$ rpki-client -vvf rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/047C04705AC911EF9DF4275AC4F9AE02.roa File: 047C04705AC911EF9DF4275AC4F9AE02.roa (raw, json) Hash identifier: rX5GXOpzN7zlqlxxBRKlBapjNOnn5ERzfr6wi0h0HHo= Subject key identifier: 0A:ED:08:91:4B:26:39:D1:C3:59:A0:75:C8:9F:CE:3C:A8:E6:D6:C9 Certificate issuer: /CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1 Certificate serial: 0136 Authority key identifier: 96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/047C04705AC911EF9DF4275AC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:07:43 +0000 ROA not before: Fri 03 Oct 2025 06:02:48 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 14618 IP address blocks: 202.160.113.0/24 maxlen: 24 202.160.115.0/24 maxlen: 24 202.160.117.0/24 maxlen: 24 202.160.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DF25, serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1 Validity Not Before: Oct 3 06:02:48 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a58b9f-01b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:59:11:1c:d1:a9:a8:8a:5c:d4:f3:a9:bf: ed:ec:24:0f:bc:89:ee:68:a1:ff:69:aa:3b:92:e5: 22:bf:96:08:15:83:d4:ac:5c:5d:46:a0:41:80:e1: fc:0d:dc:21:14:35:50:80:cf:d1:d0:3d:41:02:f7: 7b:7e:1d:9c:a7:d9:e3:ab:86:7f:2b:15:32:6f:e7: 8f:ce:09:72:f1:8e:d7:8a:71:ec:ac:f3:4a:e9:97: 2c:ef:46:01:f4:8a:9d:b7:6e:75:28:c0:3b:74:52: c0:38:8e:bb:c1:e3:50:bb:6a:5c:9c:ce:91:df:8c: 90:ea:95:77:f1:05:a7:f3:bc:3d:d6:5f:41:09:2d: ef:92:f9:de:b3:f0:fd:4b:87:2d:4d:91:03:4f:9e: a2:8d:c5:3e:37:ea:75:fb:4b:81:02:fd:75:ae:8c: 37:04:3f:23:8b:ef:de:7f:37:8c:14:f8:39:52:e4: 1a:4e:db:97:f5:16:01:33:ad:5d:6b:21:f7:26:f0: a8:0f:5b:1d:d5:ce:a5:f6:eb:d4:62:d2:70:c6:43: 6d:45:f2:83:f9:f1:82:ca:1a:8f:aa:6d:39:3f:66: 39:2d:13:de:33:a1:48:15:bc:e9:43:af:a7:cb:bb: 1d:1d:72:ea:06:bc:3a:6e:64:51:e5:cc:9d:90:8f: f9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:ED:08:91:4B:26:39:D1:C3:59:A0:75:C8:9F:CE:3C:A8:E6:D6:C9 X509v3 Authority Key Identifier: keyid:96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/047C04705AC911EF9DF4275AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.160.113.0/24 202.160.115.0/24 202.160.117.0/24 202.160.119.0/24 Signature Algorithm: sha256WithRSAEncryption 65:5d:86:f6:7d:d0:b9:7d:e0:ca:6f:3e:2b:fa:bd:3c:5e:56: 36:b7:36:63:7f:89:89:a6:22:be:2d:d8:f7:5a:27:3f:64:90: 12:8d:ae:63:7e:17:16:74:d4:22:18:d6:f3:0b:17:90:ec:0c: 42:f6:01:2e:2a:18:72:b4:3f:81:23:14:d1:1b:a0:09:f6:22: a1:36:99:c9:47:5e:62:81:04:81:1e:c7:9a:21:fd:0f:66:5a: 24:28:e9:72:8e:1e:69:16:f2:1e:9c:eb:6b:f0:9f:4d:d3:14: 66:68:33:7b:ea:bb:33:40:a9:a8:f0:34:41:65:80:3a:45:03: 80:78:a1:e8:81:b0:21:c1:2a:1c:8e:dc:e0:76:be:68:87:e2: d2:79:e1:7a:33:26:ed:b0:26:34:43:03:bc:07:6b:64:7c:98: 34:4e:bb:53:17:b8:6f:b1:68:92:df:e4:20:6b:d8:c0:d0:26: 95:e3:f6:28:aa:06:22:c2:67:44:82:28:2b:b2:78:4a:5d:2f: d7:e3:13:02:fe:74:8b:f1:8e:50:11:3a:16:6c:44:01:7b:7a: 60:b2:01:81:ed:9a:56:7f:01:a3:36:87:b8:32:5b:5b:c5:00: 0c:9b:2d:a8:92:62:fe:f7:3f:f8:0b:49:1e:86:4b:a9:9d:54: 8b:9e:8c:f0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGMjUxMTAvBgNVBAUTKDk2ODM1NDUwRDMyMUMxRTdDNDhDQTBDNURDRDJCQTZD MUQyRDQ4RjEwHhcNMjUxMDAzMDYwMjQ4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGI5Zi0wMWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAundZERzRqaiKXNTzqb/t7CQPvInuaKH/aao7kuUiv5YIFYPUrFxdRqBBgOH8 DdwhFDVQgM/R0D1BAvd7fh2cp9njq4Z/KxUyb+ePzgly8Y7XinHsrPNK6Zcs70YB 9Iqdt251KMA7dFLAOI67weNQu2pcnM6R34yQ6pV38QWn87w91l9BCS3vkvnes/D9 S4ctTZEDT56ijcU+N+p1+0uBAv11row3BD8ji+/efzeMFPg5UuQaTtuX9RYBM61d ayH3JvCoD1sd1c6l9uvUYtJwxkNtRfKD+fGCyhqPqm05P2Y5LRPeM6FIFbzpQ6+n y7sdHXLqBrw6bmRR5cydkI/5YQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFArtCJFL JjnRw1mgdcifzjyo5tbJMB8GA1UdIwQYMBaAFJaDVFDTIcHnxIygxdzSumwdLUjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREYyNS83RjdCMURBQzVB QzcxMUVGOTlFQUZDNDNDNEY5QUUwMi9sb05VVU5NaHdlZkVqS0RGM05LNmJCMHRT UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvTlVVTk1od2VmRWpLREYzTks2YkIwdFNQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkRGMjUvN0Y3QjFEQUM1QUM3MTFFRjk5RUFGQzQzQzRGOUFFMDIvMDQ3QzA0NzA1 QUM5MTFFRjlERjQyNzVBQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAyqBxAwQAyqBzAwQAyqB1AwQAyqB3MA0GCSqGSIb3DQEBCwUAA4IB AQBlXYb2fdC5feDKbz4r+r08XlY2tzZjf4mJpiK+Ldj3Wic/ZJASja5jfhcWdNQi GNbzCxeQ7AxC9gEuKhhytD+BIxTRG6AJ9iKhNpnJR15igQSBHseaIf0PZlokKOly jh5pFvIenOtr8J9N0xRmaDN76rszQKmo8DRBZYA6RQOAeKHogbAhwSocjtzgdr5o h+LSeeF6MybtsCY0QwO8B2tkfJg0TrtTF7hvsWiS3+Qga9jA0CaV4/YoqgYiwmdE gigrsnhKXS/X4xMC/nSL8Y5QEToWbEQBe3pgsgGB7ZpWfwGjNoe4MltbxQAMmy2o kmL+9z/4C0kehkupnVSLnozw -----END CERTIFICATE-----Generated at Thu Mar 26 01:51:29 2026 by rpki-client