$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/9B41336A9ABB11EC9D11861FC4F9AE02.roa File: 9B41336A9ABB11EC9D11861FC4F9AE02.roa (raw, json) Hash identifier: APtBc0Fg5uoB90s7FYUbm7HkOE2poEQup95WnZBKZc0= Subject key identifier: 3A:9A:BE:16:FA:CB:25:F0:AE:7A:47:D0:18:2C:A7:2C:95:30:A2:D1 Certificate issuer: /CN=A9131D5E/serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D Certificate serial: 0620 Authority key identifier: 41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/9B41336A9ABB11EC9D11861FC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:38:04 +0000 ROA not before: Tue 02 Dec 2025 22:25:37 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 4759 IP address blocks: 210.16.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1568 (0x620) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131D5E, serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D Validity Not Before: Dec 2 22:25:37 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4332c-7377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:71:a5:85:6e:71:1a:43:28:d3:e6:6f:f0: ef:49:b4:9a:fa:94:19:f4:85:b9:17:ee:5b:f7:ff: 4d:94:4e:78:fc:06:1d:45:21:20:a1:ad:e3:0b:fb: 70:aa:c5:41:a7:ab:b2:f7:c3:0c:ec:f3:f0:35:47: 03:61:6b:85:b2:b1:47:2d:9c:63:21:d0:8f:15:fc: 67:06:05:5a:8b:41:a0:a4:84:75:68:2b:55:2b:42: 2a:f6:4b:ef:97:39:31:c9:7b:a4:c7:37:f7:76:d6: 8d:fd:fd:92:41:d9:30:f4:d7:80:f0:f4:77:66:76: 83:b9:02:b9:e7:6f:cf:dd:e6:ff:0b:14:25:89:48: 28:e6:de:c2:50:a7:91:35:b6:f1:d5:97:16:a4:3a: c9:5f:60:5d:06:0b:eb:53:9e:ce:71:aa:dc:82:61: 4d:ce:33:5e:d2:66:a3:c7:bd:3a:7f:2b:c7:52:41: ff:18:83:19:02:66:a9:37:76:3e:94:56:75:e6:84: 73:09:b5:c3:4a:c4:ff:a9:d9:d9:8a:b1:94:72:c3: ff:b9:0f:54:35:2e:95:5d:60:8b:7f:50:4a:99:cb: 37:9c:f0:65:cd:32:ff:96:40:a6:65:c2:3d:57:c2: de:18:7b:ec:c6:c6:53:f3:03:10:00:d2:1c:57:bc: 7f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9A:BE:16:FA:CB:25:F0:AE:7A:47:D0:18:2C:A7:2C:95:30:A2:D1 X509v3 Authority Key Identifier: keyid:41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/9B41336A9ABB11EC9D11861FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 210.16.0.0/18 Signature Algorithm: sha256WithRSAEncryption 17:0e:4f:e3:28:e8:2e:1f:61:cf:dd:00:c3:c3:c7:cd:5e:15: 63:d2:07:82:e3:c3:2d:e2:b8:be:8b:6c:33:34:b1:c2:0c:b0: 3f:33:5f:cd:ae:95:2e:b4:88:18:85:ba:72:fc:51:e1:d6:3a: 56:cf:a5:e5:db:3c:15:a9:05:03:df:07:7a:ff:9f:38:ef:08: 11:49:48:4d:0d:c8:df:0f:c1:da:84:09:7e:e1:4c:58:2d:2b: 29:2d:c8:46:56:b1:56:17:47:e5:b6:da:ae:89:3c:8b:cd:00: 94:25:ec:52:30:bc:7c:a4:0e:1c:9e:03:20:b5:99:a1:25:82: 73:bf:0d:39:bf:45:c7:b3:07:07:9a:3b:1f:38:56:ef:91:fd: 38:1c:2d:bf:01:e5:2b:87:10:6b:6b:85:39:bf:d8:d4:7a:6b: a5:18:56:4c:57:11:34:df:4f:3d:1a:73:31:30:28:8f:ba:f5: cd:52:77:b7:42:e2:35:45:b2:65:3b:2f:44:f6:da:d6:d9:44: 8f:cc:7c:1b:94:94:7a:71:5a:93:ca:7f:2b:39:9a:b6:52:b9: c6:aa:67:99:5f:bc:da:f0:f6:1a:c7:69:e9:96:cb:45:92:6e: b7:e1:34:d2:f9:9e:d6:c3:b5:a3:37:31:b7:71:3e:f1:bd:66: cb:d6:bc:b8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFENUUxMTAvBgNVBAUTKDQxRTJFMzUyMDY0Q0EyRkY5RTIxQzQ4NDM1NUFDMDJF NDQwNzI1OEQwHhcNMjUxMjAyMjIyNTM3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzMyYy03Mzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsM1xpYVucRpDKNPmb/DvSbSa+pQZ9IW5F+5b9/9NlE54/AYdRSEgoa3jC/tw qsVBp6uy98MM7PPwNUcDYWuFsrFHLZxjIdCPFfxnBgVai0GgpIR1aCtVK0Iq9kvv lzkxyXukxzf3dtaN/f2SQdkw9NeA8PR3ZnaDuQK552/P3eb/CxQliUgo5t7CUKeR Nbbx1ZcWpDrJX2BdBgvrU57OcarcgmFNzjNe0majx706fyvHUkH/GIMZAmapN3Y+ lFZ15oRzCbXDSsT/qdnZirGUcsP/uQ9UNS6VXWCLf1BKmcs3nPBlzTL/lkCmZcI9 V8LeGHvsxsZT8wMQANIcV7x/owIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDqavhb6 yyXwrnpH0BgspyyVMKLRMB8GA1UdIwQYMBaAFEHi41IGTKL/niHEhDVawC5EByWN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUQ1RS81NkRENDhERUQ5 NDcxMUVCOUExQTBENzFDNEY5QUUwMi9RZUxqVWdaTW92LWVJY1NFTlZyQUxrUUhK WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlTGpVZ1pNb3YtZUljU0VOVnJBTGtRSEpZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzFENUUvNTZERDQ4REVEOTQ3MTFFQjlBMUEwRDcxQzRGOUFFMDIvOUI0MTMzNkE5 QUJCMTFFQzlEMTE4NjFGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQG0hAAMA0GCSqGSIb3DQEBCwUAA4IBAQAXDk/jKOguH2HP3QDDw8fN XhVj0geC48Mt4ri+i2wzNLHCDLA/M1/NrpUutIgYhbpy/FHh1jpWz6Xl2zwVqQUD 3wd6/5847wgRSUhNDcjfD8HahAl+4UxYLSspLchGVrFWF0flttquiTyLzQCUJexS MLx8pA4cngMgtZmhJYJzvw05v0XHswcHmjsfOFbvkf04HC2/AeUrhxBra4U5v9jU emulGFZMVxE03089GnMxMCiPuvXNUne3QuI1RbJlOy9E9trW2USPzHwblJR6cVqT yn8rOZq2UrnGqmeZX7za8PYax2nplstFkm634TTS+Z7Ww7WjNzG3cT7xvWbL1ry4 -----END CERTIFICATE-----Generated at Thu Mar 26 16:00:29 2026 by rpki-client