$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/48E219C209C311EEA9D88A34C4F9AE02.roa File: 48E219C209C311EEA9D88A34C4F9AE02.roa (raw, json) Hash identifier: SvB+QsV4btdCFW7i059dWy1bkAp62n7wxY/pgRJzLzk= Subject key identifier: 63:13:C1:1A:62:EA:1A:5B:B7:39:34:4E:17:86:9C:17:F0:26:6F:F5 Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0DB4 Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/48E219C209C311EEA9D88A34C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:42:04 +0000 ROA not before: Sun 02 Nov 2025 19:08:04 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 23736 IP address blocks: 58.139.240.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3508 (0xdb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Nov 2 19:08:04 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4887c-a8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:19:38:15:53:06:b0:87:d1:a2:2f:29:d4:bb: be:e9:03:cf:44:15:52:a5:f6:fb:31:61:29:cb:ba: 0f:76:1c:a1:86:eb:f8:1d:be:56:d1:ac:63:b4:1a: 6d:2e:0b:28:80:9e:79:97:a2:be:f3:67:5a:d1:72: cd:30:66:52:2f:e0:96:8a:af:5c:1e:42:d3:f2:28: a1:b2:78:ea:7d:22:65:6e:41:41:8c:8c:51:c8:7e: 31:33:a5:0c:02:0b:e4:ad:6b:d8:bc:77:3f:db:c4: 5e:3e:0d:5d:93:a6:de:f7:08:87:91:45:b9:48:af: d8:16:ea:32:80:ae:df:2e:ca:5f:71:df:e1:79:35: 8d:0b:d8:a2:02:79:cd:80:ca:22:75:c3:79:77:2f: 54:e5:1f:d9:28:5a:46:8a:48:2e:1f:ae:ae:7e:04: c7:49:56:31:f0:1e:cf:16:4d:7f:d0:4c:7e:88:99: 20:ec:52:64:15:ac:08:fd:ce:79:29:7e:03:bf:a2: 19:6d:c7:cf:d6:ed:39:af:bf:d7:21:05:71:05:7b: 4d:85:40:60:3e:a7:bd:c7:38:3d:68:fc:6d:39:79: 89:b9:4f:5a:46:cb:fc:79:18:d5:7c:af:06:44:21: 4c:f8:e0:bc:f9:6d:97:e0:f4:10:a4:43:9a:eb:37: b7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:13:C1:1A:62:EA:1A:5B:B7:39:34:4E:17:86:9C:17:F0:26:6F:F5 X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/48E219C209C311EEA9D88A34C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.139.240.0/20 Signature Algorithm: sha256WithRSAEncryption 6d:55:af:59:c3:73:bb:df:99:76:94:aa:12:ff:19:fb:e6:74: c3:0e:6b:e5:ef:fb:e4:c8:3b:a5:cb:65:a1:db:bc:d6:12:76: db:2e:02:39:3c:7f:6d:72:67:c6:c2:b3:d8:62:6d:4c:3a:39: 2e:de:dc:a9:dc:dd:ce:3d:22:34:00:6e:f1:6e:09:95:b5:8a: 09:e3:e7:11:81:33:fb:e9:75:f4:83:e8:6d:8b:0b:0c:c2:4b: 37:99:e2:eb:2d:6b:93:54:3b:14:60:e3:af:87:ae:65:15:14: 31:85:a0:c1:5f:7e:c1:0f:90:9e:36:6c:cc:68:6e:da:f5:c1: a4:14:f2:d3:c3:f1:d6:18:18:b4:f3:32:8b:6f:0f:14:83:a7: 92:f6:0f:3e:14:5b:e1:de:d9:d2:6a:b4:9b:0e:0b:f7:a6:b1: c4:e3:89:0f:41:99:93:fa:19:50:92:f4:63:d5:56:e8:6c:ed: 5c:40:a6:f4:59:9b:67:63:c4:36:b8:1f:72:b0:c0:56:fc:3a: ca:7c:ea:4a:59:97:77:c1:fa:fe:2a:2c:d3:e3:6c:9e:25:aa: 6a:c7:7c:89:8b:08:da:eb:b3:48:a9:7f:f9:41:b8:aa:6d:d4: 2f:ab:fc:58:d6:52:4f:80:2d:e3:e9:64:e5:92:ec:b8:47:2e: 9d:80:0d:99 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjUxMTAyMTkwODA0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODg3Yy1hOGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Rk4FVMGsIfRoi8p1Lu+6QPPRBVSpfb7MWEpy7oPdhyhhuv4Hb5W0axjtBpt LgsogJ55l6K+82da0XLNMGZSL+CWiq9cHkLT8iihsnjqfSJlbkFBjIxRyH4xM6UM AgvkrWvYvHc/28RePg1dk6be9wiHkUW5SK/YFuoygK7fLspfcd/heTWNC9iiAnnN gMoidcN5dy9U5R/ZKFpGikguH66ufgTHSVYx8B7PFk1/0Ex+iJkg7FJkFawI/c55 KX4Dv6IZbcfP1u05r7/XIQVxBXtNhUBgPqe9xzg9aPxtOXmJuU9aRsv8eRjVfK8G RCFM+OC8+W2X4PQQpEOa6ze3WQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGMTwRpi 6hpbtzk0TheGnBfwJm/1MB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvNDhFMjE5QzIw OUMzMTFFRUE5RDg4QTM0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEOovwMA0GCSqGSIb3DQEBCwUAA4IBAQBtVa9Zw3O735l2lKoS/xn7 5nTDDmvl7/vkyDuly2Wh27zWEnbbLgI5PH9tcmfGwrPYYm1MOjku3typ3N3OPSI0 AG7xbgmVtYoJ4+cRgTP76XX0g+htiwsMwks3meLrLWuTVDsUYOOvh65lFRQxhaDB X37BD5CeNmzMaG7a9cGkFPLTw/HWGBi08zKLbw8Ug6eS9g8+FFvh3tnSarSbDgv3 prHE44kPQZmT+hlQkvRj1VbobO1cQKb0WZtnY8Q2uB9ysMBW/DrKfOpKWZd3wfr+ KizT42yeJapqx3yJiwja67NIqX/5QbiqbdQvq/xY1lJPgC3j6WTlkuy4Ry6dgA2Z -----END CERTIFICATE-----Generated at Thu Mar 26 14:30:50 2026 by rpki-client