$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/CAE10F4030E111F09B76D311C4F9AE02.roa File: CAE10F4030E111F09B76D311C4F9AE02.roa (raw, json) Hash identifier: QYbToAo1d6nye+FsjzAnvw3/lP4Nx+MEududWG8oDyc= Subject key identifier: 20:A6:FA:BF:65:E5:BE:14:48:C1:7B:23:D0:D6:BB:78:F0:C1:19:B8 Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Certificate serial: B5 Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/CAE10F4030E111F09B76D311C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:20:42 +0000 ROA not before: Wed 14 May 2025 16:37:58 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 142032 IP address blocks: 165.99.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Validity Not Before: May 14 16:37:58 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a59cba-620d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:63:60:11:89:e8:31:5a:d1:a6:c3:23:42:e0: e6:d8:01:88:34:57:6a:c3:f7:a0:d8:38:da:6a:8d: 6a:89:35:cc:43:2f:1e:bc:6b:49:bf:d0:26:fa:dd: ca:f1:9f:dc:90:f2:02:7c:99:98:c4:45:f1:da:bc: 40:cb:70:99:7f:22:ea:b1:bc:3d:46:ca:c3:b1:b9: 13:ac:c6:90:f9:72:7a:0c:e8:e7:97:37:9c:63:c9: 0b:ad:eb:55:84:2a:9a:5e:88:c8:34:51:99:02:95: 6e:89:5f:ed:ea:8a:36:1c:d0:1e:c1:50:c9:e4:03: c1:55:7b:c1:10:dc:27:77:41:92:a0:0b:e2:b0:2a: b5:b8:eb:4a:ee:f4:7c:84:36:13:d5:5a:33:6c:08: 8b:db:c7:4d:5f:1e:1c:e5:a9:26:1a:2b:a2:40:91: d3:a0:f6:fc:4b:c2:a6:5d:9a:eb:95:b1:0c:b2:9a: 2b:0e:46:09:b2:35:ca:7f:e1:50:a2:17:41:93:45: d1:f0:4f:c9:35:e4:81:b3:fe:22:81:9e:e2:e4:07: 9c:56:e7:62:9c:35:a3:b0:c6:d7:a2:2a:29:0e:c7: b1:d0:39:07:bf:0e:46:9f:2c:b6:d4:f5:4f:12:f7: 69:42:09:8a:82:7c:1d:67:91:ed:6a:9c:1b:7d:5d: 2d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A6:FA:BF:65:E5:BE:14:48:C1:7B:23:D0:D6:BB:78:F0:C1:19:B8 X509v3 Authority Key Identifier: keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/CAE10F4030E111F09B76D311C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.99.42.0/23 Signature Algorithm: sha256WithRSAEncryption 42:81:2f:39:60:a1:0f:e3:a0:9b:a1:0b:2c:60:69:1c:96:9b: bd:63:23:7e:91:a8:55:4a:54:97:87:a9:c6:a8:0a:a3:58:26: e3:8d:4e:a1:b3:4c:a4:a6:81:ad:7c:85:34:43:6f:99:71:63: 5e:e5:dc:ab:7f:df:67:d7:cc:fc:e9:24:80:48:77:11:34:f1: b7:26:72:c6:88:78:9d:53:35:c8:49:4b:9f:96:68:5b:f0:ec: 99:9d:63:40:24:2d:c4:ea:8d:46:16:3d:36:32:43:c5:bc:b1: 20:32:3d:4d:81:41:4a:aa:18:59:47:55:2b:04:2d:17:f1:c9: fa:90:20:47:60:ec:e2:fd:84:77:1b:a2:de:35:a0:13:85:3f: 8b:20:4c:3c:36:20:4a:96:a6:43:a6:e1:e7:c7:75:f2:fb:0e: 01:eb:02:7b:5e:a2:02:e7:b8:18:c1:a5:c4:37:1f:26:cf:cc: f0:60:17:e7:86:ee:82:3c:ff:e8:71:20:9f:9e:10:3a:57:50: c5:6e:02:28:e1:99:a8:68:6d:81:cb:8b:12:90:f3:40:ac:4b: 40:5b:88:2b:7f:21:fe:e7:7d:4e:b7:22:b8:80:a4:9a:ea:6a: 5b:2f:8c:cb:4c:91:48:55:ca:ff:72:fa:d1:cc:df:01:67:a0: 66:10:97:5c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGQzkxMTAvBgNVBAUTKDc2NjVFMjgzNUQxNjAwODVFMzFFQzI0NTIyMkQ0QjJG N0U0ODQ0MDkwHhcNMjUwNTE0MTYzNzU4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWNiYS02MjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWNgEYnoMVrRpsMjQuDm2AGINFdqw/eg2Djaao1qiTXMQy8evGtJv9Am+t3K 8Z/ckPICfJmYxEXx2rxAy3CZfyLqsbw9RsrDsbkTrMaQ+XJ6DOjnlzecY8kLretV hCqaXojINFGZApVuiV/t6oo2HNAewVDJ5APBVXvBENwnd0GSoAvisCq1uOtK7vR8 hDYT1VozbAiL28dNXx4c5akmGiuiQJHToPb8S8KmXZrrlbEMsporDkYJsjXKf+FQ ohdBk0XR8E/JNeSBs/4igZ7i5AecVudinDWjsMbXoiopDsex0DkHvw5Gnyy21PVP EvdpQgmKgnwdZ5HtapwbfV0ttQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCCm+r9l 5b4USMF7I9DWu3jwwRm4MB8GA1UdIwQYMBaAFHZl4oNdFgCF4x7CRSItSy9+SEQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREZDOS84RDM1RTgyRTMw MkMxMUYwODc3NjRBMkJDNEY5QUUwMi9kbVhpZzEwV0FJWGpIc0pGSWkxTEwzNUlS QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MURGQzkvOEQzNUU4MkUzMDJDMTFGMDg3NzY0QTJCQzRGOUFFMDIvQ0FFMTBGNDAz MEUxMTFGMDlCNzZEMzExQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBpWMqMA0GCSqGSIb3DQEBCwUAA4IBAQBCgS85YKEP46CboQssYGkc lpu9YyN+kahVSlSXh6nGqAqjWCbjjU6hs0ykpoGtfIU0Q2+ZcWNe5dyrf99n18z8 6SSASHcRNPG3JnLGiHidUzXISUuflmhb8OyZnWNAJC3E6o1GFj02MkPFvLEgMj1N gUFKqhhZR1UrBC0X8cn6kCBHYOzi/YR3G6LeNaAThT+LIEw8NiBKlqZDpuHnx3Xy +w4B6wJ7XqIC57gYwaXENx8mz8zwYBfnhu6CPP/ocSCfnhA6V1DFbgIo4ZmoaG2B y4sSkPNArEtAW4grfyH+531OtyK4gKSa6mpbL4zLTJFIVcr/cvrRzN8BZ6BmEJdc -----END CERTIFICATE-----Generated at Sat Mar 21 12:03:39 2026 by rpki-client