$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/38502DA2029A11EB85BD7B84C4F9AE02.roa File: 38502DA2029A11EB85BD7B84C4F9AE02.roa (raw, json) Hash identifier: D4F7K7fRZi5PjyaGIyrg24WiDsmuKP9iZtha8FbAcn4= Subject key identifier: FE:C8:48:A2:9C:1F:C3:BA:27:41:16:9B:8A:48:3F:D6:16:9B:BB:81 Certificate issuer: /CN=A912DFBA/serialNumber=AE4E30CC0D0501A5AE664ADB159053ACECF0ACFD Certificate serial: 0844 Authority key identifier: AE:4E:30:CC:0D:05:01:A5:AE:66:4A:DB:15:90:53:AC:EC:F0:AC:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rk4wzA0FAaWuZkrbFZBTrOzwrP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/38502DA2029A11EB85BD7B84C4F9AE02.roa Signing time: Mon 02 Mar 2026 15:10:25 +0000 ROA not before: Wed 16 Apr 2025 21:01:30 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 56098 IP address blocks: 202.127.210.0/24 maxlen: 24 202.127.211.0/24 maxlen: 24 2001:df0:fe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/rk4wzA0FAaWuZkrbFZBTrOzwrP0.crl rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/rk4wzA0FAaWuZkrbFZBTrOzwrP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rk4wzA0FAaWuZkrbFZBTrOzwrP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:35:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2116 (0x844) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DFBA, serialNumber=AE4E30CC0D0501A5AE664ADB159053ACECF0ACFD Validity Not Before: Apr 16 21:01:30 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a5a861-40fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:95:06:20:83:83:01:50:b5:53:8c:ea:a7:53: d7:e4:ce:60:54:7c:76:79:6e:30:5b:22:7f:7e:b1: 7e:d8:34:40:e0:42:ae:19:09:33:d6:93:67:3c:41: e5:81:2f:f6:b1:25:b6:45:f9:36:8e:73:01:97:82: 1c:a3:ee:f1:27:d3:23:ad:46:8a:84:93:92:66:3c: b4:94:c0:15:25:35:9e:8b:b8:eb:6a:d9:58:d3:8b: d6:76:cd:bb:9d:57:fd:16:94:28:fc:0d:a0:12:ce: 80:ec:66:e6:6b:38:70:b5:d7:20:95:00:0c:64:72: 41:41:5e:36:a2:0a:42:4a:d1:9e:1d:58:46:1f:75: a5:d1:3c:de:d1:13:9c:5c:c3:99:85:64:66:97:04: d5:bc:d6:75:57:dc:4a:53:c0:3d:8d:ab:45:c4:8e: 98:d7:5a:a8:44:eb:ca:ed:84:b9:16:f5:01:2c:92: 5c:69:52:12:57:0e:56:41:3b:e3:4d:c3:d6:dc:ac: 92:41:74:41:dc:48:48:c9:65:e9:e8:30:98:5c:03: 11:7f:7c:29:57:7f:85:d0:0a:29:8a:62:e3:8d:e1: db:e9:d9:a0:9b:de:47:f7:88:ae:c9:84:76:0e:36: 5c:d9:26:d4:2a:4c:0e:91:0e:89:a6:fa:6d:1b:24: f4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C8:48:A2:9C:1F:C3:BA:27:41:16:9B:8A:48:3F:D6:16:9B:BB:81 X509v3 Authority Key Identifier: keyid:AE:4E:30:CC:0D:05:01:A5:AE:66:4A:DB:15:90:53:AC:EC:F0:AC:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/rk4wzA0FAaWuZkrbFZBTrOzwrP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rk4wzA0FAaWuZkrbFZBTrOzwrP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/38502DA2029A11EB85BD7B84C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.127.210.0/23 