$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8CA2C07889D111EFAFEB2609C4F9AE02.roa File: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (raw, json) Hash identifier: yc3SgJhB9U1lGAckaKIVNdgap51jHeAdYVySNP13Icc= Subject key identifier: E4:54:DC:FB:D8:82:A4:71:CC:CD:A4:8B:A9:AA:8C:F1:BE:02:D4:5E Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0DB9 Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8CA2C07889D111EFAFEB2609C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:42:09 +0000 ROA not before: Sun 02 Nov 2025 19:08:09 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 4202202105 IP address blocks: 49.236.202.0/24 maxlen: 24 202.71.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3513 (0xdb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Nov 2 19:08:09 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a48881-39ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bc:7a:bb:f2:cd:58:6f:e9:bf:7c:ce:a4:8d: e8:93:33:d2:61:5f:05:65:24:54:e1:92:ae:4b:5f: 47:5f:97:21:aa:a9:4f:ad:11:51:d4:a7:79:26:cf: 8b:51:83:f8:00:9d:9b:db:07:75:43:9c:f5:fd:1c: 77:2a:d8:44:03:af:91:d0:bd:75:31:20:78:c1:ea: 1d:95:08:8b:9e:24:83:e1:3d:51:84:16:16:11:ff: 0f:23:68:4c:c2:e1:63:78:4a:22:4e:a9:12:1c:36: 2f:5b:a1:7a:a5:19:a3:ac:33:c4:89:0c:ee:06:41: 14:cd:af:7e:d8:6e:cb:75:31:1f:4a:3d:19:87:de: 9d:71:d6:2b:39:53:ec:1b:f3:3f:fd:f6:88:1d:69: d8:31:c2:ad:bc:da:8c:ad:fe:ff:43:d6:17:6b:fb: 3c:6d:8e:fd:6e:92:eb:1a:bc:d0:c4:4b:dc:f0:c5: c6:ab:b4:51:3a:2b:79:f8:61:05:80:40:9f:01:d4: 1a:39:02:40:1a:cd:e0:da:65:f7:37:fa:83:99:d6: 5c:ac:9c:9c:ba:92:6e:95:fa:66:ee:5e:71:3a:06: 3f:40:c7:f3:0b:79:34:4a:d6:04:81:f9:41:1c:75: 89:d2:9b:d7:c2:ad:ac:7b:a9:7c:fc:b6:d7:66:28: 2e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:54:DC:FB:D8:82:A4:71:CC:CD:A4:8B:A9:AA:8C:F1:BE:02:D4:5E X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8CA2C07889D111EFAFEB2609C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 49.236.202.0/24 202.71.101.0/24 Signature Algorithm: sha256WithRSAEncryption 36:39:ed:cb:30:a4:44:0b:b9:b3:1d:8e:cf:74:af:f3:8a:f4: 84:79:1e:82:78:b2:c8:ea:5c:de:60:72:2a:47:12:bc:75:dc: 15:78:ab:a2:5f:13:70:fa:b8:1a:ab:9f:c1:52:9d:fb:ec:4a: 0b:72:ad:f4:f5:b5:39:f6:19:7d:6b:02:88:52:a7:78:26:8d: 76:97:00:7b:10:ec:72:05:19:04:3f:12:32:1c:6c:6c:93:4e: 70:53:70:0d:af:2e:0a:ff:d6:67:73:bd:f4:9e:64:c1:c5:ad: 4e:f7:7f:2b:c6:e3:01:6c:11:d6:e5:45:f9:20:c0:f0:05:b0: a0:9d:06:f8:a0:c4:ff:74:61:2c:41:88:96:7e:0a:74:99:6f: a4:7f:22:91:b8:ba:eb:0d:c3:03:57:bb:8a:1e:a3:c7:b4:e0: a3:5a:ca:f7:e2:da:ac:f6:86:8b:44:2e:f4:80:fc:03:18:25: 06:e0:f6:90:d2:8a:be:b2:f9:5a:d2:c8:cd:ee:a0:0a:a2:8c: dd:7a:af:e3:d0:c9:8c:33:ba:f4:61:9a:23:51:19:d6:2d:cd: bf:44:70:20:1b:6c:df:06:1c:9c:4f:eb:ca:e0:4b:ec:b2:8b: 6c:a1:a6:14:57:51:45:60:e1:a4:8e:c1:31:b0:c9:d6:68:e3: 9e:3c:49:bf -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjUxMTAyMTkwODA5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODg4MS0zOWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLx6u/LNWG/pv3zOpI3okzPSYV8FZSRU4ZKuS19HX5chqqlPrRFR1Kd5Js+L UYP4AJ2b2wd1Q5z1/Rx3KthEA6+R0L11MSB4weodlQiLniSD4T1RhBYWEf8PI2hM wuFjeEoiTqkSHDYvW6F6pRmjrDPEiQzuBkEUza9+2G7LdTEfSj0Zh96dcdYrOVPs G/M//faIHWnYMcKtvNqMrf7/Q9YXa/s8bY79bpLrGrzQxEvc8MXGq7RROit5+GEF gECfAdQaOQJAGs3g2mX3N/qDmdZcrJycupJulfpm7l5xOgY/QMfzC3k0StYEgflB HHWJ0pvXwq2se6l8/LbXZigudQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFORU3PvY gqRxzM2ki6mqjPG+AtReMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvOENBMkMwNzg4 OUQxMTFFRkFGRUIyNjA5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAMezKAwQAykdlMA0GCSqGSIb3DQEBCwUAA4IBAQA2Oe3LMKREC7mz HY7PdK/zivSEeR6CeLLI6lzeYHIqRxK8ddwVeKuiXxNw+rgaq5/BUp377EoLcq30 9bU59hl9awKIUqd4Jo12lwB7EOxyBRkEPxIyHGxsk05wU3ANry4K/9Znc730nmTB xa1O938rxuMBbBHW5UX5IMDwBbCgnQb4oMT/dGEsQYiWfgp0mW+kfyKRuLrrDcMD V7uKHqPHtOCjWsr34tqs9oaLRC70gPwDGCUG4PaQ0oq+svla0sjN7qAKoozdeq/j 0MmMM7r0YZojURnWLc2/RHAgG2zfBhycT+vK4EvssotsoaYUV1FFYOGkjsExsMnW aOOePEm/ -----END CERTIFICATE-----Generated at Thu Mar 26 16:03:27 2026 by rpki-client