$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/C724415E35F911EE9F140449C4F9AE02.roa File: C724415E35F911EE9F140449C4F9AE02.roa (raw, json) Hash identifier: 1QPFfKPtxnZyzoIhQPujaiv9QOfwMAK/nR5JlwDQYrw= Subject key identifier: DD:14:2E:F5:C0:25:25:36:A6:18:E6:53:C3:FE:54:84:F2:A6:94:D9 Certificate issuer: /CN=A9148D53/serialNumber=FDBD4C0D34492F5CEAE4879E4762796E527007EB Certificate serial: 026D Authority key identifier: FD:BD:4C:0D:34:49:2F:5C:EA:E4:87:9E:47:62:79:6E:52:70:07:EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/C724415E35F911EE9F140449C4F9AE02.roa Signing time: Wed 11 Mar 2026 02:37:32 +0000 ROA not before: Wed 11 Mar 2026 02:37:32 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 137502 IP address blocks: 43.230.48.0/24 maxlen: 24 43.230.49.0/24 maxlen: 24 43.230.50.0/24 maxlen: 24 43.230.51.0/24 maxlen: 24 103.49.80.0/24 maxlen: 24 103.49.81.0/24 maxlen: 24 103.49.82.0/24 maxlen: 24 103.49.83.0/24 maxlen: 24 2401:fd80:1ff::/48 maxlen: 48 2401:fd80:400::/48 maxlen: 48 2401:fd80:401::/48 maxlen: 48 2401:fd80:402::/48 maxlen: 48 2401:fd80:403::/48 maxlen: 48 2401:fd80:404::/48 maxlen: 48 2401:fd80:405::/48 maxlen: 48 2401:fd80:406::/48 maxlen: 48 2401:fd80:407::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.crl rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 621 (0x26d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148D53, serialNumber=FDBD4C0D34492F5CEAE4879E4762796E527007EB Validity Not Before: Mar 11 02:37:32 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69b0d56c-4596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:98:13:08:62:a0:9d:c0:e5:f1:a0:33:a4:cb: 0a:af:d3:a2:7f:4b:2e:fd:1d:12:5b:bd:a4:0c:03: f6:42:c3:6e:c2:24:5a:a9:df:b7:56:28:c0:1a:f1: cc:76:32:05:ac:f5:c4:fd:70:d0:3d:00:2e:30:42: bd:56:7b:e1:7e:02:f8:69:a2:28:b2:de:8d:b8:a0: bf:94:4b:41:18:d4:60:bf:6a:88:db:bb:75:49:7a: a7:fc:b2:77:54:2d:48:71:82:f1:df:56:b8:6f:8b: f2:c5:72:6a:3f:62:fc:dd:42:4e:29:19:4e:24:12: 76:ac:bb:52:0c:ea:0d:c8:f6:10:5b:ae:17:8a:92: 14:c1:6c:3f:1b:89:18:fb:19:6a:e1:75:58:ab:9f: cf:14:8d:43:09:e9:bb:00:af:05:eb:56:d5:32:98: 76:91:b8:c4:1b:8e:bb:72:eb:9a:ec:2c:87:e1:8e: 5b:98:43:ea:9d:5c:ea:87:4b:b6:f9:79:4f:ae:0a: 38:8e:50:15:d9:b8:3d:c3:a2:83:c2:44:cf:9a:ff: 4f:9d:cd:a4:aa:be:c8:6a:0b:13:2e:3d:95:44:2b: 2c:50:bd:1e:23:ae:5f:1a:4b:24:69:38:be:55:b5: f4:1e:27:bf:b1:66:2e:49:75:a7:c8:f2:88:6a:c1: 89:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:14:2E:F5:C0:25:25:36:A6:18:E6:53:C3:FE:54:84:F2:A6:94:D9 X509v3 Authority Key Identifier: keyid:FD:BD:4C:0D:34:49:2F:5C:EA:E4:87:9E:47:62:79:6E:52:70:07:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/C724415E35F911EE9F140449C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.230.48.0/22 