$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAFC/DE3291A49B8411F1B93DFD584411F970/8A3C3CFC9B8511F1B9BDE8E74411F970.roa File: 8A3C3CFC9B8511F1B9BDE8E74411F970.roa (raw, json) Hash identifier: i4jhMzHWNZrdT2Qs9wHgoXALnK/G/rEor+67GrDph+w= Subject key identifier: 7C:59:17:A2:99:3C:31:14:66:11:D9:1B:8F:AA:5F:68:F5:60:9B:04 Certificate issuer: /CN=A912FAFC/serialNumber=B58C39143FCD20D0735D0E5FC6EC8C792DACCBD6 Certificate serial: 02 Authority key identifier: B5:8C:39:14:3F:CD:20:D0:73:5D:0E:5F:C6:EC:8C:79:2D:AC:CB:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAFC/DE3291A49B8411F1B93DFD584411F970/8A3C3CFC9B8511F1B9BDE8E74411F970.roa Signing time: Wed 19 Aug 2026 04:22:08 +0000 ROA not before: Wed 19 Aug 2026 04:22:08 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 10221 IP address blocks: 203.2.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAFC/DE3291A49B8411F1B93DFD584411F970/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.crl rsync://rpki.apnic.net/member_repository/A912FAFC/DE3291A49B8411F1B93DFD584411F970/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 04:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAFC, serialNumber=B58C39143FCD20D0735D0E5FC6EC8C792DACCBD6 Validity Not Before: Aug 19 04:22:08 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a852f70-65b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:76:7d:73:1c:f1:5d:61:f5:df:20:3d:9e:3e: d7:6e:2a:ae:dc:1a:0c:c0:78:9a:df:d7:9d:ec:49: a9:05:b0:6d:40:3d:e5:32:c3:d4:8c:e1:bb:f3:86: 07:c9:c8:d4:9b:73:9e:ee:15:33:8b:76:59:45:bc: eb:d4:e9:d6:b5:b4:5f:20:27:9d:be:56:51:7a:b0: e1:a9:af:5e:12:77:e0:0d:03:ed:8b:b3:b5:45:80: 64:33:1b:d8:36:de:36:4c:85:13:bd:11:d9:82:67: 28:be:9f:71:ab:ec:4f:83:3d:1f:af:f3:3b:a0:46: fb:65:1d:c1:6f:7a:94:7c:69:ba:6a:a6:51:03:20: 96:c3:5c:ad:5d:b6:d3:48:15:66:0f:90:64:4b:6a: f3:61:b5:ff:51:cc:2c:3c:0b:05:ae:83:43:69:35: 68:38:27:f6:d1:8a:cb:9b:42:68:b3:96:2a:3c:58: 41:e9:0c:d6:ed:88:56:78:e4:47:ff:cf:e2:92:4f: 6d:4e:32:c4:73:0d:a8:53:ac:55:3e:f9:df:15:4a: d8:d9:7b:6c:75:6d:00:28:7b:2c:ed:3e:f4:7b:3e: 37:1b:2c:4c:e5:a1:bc:d3:38:a8:4d:58:80:a9:1f: d8:46:f6:46:e0:2e:9e:2f:cd:1e:41:1e:75:37:fc: 73:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:59:17:A2:99:3C:31:14:66:11:D9:1B:8F:AA:5F:68:F5:60:9B:04 X509v3 Authority Key Identifier: keyid:B5:8C:39:14:3F:CD:20:D0:73:5D:0E:5F:C6:EC:8C:79:2D:AC:CB:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAFC/DE3291A49B8411F1B93DFD584411F970/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAFC/DE3291A49B8411F1B93DFD584411F970/8A3C3CFC9B8511F1B9BDE8E74411F970.roa sbgp-ipAddrBlock: critical IPv4: 203.2.216.