$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/576F51B8C91911F0AB974C6DC4F9AE02.roa File: 576F51B8C91911F0AB974C6DC4F9AE02.roa (raw, json) Hash identifier: B7o39MCNiwPkqimijPdHtCcLEzghu38rFNT9tzx72Xo= Subject key identifier: 0B:FC:84:59:6B:35:B2:93:6C:E6:E8:6B:35:CC:26:5E:48:44:B8:1B Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Certificate serial: D8 Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/576F51B8C91911F0AB974C6DC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:11:22 +0000 ROA not before: Mon 24 Nov 2025 10:46:25 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 20940 IP address blocks: 61.19.5.0/24 maxlen: 24 61.19.8.0/24 maxlen: 24 61.19.11.0/24 maxlen: 24 61.19.12.0/24 maxlen: 24 61.19.13.0/24 maxlen: 24 122.155.239.0/24 maxlen: 24 2001:c38:500a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Mar 2026 07:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Validity Not Before: Nov 24 10:46:25 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a48f5a-f22c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5d:66:f3:90:63:fd:2a:31:75:d8:49:93:99: 41:94:2e:ff:0e:1d:0e:70:6c:2c:1f:a5:f5:0a:88: 0b:5c:1c:72:50:b7:b0:ff:cb:aa:0e:b3:73:70:f7: 2f:17:b6:3e:9c:bb:67:24:91:54:21:b3:cb:62:6d: 72:12:d3:de:84:ce:e9:73:26:02:e2:68:15:cb:bb: 51:92:b7:01:be:1c:3f:c8:e9:84:62:06:f6:db:44: 3a:4d:9a:80:46:cd:0c:d2:f9:e3:0d:06:3c:e5:9e: a1:91:fe:00:bf:96:14:03:06:1c:3e:95:2a:5d:b8: 27:e8:f4:08:c4:05:4a:43:dd:90:6f:4f:0a:be:db: 29:da:25:04:05:e4:82:3e:32:90:00:de:ca:31:13: ad:eb:a0:b6:04:d7:b3:62:e2:2d:b5:7e:b4:b4:7e: 2e:af:a9:3b:f7:a7:86:06:1e:e9:9c:fb:11:63:5f: 2e:f4:b7:a1:b7:c5:e6:fe:81:fb:b7:e7:84:5f:04: 38:6e:ae:b2:9d:33:36:71:6a:a7:55:1c:6d:bb:49: 8f:a7:12:14:21:a1:47:50:d7:b5:ba:72:33:c3:e3: 77:be:be:dc:9a:6b:41:83:b5:c8:d6:67:a0:c6:46: 02:40:c5:96:40:f5:f6:1f:3f:67:b5:0b:4a:57:b8: 23:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:FC:84:59:6B:35:B2:93:6C:E6:E8:6B:35:CC:26:5E:48:44:B8:1B X509v3 Authority Key Identifier: keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/576F51B8C91911F0AB974C6DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.19.5.0/24 61.19.8.0/24 61.19.11.0-61.19.13.255 122.155.239.0/24 IPv6: 2001:c38:500a::/48 Signature Algorithm: sha256WithRSAEncryption a9:4f:1d:79:03:20:a4:0e:9a:d2:ef:ef:55:34:ff:68:fc:af: 