$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/D3A8EA649F0911EE98065E23C4F9AE02.roa File: D3A8EA649F0911EE98065E23C4F9AE02.roa (raw, json) Hash identifier: Xpp2kFVSkuxzwBMowkkOloasdXHXgZJRNUiRPlt0tnI= Subject key identifier: A9:48:28:99:CB:8E:F6:41:CF:09:1E:38:9A:DD:D7:9A:0F:FE:24:D0 Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Certificate serial: 054E Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/D3A8EA649F0911EE98065E23C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:34:14 +0000 ROA not before: Thu 05 Jun 2025 01:47:49 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 9443 IP address blocks: 203.32.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Mar 2026 00:17:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1358 (0x54e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Validity Not Before: Jun 5 01:47:49 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a486a6-8dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:75:44:3a:56:8f:a8:ae:96:7c:c2:ec:7a:9c: f3:99:ea:06:7e:2a:b7:ed:8a:e7:6e:6e:2a:94:73: 04:1b:15:66:73:27:bb:66:99:3c:b2:fa:e1:7f:44: ae:7f:e2:6f:bb:34:91:9a:3e:d8:07:28:58:37:c1: 5f:d7:dd:54:f2:c9:6d:10:c2:43:49:b1:0e:42:f3: 0e:41:54:55:85:b4:1b:a7:74:a2:0a:ce:b2:8f:31: 54:e9:ff:e5:23:fc:c0:ff:12:0c:e5:26:e9:03:b8: 83:9e:33:be:cb:b9:64:96:f9:ee:10:50:d5:d3:eb: 2a:13:41:21:10:a1:5e:aa:c2:57:81:66:06:2e:f4: f5:0d:dd:10:ce:39:df:7f:cd:d0:38:77:c7:73:ab: d3:9f:30:f9:e0:24:21:a4:70:6c:b5:5f:18:66:42: eb:ff:0d:ed:31:a3:3d:da:00:23:71:27:33:f0:99: cc:60:10:d7:c7:d4:bc:32:c7:91:bf:b1:81:93:f3: 4a:5d:fb:87:f3:e6:4e:13:c1:37:3a:4b:17:5a:e3: d9:75:7f:cf:b6:ff:83:3e:32:87:3d:6b:d7:b4:17: f1:e6:4a:58:a0:65:a7:85:c8:17:23:4a:f3:94:2a: b8:8e:aa:74:3f:49:47:99:35:c3:71:f8:50:a6:10: 63:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:48:28:99:CB:8E:F6:41:CF:09:1E:38:9A:DD:D7:9A:0F:FE:24:D0 X509v3 Authority Key Identifier: keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/D3A8EA649F0911EE98065E23C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.32.32.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:e2:3b:8f:b1:ba:83:a5:ed:77:d1:df:b6:cc:83:74:25:8b: e4:bd:6d:5c:98:85:7a:c1:5c:12:3a:f2:c6:57:50:c8:f4:08: 52:b1:2d:89:ff:91:3f:fc:9d:92:cb:af:5e:00:b7:7a:53:e4: 00:19:4e:79:fd:73:90:29:9a:cf:f7:13:d3:fd:4e:35:ff:f8: 67:75:51:26:cc:c6:f1:88:d1:e8:54:db:9d:fe:2d:88:3f:53: df:b7:19:0d:d6:6a:e4:1e:d2:d8:1a:4d:53:6b:fb:2f:16:91: 09:ee:4d:93:93:d5:a1:e4:ed:79:ec:e9:aa:41:05:4b:b3:de: 68:db:14:8d:c5:bc:e9:88:65:cf:1e:0e:01:7e:82:f3:89:49: 22:e4:aa:ff:2a:59:56:a0:fc:6a:6d:dd:d6:0f:9a:ba:f0:6d: b7:1f:ab:21:b7:3f:b3:85:3d:ac:55:c5:12:c4:30:ff:66:42: d7:52:7c:5b:4b:86:34:1f:64:f5:91:75:17:0f:b5:11:80:70: c7:1f:c2:32:e3:a2:a1:cc:af:3f:3c:35:ac:e5:d7:01:29:df: ff:e4:c4:6e:64:a3:f6:31:a8:59:e7:91:17:87:5e:d7:50:d7: 40:5f:47:81:3f:a9:72:c7:3b:75:1a:b9:35:c8:97:df:76:a0: 5b:10:96:14 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF RDk4NDY0OUQwHhcNMjUwNjA1MDE0NzQ5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODZhNi04ZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3VEOlaPqK6WfMLsepzzmeoGfiq37Yrnbm4qlHMEGxVmcye7Zpk8svrhf0Su f+JvuzSRmj7YByhYN8Ff191U8sltEMJDSbEOQvMOQVRVhbQbp3SiCs6yjzFU6f/l I/zA/xIM5SbpA7iDnjO+y7lklvnuEFDV0+sqE0EhEKFeqsJXgWYGLvT1Dd0Qzjnf f83QOHfHc6vTnzD54CQhpHBstV8YZkLr/w3tMaM92gAjcScz8JnMYBDXx9S8MseR v7GBk/NKXfuH8+ZOE8E3OksXWuPZdX/Ptv+DPjKHPWvXtBfx5kpYoGWnhcgXI0rz lCq4jqp0P0lHmTXDcfhQphBjcwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKlIKJnL jvZBzwkeOJrd15oP/iTQMB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZDNzUvM0FBNURFRTBERDU4MTFFQzg3MEZDMjBEQzRGOUFFMDIvRDNBOEVBNjQ5 RjA5MTFFRTk4MDY1RTIzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyyAgMA0GCSqGSIb3DQEBCwUAA4IBAQCb4juPsbqDpe130d+2zIN0 JYvkvW1cmIV6wVwSOvLGV1DI9AhSsS2J/5E//J2Sy69eALd6U+QAGU55/XOQKZrP 9xPT/U41//hndVEmzMbxiNHoVNud/i2IP1PftxkN1mrkHtLYGk1Ta/svFpEJ7k2T k9Wh5O157OmqQQVLs95o2xSNxbzpiGXPHg4BfoLziUki5Kr/KllWoPxqbd3WD5q6 8G23H6shtz+zhT2sVcUSxDD/ZkLXUnxbS4Y0H2T1kXUXD7URgHDHH8Iy46KhzK8/ PDWs5dcBKd//5MRuZKP2MahZ55EXh17XUNdAX0eBP6lyxzt1Grk1yJffdqBbEJYU -----END CERTIFICATE-----Generated at Thu Mar 12 22:56:10 2026 by rpki-client