$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/D716391C53CC11F0BC106B7CC4F9AE02.roa File: D716391C53CC11F0BC106B7CC4F9AE02.roa (raw, json) Hash identifier: 5mm9RZOY9SR//ZDv9GwPO4rps/lE7cjfjdPoJ/hSfGE= Subject key identifier: 06:7C:56:8F:8E:95:02:02:39:6C:E6:FB:FC:D2:B6:24:EA:4B:BB:37 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 08DE Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/D716391C53CC11F0BC106B7CC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:53:49 +0000 ROA not before: Wed 08 Oct 2025 22:54:15 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 21859 IP address blocks: 36.255.193.0/24 maxlen: 24 36.255.194.0/24 maxlen: 24 43.229.152.0/24 maxlen: 24 103.209.233.0/24 maxlen: 24 103.209.234.0/24 maxlen: 24 150.107.0.0/24 maxlen: 24 163.53.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Mar 2026 22:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2270 (0x8de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 8 22:54:15 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a48b3d-a8eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:75:7b:af:a2:43:43:d4:53:13:5b:57:de:42: 99:4e:d2:01:7e:f6:61:0d:49:60:24:81:c7:1c:98: 0c:1f:a9:a6:14:8f:3a:62:24:10:e6:e4:ee:07:33: 26:64:5c:f9:e4:61:3b:8a:f0:24:49:27:53:59:fe: 6d:07:18:d5:cc:2a:a1:69:47:b1:6a:84:c0:0e:9e: 45:af:09:1b:d3:1d:bc:f5:16:19:81:f6:30:d6:a2: da:b5:bb:f0:60:10:5c:c3:a8:b9:a8:42:06:82:a8: c2:7d:53:da:8e:98:11:8a:c3:09:2a:91:c2:a9:04: b6:33:39:b1:40:d6:23:da:55:67:43:66:9d:65:4e: de:8c:9e:d6:20:67:15:d6:02:60:56:47:fd:7e:08: 62:f4:59:af:4b:45:74:ed:02:ff:de:ff:62:f6:00: b7:5b:58:9c:ed:9d:f5:45:02:5d:47:b2:86:bf:88: 4b:8d:c7:20:af:2d:f2:c3:fe:3a:e2:c9:4b:71:15: 05:05:cf:73:a4:57:64:71:25:ff:e0:03:85:35:18: ff:6e:ac:40:a9:a3:5e:b3:6c:fa:e2:7f:86:88:40: 59:e7:d5:d1:3e:bf:71:13:99:67:6c:4f:e8:35:b2: 2f:47:9e:8d:6d:ce:96:23:cb:c9:92:5a:09:a6:f9: 9f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7C:56:8F:8E:95:02:02:39:6C:E6:FB:FC:D2:B6:24:EA:4B:BB:37 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/D716391C53CC11F0BC106B7CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.255.193.0-36.255.194.255 43.229.152.0/24 103.209.233.0-103.209.234.255 150.107.0.0/24 163.53.17.0/24 Signature Algorithm: sha256WithRSAEncryption 34:88:a6:7f:65:7e:75:27:0e:c4:03:9b:e5:f0:c4:96:04:44: f6:9a:4d:67:ca:c0:ff:38:2b:fa:7b:df:b6:7e:ef:76:ba:80: d4:d7:62:68:4d:40:ec:0f:65:2b:63:46:d5:5a:66:bb:45:0d: 1f:f8:7f:b8:38:88:46:66:2d:e3:f6:e7:7c:46:51:93:2a:38: e0:79:97:da:a6:c0:1c:cd:89:c8:45:ed:ca:da:45:27:7f:d7: 82:ad:69:16:d4:2f:50:b6:8f:72:23:29:73:14:65:f0:62:8c: b2:91:52:3b:35:a4:06:70:1c:49:74:85:be:01:4f:1c:fb:a1: f1:8a:21:86:26:ce:56:ed:c9:b0:54:27:07:d7:6e:21:49:c3: 6e:ec:a3:cf:73:aa:6f:87:b3:5f:78:1c:86:3a:44:4f:c1:ef: 7c:c2:1d:07:d0:fd:3a:10:80:63:b5:2e:b7:79:2c:73:c8:47: d9:f0:fa:03:22:e9:8a:a6:c1:af:0e:6b:9a:4b:ea:3b:b6:61: 61:9e:55:fa:67:1b:91:08:2e:24:18:8b:10:1e:cc:97:34:ca: cb:df:c1:37:dd:ae:f6:7b:de:0a:76:b5:23:c2:00:24:4a:d5: 16:2f:77:37:14:72:4b:97:a9:a7:8a:82:25:1f:55:49:db:d8: af:02:4c:24 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgICCN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUxMDA4MjI1NDE1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGIzZC1hOGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3V7r6JDQ9RTE1tX3kKZTtIBfvZhDUlgJIHHHJgMH6mmFI86YiQQ5uTuBzMm ZFz55GE7ivAkSSdTWf5tBxjVzCqhaUexaoTADp5Frwkb0x289RYZgfYw1qLatbvw YBBcw6i5qEIGgqjCfVPajpgRisMJKpHCqQS2MzmxQNYj2lVnQ2adZU7ejJ7WIGcV 1gJgVkf9fghi9FmvS0V07QL/3v9i9gC3W1ic7Z31RQJdR7KGv4hLjccgry3yw/46 4slLcRUFBc9zpFdkcSX/4AOFNRj/bqxAqaNes2z64n+GiEBZ59XRPr9xE5lnbE/o NbIvR56Nbc6WI8vJkloJpvmfMQIDAQABo4ICiDCCAoQwHQYDVR0OBBYEFAZ8Vo+O lQICOWzm+/zStiTqS7s3MB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvRDcxNjM5MUM1 M0NDMTFGMEJDMTA2QjdDQzRGOUFFMDIucm9hMEcGCCsGAQUFBwEHAQH/BDgwNjA0 BAIAATAuMAwDBAAk/8EDBAAk/8IDBAAr5ZgwDAMEAGfR6QMEAGfR6gMEAJZrAAME AKM1ETANBgkqhkiG9w0BAQsFAAOCAQEANIimf2V+dScOxAOb5fDElgRE9ppNZ8rA /zgr+nvftn7vdrqA1NdiaE1A7A9lK2NG1Vpmu0UNH/h/uDiIRmYt4/bnfEZRkyo4 4HmX2qbAHM2JyEXtytpFJ3/Xgq1pFtQvULaPciMpcxRl8GKMspFSOzWkBnAcSXSF vgFPHPuh8YohhibOVu3JsFQnB9duIUnDbuyjz3Oqb4ezX3gchjpET8HvfMIdB9D9 OhCAY7Uut3ksc8hH2fD6AyLpiqbBrw5rmkvqO7ZhYZ5V+mcbkQguJBiLEB7MlzTK y9/BN92u9nveCna1I8IAJErVFi93NxRyS5epp4qCJR9VSdvYrwJMJA== -----END CERTIFICATE-----Generated at Fri Mar 6 05:42:40 2026 by rpki-client