68:cd:df:a6:01:ea:60:d6:12:f9:ce:9d:7a:ab:bb:7c:23:dd: 92:5b:e4:48:16:f3:44:fb:9f:82:26:1e:7d:fc:17:ab:5d:54: 83:42:64:47:73:a9:e4:88:e3:0a:38:68:2d:a3:33:ec:05:03: 86:10:c1:06:ba:a8:5e:67:d2:81:8e:20:39:0b:d2:4d:4e:fa: ad:f4:fa:5f:57:eb:b3:5b:e5:fe:39:14:ad:0f:e5:01:0d:17: ff:be:20:37:90:a8:01:6a:08:74:14:2b:71:6f:6d:18:30:98: aa:cb:29:ad:ab:ad:e2:f3:bb:a2:5d:71:a8:94:f6:e3:55:24: 82:ec:17:4d:6e:3c:89:8d:2b:03:5c:94:50:72:22:7e:4b:f3: 24:8b:0a:64:b5:e6:3f:64:1a:e3:53:64:c2:90:2b:7a:22:2b: e2:3a:9f:46:15:c0:be:b7:ab:2d:d2:15:e6:2d:cb:f1:e3:91: ac:31:74:13:84:07:33:3d:3d:84:59:f9:9f:4f:17:23:ce:b8: 93:53:0a:38:b9:65:ee:22:76:ca:d9:e2:07:be:a8:f0:de:88: 6e:68:fd:bd:a2:62:b9:8a:88:a4:1e:e4:54:38:39:30:ae:08: b3:a1:c9:f8 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU5OEQxMTAvBgNVBAUTKDlBM0E2N0VERENEMDk3NzUzM0E5QTBCOEM0OUY0QzAx MDBDODUzOTEwHhcNMjUxMTI0MTA0NjI1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGY1YS1mMjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2V1m85Bj/SoxddhJk5lBlC7/Dh0OcGwsH6X1CogLXBxyULew/8uqDrNzcPcv F7Y+nLtnJJFUIbPLYm1yEtPehM7pcyYC4mgVy7tRkrcBvhw/yOmEYgb220Q6TZqA Rs0M0vnjDQY85Z6hkf4Av5YUAwYcPpUqXbgn6PQIxAVKQ92Qb08Kvtsp2iUEBeSC PjKQAN7KMROt66C2BNezYuIttX60tH4ur6k796eGBh7pnPsRY18u9Leht8Xm/oH7 t+eEXwQ4bq6ynTM2cWqnVRxtu0mPpxIUIaFHUNe1unIzw+N3vr7cmmtBg7XI1meg xkYCQMWWQPX2Hz9ntQtKV7gj8QIDAQABo4ICizCCAocwHQYDVR0OBBYEFAv8hFlr NbKTbOboazXMJl5IRLgbMB8GA1UdIwQYMBaAFJo6Z+3c0Jd1M6mguMSfTAEAyFOR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTk4RC9CODg1MzFDQUM4 RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi9tanBuN2R6UWwzVXpxYUM0eEo5TUFRRElV NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU5OEQvQjg4NTMxQ0FDOEVDMTFGMEEzNDRBQjQ1QzRGOUFFMDIvNTc2RjUxQjhD OTE5MTFGMEFCOTc0QzZEQzRGOUFFMDIucm9hMEoGCCsGAQUFBwEHAQH/BDswOTAm BAIAATAgAwQAPRMFAwQAPRMIMAwDBAA9EwsDBAE9EwwDBAB6m+8wDwQCAAIwCQMH ACABDDhQCjANBgkqhkiG9w0BAQsFAAOCAQEAqU8deQMgpA6a0u/vVTT/aPyvaM3f pgHqYNYS+c6dequ7fCPdklvkSBbzRPufgiYeffwXq11Ug0JkR3Op5IjjCjhoLaMz 7AUDhhDBBrqoXmfSgY4gOQvSTU76rfT6X1frs1vl/jkUrQ/lAQ0X/74gN5CoAWoI dBQrcW9tGDCYqsspraut4vO7ol1xqJT241UkguwXTW48iY0rA1yUUHIifkvzJIsK ZLXmP2Qa41NkwpAreiIr4jqfRhXAvrerLdIV5i3L8eORrDF0E4QHMz09hFn5n08X I864k1MKOLll7iJ2ytniB76o8N6Ibmj9vaJiuYqIpB7kVDg5MK4Is6HJ+A== -----END CERTIFICATE-----Generated at Sat Mar 7 08:37:28 2026 by rpki-client