$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/46F5BC3206A211EEBDA4D34BC4F9AE02.roa File: 46F5BC3206A211EEBDA4D34BC4F9AE02.roa (raw, json) Hash identifier: bLFKunzBxBlSN0G1S5flqUYYQ45l44FQFYrFF57mKjk= Subject key identifier: F6:76:FC:28:65:47:02:9A:49:3B:5D:8B:B2:08:EC:07:66:3C:36:EB Certificate issuer: /CN=A917E0A8/serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Certificate serial: 0B37 Authority key identifier: 7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/46F5BC3206A211EEBDA4D34BC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:30:53 +0000 ROA not before: Wed 30 Apr 2025 19:29:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3258 IP address blocks: 43.239.249.0/24 maxlen: 24 103.150.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 19:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2871 (0xb37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Validity Not Before: Apr 30 19:29:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a469bd-74c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:91:21:f5:27:18:6c:e3:4e:0d:4a:10:3e:18: 01:9a:cd:a4:53:da:46:ac:89:9b:3b:29:86:b9:1b: 46:45:9f:7a:84:04:0b:f8:55:83:3b:5b:53:eb:c3: 43:10:7d:61:44:7f:7e:83:bb:23:78:df:14:61:dc: 5f:b6:98:09:a4:b0:6a:3d:a6:5d:89:12:c2:4f:46: a3:bf:d8:78:56:5f:ff:56:0d:16:90:7c:77:16:47: e2:7c:7b:bf:4d:63:f3:f1:0a:df:8e:9d:a7:bc:16: 2c:78:ad:a0:31:98:fa:1f:26:22:1f:17:42:49:d9: 1d:22:62:70:25:58:c0:ae:94:cd:ed:ad:b8:79:90: 9b:fe:a5:68:6c:bc:7b:3b:5c:d1:40:57:0f:cf:10: e5:c4:36:97:54:35:ce:5a:61:67:d8:58:50:29:6e: ad:c2:f2:8e:d5:53:a6:86:96:d9:23:50:26:92:f1: 73:73:d2:e2:17:ba:cc:46:a8:9b:fc:d8:34:8e:1a: ca:e9:92:80:c3:01:af:72:a3:20:f9:ba:8a:79:f8: bf:03:17:9d:25:95:22:1b:36:c3:5e:b3:7b:18:26: 3a:8d:6b:33:f0:2d:e8:5b:42:7f:bc:ba:41:cf:ce: 0f:c9:52:94:cd:8f:0f:04:80:91:47:52:de:ec:c0: 13:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:76:FC:28:65:47:02:9A:49:3B:5D:8B:B2:08:EC:07:66:3C:36:EB X509v3 Authority Key Identifier: keyid:7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/46F5BC3206A211EEBDA4D34BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.249.0/24 103.150.8.0/24 Signature Algorithm: sha256WithRSAEncryption b6:c5:c2:bb:42:96:40:ce:5c:2f:1a:e6:15:d8:63:a2:32:25: 07:09:63:21:7e:92:e9:89:d9:c6:27:27:cd:35:88:9e:89:f0: dc:77:86:2f:23:97:3d:bb:db:58:d2:d7:74:cd:e6:5b:79:97: 6d:cb:10:2d:74:6e:20:eb:43:a7:80:ef:f8:c3:bc:53:05:28: ad:54:4f:cb:6c:fc:eb:b6:7c:f9:30:0c:da:66:b2:da:35:1b: 74:cf:96:9f:fb:27:3e:70:c8:b5:53:eb:6e:56:e7:38:e7:45: 15:ae:89:8c:32:80:04:12:28:7e:f3:7c:50:03:2b:5a:7a:24: 56:92:00:c0:b8:72:01:41:18:9e:a6:24:c5:88:77:92:d9:96: 8e:e9:96:00:07:cc:bd:e7:59:aa:68:6e:1d:e0:2e:e1:20:2c: 0f:37:4f:94:8b:48:28:ab:90:0b:48:44:08:e7:e2:99:a2:77: a7:a6:79:b6:0c:1d:66:10:9c:1f:f4:0a:b3:1b:56:aa:1a:ba: e8:c1:85:70:7d:23:b5:16:86:fd:3c:8c:ab:d1:73:41:0b:83: ea:50:7d:37:10:38:d5:b5:3d:3c:81:ae:e3:6f:4b:de:18:d3: 6c:5f:7c:8d:27:7f:a2:db:27:18:2d:f6:f2:8c:c2:ec:54:af: 82:14:39:27 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDdBQ0U2REEzNUZCNkE0QTlGNkY5OTcwQzE4QkNBRjVC Mjc0ODExOUYwHhcNMjUwNDMwMTkyOTM3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjliZC03NGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7pEh9ScYbONODUoQPhgBms2kU9pGrImbOymGuRtGRZ96hAQL+FWDO1tT68ND EH1hRH9+g7sjeN8UYdxftpgJpLBqPaZdiRLCT0ajv9h4Vl//Vg0WkHx3FkfifHu/ TWPz8Qrfjp2nvBYseK2gMZj6HyYiHxdCSdkdImJwJVjArpTN7a24eZCb/qVobLx7 O1zRQFcPzxDlxDaXVDXOWmFn2FhQKW6twvKO1VOmhpbZI1AmkvFzc9LiF7rMRqib /Ng0jhrK6ZKAwwGvcqMg+bqKefi/AxedJZUiGzbDXrN7GCY6jWsz8C3oW0J/vLpB z84PyVKUzY8PBICRR1Le7MAThQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFPZ2/Chl RwKaSTtdi7II7AdmPDbrMB8GA1UdIwQYMBaAFHrObaNftqSp9vmXDBi8r1snSBGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC9BMDU5QUY4QTY0 MEQxMUVBQjYzOTU1NzFDNEY5QUUwMi9lczV0bzEtMnBLbjItWmNNR0x5dld5ZElF WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzNXRvMS0ycEtuMi1aY01HTHl2V3lkSUVaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UwQTgvQTA1OUFGOEE2NDBEMTFFQUI2Mzk1NTcxQzRGOUFFMDIvNDZGNUJDMzIw NkEyMTFFRUJEQTREMzRCQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAK+/5AwQAZ5YIMA0GCSqGSIb3DQEBCwUAA4IBAQC2xcK7QpZAzlwv GuYV2GOiMiUHCWMhfpLpidnGJyfNNYieifDcd4YvI5c9u9tY0td0zeZbeZdtyxAt dG4g60OngO/4w7xTBSitVE/LbPzrtnz5MAzaZrLaNRt0z5af+yc+cMi1U+tuVuc4 50UVromMMoAEEih+83xQAytaeiRWkgDAuHIBQRiepiTFiHeS2ZaO6ZYAB8y951mq aG4d4C7hICwPN0+Ui0goq5ALSEQI5+KZonenpnm2DB1mEJwf9AqzG1aqGrrowYVw fSO1Fob9PIyr0XNBC4PqUH03EDjVtT08ga7jb0veGNNsX3yNJ3+i2ycYLfbyjMLs VK+CFDkn -----END CERTIFICATE-----Generated at Sat Mar 7 19:33:29 2026 by rpki-client