$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa File: 8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa (raw, json) Hash identifier: Ye+a8GT+XgDN4u+M9N9k3FjrUxRsvTyLwzxddvL9o4Y= Subject key identifier: CD:30:99:80:B9:D9:6D:CE:0E:08:2D:6E:39:C4:A0:E1:CA:2C:15:5B Certificate issuer: /CN=A912FBD2/serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE Certificate serial: 04A3 Authority key identifier: 55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa Signing time: Sat 07 Mar 2026 00:32:47 +0000 ROA not before: Sat 07 Mar 2026 00:32:47 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 137199 IP address blocks: 203.8.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1187 (0x4a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBD2, serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE Validity Not Before: Mar 7 00:32:47 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69ab722f-6482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:53:8e:93:ed:8b:f0:be:bc:0e:b7:8f:b0:48: 94:3d:2d:b7:07:49:4d:4a:a0:f5:67:65:f2:96:7d: e4:29:97:9c:55:0a:f4:43:86:9c:30:47:e4:28:3b: 35:e6:66:89:6e:7c:9a:31:35:aa:3b:39:20:b7:d1: 39:e0:6e:1b:a8:eb:c7:9b:42:d0:48:b9:54:50:d7: 30:a3:8b:03:4f:bd:a0:ce:f8:00:b9:32:42:9e:a0: c8:9f:e7:33:82:4f:24:97:5b:48:d4:ed:5d:8d:c7: ec:f7:f9:63:6e:43:2f:96:3a:ed:81:f3:7b:66:41: c3:d4:71:a0:c7:92:a5:91:fa:ae:ba:d4:fa:90:57: 50:59:c7:45:41:ff:6c:e0:3a:3b:db:d3:10:77:f2: f1:b5:91:84:42:e0:d0:d6:01:33:c5:05:49:ec:16: d9:1f:56:2e:d0:4a:a9:02:2d:00:f1:a0:29:82:4d: 91:e0:4b:0d:85:e0:4b:c8:21:fa:36:82:df:0c:71: ca:e6:3d:80:02:9c:2d:82:51:4d:ac:8e:27:aa:0b: 04:74:a1:a9:b0:67:67:78:11:c0:22:0f:34:44:64: 59:4e:17:87:1b:3b:33:8d:5c:dc:a1:a4:95:6a:27: f3:49:0c:05:14:de:57:38:08:ed:7e:a0:43:bf:c1: 63:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:30:99:80:B9:D9:6D:CE:0E:08:2D:6E:39:C4:A0:E1:CA:2C:15:5B X509v3 Authority Key Identifier: keyid:55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.8.160.0/24 Signature Algorithm: sha256WithRSAEncryption 33:fd:1b:a2:c7:cc:e3:6f:33:8f:3d:3c:87:72:48:68:77:f6: f5:34:8b:2e:e0:ff:d8:ce:44:b1:f3:d4:2a:64:e8:bd:87:61: bf:0f:3b:32:41:ae:00:54:2d:61:59:ea:5e:ef:9d:5d:c0:0a: bb:49:15:26:13:7e:bb:0b:a4:8a:78:4a:76:c3:bf:88:d7:fa: c5:f7:2c:7a:b4:ac:9f:0c:6a:9d:34:54:0b:1e:c2:b7:13:d1: b6:0b:2a:5f:62:90:64:e2:2a:8e:43:6f:7d:98:ec:9c:ed:8c: da:26:2a:55:3e:8c:b3:8f:17:eb:0e:fd:1b:a7:e7:a1:b2:ba: 22:5a:48:34:69:a0:33:e4:19:0c:9c:44:51:0b:7d:90:03:7b: 82:5f:a9:14:f9:36:05:33:5b:01:1f:75:af:82:f4:df:ac:8e: 14:71:d7:2d:fc:b7:26:1e:75:49:be:e9:9c:fc:8e:5c:eb:e9: 29:f5:0e:4b:2a:6d:db:40:e3:6d:c8:43:4b:80:87:bc:05:31: df:e9:1e:ae:56:38:93:26:46:1c:78:f6:d8:33:04:b1:18:85: 1f:e9:04:ca:cb:21:16:5d:61:89:0b:26:b2:fb:cb:22:46:da: d6:49:6d:ee:ee:bc:1e:43:78:0e:ce:2f:15:77:70:32:b4:0b: 43:3c:99:6b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCRDIxMTAvBgNVBAUTKDU1RTQ4NTE4OEM1QzlEMkUyNEM4MzQ1Qzk3QkMzNDYy NzIxQzk4Q0UwHhcNMjYwMzA3MDAzMjQ3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFiNzIyZi02NDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAglOOk+2L8L68DrePsEiUPS23B0lNSqD1Z2Xyln3kKZecVQr0Q4acMEfkKDs1 5maJbnyaMTWqOzkgt9E54G4bqOvHm0LQSLlUUNcwo4sDT72gzvgAuTJCnqDIn+cz gk8kl1tI1O1djcfs9/ljbkMvljrtgfN7ZkHD1HGgx5KlkfquutT6kFdQWcdFQf9s 4Do729MQd/LxtZGEQuDQ1gEzxQVJ7BbZH1Yu0EqpAi0A8aApgk2R4EsNheBLyCH6 NoLfDHHK5j2AApwtglFNrI4nqgsEdKGpsGdneBHAIg80RGRZTheHGzszjVzcoaSV aifzSQwFFN5XOAjtfqBDv8FjoQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFM0wmYC5 2W3ODggtbjnEoOHKLBVbMB8GA1UdIwQYMBaAFFXkhRiMXJ0uJMg0XJe8NGJyHJjO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJEMi82RDc0OTc4QzZG NTExMUVDOTY1MURBMDlDNEY5QUUwMi9WZVNGR0l4Y25TNGt5RFJjbDd3MFluSWNt TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZlU0ZHSXhjblM0a3lEUmNsN3cwWW5JY21NNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZCRDIvNkQ3NDk3OEM2RjUxMTFFQzk2NTFEQTA5QzRGOUFFMDIvOEE3RThENUM2 RjU1MTFFQ0I1RkFBMjBGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAywigMA0GCSqGSIb3DQEBCwUAA4IBAQAz/Ruix8zjbzOPPTyHckho d/b1NIsu4P/YzkSx89QqZOi9h2G/DzsyQa4AVC1hWepe751dwAq7SRUmE367C6SK eEp2w7+I1/rF9yx6tKyfDGqdNFQLHsK3E9G2CypfYpBk4iqOQ299mOyc7YzaJipV PoyzjxfrDv0bp+ehsroiWkg0aaAz5BkMnERRC32QA3uCX6kU+TYFM1sBH3WvgvTf rI4Ucdct/LcmHnVJvumc/I5c6+kp9Q5LKm3bQONtyENLgIe8BTHf6R6uVjiTJkYc ePbYMwSxGIUf6QTKyyEWXWGJCyay+8siRtrWSW3u7rweQ3gOzi8Vd3AytAtDPJlr -----END CERTIFICATE-----Generated at Thu Mar 26 04:04:34 2026 by rpki-client