$ rpki-client -vvf rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa File: CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa (raw, json) Hash identifier: xgivwJxveenvIu97Bz+/FrcRoG+/apEQkUFco+CmFm0= Subject key identifier: EE:82:1B:95:8E:2D:1B:77:AF:37:A8:C3:9B:D3:23:43:5F:F5:6A:DB Certificate issuer: /CN=A911C90F/serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Certificate serial: 84 Authority key identifier: 34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa Signing time: Tue 03 Mar 2026 07:44:15 +0000 ROA not before: Tue 03 Mar 2026 07:44:15 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 153692 IP address blocks: 163.223.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C90F, serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Validity Not Before: Mar 3 07:44:15 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a6914f-2994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:01:18:6d:f4:95:d2:5d:94:d3:d1:63:46:f9: c8:bc:d4:7d:14:8b:2c:d7:d6:23:41:b0:1b:4c:26: 2b:a1:d2:7a:1c:a0:f4:fe:c8:dd:25:66:01:ad:f3: 04:30:87:93:a9:5e:c0:f8:48:e9:12:04:56:6e:7a: e0:5c:48:2a:1f:73:7c:0d:4c:39:c7:66:f8:cf:51: 9b:2b:e2:4e:8b:ed:dd:fb:10:90:20:6f:b6:f9:9a: 17:a6:db:3b:f1:a5:f5:63:68:db:0d:b1:42:98:13: e5:dc:a2:16:85:6f:6e:03:16:12:cd:69:c1:9e:1c: 74:42:e2:ad:c1:3e:b3:60:63:53:cd:31:c3:bf:c5: 95:0c:1c:5f:2a:3a:5a:1b:e6:73:16:eb:e0:08:bb: fe:57:0b:67:40:38:ee:80:07:ca:01:30:15:4d:85: 46:4c:b4:5a:0e:74:34:82:bb:a0:5b:3e:96:6a:3d: 02:1e:a5:9f:cc:5b:77:69:3f:9c:99:28:48:60:49: 78:a2:89:5b:0b:45:61:d6:f4:c9:7c:cf:45:3b:5d: 20:92:3f:cb:b4:dc:91:15:8f:c6:f5:3e:27:12:5f: d6:a3:66:4e:40:96:01:a0:42:53:ed:8a:62:d7:0b: 81:56:ca:f2:66:05:78:81:aa:1e:49:bc:6f:72:6b: 8c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:82:1B:95:8E:2D:1B:77:AF:37:A8:C3:9B:D3:23:43:5F:F5:6A:DB X509v3 Authority Key Identifier: keyid:34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 163.223.96.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:fb:66:b4:be:cf:d8:ab:63:39:50:06:bb:af:20:84:f7:5e: ae:93:7b:67:97:e6:2f:45:0c:c6:b2:a5:ea:db:bf:19:e5:1d: 56:ea:a8:0d:4c:0e:75:e5:2e:a2:22:68:93:56:d5:cd:f6:3a: a3:46:2a:f3:6e:ec:6e:0d:68:08:77:9a:ce:ca:8c:d2:52:d7: cb:29:4a:dd:be:7e:f4:64:55:6b:bb:1c:b6:88:b5:4e:15:c9: 21:1e:79:2b:a4:37:4b:28:4f:f5:da:bb:99:bb:e6:bd:a5:d5: ce:63:c2:ff:5f:92:45:56:58:53:ff:7c:ca:bf:f0:d6:a3:52: 49:3c:e8:42:6a:88:7c:be:d2:e7:b6:c0:80:1d:8f:ac:01:99: fa:cf:d0:a6:8b:e2:86:00:f0:11:e7:5d:85:a3:73:f5:4a:1d: d5:36:57:97:dd:3d:06:7d:97:30:f4:e7:76:d0:11:d6:e6:d9: bf:a9:82:e1:6d:51:b4:27:ed:3f:56:fe:56:a5:eb:b5:01:ee: 2a:69:c3:a2:77:2f:da:f4:10:68:f6:f1:db:02:23:b1:1a:f0: 0f:c7:9e:d2:8a:2b:96:14:a1:b9:1a:7b:b3:4f:cd:cf:7c:da: 12:3d:ae:31:d0:ce:eb:b9:09:c1:1b:cb:06:09:45:5b:7c:be: 52:bb:a2:f8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM5MEYxMTAvBgNVBAUTKDM0MzA5M0FFMTNGNTg2MTkyRUQzMEFFNUUzRDkyN0Qx ODczQTZCNDYwHhcNMjYwMzAzMDc0NDE1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2OTE0Zi0yOTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQEYbfSV0l2U09FjRvnIvNR9FIss19YjQbAbTCYrodJ6HKD0/sjdJWYBrfME MIeTqV7A+EjpEgRWbnrgXEgqH3N8DUw5x2b4z1GbK+JOi+3d+xCQIG+2+ZoXpts7 8aX1Y2jbDbFCmBPl3KIWhW9uAxYSzWnBnhx0QuKtwT6zYGNTzTHDv8WVDBxfKjpa G+ZzFuvgCLv+VwtnQDjugAfKATAVTYVGTLRaDnQ0grugWz6Waj0CHqWfzFt3aT+c mShIYEl4oolbC0Vh1vTJfM9FO10gkj/LtNyRFY/G9T4nEl/Wo2ZOQJYBoEJT7Ypi 1wuBVsryZgV4gaoeSbxvcmuMgwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFO6CG5WO LRt3rzeow5vTI0Nf9WrbMB8GA1UdIwQYMBaAFDQwk64T9YYZLtMK5ePZJ9GHOmtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzkwRi9EMzVBQzYzRTU0 QUUxMUYwODM2M0VBMjNDNEY5QUUwMi9ORENUcmhQMWhoa3Uwd3JsNDlrbjBZYzZh MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05EQ1RyaFAxaGhrdTB3cmw0OWtuMFljNmEwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUM5MEYvRDM1QUM2M0U1NEFFMTFGMDgzNjNFQTIzQzRGOUFFMDIvQ0I0QUNEQkM1 NEFGMTFGMDk5OUZBQTNFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAo99gMA0GCSqGSIb3DQEBCwUAA4IBAQAd+2a0vs/Yq2M5UAa7ryCE 916uk3tnl+YvRQzGsqXq278Z5R1W6qgNTA515S6iImiTVtXN9jqjRirzbuxuDWgI d5rOyozSUtfLKUrdvn70ZFVruxy2iLVOFckhHnkrpDdLKE/12ruZu+a9pdXOY8L/ X5JFVlhT/3zKv/DWo1JJPOhCaoh8vtLntsCAHY+sAZn6z9Cmi+KGAPAR512Fo3P1 Sh3VNleX3T0GfZcw9Od20BHW5tm/qYLhbVG0J+0/Vv5Wpeu1Ae4qacOidy/a9BBo 9vHbAiOxGvAPx57SiiuWFKG5GnuzT83PfNoSPa4x0M7ruQnBG8sGCUVbfL5Su6L4 -----END CERTIFICATE-----Generated at Thu Mar 26 04:18:43 2026 by rpki-client