$ rpki-client -vvf rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/59228E922D7F11F1BBAF3E2694833773.roa File: 59228E922D7F11F1BBAF3E2694833773.roa (raw, json) Hash identifier: uSHd53/3aRU1C2bIH1LczkW59jj5OhcnzsaYucDQstY= Subject key identifier: F2:13:BA:A4:35:04:2C:58:FD:E1:4E:40:85:6C:47:64:CC:7D:BE:BF Certificate issuer: /CN=A9176701/serialNumber=3F8A10FEC6C44478D63D33B257F0445D02A8A48C Certificate serial: 02 Authority key identifier: 3F:8A:10:FE:C6:C4:44:78:D6:3D:33:B2:57:F0:44:5D:02:A8:A4:8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P4oQ_sbERHjWPTOyV_BEXQKopIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/59228E922D7F11F1BBAF3E2694833773.roa Signing time: Wed 01 Apr 2026 04:00:41 +0000 ROA not before: Wed 01 Apr 2026 04:00:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 4826 IP address blocks: 203.16.40.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.crl rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P4oQ_sbERHjWPTOyV_BEXQKopIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176701, serialNumber=3F8A10FEC6C44478D63D33B257F0445D02A8A48C Validity Not Before: Apr 1 04:00:41 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69cc9869-fae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:de:27:3e:58:86:02:9c:2b:fd:b1:12:51:ec: e5:87:1f:ba:b6:6d:ab:0d:de:e9:4f:de:c2:37:1a: 49:4f:b2:d1:47:56:8f:b2:df:a8:a8:a6:fb:10:40: 2a:0f:8d:c8:78:a9:c1:60:ed:c8:13:7d:0d:12:f5: b9:0d:ae:fa:53:42:d8:14:e0:e1:be:90:3b:0b:9b: 54:d8:c6:89:cd:ce:81:c7:d5:4a:8d:dc:4b:c8:b1: ed:29:75:c3:40:12:4c:30:64:60:eb:58:ab:43:c1: 1c:ad:6d:af:45:45:3e:b9:ea:47:22:5e:70:35:57: 47:52:d9:5f:72:6e:aa:ca:7e:71:46:0e:4d:98:27: 3f:83:e8:03:f9:22:ca:45:5a:0f:1a:7a:ef:ea:ca: 2c:98:49:51:55:de:fb:6c:b8:c8:21:4d:ac:b5:ab: db:c1:56:7f:a4:9c:1f:33:29:de:66:5c:0d:8f:fb: ec:49:d0:b5:9b:25:58:25:f3:79:31:6e:25:16:dc: 75:88:a1:0a:b3:6d:3f:49:e3:a0:0f:73:c8:4f:a2: ec:ab:06:09:2d:73:e0:35:5a:6d:e6:89:cd:64:76: 18:d5:20:c6:99:8d:26:28:d8:20:f7:5b:35:c7:e5: b8:6d:8f:e2:f3:84:f3:73:25:e9:54:8f:29:08:e8: a1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:13:BA:A4:35:04:2C:58:FD:E1:4E:40:85:6C:47:64:CC:7D:BE:BF X509v3 Authority Key Identifier: keyid:3F:8A:10:FE:C6:C4:44:78:D6:3D:33:B2:57:F0:44:5D:02:A8:A4:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/P4oQ_sbERHjWPTOyV_BEXQKopIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P4oQ_sbERHjWPTOyV_BEXQKopIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176701/B88550782D7E11F1B6808D1A94833773/59228E922D7F11F1BBAF3E2694833773.roa