$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8AD3E23A17DC11EE959DE671C4F9AE02.roa File: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (raw, json) Hash identifier: PCXWhCBdOz3wuM8WU55B1FYMT0DwN0M40X705jCXOcQ= Subject key identifier: 51:A4:43:38:1B:A2:92:E3:99:7C:00:06:11:C3:12:D9:9C:D6:A1:90 Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0DB5 Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8AD3E23A17DC11EE959DE671C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:42:05 +0000 ROA not before: Sun 02 Nov 2025 19:08:05 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 24514 IP address blocks: 1.9.21.0/24 maxlen: 24 1.9.65.0/24 maxlen: 24 203.106.56.0/21 maxlen: 21 203.106.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3509 (0xdb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Nov 2 19:08:05 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4887d-5e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:00:3c:e2:77:0d:2b:64:7f:a6:d3:0e:b5:15: c1:cd:97:ff:a5:5e:e8:5c:79:10:bf:64:16:f5:78: fe:b9:0f:59:8d:e9:3d:a0:1c:a3:a1:2a:c6:b3:fa: bb:8a:67:a1:f2:0a:ae:1d:ea:eb:c4:8e:f9:30:2a: da:f8:a1:7f:96:53:db:6f:8a:8e:0b:ac:83:45:7c: 62:6d:42:71:28:e7:9b:9b:3b:74:17:0f:17:74:62: aa:98:78:ee:61:3c:4f:bd:87:61:98:fd:ba:21:b9: 2d:86:f4:d8:3d:dd:e8:3e:92:c4:8a:f3:9b:c8:f3: 49:8f:59:d8:a9:a1:a7:2b:de:57:3d:d3:94:86:ee: 83:2e:c6:57:8f:3e:f0:04:80:ff:96:20:ae:0d:bc: 1a:fd:3f:eb:bd:9c:a9:af:a7:13:79:da:ca:b7:fd: c0:29:86:fb:b8:50:6d:4a:bb:9d:9d:9e:65:1c:83: fb:07:5c:61:00:94:60:7f:9b:77:4b:e0:1b:46:75: 67:0c:b2:d6:cd:d4:98:a0:49:6f:b4:8e:96:09:62: af:f5:47:13:5c:d4:bb:d3:e7:78:f3:4a:88:00:56: 42:3d:f0:59:c6:fe:61:f6:da:fe:db:4d:3d:10:f0: 1b:72:f9:9b:51:7c:9b:1a:d3:ec:d7:21:7a:4f:90: 87:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A4:43:38:1B:A2:92:E3:99:7C:00:06:11:C3:12:D9:9C:D6:A1:90 X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8AD3E23A17DC11EE959DE671C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 1.9.21.0/24 1.9.65.0/24 203.106.56.0-203.106.67.255 Signature Algorithm: sha256WithRSAEncryption 4c:13:95:d0:0c:a0:ad:46:7f:af:6a:cf:59:20:37:f3:1f:e3: 7c:b0:c8:d6:51:0d:b0:b0:82:08:0d:b9:1e:9b:aa:df:20:47: 2e:48:20:0a:be:6b:1e:cf:62:74:09:80:a4:31:6a:12:b7:3b: ae:94:cb:bf:6b:df:63:7b:6d:9b:2d:cd:4b:91:69:bc:7e:21: ab:8c:2c:72:a3:07:83:02:a3:bb:f7:d9:d0:f4:b3:66:7d:67: 41:4e:fa:2f:d7:91:d3:78:cf:b1:25:be:fe:4c:21:4f:5e:83: 34:92:2f:75:06:76:b6:fc:b3:8e:0b:bd:85:98:a2:1d:e0:8a: 3b:20:35:27:1d:5f:73:80:14:8f:29:25:b8:45:c3:cf:39:75: f2:38:fc:e3:a7:b8:a2:a4:50:eb:88:3a:56:d0:6e:8b:6d:3d: ed:15:71:53:53:bd:79:0b:bf:34:84:cc:b2:53:03:cd:75:84: ce:ec:d3:44:ed:b5:b7:69:fc:3a:d2:1e:8f:e1:4c:8d:73:8b: 91:8b:b6:d8:2f:d2:0b:f9:f0:98:ab:c1:7f:cb:1a:e6:e3:a9: 0c:80:2b:9a:37:40:0b:53:78:5d:f4:d7:84:59:c0:18:0f:f0: 14:39:e9:82:92:6e:c7:3d:90:a8:10:35:b9:3e:c5:4e:cf:13: aa:3e:81:05 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICDbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjUxMTAyMTkwODA1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODg3ZC01ZTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wA84ncNK2R/ptMOtRXBzZf/pV7oXHkQv2QW9Xj+uQ9Zjek9oByjoSrGs/q7 imeh8gquHerrxI75MCra+KF/llPbb4qOC6yDRXxibUJxKOebmzt0Fw8XdGKqmHju YTxPvYdhmP26IbkthvTYPd3oPpLEivObyPNJj1nYqaGnK95XPdOUhu6DLsZXjz7w BID/liCuDbwa/T/rvZypr6cTedrKt/3AKYb7uFBtSrudnZ5lHIP7B1xhAJRgf5t3 S+AbRnVnDLLWzdSYoElvtI6WCWKv9UcTXNS70+d480qIAFZCPfBZxv5h9tr+2009 EPAbcvmbUXybGtPs1yF6T5CHYwIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFFGkQzgb opLjmXwABhHDEtmc1qGQMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvOEFEM0UyM0Ex N0RDMTFFRTk1OURFNjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaAwQAAQkVAwQAAQlBMAwDBAPLajgDBALLakAwDQYJKoZIhvcNAQELBQAD ggEBAEwTldAMoK1Gf69qz1kgN/Mf43ywyNZRDbCwgggNuR6bqt8gRy5IIAq+ax7P YnQJgKQxahK3O66Uy79r32N7bZstzUuRabx+IauMLHKjB4MCo7v32dD0s2Z9Z0FO +i/XkdN4z7Elvv5MIU9egzSSL3UGdrb8s44LvYWYoh3gijsgNScdX3OAFI8pJbhF w885dfI4/OOnuKKkUOuIOlbQbottPe0VcVNTvXkLvzSEzLJTA811hM7s00Tttbdp /DrSHo/hTI1zi5GLttgv0gv58JirwX/LGubjqQyAK5o3QAtTeF3014RZwBgP8BQ5 6YKSbsc9kKgQNbk+xU7PE6o+gQU= -----END CERTIFICATE-----Generated at Thu Mar 26 16:39:13 2026 by rpki-client