$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/06E8BCB4B3F411F0874AC55BC4F9AE02.roa File: 06E8BCB4B3F411F0874AC55BC4F9AE02.roa (raw, json) Hash identifier: HMO8+hILpX40jIXBPLdsHDVWASlEOQyWg25odthKBWQ= Subject key identifier: 3C:45:FB:18:20:67:5A:D9:C4:F7:E4:B2:95:71:11:91:73:0C:88:77 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 0608 Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/06E8BCB4B3F411F0874AC55BC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:27:37 +0000 ROA not before: Fri 02 Jan 2026 23:18:50 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 55154 IP address blocks: 43.226.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 22:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1544 (0x608) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Jan 2 23:18:50 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a48518-80d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:47:83:35:3c:bd:a8:31:52:12:d3:59:ca:1b: 58:55:13:b8:d1:ac:8a:84:a3:12:2b:59:82:71:bb: a4:0d:7f:97:57:d3:df:56:37:18:bf:64:97:61:53: c4:96:6d:ed:9b:cb:52:a8:24:09:6f:0d:22:4c:d2: e9:65:28:74:77:47:34:c6:30:07:3c:69:a9:fc:d0: 35:a4:5b:78:ee:e3:9d:59:f2:50:65:7f:fb:51:c4: 93:ad:ae:7f:15:59:74:4a:b3:9f:cb:53:e6:3d:e0: 5a:79:3a:86:f7:5b:85:d2:77:c0:05:90:f0:fa:cf: ef:6e:8c:60:9e:3e:fd:96:55:64:a1:34:f5:ff:68: 09:56:a3:6a:b5:dc:77:db:8b:d8:34:9d:d7:01:2b: ea:03:0e:27:28:09:0c:00:49:a8:e7:d9:9c:28:c2: c8:4d:03:3b:f8:24:a0:58:18:28:18:ad:d0:32:a3: 5f:95:bc:79:c8:c5:9a:3e:a1:94:0a:1f:89:a3:1f: 52:8d:55:41:45:bc:a8:71:33:e8:15:28:11:7a:12: bc:f3:91:60:8a:2b:e1:e1:ea:54:80:d0:44:c4:dd: eb:24:66:7e:3c:d6:36:76:18:6d:72:d6:05:10:2e: e0:2f:ef:59:04:3b:fb:e7:fe:a7:1f:c6:c7:12:84: 2c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:45:FB:18:20:67:5A:D9:C4:F7:E4:B2:95:71:11:91:73:0C:88:77 X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/06E8BCB4B3F411F0874AC55BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.226.231.0/24 Signature Algorithm: sha256WithRSAEncryption 37:21:22:c6:d8:74:52:09:4c:d5:0d:60:5e:7b:a6:df:4c:72: 61:98:20:7a:0a:e8:db:3a:22:56:b6:55:4b:87:e1:58:c7:21: 85:c8:4c:d9:84:01:83:97:71:d0:ab:35:a3:e5:15:74:c7:63: ab:d2:2a:52:6a:e7:fd:a7:8a:40:da:c2:92:1f:5a:63:6a:4d: 3d:ff:ff:4c:b0:88:ac:88:13:2d:5c:4b:c6:c6:42:15:56:12: 08:21:5a:b2:15:6c:f8:d9:0d:55:1d:f9:89:a8:54:1f:b2:86: 31:4b:7c:de:5a:6a:44:5f:e3:fd:dd:a7:6d:43:d5:65:bb:76: 81:06:4a:ad:84:65:6d:ec:81:8a:ce:87:7d:42:e5:f4:ee:34: 42:0f:a9:63:b7:cc:b3:69:d8:a3:0d:e5:01:c7:61:ab:e0:b6: 6f:b8:54:79:d8:ba:f0:a3:c9:37:82:a8:51:80:bc:c3:42:55: 2a:8a:6e:98:db:d3:1b:67:9c:d5:4c:29:4e:32:2a:f2:6c:b4: 6e:f5:df:6b:f5:a7:62:8d:56:11:59:8c:6b:b3:5c:9d:18:4d: ac:02:b3:6a:ec:e5:95:49:c2:1c:fd:53:a4:00:d0:e4:3f:7f: 40:fc:7a:16:11:6c:cb:a4:2b:92:56:5b:53:fe:38:53:07:a9: f6:0f:9b:e6 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjYwMTAyMjMxODUwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODUxOC04MGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUeDNTy9qDFSEtNZyhtYVRO40ayKhKMSK1mCcbukDX+XV9PfVjcYv2SXYVPE lm3tm8tSqCQJbw0iTNLpZSh0d0c0xjAHPGmp/NA1pFt47uOdWfJQZX/7UcSTra5/ FVl0SrOfy1PmPeBaeTqG91uF0nfABZDw+s/vboxgnj79llVkoTT1/2gJVqNqtdx3 24vYNJ3XASvqAw4nKAkMAEmo59mcKMLITQM7+CSgWBgoGK3QMqNflbx5yMWaPqGU Ch+Jox9SjVVBRbyocTPoFSgRehK885Fgiivh4epUgNBExN3rJGZ+PNY2dhhtctYF EC7gL+9ZBDv75/6nH8bHEoQsuwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDxF+xgg Z1rZxPfkspVxEZFzDIh3MB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhCRkEvMDRBMjRDMzQxMTQzMTFFQzk3MzY5RjczQzRGOUFFMDIvMDZFOEJDQjRC M0Y0MTFGMDg3NEFDNTVCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK+LnMA0GCSqGSIb3DQEBCwUAA4IBAQA3ISLG2HRSCUzVDWBee6bf THJhmCB6CujbOiJWtlVLh+FYxyGFyEzZhAGDl3HQqzWj5RV0x2Or0ipSauf9p4pA 2sKSH1pjak09//9MsIisiBMtXEvGxkIVVhIIIVqyFWz42Q1VHfmJqFQfsoYxS3ze WmpEX+P93adtQ9Vlu3aBBkqthGVt7IGKzod9QuX07jRCD6ljt8yzadijDeUBx2Gr 4LZvuFR52Lrwo8k3gqhRgLzDQlUqim6Y29MbZ5zVTClOMirybLRu9d9r9adijVYR WYxrs1ydGE2sArNq7OWVScIc/VOkANDkP39A/HoWEWzLpCuSVltT/jhTB6n2D5vm -----END CERTIFICATE-----Generated at Sat Mar 7 19:03:21 2026 by rpki-client