$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/D29F544CFCD711EEB654B271C4F9AE02.roa File: D29F544CFCD711EEB654B271C4F9AE02.roa (raw, json) Hash identifier: 3uTrRG1V9dC0o0IOwmSmMEJhHbML0nSq3yiQY+3J84k= Subject key identifier: 45:49:3A:2E:D7:8E:1A:6A:1E:E1:82:58:7A:35:B0:6D:D6:E3:71:A5 Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Certificate serial: 0278 Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/D29F544CFCD711EEB654B271C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:17:35 +0000 ROA not before: Thu 19 Jun 2025 02:39:31 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 19198 IP address blocks: 203.55.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 632 (0x278) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Validity Not Before: Jun 19 02:39:31 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4588f-2e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cd:dc:8e:89:ce:9d:15:2e:bc:6b:5c:18:69: 72:fe:93:b4:16:95:7f:f3:5d:ff:34:b1:2b:54:4a: c2:7c:27:dc:73:e8:68:cc:b0:65:e3:d8:18:f9:7d: e6:4d:90:41:ce:60:a8:1c:f9:5d:7d:a3:62:8d:dc: ff:09:c1:51:5c:5a:d8:61:01:3c:cd:62:9e:14:f7: 6f:b0:63:cc:75:60:48:1d:bf:4b:77:0c:67:af:5e: da:7f:aa:10:37:22:a6:e8:e0:68:02:b9:50:6b:cb: 32:2c:a8:34:3f:7f:6a:6e:df:0f:2f:06:2d:52:fb: 39:7b:12:31:4c:37:cd:ee:a2:6b:db:b4:0f:83:6c: 0e:5c:9d:1c:4f:76:81:46:33:c1:2a:56:07:f8:51: f0:9e:4b:79:4c:51:13:61:0c:3a:04:a3:3a:f7:45: 8e:7f:68:3d:f9:38:b0:af:a4:90:c7:cc:0f:ee:46: 6b:8f:12:ec:30:32:1a:b6:40:d9:47:63:9e:ca:b9: 5d:64:47:b4:6f:76:06:c3:71:a6:37:58:d2:eb:db: f0:20:38:c6:12:1d:5b:f1:90:b7:34:83:58:45:79: af:d8:8a:04:0f:7e:62:fc:c3:fe:06:3b:94:59:ba: a5:2d:5c:0e:3e:6c:95:58:20:37:dc:81:33:49:a7: c5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:49:3A:2E:D7:8E:1A:6A:1E:E1:82:58:7A:35:B0:6D:D6:E3:71:A5 X509v3 Authority Key Identifier: keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/D29F544CFCD711EEB654B271C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.55.215.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:a5:c9:34:a5:99:52:f8:72:dc:2f:02:c0:4b:1e:8b:9c:78: 5c:7a:72:97:c7:9c:6d:39:67:92:1d:54:eb:5e:21:4d:ce:df: 1e:d6:37:15:12:d8:e6:ed:dc:49:cf:a9:fd:18:50:fb:a9:6d: b3:dd:ce:86:2b:6b:ba:64:ea:66:c6:94:27:e4:c1:ad:24:ad: 7b:c1:8d:1d:1d:a8:e9:7f:d4:f6:5c:a4:f4:b6:a4:2f:28:cd: a1:97:dd:22:28:52:46:d9:19:0a:89:5a:7c:e7:14:5f:41:26: de:c5:a0:59:2b:2d:f2:d3:c2:c9:d9:49:25:36:73:e3:43:a6: 28:25:1a:ad:9f:3e:83:ea:2d:fa:e5:48:dc:8f:6a:c4:a7:98: 70:79:8d:6a:96:9e:25:ad:18:bc:51:5c:34:79:38:a9:36:bd: 02:f7:7e:2e:9f:4a:0f:51:18:aa:89:77:a1:4a:66:34:bc:c4: 35:73:07:a5:80:d9:a1:2e:8e:52:b5:d8:f7:b2:31:c9:94:3f: 7d:34:c8:58:58:20:75:fe:68:9a:b3:1f:ab:88:ec:b5:15:3a: db:11:a6:84:ba:75:2c:6d:b7:dd:7c:d7:04:cd:dc:05:8d:a0: f3:1d:5f:32:3b:22:dd:bf:85:38:e2:da:1a:a3:43:b5:7a:c7: 5d:ae:46:5d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3 MUFDMkQ0REIwHhcNMjUwNjE5MDIzOTMxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTg4Zi0yZTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2M3cjonOnRUuvGtcGGly/pO0FpV/813/NLErVErCfCfcc+hozLBl49gY+X3m TZBBzmCoHPldfaNijdz/CcFRXFrYYQE8zWKeFPdvsGPMdWBIHb9Ldwxnr17af6oQ NyKm6OBoArlQa8syLKg0P39qbt8PLwYtUvs5exIxTDfN7qJr27QPg2wOXJ0cT3aB RjPBKlYH+FHwnkt5TFETYQw6BKM690WOf2g9+Tiwr6SQx8wP7kZrjxLsMDIatkDZ R2OeyrldZEe0b3YGw3GmN1jS69vwIDjGEh1b8ZC3NINYRXmv2IoED35i/MP+BjuU WbqlLVwOPmyVWCA33IEzSafF1wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEVJOi7X jhpqHuGCWHo1sG3W43GlMB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjNGODQvRjQzQTNGMDQ2RjJGMTFFREE4NEE2OTMzQzRGOUFFMDIvRDI5RjU0NENG Q0Q3MTFFRUI2NTRCMjcxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyzfXMA0GCSqGSIb3DQEBCwUAA4IBAQBKpck0pZlS+HLcLwLASx6L nHhcenKXx5xtOWeSHVTrXiFNzt8e1jcVEtjm7dxJz6n9GFD7qW2z3c6GK2u6ZOpm xpQn5MGtJK17wY0dHajpf9T2XKT0tqQvKM2hl90iKFJG2RkKiVp85xRfQSbexaBZ Ky3y08LJ2UklNnPjQ6YoJRqtnz6D6i365Ujcj2rEp5hweY1qlp4lrRi8UVw0eTip Nr0C934un0oPURiqiXehSmY0vMQ1cwelgNmhLo5Stdj3sjHJlD99NMhYWCB1/mia sx+riOy1FTrbEaaEunUsbbfdfNcEzdwFjaDzHV8yOyLdv4U44toao0O1esddrkZd -----END CERTIFICATE-----Generated at Fri Mar 27 03:26:15 2026 by rpki-client