103.49.80.0/22 IPv6: 2401:fd80:1ff::/48 2401:fd80:400::/45 Signature Algorithm: sha256WithRSAEncryption 51:f0:53:ff:23:27:61:92:c0:d1:82:e4:9a:20:f4:17:a6:e4: f3:bf:60:5e:42:04:d9:f2:3f:2b:b8:ca:d0:d1:d1:f6:6b:7d: e5:63:7c:49:4f:09:0c:6a:27:65:7f:09:4d:01:6e:89:16:14: 7f:36:53:65:28:f1:10:5a:27:08:88:5b:f0:d6:32:39:b4:2e: b0:e1:77:ae:49:7e:2e:86:69:be:08:4e:bd:5b:a5:1c:29:b5: 00:fb:72:0e:19:69:db:25:e0:fc:b3:d1:bf:d6:74:54:96:e4: 84:83:db:59:c8:ad:cf:60:22:be:06:e6:67:e7:08:7a:51:55: c7:ed:c3:70:9b:82:9d:fb:5f:0f:78:30:e2:96:64:ee:88:21: e4:10:df:12:0e:03:1c:06:80:40:da:49:4f:40:85:be:7f:48: 2c:7f:4d:5b:2b:af:7e:0e:ce:64:30:6a:07:10:45:e6:af:f3: 2f:28:d5:b8:8e:0c:c0:bb:03:34:68:fc:28:15:71:3e:10:d9: f7:08:31:f6:1b:2d:58:80:26:10:89:94:8e:8e:64:ad:7f:8b: 9b:d8:66:ac:69:c9:bc:3b:90:41:3b:f4:62:00:34:ae:09:3d: 79:0f:7d:a4:36:d2:b7:83:3d:13:14:90:61:18:ad:45:7e:d9: da:d5:01:89 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhENTMxMTAvBgNVBAUTKEZEQkQ0QzBEMzQ0OTJGNUNFQUU0ODc5RTQ3NjI3OTZF NTI3MDA3RUIwHhcNMjYwMzExMDIzNzMyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWIwZDU2Yy00NTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5gTCGKgncDl8aAzpMsKr9Oif0su/R0SW72kDAP2QsNuwiRaqd+3VijAGvHM djIFrPXE/XDQPQAuMEK9VnvhfgL4aaIost6NuKC/lEtBGNRgv2qI27t1SXqn/LJ3 VC1IcYLx31a4b4vyxXJqP2L83UJOKRlOJBJ2rLtSDOoNyPYQW64XipIUwWw/G4kY +xlq4XVYq5/PFI1DCem7AK8F61bVMph2kbjEG467cuua7CyH4Y5bmEPqnVzqh0u2 +XlPrgo4jlAV2bg9w6KDwkTPmv9Pnc2kqr7IagsTLj2VRCssUL0eI65fGkskaTi+ VbX0Hie/sWYuSXWnyPKIasGJhQIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFN0ULvXA JSU2phjmU8P+VITyppTZMB8GA1UdIwQYMBaAFP29TA00SS9c6uSHnkdieW5ScAfr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ1My9ENTg2RjhGMDMw NzExMUVFODU0NkEzMkZDNEY5QUUwMi9fYjFNRFRSSkwxenE1SWVlUjJKNWJsSndC LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19iMU1EVFJKTDF6cTVJZWVSMko1YmxKd0Itcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhENTMvRDU4NkY4RjAzMDcxMTFFRTg1NDZBMzJGQzRGOUFFMDIvQzcyNDQxNUUz NUY5MTFFRTlGMTQwNDQ5QzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAS BAIAATAMAwQCK+YwAwQCZzFQMBgEAgACMBIDBwAkAf2AAf8DBwMkAf2ABAAwDQYJ KoZIhvcNAQELBQADggEBAFHwU/8jJ2GSwNGC5Jog9Bem5PO/YF5CBNnyPyu4ytDR 0fZrfeVjfElPCQxqJ2V/CU0BbokWFH82U2Uo8RBaJwiIW/DWMjm0LrDhd65Jfi6G ab4ITr1bpRwptQD7cg4Zadsl4Pyz0b/WdFSW5ISD21nIrc9gIr4G5mfnCHpRVcft w3Cbgp37Xw94MOKWZO6IIeQQ3xIOAxwGgEDaSU9Ahb5/SCx/TVsrr34OzmQwagcQ Reav8y8o1biODMC7AzRo/CgVcT4Q2fcIMfYbLViAJhCJlI6OZK1/i5vYZqxpybw7 kEE79GIANK4JPXkPfaQ20reDPRMUkGEYrUV+2drVAYk= -----END CERTIFICATE-----Generated at Wed Mar 25 16:19:42 2026 by rpki-client