$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/25DD10F26F3211EDA3DCF033C4F9AE02.roa File: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (raw, json) Hash identifier: lyLkwnvPiADGaBvpMXNqGtu0ktHuqEPAoUGEfoeoW7E= Subject key identifier: F2:87:6C:29:F5:72:90:55:46:46:3E:4E:90:AB:C5:15:13:3A:75:70 Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Certificate serial: 0279 Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/25DD10F26F3211EDA3DCF033C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:17:36 +0000 ROA not before: Thu 19 Jun 2025 02:39:32 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 54092 IP address blocks: 203.55.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 01:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 633 (0x279) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Validity Not Before: Jun 19 02:39:32 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a45890-e5f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bf:dd:18:80:3d:b8:63:21:c9:59:95:73:4f: 74:5f:c4:aa:6a:02:1c:58:e6:6c:1c:0b:86:ac:ec: ac:ba:c3:f9:3a:7f:13:cc:f1:f1:f2:7b:1a:7d:43: 19:54:44:8b:3c:f3:bf:93:3a:d0:ea:8c:d1:c7:56: 53:18:ff:fc:29:12:3c:46:1d:1a:07:0a:66:c0:f9: 59:72:e1:91:16:32:53:9c:90:16:b7:b5:d4:99:d5: 93:2a:a8:0b:52:93:a7:c5:c8:95:5c:7b:90:1d:84: 8c:55:62:c6:29:c4:64:90:23:bc:0d:fe:ec:23:e2: 3f:85:e6:63:27:02:13:24:97:07:c7:65:f8:72:a6: 72:ad:d8:1d:11:78:e6:17:12:12:b9:3a:22:74:ed: b0:de:54:b9:75:db:d9:b4:fa:d7:2d:c7:5a:8f:64: 19:55:62:3d:16:b2:14:c9:1c:68:74:c1:c9:60:4a: 22:7f:54:61:c5:a6:a2:19:77:9a:d6:5d:16:c9:58: 2c:27:7f:e3:f8:08:da:e3:c3:a6:2e:fb:f5:98:29: 90:a6:ce:08:33:93:87:09:44:49:35:df:68:6b:d4: fe:d7:34:2a:a8:a3:19:6e:b4:5d:cb:c7:f5:47:55: e4:91:f4:11:f5:9c:14:76:65:3b:ce:6f:a8:fa:1c: 3b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:87:6C:29:F5:72:90:55:46:46:3E:4E:90:AB:C5:15:13:3A:75:70 X509v3 Authority Key Identifier: keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/25DD10F26F3211EDA3DCF033C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.55.215.0/24 Signature Algorithm: sha256WithRSAEncryption 72:ec:53:fc:e4:b7:e6:e6:65:f0:2c:84:84:ff:e7:12:bf:8c: b5:5d:48:73:8c:4e:0a:3e:d0:34:29:10:ab:c8:16:d6:c0:0e: ba:70:89:66:05:e1:39:26:6a:ab:c2:95:49:85:8d:61:ae:7c: 87:f6:07:d8:13:dd:12:b5:7e:2e:78:81:51:b4:f4:9e:18:ba: e4:1d:90:f3:cd:e1:96:7c:89:99:10:a5:10:db:fe:de:b0:91: 38:9a:1f:04:9b:a1:80:91:d8:53:a3:ef:6c:20:8a:69:f7:f7: a1:4d:1b:70:07:af:2b:29:bd:f2:6d:68:dd:ff:4d:cf:1a:f5: 5a:a1:4b:ef:a0:15:7c:41:35:2d:e5:60:5f:e1:5b:5a:d4:91: 1b:01:ba:90:0d:3b:48:59:6c:79:f0:77:f0:70:e1:d0:bc:7b: bd:ec:1f:a2:66:db:8f:e5:23:4e:4e:b2:c6:9d:8e:88:57:37: 10:26:20:96:03:20:f7:48:85:02:e5:b0:8b:7c:8e:c2:4e:52: 4d:73:28:4c:83:d3:ac:e2:15:b3:55:bd:cd:b8:04:09:ea:38: 1d:17:7e:b4:5e:17:bc:6f:d1:fa:44:5f:dc:73:d6:97:72:e4: cd:5e:d3:04:a1:88:db:e3:e9:2c:25:db:50:32:32:3b:8b:b7: 8b:ed:c1:2d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3 MUFDMkQ0REIwHhcNMjUwNjE5MDIzOTMyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTg5MC1lNWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7/dGIA9uGMhyVmVc090X8SqagIcWOZsHAuGrOysusP5On8TzPHx8nsafUMZ VESLPPO/kzrQ6ozRx1ZTGP/8KRI8Rh0aBwpmwPlZcuGRFjJTnJAWt7XUmdWTKqgL UpOnxciVXHuQHYSMVWLGKcRkkCO8Df7sI+I/heZjJwITJJcHx2X4cqZyrdgdEXjm FxISuToidO2w3lS5ddvZtPrXLcdaj2QZVWI9FrIUyRxodMHJYEoif1RhxaaiGXea 1l0WyVgsJ3/j+Aja48OmLvv1mCmQps4IM5OHCURJNd9oa9T+1zQqqKMZbrRdy8f1 R1XkkfQR9ZwUdmU7zm+o+hw7mQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPKHbCn1 cpBVRkY+TpCrxRUTOnVwMB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjNGODQvRjQzQTNGMDQ2RjJGMTFFREE4NEE2OTMzQzRGOUFFMDIvMjVERDEwRjI2 RjMyMTFFREEzRENGMDMzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyzfXMA0GCSqGSIb3DQEBCwUAA4IBAQBy7FP85Lfm5mXwLISE/+cS v4y1XUhzjE4KPtA0KRCryBbWwA66cIlmBeE5JmqrwpVJhY1hrnyH9gfYE90StX4u eIFRtPSeGLrkHZDzzeGWfImZEKUQ2/7esJE4mh8Em6GAkdhTo+9sIIpp9/ehTRtw B68rKb3ybWjd/03PGvVaoUvvoBV8QTUt5WBf4Vta1JEbAbqQDTtIWWx58HfwcOHQ vHu97B+iZtuP5SNOTrLGnY6IVzcQJiCWAyD3SIUC5bCLfI7CTlJNcyhMg9Os4hWz Vb3NuAQJ6jgdF360Xhe8b9H6RF/cc9aXcuTNXtMEoYjb4+ksJdtQMjI7i7eL7cEt -----END CERTIFICATE-----Generated at Sat Mar 28 12:08:53 2026 by rpki-client