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:b5:44:dd:e9:a7:38:75:fb:e4:fc:76:f8:ae:06:a5:ac:ec: 5d:1a:17:34:71:c8:2c:b8:81:ea:74:b9:83:4b:60:7d:a2:88: 3a:cf:97:9a:04:a7:7d:98:13:dd:d1:7e:74:9c:b7:69:f3:39: c6:84:c3:8c:6c:20:67:24:3e:22:c0:d7:4e:8c:73:14:58:7c: 69:4f:76:2c:f4:8c:56:a6:ec:d5:54:1e:b3:fe:7e:dc:10:3f: 90:3c:b9:8d:e6:b6:e2:c6:3d:12:02:08:e1:4f:d5:3c:2d:8f: 19:c9:a6:d6:cd:d0:03:17:65:64:5b:53:90:4c:8f:79:86:9b: 45:ef:ce:95:12:6e:aa:38:4a:c9:5c:0f:91:02:3a:5e:1f:7e: b0:73:1a:dd:0b:94:6b:3d:16:70:70:20:09:a0:b5:44:e0:7c: 71:cb:f5:1e:8a:11:76:ce:4b:69:95:a2:03:77:44:d1:06:45: 39:59:65:e2:ae:a0:66:20:9a:ab:e9:a0:70:dd:e0:dd:91:b0: db:d2:59:30:04:7c:9b:c4:c1:df:93:e3:72:92:65:67:73:ad: 6f:41:20:8b:4c:1c:8f:a4:23:e6:6a:28:cc:78:d5:cb:1e:61: d7:88:97:6f:81:df:9c:54:23:cf:ac:d6:3f:13:fc:45:01:84: 9a:4d:9e:dd -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RkFGQzExMC8GA1UEBRMoQjU4QzM5MTQzRkNEMjBEMDczNUQwRTVGQzZFQzhDNzky REFDQ0JENjAeFw0yNjA4MTkwNDIyMDhaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTZhODUyZjcwLTY1YjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCdn1zHPFdYfXfID2ePtduKq7cGgzAeJrf153sSakFsG1APeUyw9SM4bvzhgfJ yNSbc57uFTOLdllFvOvU6da1tF8gJ52+VlF6sOGpr14Sd+ANA+2Ls7VFgGQzG9g2 3jZMhRO9EdmCZyi+n3Gr7E+DPR+v8zugRvtlHcFvepR8abpqplEDIJbDXK1dttNI FWYPkGRLavNhtf9RzCw8CwWug0NpNWg4J/bRisubQmizlio8WEHpDNbtiFZ45Ef/ z+KST21OMsRzDahTrFU++d8VStjZe2x1bQAoeyztPvR7PjcbLEzlobzTOKhNWICp H9hG9kbgLp4vzR5BHnU3/HNZAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUfFkXopk8 MRRmEdkbj6pfaPVgmwQwHwYDVR0jBBgwFoAUtYw5FD/NINBzXQ5fxuyMeS2sy9Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGQUZDL0RFMzI5MUE0OUI4 NDExRjFCOTNERkQ1ODQ0MTFGOTcwL3RZdzVGRF9OSU5CelhRNWZ4dXlNZVMyc3k5 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFl3NUZEX05JTkJ6WFE1Znh1eU1lUzJzeTlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFGQy9ERTMyOTFBNDlCODQxMUYxQjkzREZENTg0NDExRjk3MC84QTNDM0NGQzlC ODUxMUYxQjlCREU4RTc0NDExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADLAtgwDQYJKoZIhvcNAQELBQADggEBAH61RN3ppzh1++T8dviuBqWs 7F0aFzRxyCy4gep0uYNLYH2iiDrPl5oEp32YE93RfnSct2nzOcaEw4xsIGckPiLA 106McxRYfGlPdiz0jFam7NVUHrP+ftwQP5A8uY3mtuLGPRICCOFP1TwtjxnJptbN 0AMXZWRbU5BMj3mGm0XvzpUSbqo4SslcD5ECOl4ffrBzGt0LlGs9FnBwIAmgtUTg fHHL9R6KEXbOS2mVogN3RNEGRTlZZeKuoGYgmqvpoHDd4N2RsNvSWTAEfJvEwd+T 43KSZWdzrW9BIItMHI+kI+ZqKMx41cseYdeIl2+B35xUI8+s1j8T/EUBhJpNnt0= -----END CERTIFICATE-----Generated at Wed Aug 19 12:44:34 2026 by rpki-client