$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/D1B6FD008D6D11EB9DB49A32C4F9AE02.roa File: D1B6FD008D6D11EB9DB49A32C4F9AE02.roa (raw, json) Hash identifier: rBLmCstaiSTAZIiJ78MwP1Xx8bjB/LfaaqELF4UDGXk= Subject key identifier: 95:EE:A6:F8:35:4E:73:0D:F3:04:CE:78:3F:D7:8A:A8:B9:E7:C3:55 Certificate issuer: /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB Certificate serial: 071A Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/D1B6FD008D6D11EB9DB49A32C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:13:25 +0000 ROA not before: Fri 18 Jul 2025 23:04:58 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 1221 IP address blocks: 203.5.32.0/24 maxlen: 24 203.5.33.0/24 maxlen: 24 203.5.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 21:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1818 (0x71a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B, serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB Validity Not Before: Jul 18 23:04:58 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a44985-e8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:07:24:f6:d7:38:d9:86:e8:55:8c:27:59:a2: 3c:7e:cd:d4:c3:c1:59:3f:c0:58:ab:ce:9d:3a:01: b1:0a:01:ce:0b:90:72:0b:5a:62:3d:c3:3f:23:9b: a0:79:b3:0a:a0:90:dd:18:0a:2a:a3:54:fc:c0:0a: d9:7e:81:f8:f1:bc:b3:9d:58:c2:c5:f6:0d:d2:ad: 01:45:64:66:ee:e0:29:80:0c:f9:b6:65:9d:f9:17: ff:75:ff:b2:58:c1:30:4b:5e:69:58:30:07:61:5f: c4:28:4e:51:93:7a:dc:fa:f2:70:c5:58:71:86:75: d9:e2:49:24:ae:75:f4:a7:8d:94:ba:49:2d:9e:11: 30:5f:88:9a:08:af:1b:c5:50:7a:97:f9:61:ac:f6: 11:bb:f8:58:4d:45:b1:e9:51:48:ef:d4:79:af:26: 1c:7c:ea:b2:b9:25:f4:ea:4c:4a:d1:7a:37:e6:85: a7:d1:c1:44:9f:21:ca:03:21:76:0b:7b:97:7a:41: 55:d6:59:3c:5c:f7:3b:a2:18:88:24:42:6d:a8:c7: af:1a:d2:de:e9:f1:b3:97:18:e9:b4:93:ac:b4:28: 16:d3:0c:2a:07:76:ad:97:1e:c6:da:24:38:52:2e: c6:7d:66:9c:22:0d:0f:a7:47:68:59:06:c7:a0:97: 5c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EE:A6:F8:35:4E:73:0D:F3:04:CE:78:3F:D7:8A:A8:B9:E7:C3:55 X509v3 Authority Key Identifier: keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/D1B6FD008D6D11EB9DB49A32C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.5.32.0/23 203.5.37.0/24 Signature Algorithm: sha256WithRSAEncryption 69:96:c0:b5:b5:c5:c7:78:f8:46:f4:94:51:f5:22:40:4c:47: 63:de:d1:70:07:09:0a:cf:4b:d8:54:14:11:a7:42:d4:8e:73: b1:e4:df:da:ee:e5:bd:ad:6b:ed:e6:f0:24:95:b4:83:37:77: c1:9c:a9:ad:f7:07:6d:ad:b5:ce:b9:53:37:01:c9:78:7a:3c: f5:a3:be:aa:ac:84:bb:b7:64:4a:54:94:51:d1:69:07:64:5c: 20:3a:a3:f3:3f:67:88:50:9b:23:ca:9b:e9:b7:d7:e7:61:11: 3c:96:45:a8:ee:d2:4a:46:ab:ca:cb:4e:4a:ab:33:d3:98:86: 68:e1:6a:eb:dd:18:c7:00:77:69:16:37:08:98:55:d8:56:74: 3b:64:a7:b8:e4:0e:82:b4:45:a4:af:78:59:da:9f:99:e3:ea: e3:b4:e3:51:ba:31:7a:eb:56:93:4d:86:bb:83:f8:dc:b3:14: 8a:1e:2b:2c:15:16:72:3f:50:de:d2:11:89:46:d6:b8:1f:b2: ad:b4:1f:96:3a:eb:ef:67:36:3e:9f:9b:55:38:7c:e9:cf:1b: 0b:69:db:25:7f:d4:ac:b8:45:d6:18:14:90:60:9b:44:af:57: e2:6b:2b:f4:ed:95:62:76:75:0f:70:bd:82:0f:8c:43:53:52: b0:f7:ff:5e -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEJBNDlGMkUwMkE2MzVERDA3NUY1NjQxNjZGMTExRjVG QURFNUE3Q0IwHhcNMjUwNzE4MjMwNDU4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDk4NS1lOGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugck9tc42YboVYwnWaI8fs3Uw8FZP8BYq86dOgGxCgHOC5ByC1piPcM/I5ug ebMKoJDdGAoqo1T8wArZfoH48byznVjCxfYN0q0BRWRm7uApgAz5tmWd+Rf/df+y WMEwS15pWDAHYV/EKE5Rk3rc+vJwxVhxhnXZ4kkkrnX0p42UukktnhEwX4iaCK8b xVB6l/lhrPYRu/hYTUWx6VFI79R5ryYcfOqyuSX06kxK0Xo35oWn0cFEnyHKAyF2 C3uXekFV1lk8XPc7ohiIJEJtqMevGtLe6fGzlxjptJOstCgW0wwqB3atlx7G2iQ4 Ui7GfWacIg0Pp0doWQbHoJdcyQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJXupvg1 TnMN8wTOeD/Xiqi558NVMB8GA1UdIwQYMBaAFLpJ8uAqY13QdfVkFm8RH1+t5afL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi9GMzZCNzlCMDgw NzcxMUVCQjkyNUYxNTRDNEY5QUUwMi91a255NENwalhkQjE5V1FXYnhFZlg2M2xw OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vrbnk0Q3BqWGRCMTlXUVdieEVmWDYzbHA4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk4OEIvRjM2Qjc5QjA4MDc3MTFFQkI5MjVGMTU0QzRGOUFFMDIvRDFCNkZEMDA4 RDZEMTFFQjlEQjQ5QTMyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBywUgAwQAywUlMA0GCSqGSIb3DQEBCwUAA4IBAQBplsC1tcXHePhG 9JRR9SJATEdj3tFwBwkKz0vYVBQRp0LUjnOx5N/a7uW9rWvt5vAklbSDN3fBnKmt 9wdtrbXOuVM3Acl4ejz1o76qrIS7t2RKVJRR0WkHZFwgOqPzP2eIUJsjypvpt9fn YRE8lkWo7tJKRqvKy05KqzPTmIZo4Wrr3RjHAHdpFjcImFXYVnQ7ZKe45A6CtEWk r3hZ2p+Z4+rjtONRujF661aTTYa7g/jcsxSKHissFRZyP1De0hGJRta4H7KttB+W OuvvZzY+n5tVOHzpzxsLadslf9SsuEXWGBSQYJtEr1fiayv07ZVidnUPcL2CD4xD U1Kw9/9e -----END CERTIFICATE-----Generated at Sun Mar 8 05:11:07 2026 by rpki-client