$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/13435546ABF211F0BA77FA0DC4F9AE02.roa File: 13435546ABF211F0BA77FA0DC4F9AE02.roa (raw, json) Hash identifier: HIQTkqxEUw6fkREKneLxMJQ3JqOr/SLWIHkepYGIh7c= Subject key identifier: 16:6E:3D:27:C4:A2:E5:5E:4C:BE:0F:CC:CE:C8:32:02:4C:F5:72:CA Certificate issuer: /CN=A9197CBC/serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF Certificate serial: 012B Authority key identifier: D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/13435546ABF211F0BA77FA0DC4F9AE02.roa Signing time: Mon 02 Mar 2026 15:02:54 +0000 ROA not before: Sat 18 Oct 2025 07:14:24 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 26658 IP address blocks: 43.246.116.0/22 maxlen: 24 103.35.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CBC, serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF Validity Not Before: Oct 18 07:14:24 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a5a69e-30bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:be:3f:10:30:15:31:3c:72:37:25:32:c5:ef: 7d:5b:f5:20:35:02:97:31:3a:65:3f:50:19:e3:b2: 70:8a:ed:21:b1:47:3d:ca:da:d3:32:1a:2d:71:d8: 63:28:33:3a:90:18:7d:fe:32:32:ac:42:8a:47:e0: 45:98:20:23:a7:84:fd:38:b2:df:27:b5:0c:71:6c: f5:8a:8e:7d:48:6f:a3:af:ca:41:7c:17:0b:e9:35: 48:a9:6f:12:b6:55:a9:74:2e:92:5e:82:47:70:33: 31:41:0b:0d:51:fe:eb:82:5c:5a:16:97:ad:4c:94: 07:1b:e9:26:05:80:c3:45:9c:52:c1:a3:4d:61:7c: f9:15:69:f2:c8:a9:8a:39:98:b7:15:66:f9:53:45: 80:5f:ff:b2:f9:26:13:7f:dc:22:57:06:ab:66:16: 7c:b2:7c:9a:af:35:4c:5c:57:1f:f5:ad:35:42:45: 00:97:11:df:5d:40:53:aa:f4:e6:3e:b6:dc:d4:8d: 64:04:c9:9e:1b:4c:a0:e5:6a:f9:9d:2a:6f:1d:0d: f8:60:dc:5b:4e:13:cf:43:07:2f:41:a0:a8:c3:6a: 7d:4c:32:c8:f8:a2:7a:29:de:57:4e:c7:70:46:c2: 43:cb:a1:7b:25:79:b0:25:10:77:45:90:8e:9f:88: 2f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6E:3D:27:C4:A2:E5:5E:4C:BE:0F:CC:CE:C8:32:02:4C:F5:72:CA X509v3 Authority Key Identifier: keyid:D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/13435546ABF211F0BA77FA0DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.246.116.0/22 103.35.184.0/22 Signature Algorithm: sha256WithRSAEncryption 52:61:58:ed:19:78:14:a0:4d:04:d8:c4:24:44:9b:9e:74:71: 58:25:e1:f2:10:74:73:32:77:53:d0:9e:ed:3c:9e:13:a8:61: ed:dc:ff:e6:58:16:ae:90:62:9d:3b:48:19:d8:86:25:8d:eb: b9:bc:5e:24:0a:6f:d0:2b:4f:5d:1c:d7:58:f7:02:c0:02:9d: 58:79:6f:62:05:57:eb:d0:0a:f6:42:ff:f2:0a:98:11:3b:4c: 0f:76:59:09:fa:5b:ea:70:d0:c3:d2:c4:e5:c2:fb:2f:e8:93: ed:f7:5d:54:1b:90:d1:6f:e5:9e:5e:55:29:4b:76:4d:82:d8: dc:ca:7d:06:5f:25:7b:27:37:2b:9d:15:d4:58:b0:6b:20:47: 4f:81:08:9e:90:e2:b4:63:b9:5b:96:0c:7d:ea:83:6a:73:e9: 62:a5:06:b4:fd:a7:3f:bd:0f:3b:d3:6d:db:ed:21:c6:b1:c1: 2e:c9:14:d6:21:45:99:58:0b:56:55:09:f2:03:3d:5d:8a:74: 5b:ef:4d:77:5f:f4:d9:df:55:ad:7d:72:83:fa:87:f9:a3:95: 8a:06:55:f0:06:42:28:d0:2a:13:96:e9:c7:24:12:ae:50:7e: b4:38:b5:b1:26:e3:b6:b1:48:87:c3:00:50:e4:87:3c:25:fc: e4:bc:19:7c -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDQkMxMTAvBgNVBAUTKEQzOTg0NzQ3MTQyNTdCQkVGM0E1QTk3NUQ5MENEMERD NjVCRERCRUYwHhcNMjUxMDE4MDcxNDI0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTY5ZS0zMGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwr4/EDAVMTxyNyUyxe99W/UgNQKXMTplP1AZ47Jwiu0hsUc9ytrTMhotcdhj KDM6kBh9/jIyrEKKR+BFmCAjp4T9OLLfJ7UMcWz1io59SG+jr8pBfBcL6TVIqW8S tlWpdC6SXoJHcDMxQQsNUf7rglxaFpetTJQHG+kmBYDDRZxSwaNNYXz5FWnyyKmK OZi3FWb5U0WAX/+y+SYTf9wiVwarZhZ8snyarzVMXFcf9a01QkUAlxHfXUBTqvTm Prbc1I1kBMmeG0yg5Wr5nSpvHQ34YNxbThPPQwcvQaCow2p9TDLI+KJ6Kd5XTsdw RsJDy6F7JXmwJRB3RZCOn4gvzQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBZuPSfE ouVeTL4PzM7IMgJM9XLKMB8GA1UdIwQYMBaAFNOYR0cUJXu+86WpddkM0Nxlvdvv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NCQy85NTJCQUUyRTVE RjAxMUVGQUM3MEVEMEFDNEY5QUUwMi8wNWhIUnhRbGU3N3pwYWwxMlF6UTNHVzky LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA1aEhSeFFsZTc3enBhbDEyUXpRM0dXOTItOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTdDQkMvOTUyQkFFMkU1REYwMTFFRkFDNzBFRDBBQzRGOUFFMDIvMTM0MzU1NDZB QkYyMTFGMEJBNzdGQTBEQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/Z0AwQCZyO4MA0GCSqGSIb3DQEBCwUAA4IBAQBSYVjtGXgUoE0E 2MQkRJuedHFYJeHyEHRzMndT0J7tPJ4TqGHt3P/mWBaukGKdO0gZ2IYljeu5vF4k Cm/QK09dHNdY9wLAAp1YeW9iBVfr0Ar2Qv/yCpgRO0wPdlkJ+lvqcNDD0sTlwvsv 6JPt911UG5DRb+WeXlUpS3ZNgtjcyn0GXyV7JzcrnRXUWLBrIEdPgQiekOK0Y7lb lgx96oNqc+lipQa0/ac/vQ87023b7SHGscEuyRTWIUWZWAtWVQnyAz1dinRb7013 X/TZ31WtfXKD+of5o5WKBlXwBkIo0CoTlunHJBKuUH60OLWxJuO2sUiHwwBQ5Ic8 JfzkvBl8 -----END CERTIFICATE-----Generated at Sat Mar 21 22:31:47 2026 by rpki-client