$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/CD9372E687F811F0B5B27636C4F9AE02.roa File: CD9372E687F811F0B5B27636C4F9AE02.roa (raw, json) Hash identifier: 2yKTAZYnZIzr1D5gDTXkNr4QqK0s9dbV2MakqBfyRC0= Subject key identifier: D3:BA:DB:9F:CB:56:F9:E2:CB:AE:78:EB:D0:8A:BA:78:76:55:6B:93 Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 0221 Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/CD9372E687F811F0B5B27636C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:13:57 +0000 ROA not before: Tue 02 Sep 2025 12:31:52 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 382 IP address blocks: 43.231.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Mar 2026 03:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Validity Not Before: Sep 2 12:31:52 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a481e5-bc7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:97:6d:d6:bb:cf:8d:63:a1:a9:f6:7e:40:57: a6:9d:8e:5b:2f:f9:62:97:0b:cb:71:c8:08:d9:dd: 71:68:7e:4a:3f:75:05:d1:54:1c:28:cd:8a:77:d9: 28:b8:8c:83:a6:c2:3b:08:da:c0:9b:37:d4:14:38: 69:93:37:07:f1:20:17:e1:5e:a1:51:7b:27:af:1a: a2:dd:0a:bd:64:55:c5:93:6e:eb:0f:7a:25:b1:12: a3:1c:40:9f:5d:83:e1:ac:ec:f2:57:11:de:5c:fa: 2a:ff:fc:f5:24:2e:5b:e0:c5:48:b6:de:7b:5b:e2: 83:0b:81:af:77:84:e4:58:28:a1:c3:14:6c:74:01: 8a:9b:f8:74:60:22:84:9b:2b:25:0b:4f:30:8f:2f: 62:fe:1f:19:a0:a7:d0:87:3c:b7:ae:26:df:3e:7f: fb:3a:5d:68:b9:fd:53:fb:c2:fc:be:ed:83:31:f3: 7f:29:46:21:51:62:9c:1f:0b:51:17:53:ad:c3:d4: 3d:91:45:aa:8b:56:8e:aa:e8:eb:fd:5f:75:78:21: eb:c8:f9:a7:24:20:ab:6e:e8:2e:c2:08:46:7a:dc: 10:ac:61:60:6e:b7:15:1d:8c:f4:77:13:be:29:da: 17:d9:17:9c:e2:04:11:4b:f1:2f:c1:43:85:c6:8b: ba:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BA:DB:9F:CB:56:F9:E2:CB:AE:78:EB:D0:8A:BA:78:76:55:6B:93 X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/CD9372E687F811F0B5B27636C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.231.207.0/24 Signature Algorithm: sha256WithRSAEncryption 35:02:67:7d:8f:56:3a:e7:df:83:76:b7:ae:08:da:de:6f:ab: a6:e7:29:c6:de:69:e1:b7:45:3c:de:d5:7a:33:0e:c4:0f:a9: de:6f:29:a9:4d:86:17:72:25:af:f5:97:ce:f0:76:cc:8a:bb: d6:31:cc:84:bf:b5:5b:1d:64:c8:68:47:99:83:d2:b6:59:07: b6:ab:ff:b0:55:39:96:d7:64:e8:df:86:19:27:c7:c5:9e:4d: 59:66:fd:e6:90:32:af:22:8b:65:30:9b:2f:f2:96:31:c0:40: 66:b7:a8:83:16:cc:ec:69:62:63:50:86:b9:e2:80:35:db:80: 3f:f0:40:ee:0a:49:2a:68:42:b7:8c:5a:4e:da:69:53:4a:7e: 20:99:1e:6a:fd:09:a1:36:75:78:ba:d0:3c:4c:40:de:ed:e8: ef:3d:99:fb:4c:a8:89:69:5e:db:94:62:74:6d:c2:c5:0a:39: 9b:f7:e9:2b:79:53:ee:94:8c:ee:04:b0:28:48:fe:9d:79:7f: f9:c7:b6:e8:df:0a:cf:b9:91:02:5c:e1:dd:5d:b9:34:d8:70: a0:ac:ba:6d:bf:04:00:1a:a3:2d:fb:27:be:7c:fa:4d:5e:ce: b6:54:82:b7:64:4c:3c:5e:42:0d:b9:29:2d:3e:3e:9e:fb:31: 12:ac:5b:16 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw MEQ3ODhCRkIwHhcNMjUwOTAyMTIzMTUyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODFlNS1iYzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35dt1rvPjWOhqfZ+QFemnY5bL/lilwvLccgI2d1xaH5KP3UF0VQcKM2Kd9ko uIyDpsI7CNrAmzfUFDhpkzcH8SAX4V6hUXsnrxqi3Qq9ZFXFk27rD3olsRKjHECf XYPhrOzyVxHeXPoq//z1JC5b4MVItt57W+KDC4Gvd4TkWCihwxRsdAGKm/h0YCKE myslC08wjy9i/h8ZoKfQhzy3ribfPn/7Ol1ouf1T+8L8vu2DMfN/KUYhUWKcHwtR F1Otw9Q9kUWqi1aOqujr/V91eCHryPmnJCCrbuguwghGetwQrGFgbrcVHYz0dxO+ KdoX2Rec4gQRS/EvwUOFxou6SwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNO625/L Vvniy65469CKunh2VWuTMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTU2NDcvOTA1QzEwNDZGMzZGMTFFRTk5NzJFQjc5QzRGOUFFMDIvQ0Q5MzcyRTY4 N0Y4MTFGMEI1QjI3NjM2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK+fPMA0GCSqGSIb3DQEBCwUAA4IBAQA1Amd9j1Y659+DdreuCNre b6um5ynG3mnht0U83tV6Mw7ED6nebympTYYXciWv9ZfO8HbMirvWMcyEv7VbHWTI aEeZg9K2WQe2q/+wVTmW12To34YZJ8fFnk1ZZv3mkDKvIotlMJsv8pYxwEBmt6iD FszsaWJjUIa54oA124A/8EDuCkkqaEK3jFpO2mlTSn4gmR5q/QmhNnV4utA8TEDe 7ejvPZn7TKiJaV7blGJ0bcLFCjmb9+kreVPulIzuBLAoSP6deX/5x7bo3wrPuZEC XOHdXbk02HCgrLptvwQAGqMt+ye+fPpNXs62VIK3ZEw8XkINuSktPj6e+zESrFsW -----END CERTIFICATE-----Generated at Fri Mar 13 01:14:43 2026 by rpki-client