sbgp-ipAddrBlock: critical IPv4: 203.16.40.0/21 Signature Algorithm: sha256WithRSAEncryption 0c:0e:11:13:80:fb:0a:39:f1:76:28:e4:08:c5:8b:5f:6d:80: 4d:05:71:f3:77:a8:80:5c:01:32:36:f1:03:82:3d:8c:7f:e6: 59:55:72:58:3b:99:74:84:71:16:60:f5:92:b8:f8:39:dc:72: 1d:58:cd:78:b6:56:2c:ba:b4:15:47:92:88:15:79:53:19:dd: ad:61:a3:ee:84:9c:71:8e:d0:0c:1c:77:4d:66:2c:d8:7e:24: 3d:8b:c3:d7:eb:09:bd:db:ac:b3:0f:e5:5e:4a:7d:ec:50:05: 44:a8:83:e2:00:ec:17:01:af:45:69:58:7f:bf:d9:54:74:7a: 1b:4b:96:f8:41:7e:04:af:78:23:2e:58:57:5e:1f:14:fb:34: 7d:20:9e:44:32:09:37:8b:f6:9b:c7:ff:d3:b6:2e:ba:3b:4b: f7:57:0c:32:4d:75:ac:94:95:09:b3:0b:4d:a8:42:74:e9:1c: ce:af:41:fb:ff:52:f0:4a:fb:53:b8:94:db:c7:b9:e7:61:98: 03:44:34:21:47:f9:1f:4a:bb:79:bd:be:1a:17:6b:65:dc:b8: 0d:46:45:3b:ed:ea:76:83:ea:a2:8a:bd:44:df:17:69:8a:09: 86:0a:70:74:bc:ce:0f:29:ac:54:12:88:1f:ff:ab:dc:34:ff: 2c:d6:98:2b -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NjcwMTExMC8GA1UEBRMoM0Y4QTEwRkVDNkM0NDQ3OEQ2M0QzM0IyNTdGMDQ0NUQw MkE4QTQ4QzAeFw0yNjA0MDEwNDAwNDFaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5Y2M5ODY5LWZhZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG3ic+WIYCnCv9sRJR7OWHH7q2basN3ulP3sI3GklPstFHVo+y36iopvsQQCoP jch4qcFg7cgTfQ0S9bkNrvpTQtgU4OG+kDsLm1TYxonNzoHH1UqN3EvIse0pdcNA EkwwZGDrWKtDwRytba9FRT656kciXnA1V0dS2V9ybqrKfnFGDk2YJz+D6AP5IspF Wg8aeu/qyiyYSVFV3vtsuMghTay1q9vBVn+knB8zKd5mXA2P++xJ0LWbJVgl83kx biUW3HWIoQqzbT9J46APc8hPouyrBgktc+A1Wm3mic1kdhjVIMaZjSYo2CD3WzXH 5bhtj+LzhPNzJelUjykI6KH3AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU8hO6pDUE LFj94U5AhWxHZMx9vr8wHwYDVR0jBBgwFoAUP4oQ/sbERHjWPTOyV/BEXQKopIww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2NzAxL0I4ODU1MDc4MkQ3 RTExRjFCNjgwOEQxQTk0ODMzNzczL1A0b1Ffc2JFUkhqV1BUT3lWX0JFWFFLb3BJ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDRvUV9zYkVSSGpXUFRPeVZfQkVYUUtvcEl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjcwMS9CODg1NTA3ODJEN0UxMUYxQjY4MDhEMUE5NDgzMzc3My81OTIyOEU5MjJE N0YxMUYxQkJBRjNFMjY5NDgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAPLECgwDQYJKoZIhvcNAQELBQADggEBAAwOEROA+wo58XYo5AjFi19t gE0FcfN3qIBcATI28QOCPYx/5llVclg7mXSEcRZg9ZK4+Dncch1YzXi2Viy6tBVH kogVeVMZ3a1ho+6EnHGO0Awcd01mLNh+JD2Lw9frCb3brLMP5V5KfexQBUSog+IA 7BcBr0VpWH+/2VR0ehtLlvhBfgSveCMuWFdeHxT7NH0gnkQyCTeL9pvH/9O2Lro7 S/dXDDJNdayUlQmzC02oQnTpHM6vQfv/UvBK+1O4lNvHuedhmANENCFH+R9Ku3m9 vhoXa2XcuA1GRTvt6naD6qKKvUTfF2mKCYYKcHS8zg8prFQSiB//q9w0/yzWmCs= -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:15 2026 by rpki-client