$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/D1825C02598911F0848EA472C4F9AE02.roa File: D1825C02598911F0848EA472C4F9AE02.roa (raw, json) Hash identifier: AXuNEQhDZvnFZqkaW+L9U8CneqM+5lU+Ywjwx02JDnY= Subject key identifier: FB:50:0C:97:58:D3:7C:AE:3C:EA:9D:A9:90:D5:5B:21:CF:85:E2:5F Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 0220 Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/D1825C02598911F0848EA472C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:13:56 +0000 ROA not before: Sat 05 Jul 2025 10:21:31 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 9712 IP address blocks: 43.231.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Mar 2026 03:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Validity Not Before: Jul 5 10:21:31 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a481e4-69db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3d:ca:1e:cb:b9:24:9b:37:ae:bc:6b:fb:ee: 5f:1b:cc:7b:09:fa:63:33:48:41:fb:2a:d6:7b:fd: 12:ab:4f:e8:64:d1:23:d4:c4:0e:5f:97:d7:a1:05: 22:7e:2f:da:68:39:d8:f3:a7:76:0f:a2:29:ce:65: 08:16:32:2b:d4:f6:bc:af:b5:0c:93:84:9b:89:0a: 23:d3:8f:c3:3d:75:b1:94:9e:32:65:27:3b:4a:21: 23:48:ca:e9:a8:b5:9a:8b:1b:9c:0c:7f:fd:5d:da: ff:a4:30:01:5d:e3:7d:4e:90:71:01:21:f3:33:0b: 28:e6:74:10:42:5d:60:6f:75:36:bb:31:77:5a:0d: 75:68:17:d1:df:a1:e7:0c:0f:c3:d2:9f:b2:63:de: 6b:11:88:09:c7:3a:0c:ac:e6:b4:01:d9:02:69:19: 4a:74:f7:12:18:1d:da:db:bb:56:84:a4:bb:30:b7: b2:ca:6f:dc:f8:4b:21:e3:7b:92:87:aa:59:c8:31: a2:6e:3e:2b:57:e9:3d:f3:13:b6:33:20:be:0c:b7: b8:50:13:4e:cb:9b:e6:4b:13:42:fe:4d:5b:d8:f5: e7:4b:42:dd:9d:f2:9f:4a:47:5d:39:27:c5:a2:6f: 91:48:48:c0:07:80:28:8e:35:46:e8:5c:22:b2:1e: 3d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:50:0C:97:58:D3:7C:AE:3C:EA:9D:A9:90:D5:5B:21:CF:85:E2:5F X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/D1825C02598911F0848EA472C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.231.204.0/24 Signature Algorithm: sha256WithRSAEncryption 54:08:25:8e:25:89:f7:e8:ff:ee:9e:e4:13:ed:c5:3d:64:ed: a6:55:1a:c1:39:3b:1e:0f:f7:98:d3:08:eb:87:60:21:80:25: 44:01:6a:e8:61:4b:06:6d:76:4a:ed:1e:93:3a:ce:48:93:f8: 4b:20:df:a8:75:31:1b:45:8d:f6:17:dd:87:d6:dc:8a:b1:c4: 93:1a:2f:f3:1f:28:47:b9:76:a8:4f:b5:a4:9c:0c:4a:1d:64: 59:df:13:0b:27:a7:d5:44:60:87:27:0c:47:fd:7f:02:9d:4a: 6a:86:ff:87:0e:ba:4e:3b:27:83:30:96:49:23:06:c9:6b:df: c4:a7:3f:43:b0:4f:81:35:23:a8:d9:f3:ae:86:91:7f:f4:c5: 07:ee:16:bb:cf:81:b7:21:fd:8d:88:88:9e:9e:a8:de:7e:5e: 3d:51:58:ac:33:d0:3c:33:cf:d9:4d:46:95:91:9f:7b:3d:f1: ef:1c:e4:1c:49:49:33:c0:25:ff:0d:51:1f:c1:54:bb:7c:70: 41:f9:a0:1e:b5:de:80:d6:6e:c8:08:20:05:44:af:e5:73:a1: 4e:d1:5d:b1:40:44:a6:20:0a:d3:99:f2:bb:2f:93:37:00:87: 4b:d6:62:27:75:2a:5c:b7:dc:7c:b0:dc:76:b1:29:ec:bf:96: c8:bb:1f:7e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw MEQ3ODhCRkIwHhcNMjUwNzA1MTAyMTMxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODFlNC02OWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqz3KHsu5JJs3rrxr++5fG8x7CfpjM0hB+yrWe/0Sq0/oZNEj1MQOX5fXoQUi fi/aaDnY86d2D6IpzmUIFjIr1Pa8r7UMk4SbiQoj04/DPXWxlJ4yZSc7SiEjSMrp qLWaixucDH/9Xdr/pDABXeN9TpBxASHzMwso5nQQQl1gb3U2uzF3Wg11aBfR36Hn DA/D0p+yY95rEYgJxzoMrOa0AdkCaRlKdPcSGB3a27tWhKS7MLeyym/c+Esh43uS h6pZyDGibj4rV+k98xO2MyC+DLe4UBNOy5vmSxNC/k1b2PXnS0LdnfKfSkddOSfF om+RSEjAB4AojjVG6Fwish49TQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPtQDJdY 03yuPOqdqZDVWyHPheJfMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTU2NDcvOTA1QzEwNDZGMzZGMTFFRTk5NzJFQjc5QzRGOUFFMDIvRDE4MjVDMDI1 OTg5MTFGMDg0OEVBNDcyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK+fMMA0GCSqGSIb3DQEBCwUAA4IBAQBUCCWOJYn36P/unuQT7cU9 ZO2mVRrBOTseD/eY0wjrh2AhgCVEAWroYUsGbXZK7R6TOs5Ik/hLIN+odTEbRY32 F92H1tyKscSTGi/zHyhHuXaoT7WknAxKHWRZ3xMLJ6fVRGCHJwxH/X8CnUpqhv+H DrpOOyeDMJZJIwbJa9/Epz9DsE+BNSOo2fOuhpF/9MUH7ha7z4G3If2NiIienqje fl49UVisM9A8M8/ZTUaVkZ97PfHvHOQcSUkzwCX/DVEfwVS7fHBB+aAetd6A1m7I CCAFRK/lc6FO0V2xQESmIArTmfK7L5M3AIdL1mIndSpct9x8sNx2sSnsv5bIux9+ -----END CERTIFICATE-----Generated at Fri Mar 13 01:15:00 2026 by rpki-client