$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/17F4DF6E563A11F092DD586EC4F9AE02.roa File: 17F4DF6E563A11F092DD586EC4F9AE02.roa (raw, json) Hash identifier: VoQrlag/uQljqLBhje8W3GmSgopLeC8gQtggx3LOIyc= Subject key identifier: 7A:71:5A:D4:9D:F9:BF:60:D1:81:CF:28:0E:62:C6:F5:4B:7A:BC:46 Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 07DB Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/17F4DF6E563A11F092DD586EC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:42:52 +0000 ROA not before: Tue 02 Sep 2025 23:44:25 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 6134 IP address blocks: 43.247.132.0/22 maxlen: 24 43.254.164.0/22 maxlen: 24 43.255.156.0/22 maxlen: 24 103.30.76.0/22 maxlen: 24 103.171.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Mar 2026 22:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2011 (0x7db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Sep 2 23:44:25 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a488ac-bf0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e9:98:b8:43:71:8e:a9:18:a9:19:1c:97:c7: 93:c0:20:fd:08:01:d6:3e:74:5e:97:27:53:4c:c0: 6c:ba:52:1c:39:cc:0f:06:97:a5:76:ae:ff:45:e2: 10:dc:65:79:28:d2:db:c4:e4:71:7a:12:43:c9:00: 55:3e:b7:0f:62:9d:33:3c:2c:9f:e1:f5:9e:dd:4e: 6a:27:90:fd:05:0d:34:06:22:c1:68:24:d1:d1:dd: 40:28:b8:37:ad:c5:9e:1f:b2:a3:41:86:b7:6c:1c: 69:a1:1e:83:80:2e:31:52:22:9a:35:5b:f1:3e:ed: a6:91:74:6b:0c:91:91:e0:b0:54:99:c9:d3:5d:cd: ec:7b:c8:3e:57:d3:77:79:90:28:33:20:2b:22:57: 38:76:1d:ac:c8:f0:0a:d4:3f:59:1f:21:3a:c6:58: 91:67:d4:83:4e:86:57:23:72:96:94:34:9d:e1:fb: 31:92:14:43:18:1c:54:91:24:cd:90:0a:41:49:bd: a3:16:1c:d4:fb:73:d2:c0:f0:1c:60:03:58:be:8f: c0:7d:07:3b:c1:9b:a8:38:74:30:8f:1a:b9:21:09: b1:40:3a:28:71:88:a5:b7:90:47:7c:e5:ff:76:27: 9d:cc:f2:b3:e1:63:2e:af:4d:77:40:70:c9:a4:b3: 47:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:71:5A:D4:9D:F9:BF:60:D1:81:CF:28:0E:62:C6:F5:4B:7A:BC:46 X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/17F4DF6E563A11F092DD586EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.247.132.0/22 43.254.164.0/22 43.255.156.0/22 103.30.76.0/22 103.171.34.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:6a:b1:3c:71:53:bc:92:66:2d:73:38:60:28:d5:4d:94:44: 5f:8b:64:d2:94:f9:fa:c0:f1:f5:ea:84:ba:c0:f4:87:33:ec: 5d:24:7b:2c:a0:bd:41:33:5a:4d:db:ac:46:9c:7b:09:33:83: bd:a1:60:c9:d6:80:90:a4:20:88:51:1b:da:2b:83:38:3e:ed: e8:4f:0e:19:c1:49:4d:b9:98:5c:a1:36:02:49:72:3c:10:12: 2a:27:10:46:5a:59:38:90:ee:9a:30:e5:9b:cd:c0:3c:cb:17: e8:c3:02:87:21:b9:94:37:d8:d9:e2:cd:2c:bc:e3:d7:74:f4: 00:04:9b:df:c7:56:17:68:48:e3:90:10:16:13:41:93:42:26: 80:6e:bf:48:eb:94:01:d7:1b:62:f8:96:f3:c8:12:b4:32:b9: 0f:17:c9:08:3c:08:a0:96:48:42:c3:3c:c1:c2:b7:8a:a7:57: 42:21:57:51:a3:a0:e1:6b:27:79:dd:f9:8a:05:3e:e5:da:b3: 0d:f9:68:24:6f:a7:59:b4:c2:be:1f:b5:d2:91:17:d3:33:51: 0b:64:13:f8:a8:4d:af:b8:f5:8a:ce:26:6f:91:c2:d2:5c:24: f1:d0:4c:71:d4:ed:a0:76:a0:37:25:4d:14:f0:4f:4b:c6:bd: 69:33:17:d0 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICB9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjUwOTAyMjM0NDI1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODhhYy1iZjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyumYuENxjqkYqRkcl8eTwCD9CAHWPnRelydTTMBsulIcOcwPBpeldq7/ReIQ 3GV5KNLbxORxehJDyQBVPrcPYp0zPCyf4fWe3U5qJ5D9BQ00BiLBaCTR0d1AKLg3 rcWeH7KjQYa3bBxpoR6DgC4xUiKaNVvxPu2mkXRrDJGR4LBUmcnTXc3se8g+V9N3 eZAoMyArIlc4dh2syPAK1D9ZHyE6xliRZ9SDToZXI3KWlDSd4fsxkhRDGBxUkSTN kApBSb2jFhzU+3PSwPAcYANYvo/AfQc7wZuoOHQwjxq5IQmxQDoocYilt5BHfOX/ diedzPKz4WMur013QHDJpLNHzwIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFHpxWtSd +b9g0YHPKA5ixvVLerxGMB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvMTdGNERGNkU1 NjNBMTFGMDkyREQ1ODZFQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQCK/eEAwQCK/6kAwQCK/+cAwQCZx5MAwQBZ6siMA0GCSqGSIb3DQEB CwUAA4IBAQCMarE8cVO8kmYtczhgKNVNlERfi2TSlPn6wPH16oS6wPSHM+xdJHss oL1BM1pN26xGnHsJM4O9oWDJ1oCQpCCIURvaK4M4Pu3oTw4ZwUlNuZhcoTYCSXI8 EBIqJxBGWlk4kO6aMOWbzcA8yxfowwKHIbmUN9jZ4s0svOPXdPQABJvfx1YXaEjj kBAWE0GTQiaAbr9I65QB1xti+JbzyBK0MrkPF8kIPAiglkhCwzzBwreKp1dCIVdR o6Dhayd53fmKBT7l2rMN+Wgkb6dZtMK+H7XSkRfTM1ELZBP4qE2vuPWKziZvkcLS XCTx0Exx1O2gdqA3JU0U8E9Lxr1pMxfQ -----END CERTIFICATE-----Generated at Thu Mar 12 22:55:34 2026 by rpki-client