9d:16:36:c7:78:20:7a:e9:e1: ad:30:a1:d8:0e:f0:3e:93:92:8a:49:5e:66:63:5b:c6:ba:54: f1:33:6e:19:43:ce:83:b8:b2:47:a5:ba:ef:0a:22:e2:01:eb: f6:bd:ba:d4:4d:dc:ce:9a:36:56:00:4a:a0:2c:f8:9a:83:8e: 7a:6f:1d:a7:75:4d:24:f7:db:8c:f7:db:b3:50:95:5f:57:ea: a4:99:14:a3 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgICK8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFQzUxMTAvBgNVBAUTKDlGQ0UyODkxNEM1MERDOTk3NTVGMTA4QUI0MzM0Rjc3 MkNCRUEwRTIwHhcNMjUxMDI4MTQxNTA4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2YwYi1mNjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoaOgsijUfrZORs8eQisLNCBP4athoHSIUn/CjKJFO9h7t3GJ1oTrhadqo/3O TWGdUiFIKhD5GLkLutUoeDW99o7nPMU17sI0fdLVcQaWC4cpmaU2YEZplVyiLVM+ SurpjAUsveDfoj1fBGzzyNI+izAMZBLIbL80az7J6uHAV2kSACP2iMJCPuUpSrSp tiRQ0kozhdPgp7vTI0zJ3cwZ/mmKdGbRn9VU0El8OFIj1wt5HQHIrtOtLsfLP1OT +9rn7ClFwWIXv9yQN3U3k/kSxSgLjmIxCkWiZkwWX0aAyxJk24LppxsKEtOBK+KG MoB03guktuvfVb6nMBstc4pn7QIDAQABo4ICkDCCAowwHQYDVR0OBBYEFLIhFw6S Y0ngG+zGDxvxDM9wX/w5MB8GA1UdIwQYMBaAFJ/OKJFMUNyZdV8QirQzT3csvqDi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkVDNS8yREVDQUU1NjBF NTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNKbDFYeENLdEROUGR5eS1v T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL244NG9rVXhRM0psMVh4Q0t0RE5QZHl5LW9PSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZFQzUvMkRFQ0FFNTYwRTU2MTFFNEI2RjE5NTNBQzRGOUFFMDIvQkI3OTlEQTg4 NDQwMTFGMDkwNTRCMDQ5QzRGOUFFMDIucm9hME8GCCsGAQUFBwEHAQH/BEAwPjA8 BAIAATA2AwQCK/VgAwQCK/VsAwQGZWTAAwQCZwlkAwQCZwu8AwQCZw/oAwQAZ2jE AwQCb+uIAwQDdx/oMA0GCSqGSIb3DQEBCwUAA4IBAQCl3eOYEpv8n8WLVx9Gmw/J irEnQvh9nOnT24yvflUKmFQYRCHl65HDO2DUtHt8PHs3VZzp2X30+OW3zgO3ZcUO rTln0MfFroJtAbt7WtUcB/6njVfTFVCrNPeNBeP1jk/KAVmlIhEkIYOTC22CAi0o juhxrdVG/VBGpOCGet4rG39S1joVvtzG6In/QQWh7vpTYnMSazR7JHwWwuoUEfJA SYn8DyY9lngTAwCdFjbHeCB66eGtMKHYDvA+k5KKSV5mY1vGulTxM24ZQ86DuLJH pbrvCiLiAev2vbrUTdzOmjZWAEqgLPiag456bx2ndU0k99uM99uzUJVfV+qkmRSj -----END CERTIFICATE-----Generated at Sun Mar 22 20:13:35 2026 by rpki-client