$ rpki-client -vvf rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/70017B5CF74111EF98C99938C4F9AE02.roa File: 70017B5CF74111EF98C99938C4F9AE02.roa (raw, json) Hash identifier: +3e/xRnfKJ46AdYjnS6bQdI5AM8QKqWII0m6QY/TSMg= Subject key identifier: 9A:08:BF:25:E9:B0:9F:08:DC:6B:8E:09:02:1C:CC:83:79:C3:8F:A7 Certificate issuer: /CN=A9195DE5/serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Certificate serial: 0876 Authority key identifier: B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/70017B5CF74111EF98C99938C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:06:56 +0000 ROA not before: Mon 31 Mar 2025 21:21:31 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 13444 IP address blocks: 116.204.208.0/24 maxlen: 24 116.204.209.0/24 maxlen: 24 116.204.210.0/24 maxlen: 24 116.204.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 20:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2166 (0x876) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195DE5, serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Validity Not Before: Mar 31 21:21:31 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a44800-d4b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c9:79:a2:58:04:fa:7e:f0:9c:4c:0c:1c:31: aa:64:40:90:62:ac:c4:d5:e9:48:7c:84:01:f4:ab: 74:8b:a7:ac:b8:ff:b0:05:20:1a:66:07:75:75:96: 39:61:f9:d9:28:20:67:e8:0c:8e:ec:1d:5f:f2:e9: 2a:e1:ea:98:6b:97:eb:50:8f:2c:fe:da:09:ab:15: 62:6b:0b:01:28:53:db:7c:fa:0d:53:62:d2:56:0c: b9:18:ef:76:0c:5e:37:b7:92:fb:e2:35:3b:88:66: 43:13:46:a7:12:04:5e:c4:80:4b:49:15:6b:36:61: cf:cd:dd:aa:ee:a2:45:e7:99:53:22:e2:99:f2:21: ae:ee:85:3e:c0:00:11:c8:36:d2:5f:d4:1e:3e:4a: 7e:af:3b:ae:63:12:06:d8:2c:b9:50:8e:c6:a8:89: 42:3a:38:51:b3:09:18:7c:86:b4:8c:80:67:b4:6f: b5:92:b4:bb:05:18:1b:32:ca:ff:8a:f9:13:31:08: 7c:c4:9e:d3:2b:06:30:e9:ea:71:f3:dc:b8:c1:b8: d9:2b:ba:d5:66:8a:9d:c9:04:b1:86:64:d3:d1:81: fd:4b:89:c6:0f:e5:13:97:8f:a5:44:63:b5:eb:8f: 47:88:f2:19:f6:71:75:6d:79:42:18:40:53:7a:d0: 17:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:08:BF:25:E9:B0:9F:08:DC:6B:8E:09:02:1C:CC:83:79:C3:8F:A7 X509v3 Authority Key Identifier: keyid:B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/70017B5CF74111EF98C99938C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.204.208.0/22 Signature Algorithm: sha256WithRSAEncryption 83:86:97:9d:1b:c3:0f:76:5d:d4:f2:32:8b:30:d7:54:77:ba: c7:97:a3:6e:63:b6:b2:dd:70:09:91:f5:1e:03:09:52:7c:62: 0e:be:4c:cb:fe:fd:06:99:a5:da:70:89:cc:c7:3f:c1:46:23: 70:12:08:fd:f6:32:03:75:ef:63:f8:4a:ff:71:f1:6c:5d:4f: ef:7c:93:e0:af:86:f8:cb:6e:2c:52:45:8c:7b:4e:c9:57:8c: a1:e2:50:a7:d2:38:8e:39:c7:9e:25:16:66:0a:95:96:02:26: db:ec:76:57:2c:e1:8a:2c:70:7d:b6:09:7a:a7:a8:71:a0:c1: af:69:e9:64:ac:8d:ea:aa:07:3c:62:ed:12:92:cb:bf:ad:3c: 16:f6:44:1b:fc:30:c4:5b:28:c7:0a:b2:5c:9b:41:b8:d0:30: b5:d1:af:3d:54:ec:fd:36:27:63:34:2a:51:2f:a3:15:1c:0a: 40:11:23:32:1d:4f:8d:a6:ea:91:ad:c6:45:35:21:6d:2c:29: cc:2f:61:60:ce:82:7a:e1:1a:6b:95:e7:f6:e7:19:f3:45:d6: f1:78:d9:a2:b3:5a:17:f0:fd:59:a5:e8:2a:56:2c:32:c3:55: 3f:7b:09:fb:3a:c2:c5:5a:42:9d:1d:5b:33:63:12:d0:75:d4: 03:99:3e:c6 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVERTUxMTAvBgNVBAUTKEI4NUJFRDk5QkY3NDBBQkFENUEzOTlDOURGNUZFOTk2 MkE2REU4RjEwHhcNMjUwMzMxMjEyMTMxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDgwMC1kNGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm8l5olgE+n7wnEwMHDGqZECQYqzE1elIfIQB9Kt0i6esuP+wBSAaZgd1dZY5 YfnZKCBn6AyO7B1f8ukq4eqYa5frUI8s/toJqxViawsBKFPbfPoNU2LSVgy5GO92 DF43t5L74jU7iGZDE0anEgRexIBLSRVrNmHPzd2q7qJF55lTIuKZ8iGu7oU+wAAR yDbSX9QePkp+rzuuYxIG2Cy5UI7GqIlCOjhRswkYfIa0jIBntG+1krS7BRgbMsr/ ivkTMQh8xJ7TKwYw6epx89y4wbjZK7rVZoqdyQSxhmTT0YH9S4nGD+UTl4+lRGO1 649HiPIZ9nF1bXlCGEBTetAXuwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJoIvyXp sJ8I3GuOCQIczIN5w4+nMB8GA1UdIwQYMBaAFLhb7Zm/dAq61aOZyd9f6ZYqbejx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NURFNS9FM0VENjVEOEY0 QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENyclZvNW5KMzFfcGxpcHQ2 UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VGdnRtYjkwQ3JyVm81bkozMV9wbGlwdDZQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTVERTUvRTNFRDY1RDhGNEJFMTFFQTlDMzVGRTZBQzRGOUFFMDIvNzAwMTdCNUNG NzQxMTFFRjk4Qzk5OTM4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCdMzQMA0GCSqGSIb3DQEBCwUAA4IBAQCDhpedG8MPdl3U8jKLMNdU d7rHl6NuY7ay3XAJkfUeAwlSfGIOvkzL/v0GmaXacInMxz/BRiNwEgj99jIDde9j +Er/cfFsXU/vfJPgr4b4y24sUkWMe07JV4yh4lCn0jiOOceeJRZmCpWWAibb7HZX LOGKLHB9tgl6p6hxoMGvaelkrI3qqgc8Yu0Sksu/rTwW9kQb/DDEWyjHCrJcm0G4 0DC10a89VOz9NidjNCpRL6MVHApAESMyHU+NpuqRrcZFNSFtLCnML2FgzoJ64Rpr lef25xnzRdbxeNmis1oX8P1ZpegqViwyw1U/ewn7OsLFWkKdHVszYxLQddQDmT7G -----END CERTIFICATE-----Generated at Fri Mar 13 02:20:40 2026 by rpki-client