IPv6: 2001:df0:fe::/48 Signature Algorithm: sha256WithRSAEncryption ca:42:d2:4f:5a:b8:7b:60:b2:b7:32:e9:4d:08:e2:88:cc:81: 05:d9:76:95:b0:ba:32:39:c5:b1:57:85:e9:9d:e6:b4:58:3a: 9b:3f:0e:7a:74:3d:94:6d:9b:91:4d:7c:2c:42:60:b0:c0:ab: e5:fa:12:65:63:64:39:66:de:16:f1:93:0a:ff:97:51:f7:8c: ce:f6:4e:dd:cb:f3:1d:5c:18:51:03:25:fe:52:ae:1b:7d:57: 09:de:df:6a:3b:b5:fb:e2:21:03:80:2b:31:92:a6:e2:52:47: 2f:0f:61:02:62:57:5a:fc:cb:46:58:20:e9:17:a2:3f:29:35: d5:4c:ec:b3:cb:96:ff:75:9e:ed:51:21:f0:34:ad:94:db:31: c6:9f:21:8a:19:c1:16:0e:9c:4c:72:2e:fc:e4:7e:99:e1:9f: c3:25:07:f0:dc:a8:53:9f:f8:58:8a:e3:0d:03:60:3d:93:2b: a6:aa:58:4e:c5:ea:70:cd:f4:d9:82:57:cd:62:90:0e:3f:02: 63:00:3e:ed:07:ef:02:9e:ad:8b:97:d3:36:93:90:59:36:d4: d9:16:ef:a2:17:1a:a3:2f:45:20:f6:b9:65:2e:ad:bb:bf:fc: 68:19:da:d6:07:a7:8a:9a:2a:2d:34:7b:dd:48:51:bb:2e:8e: c8:08:d9:b8 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGQkExMTAvBgNVBAUTKEFFNEUzMENDMEQwNTAxQTVBRTY2NEFEQjE1OTA1M0FD RUNGMEFDRkQwHhcNMjUwNDE2MjEwMTMwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTg2MS00MGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJUGIIODAVC1U4zqp1PX5M5gVHx2eW4wWyJ/frF+2DRA4EKuGQkz1pNnPEHl gS/2sSW2Rfk2jnMBl4Ico+7xJ9MjrUaKhJOSZjy0lMAVJTWei7jratlY04vWds27 nVf9FpQo/A2gEs6A7GbmazhwtdcglQAMZHJBQV42ogpCStGeHVhGH3Wl0Tze0ROc XMOZhWRmlwTVvNZ1V9xKU8A9jatFxI6Y11qoROvK7YS5FvUBLJJcaVISVw5WQTvj TcPW3KySQXRB3EhIyWXp6DCYXAMRf3wpV3+F0AopimLjjeHb6dmgm95H94iuyYR2 DjZc2SbUKkwOkQ6JpvptGyT05QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFP7ISKKc H8O6J0EWm4pIP9YWm7uBMB8GA1UdIwQYMBaAFK5OMMwNBQGlrmZK2xWQU6zs8Kz9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREZCQS9EQjlDRTY3ODAy OTgxMUVCOTgyM0FFODJDNEY5QUUwMi9yazR3ekEwRkFhV3Vaa3JiRlpCVHJPendy UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JrNHd6QTBGQWFXdVprcmJGWkJUck96d3JQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkRGQkEvREI5Q0U2NzgwMjk4MTFFQjk4MjNBRTgyQzRGOUFFMDIvMzg1MDJEQTIw MjlBMTFFQjg1QkQ3Qjg0QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQByn/SMA8EAgACMAkDBwAgAQ3wAP4wDQYJKoZIhvcNAQELBQADggEB AMpC0k9auHtgsrcy6U0I4ojMgQXZdpWwujI5xbFXhemd5rRYOps/Dnp0PZRtm5FN fCxCYLDAq+X6EmVjZDlm3hbxkwr/l1H3jM72Tt3L8x1cGFEDJf5Srht9Vwne32o7 tfviIQOAKzGSpuJSRy8PYQJiV1r8y0ZYIOkXoj8pNdVM7LPLlv91nu1RIfA0rZTb McafIYoZwRYOnExyLvzkfpnhn8MlB/DcqFOf+FiK4w0DYD2TK6aqWE7F6nDN9NmC V81ikA4/AmMAPu0H7wKerYuX0zaTkFk21NkW76IXGqMvRSD2uWUurbu//GgZ2tYH p4qaKi00e91IUbsujsgI2bg= -----END CERTIFICATE-----Generated at Thu Mar 26 11:56:12 2026 by rpki-client