$ rpki-client -vvf rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/2E1E405E712D11EDA8C64C3DC4F9AE02.roa File: 2E1E405E712D11EDA8C64C3DC4F9AE02.roa (raw, json) Hash identifier: WT/ztJBPCnRbXAsKTFdhvipVvTOzMSRJMa+AX6jQ8aU= Subject key identifier: 0F:83:CA:79:B2:32:19:5F:39:8C:03:ED:06:C8:44:0C:29:93:9D:7F Certificate issuer: /CN=A912AED4/serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C Certificate serial: 18D9 Authority key identifier: 66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/2E1E405E712D11EDA8C64C3DC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:55:41 +0000 ROA not before: Thu 05 Feb 2026 22:47:03 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45873 IP address blocks: 180.94.236.0/23 maxlen: 24 2401:e880::/32 maxlen: 32 2401:e880:4::/48 maxlen: 48 2401:e880:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 16:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6361 (0x18d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AED4, serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C Validity Not Before: Feb 5 22:47:03 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a4617d-9d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b9:77:e5:10:59:be:28:58:dc:b8:77:8d:e9: e7:9a:30:80:b4:da:dd:6b:c4:9d:3e:24:88:59:44: 45:e7:c4:58:d8:79:cd:77:c3:62:40:eb:cd:9f:d6: 11:3a:f0:13:fb:5b:c8:1f:56:f4:b8:3a:ac:ed:55: 73:51:c6:22:0b:fc:12:16:50:7a:e9:58:c8:06:ac: c9:6c:4d:38:68:67:c9:c4:8b:69:34:cc:a8:53:6d: 21:ea:f9:34:f8:29:64:df:d8:1c:6d:f6:e8:3b:56: db:e1:70:d0:ae:3a:da:7a:d4:64:ec:b0:c6:6b:c0: 75:e2:ec:fc:8d:fd:4f:6b:9d:b7:20:22:47:9a:49: d5:02:95:e5:0a:ee:eb:0c:b9:b2:25:af:e1:bf:43: f9:89:95:67:bd:66:a7:b8:e7:b4:6c:7f:57:cb:60: bc:f1:29:26:03:24:c1:b3:c8:24:56:42:fd:ae:ad: f8:10:d3:99:a9:5c:26:55:72:1c:89:b5:ff:3d:90: d2:d5:3c:02:80:ca:90:ad:0c:0e:96:17:3d:7f:9d: be:03:3d:f3:a5:35:5c:46:43:60:58:ca:e6:f0:e7: 41:49:e3:27:a7:01:d4:78:76:5b:90:71:c2:47:c9: 2b:89:5f:84:db:89:69:53:3e:08:f3:e1:a1:f3:aa: a7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:83:CA:79:B2:32:19:5F:39:8C:03:ED:06:C8:44:0C:29:93:9D:7F X509v3 Authority Key Identifier: keyid:66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/2E1E405E712D11EDA8C64C3DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 180.94.236.0/23 IPv6: 2401:e880::/32 Signature Algorithm: sha256WithRSAEncryption 7f:f4:22:d0:af:93:14:d4:69:1a:58:c0:1c:44:df:6a:62:a3: 5f:df:c3:68:8c:46:02:72:4e:32:23:7b:54:13:41:d9:9a:78: ff:46:02:20:3b:3e:3d:df:eb:00:78:bd:91:ac:f0:19:d8:b1: f8:2b:64:13:cc:ad:48:8a:fa:91:e1:75:7f:f9:48:3c:83:13: 6a:2a:8e:c9:b6:14:00:15:b9:32:2a:76:b8:3f:93:1c:29:33: ac:da:c7:ad:41:43:b4:1a:4e:8e:0c:57:34:c5:fb:a9:53:67: f8:2c:00:57:5c:68:64:04:fb:cc:75:05:f9:c6:9f:9e:31:bd: 34:7b:a4:20:53:fa:3c:5a:b2:b1:50:c5:ae:d2:5c:2c:09:25: 8e:bb:73:3e:1b:0f:9f:39:9d:12:0b:51:37:66:68:7f:94:8f: 6b:ac:79:02:af:ab:20:d9:98:1f:19:58:ec:cb:c7:f1:a5:af: c3:0f:fc:b8:2f:85:23:3a:11:99:b0:d2:2b:32:09:23:01:4d: ff:5d:b3:80:1f:b6:ce:94:0f:7a:b7:67:f9:21:b4:6d:92:cf: ba:d9:74:97:5f:d5:a1:ac:f7:6e:df:4d:a8:46:32:aa:2b:30: e6:1d:67:18:96:1a:18:91:00:a0:fa:e5:9a:97:da:ed:4b:25: 70:30:c0:f8 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICGNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFFRDQxMTAvBgNVBAUTKDY2RjBDMURCQ0RGMUFCQzM0RUQxMUI0NkE5MEFFMzIw MTgwMkE5NUMwHhcNMjYwMjA1MjI0NzAzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjE3ZC05ZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk7l35RBZvihY3Lh3jennmjCAtNrda8SdPiSIWURF58RY2HnNd8NiQOvNn9YR OvAT+1vIH1b0uDqs7VVzUcYiC/wSFlB66VjIBqzJbE04aGfJxItpNMyoU20h6vk0 +Clk39gcbfboO1bb4XDQrjraetRk7LDGa8B14uz8jf1Pa523ICJHmknVApXlCu7r DLmyJa/hv0P5iZVnvWanuOe0bH9Xy2C88SkmAyTBs8gkVkL9rq34ENOZqVwmVXIc ibX/PZDS1TwCgMqQrQwOlhc9f52+Az3zpTVcRkNgWMrm8OdBSeMnpwHUeHZbkHHC R8kriV+E24lpUz4I8+Gh86qnewIDAQABo4ICbzCCAmswHQYDVR0OBBYEFA+Dynmy MhlfOYwD7QbIRAwpk51/MB8GA1UdIwQYMBaAFGbwwdvN8avDTtEbRqkK4yAYAqlc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUVENC9CRUM5QUM4MkIw QkQxMUU3OTJBMkJGMzBDNEY5QUUwMi9adkRCMjgzeHE4Tk8wUnRHcVFyaklCZ0Nx VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2REIyODN4cThOTzBSdEdxUXJqSUJnQ3FWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkFFRDQvQkVDOUFDODJCMEJEMTFFNzkyQTJCRjMwQzRGOUFFMDIvMkUxRTQwNUU3 MTJEMTFFREE4QzY0QzNEQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBtF7sMA0EAgACMAcDBQAkAeiAMA0GCSqGSIb3DQEBCwUAA4IBAQB/ 9CLQr5MU1GkaWMAcRN9qYqNf38NojEYCck4yI3tUE0HZmnj/RgIgOz493+sAeL2R rPAZ2LH4K2QTzK1IivqR4XV/+Ug8gxNqKo7JthQAFbkyKna4P5McKTOs2setQUO0 Gk6ODFc0xfupU2f4LABXXGhkBPvMdQX5xp+eMb00e6QgU/o8WrKxUMWu0lwsCSWO u3M+Gw+fOZ0SC1E3Zmh/lI9rrHkCr6sg2ZgfGVjsy8fxpa/DD/y4L4UjOhGZsNIr MgkjAU3/XbOAH7bOlA96t2f5IbRtks+62XSXX9WhrPdu302oRjKqKzDmHWcYlhoY kQCg+uWal9rtSyVwMMD4 -----END CERTIFICATE-----Generated at Fri Mar 27 07:09:14 2026 by rpki-client