$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/57CA5DB02E2811EBB76B1E75C4F9AE02.roa File: 57CA5DB02E2811EBB76B1E75C4F9AE02.roa (raw, json) Hash identifier: L72eIwwIDhEMrAAO0eX58yT+7pV0R1Yujll8QCVWdao= Subject key identifier: 30:64:43:A8:E6:33:2B:E3:A7:93:90:79:A3:4B:4E:0B:D5:38:24:F7 Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Certificate serial: 3589 Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/57CA5DB02E2811EBB76B1E75C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:36:11 +0000 ROA not before: Fri 18 Apr 2025 15:31:13 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 23670 IP address blocks: 202.51.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13705 (0x3589) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Validity Not Before: Apr 18 15:31:13 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a440cb-48d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:ef:a2:76:52:8b:61:b8:a1:3a:e4:3b:a9:06: 3e:7a:f7:ef:82:86:c8:a7:a1:27:3a:b1:07:20:91: 30:cc:48:d7:35:44:ba:b9:b3:0c:b2:cd:53:aa:2e: b6:c8:5a:f6:28:81:b4:67:93:57:79:25:f7:87:4f: 3b:b4:00:35:e6:e0:87:f5:f3:22:13:8d:54:9c:27: a2:31:a7:9c:2b:ff:f0:a5:f6:de:4e:3c:0a:65:26: 9b:16:71:17:39:01:2d:3a:17:ab:ae:87:dc:b1:38: 49:d0:22:85:13:03:75:26:30:5f:81:06:08:34:bc: ff:67:96:47:3b:dc:4f:c6:9c:f4:18:6f:49:35:9b: 71:48:2b:c5:55:16:a9:73:eb:4b:4b:23:1c:51:2b: 37:20:8d:d5:a5:9f:57:c3:1c:0b:8c:6c:89:bf:f9: d8:54:8a:75:e0:07:6f:43:8b:c5:2f:02:d5:40:81: a3:d7:cb:d1:21:2e:6c:44:bf:02:b5:8b:cf:98:5f: 1c:11:e0:aa:ed:d4:35:60:fa:42:d8:f5:af:d6:ed: 26:b7:e0:0a:8a:f2:cb:91:e3:d9:d0:74:96:c5:b1: 71:08:eb:f3:94:25:fb:c8:d1:0d:69:94:14:1f:57: 40:de:61:21:bb:d5:e7:3d:f1:e6:34:67:77:30:0b: e3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:64:43:A8:E6:33:2B:E3:A7:93:90:79:A3:4B:4E:0B:D5:38:24:F7 X509v3 Authority Key Identifier: keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/57CA5DB02E2811EBB76B1E75C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.51.170.0/24 Signature Algorithm: sha256WithRSAEncryption 34:b4:08:d9:92:45:ee:81:dc:c3:e1:36:b6:bb:68:8b:9b:be: ff:8b:00:7a:b1:6d:e8:0b:8a:d4:49:58:24:ae:8a:49:9b:86: 7f:9a:74:42:17:98:0c:db:18:66:14:db:91:87:f6:01:81:e3: bf:12:a2:05:f9:1f:ad:89:90:d4:44:ee:48:0a:01:21:de:d3: 6d:ff:c2:3a:5f:31:1d:6b:00:3a:59:0a:d1:67:a5:9d:ec:3a: b6:89:92:2f:00:6d:41:93:c8:81:2a:7d:c1:8f:91:cb:70:c5: ec:0c:f4:9a:5b:b6:6d:6c:92:cc:00:1a:b3:6e:6c:1e:6b:df: e2:b3:f8:9f:07:5c:fa:5a:b7:10:97:ed:97:ab:4e:ae:8c:1d: 8e:12:f1:64:30:bf:bc:ba:d5:0d:dc:35:ed:6b:86:6f:d6:81: fc:c3:f6:cd:30:b4:0a:6f:b1:d2:67:77:db:ed:52:cc:c3:38: dc:1a:11:4c:67:26:03:c7:1f:d7:e7:7c:68:e8:4c:a7:d1:fd: 96:c7:58:a0:ac:3e:12:fa:e8:e2:0c:87:73:4a:af:92:df:bf: 0b:22:93:84:6b:e4:60:51:f4:a9:97:bf:b1:98:05:b4:77:a5: d9:bd:9e:ce:87:89:1e:5b:ec:1a:4b:db:bb:d6:b3:82:06:82: 39:de:5f:a2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZEQkExMTAvBgNVBAUTKEZFRjkxNDNCMTYxNkNEQTExNTlCNTlFQ0Q1RTM5OTNF OTgyNjU0RkUwHhcNMjUwNDE4MTUzMTEzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDBjYi00OGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+O+idlKLYbihOuQ7qQY+evfvgobIp6EnOrEHIJEwzEjXNUS6ubMMss1Tqi62 yFr2KIG0Z5NXeSX3h087tAA15uCH9fMiE41UnCeiMaecK//wpfbeTjwKZSabFnEX OQEtOherrofcsThJ0CKFEwN1JjBfgQYINLz/Z5ZHO9xPxpz0GG9JNZtxSCvFVRap c+tLSyMcUSs3II3VpZ9XwxwLjGyJv/nYVIp14AdvQ4vFLwLVQIGj18vRIS5sRL8C tYvPmF8cEeCq7dQ1YPpC2PWv1u0mt+AKivLLkePZ0HSWxbFxCOvzlCX7yNENaZQU H1dA3mEhu9XnPfHmNGd3MAvjewIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDBkQ6jm Myvjp5OQeaNLTgvVOCT3MB8GA1UdIwQYMBaAFP75FDsWFs2hFZtZ7NXjmT6YJlT+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkRCQS8wNzc4NTFBNDFE OUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3phRVZtMW5zMWVPWlBwZ21W UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192a1VPeFlXemFFVm0xbnMxZU9aUHBnbVZQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUZEQkEvMDc3ODUxQTQxRDlEMTFFMjk4N0NFRThCMDhCMDJDRDIvNTdDQTVEQjAy RTI4MTFFQkI3NkIxRTc1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyjOqMA0GCSqGSIb3DQEBCwUAA4IBAQA0tAjZkkXugdzD4Ta2u2iL m77/iwB6sW3oC4rUSVgkropJm4Z/mnRCF5gM2xhmFNuRh/YBgeO/EqIF+R+tiZDU RO5ICgEh3tNt/8I6XzEdawA6WQrRZ6Wd7Dq2iZIvAG1Bk8iBKn3Bj5HLcMXsDPSa W7ZtbJLMABqzbmwea9/is/ifB1z6WrcQl+2Xq06ujB2OEvFkML+8utUN3DXta4Zv 1oH8w/bNMLQKb7HSZ3fb7VLMwzjcGhFMZyYDxx/X53xo6Eyn0f2Wx1igrD4S+uji DIdzSq+S378LIpOEa+RgUfSpl7+xmAW0d6XZvZ7Oh4keW+waS9u71rOCBoI53l+i -----END CERTIFICATE-----Generated at Thu Mar 26 10:05:49 2026 by rpki-client