$ rpki-client -vvf rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/9B315A5E46A011E7B9BAF254C4F9AE02.roa File: 9B315A5E46A011E7B9BAF254C4F9AE02.roa (raw, json) Hash identifier: BkEu7fkd0bGNEKpbnL7JduPhIKFSApcB9L/XXPu53I4= Subject key identifier: A9:9D:9A:D8:C1:E3:90:04:72:EB:DC:96:D2:D1:70:0F:DD:DA:24:00 Certificate issuer: /CN=A913CAE9/serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A Certificate serial: 1CB7 Authority key identifier: 1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/9B315A5E46A011E7B9BAF254C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:24:38 +0000 ROA not before: Thu 28 Aug 2025 16:34:47 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 54825 IP address blocks: 203.33.22.0/24 maxlen: 24 2001:df3:ba00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 16:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7351 (0x1cb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CAE9, serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A Validity Not Before: Aug 28 16:34:47 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a46845-7ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:08:42:4f:8f:89:bb:04:6a:95:6c:ba:11:f6: 9f:40:3a:97:69:47:43:e9:65:0b:35:e1:a1:4b:59: 09:ed:9d:80:c6:95:0d:72:7a:06:e6:1a:78:88:8a: 1e:e8:35:76:3e:ff:fd:ec:44:55:3c:71:f4:d9:cc: 0c:e3:0a:b5:6e:b7:6b:c0:26:c7:47:aa:9c:41:ed: 9e:ca:03:46:44:c6:cd:d5:06:a3:42:93:30:2a:2d: 2d:d9:4b:f7:79:ad:9f:a3:d5:56:f3:50:8f:c1:3b: 4e:54:02:74:a3:3a:89:6f:c0:2b:32:5c:57:6f:6a: 76:63:7d:ad:5c:e6:0a:94:96:3e:cc:af:35:c1:75: 56:de:01:27:5c:47:0f:57:64:c6:71:6e:37:6b:41: 3d:d8:3e:1e:f6:02:43:45:89:bd:90:cf:4a:be:07: 2a:8b:0d:ba:c3:e1:66:26:37:c8:b3:0b:d2:3c:57: 04:31:49:81:90:03:3a:c8:69:b4:59:de:b3:d3:bd: 96:c2:60:af:33:e2:c9:83:d2:d2:c8:fd:a9:31:63: a3:d8:3d:d4:a7:6a:85:ee:90:e8:57:83:03:78:eb: b1:72:54:d9:62:75:a8:97:25:37:23:2c:76:c7:43: 43:a6:5d:06:7d:c4:b3:70:c7:67:63:39:d9:1c:3a: ec:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9D:9A:D8:C1:E3:90:04:72:EB:DC:96:D2:D1:70:0F:DD:DA:24:00 X509v3 Authority Key Identifier: keyid:1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/9B315A5E46A011E7B9BAF254C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.33.22.0/24 IPv6: 2001:df3:ba00::/48 Signature Algorithm: sha256WithRSAEncryption 65:d9:d9:ef:80:9c:0b:ec:f8:bd:61:35:84:c0:9c:04:fa:ff: 5a:de:2e:66:61:69:f0:2b:0b:c5:81:de:7f:19:d5:ee:46:13: d3:d0:11:9a:09:52:c5:5e:11:36:4a:b9:db:e3:4d:a3:db:dd: e1:6f:4c:a8:db:1e:c1:a0:c6:74:fc:93:9f:7b:e0:60:73:d1: be:90:3c:66:ad:81:a9:55:18:ad:28:a1:17:ba:59:4f:bf:05: f9:65:b8:45:1f:70:08:03:0e:35:09:7c:3c:d6:0e:c5:c7:32: cc:7c:20:0f:75:47:37:9c:e2:6a:de:d1:e1:da:14:08:cc:2f: b3:29:05:5a:f0:fd:69:0f:8c:f5:11:3e:cf:15:28:a7:3c:33: e8:83:03:2b:07:c0:3f:75:af:c7:8e:4f:94:9e:aa:5e:b6:07: ea:80:fe:e4:f2:77:0d:0d:5a:5b:1d:db:74:c5:cd:52:2a:5f: 0e:a6:07:e1:94:52:11:2c:b1:3c:7a:9f:e3:13:d7:04:91:5a: 66:6d:af:90:5f:79:03:69:89:cb:29:da:f1:be:0d:56:e5:48: 73:71:8a:43:9e:98:df:2f:6c:d4:de:c3:cf:02:a0:c2:0f:87: 16:23:dd:cf:ed:47:d7:26:26:1a:8e:2a:2a:2f:7c:65:d7:2a: 56:e9:39:6b -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICHLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBRTkxMTAvBgNVBAUTKDFENTZGRTREQTQyQjg4NjZGRTk2QTI5N0Y3NzJFRTgw QjUxOEE0MEEwHhcNMjUwODI4MTYzNDQ3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Njg0NS03ZWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkAhCT4+JuwRqlWy6EfafQDqXaUdD6WULNeGhS1kJ7Z2AxpUNcnoG5hp4iIoe 6DV2Pv/97ERVPHH02cwM4wq1brdrwCbHR6qcQe2eygNGRMbN1QajQpMwKi0t2Uv3 ea2fo9VW81CPwTtOVAJ0ozqJb8ArMlxXb2p2Y32tXOYKlJY+zK81wXVW3gEnXEcP V2TGcW43a0E92D4e9gJDRYm9kM9Kvgcqiw26w+FmJjfIswvSPFcEMUmBkAM6yGm0 Wd6z072WwmCvM+LJg9LSyP2pMWOj2D3Up2qF7pDoV4MDeOuxclTZYnWolyU3Iyx2 x0NDpl0GfcSzcMdnYznZHDrsVwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKmdmtjB 45AEcuvcltLRcA/d2iQAMB8GA1UdIwQYMBaAFB1W/k2kK4hm/pail/dy7oC1GKQK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FFOS8wOERBNjBDNkYx QjIxMUU2OEU3NEEyNkNDNEY5QUUwMi9IVmItVGFRcmlHYi1scUtYOTNMdWdMVVlw QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hWYi1UYVFyaUdiLWxxS1g5M0x1Z0xVWXBBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0NBRTkvMDhEQTYwQzZGMUIyMTFFNjhFNzRBMjZDQzRGOUFFMDIvOUIzMTVBNUU0 NkEwMTFFN0I5QkFGMjU0QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAyyEWMA8EAgACMAkDBwAgAQ3zugAwDQYJKoZIhvcNAQELBQADggEB AGXZ2e+AnAvs+L1hNYTAnAT6/1reLmZhafArC8WB3n8Z1e5GE9PQEZoJUsVeETZK udvjTaPb3eFvTKjbHsGgxnT8k5974GBz0b6QPGatgalVGK0ooRe6WU+/BflluEUf cAgDDjUJfDzWDsXHMsx8IA91Rzec4mre0eHaFAjML7MpBVrw/WkPjPURPs8VKKc8 M+iDAysHwD91r8eOT5Seql62B+qA/uTydw0NWlsd23TFzVIqXw6mB+GUUhEssTx6 n+MT1wSRWmZtr5BfeQNpicsp2vG+DVblSHNxikOemN8vbNTew88CoMIPhxYj3c/t R9cmJhqOKiovfGXXKlbpOWs= -----END CERTIFICATE-----Generated at Wed Mar 18 11:16:56 2026 by rpki-client