$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/D323D61E26BE11F181670517C8833773.roa File: D323D61E26BE11F181670517C8833773.roa (raw, json) Hash identifier: Z89uvKw198kPM7vi56Rw9aZcvLn2lM3CIQLWAsDyCgw= Subject key identifier: A6:A5:63:BF:67:63:BC:3B:EE:B8:FB:78:27:F9:76:3D:FF:8D:B7:E6 Certificate issuer: /CN=A9132C07/serialNumber=A8FE9BEFFC6541E6B632C421D78A7DCC08B0AC8C Certificate serial: 67 Authority key identifier: A8:FE:9B:EF:FC:65:41:E6:B6:32:C4:21:D7:8A:7D:CC:08:B0:AC:8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qP6b7_xlQea2MsQh14p9zAiwrIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/D323D61E26BE11F181670517C8833773.roa Signing time: Mon 23 Mar 2026 13:48:07 +0000 ROA not before: Mon 23 Mar 2026 13:48:07 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 154182 IP address blocks: 202.6.204.0/23 maxlen: 23 202.6.204.0/24 maxlen: 24 202.6.205.0/24 maxlen: 24 2001:df6:11c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.crl rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qP6b7_xlQea2MsQh14p9zAiwrIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C07, serialNumber=A8FE9BEFFC6541E6B632C421D78A7DCC08B0AC8C Validity Not Before: Mar 23 13:48:07 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69c14497-0b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:35:a0:9d:6c:67:44:d2:08:98:8b:80:77:76: c6:a8:20:6f:93:70:d3:53:96:dd:68:d3:cc:20:12: e6:8b:6c:a2:72:bc:ba:3f:94:a7:e2:bf:d7:94:cd: 99:4a:af:83:de:14:cf:4e:f6:64:94:c1:8a:9b:9f: b0:c0:3e:77:30:a2:25:69:fe:6f:b9:12:02:3b:58: e7:e9:47:d0:8b:cc:a7:a3:b3:23:be:c8:97:65:ec: 90:d0:6e:b0:1c:83:52:f0:d6:e7:03:a2:ca:ca:b8: 8b:d6:ba:07:71:f8:1d:a8:11:35:3b:1f:3f:40:44: 0a:c5:31:f1:94:f3:1b:8d:22:72:d5:be:69:a7:79: ad:0c:f5:5b:b1:cd:70:d7:52:5b:d9:aa:28:cd:7f: 1f:f3:84:17:45:ef:29:13:96:a0:c3:2d:e0:65:16: 0a:07:6d:38:d7:64:cf:2b:df:64:02:18:ae:d4:0e: 55:f6:a7:76:9d:d5:1c:f7:d1:a4:e5:31:56:23:d6: 15:f0:3f:ce:04:67:ef:70:de:ed:87:bb:bd:7e:4f: fb:06:1f:8c:bb:64:58:f7:6e:e9:aa:d1:fa:ae:13: c7:76:3a:18:cd:f6:06:4a:c6:b8:cf:a9:cc:92:cc: 30:50:ff:5a:08:8f:24:71:1a:36:a2:54:57:a1:67: 36:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A5:63:BF:67:63:BC:3B:EE:B8:FB:78:27:F9:76:3D:FF:8D:B7:E6 X509v3 Authority Key Identifier: keyid:A8:FE:9B:EF:FC:65:41:E6:B6:32:C4:21:D7:8A:7D:CC:08:B0:AC:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qP6b7_xlQea2MsQh14p9zAiwrIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/D323D61E26BE11F181670517C8833773.roa sbgp-ipAddrBlock: critical IPv4: 202.6.204.0/23 IPv6: 2001:df6:11c0::/48 Signature Algorithm: sha256WithRSAEncryption b0:dc:15:87:14:7c:97:5d:d5:80:93:f2:3c:bf:be:71:e5:a4: 56:63:97:d9:0c:00:38:8a:4e:8f:2a:cc:21:f0:35:52:9d:5c: 6a:a6:d1:48:ff:ba:95:b8:22:fa:83:7e:d3:ba:5f:e2:c6:77: bd:33:1d:27:16:39:1d:34:74:f8:6f:27:30:15:98:c3:09:23: 5f:99:c2:50:e2:b4:af:8b:98:24:1b:a6:2a:01:40:d1:80:46: ce:e7:ec:8f:eb:30:b8:3b:98:1b:9b:53:b5:89:57:4a:43:4e: 54:0b:76:66:a7:c2:61:b3:2f:1f:e2:e5:28:e3:87:e3:f7:44: f9:aa:83:58:e4:1e:10:2d:6c:4f:11:b7:71:df:77:2f:2b:92: 28:36:ea:6b:e7:ac:e5:50:cf:46:38:77:c8:3e:13:a4:09:c8: 81:ee:54:0e:6e:e7:b5:16:8a:65:e7:76:45:24:3c:e6:41:ac: 28:2e:b3:05:75:8b:4d:9a:ee:df:bd:4a:31:36:56:95:c4:3d: 58:d4:ac:47:c1:22:65:97:71:cd:7e:0b:dd:9f:ff:e9:1f:80: e1:ca:a9:95:2e:36:46:2d:9d:54:04:bb:ea:8f:6c:13:82:40: 4c:ea:80:0d:3c:15:13:82:a8:3b:7a:ba:0e:00:00:32:75:0d: 16:35:70:14 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MkMwNzExMC8GA1UEBRMoQThGRTlCRUZGQzY1NDFFNkI2MzJDNDIxRDc4QTdEQ0Mw OEIwQUM4QzAeFw0yNjAzMjMxMzQ4MDdaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YzE0NDk3LTBiNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzNaCdbGdE0giYi4B3dsaoIG+TcNNTlt1o08wgEuaLbKJyvLo/lKfiv9eUzZlK r4PeFM9O9mSUwYqbn7DAPncwoiVp/m+5EgI7WOfpR9CLzKejsyO+yJdl7JDQbrAc g1Lw1ucDosrKuIvWugdx+B2oETU7Hz9ARArFMfGU8xuNInLVvmmnea0M9VuxzXDX UlvZqijNfx/zhBdF7ykTlqDDLeBlFgoHbTjXZM8r32QCGK7UDlX2p3ad1Rz30aTl MVYj1hXwP84EZ+9w3u2Hu71+T/sGH4y7ZFj3bumq0fquE8d2OhjN9gZKxrjPqcyS zDBQ/1oIjyRxGjaiVFehZzbfAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUpqVjv2dj vDvuuPt4J/l2Pf+Nt+YwHwYDVR0jBBgwFoAUqP6b7/xlQea2MsQh14p9zAiwrIww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyQzA3LzRDQTAyOTc2OTA5 QjExRjBBOTNCOTEzN0M0RjlBRTAyL3FQNmI3X3hsUWVhMk1zUWgxNHA5ekFpd3JJ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcVA2YjdfeGxRZWEyTXNRaDE0cDl6QWl3ckl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkMwNy80Q0EwMjk3NjkwOUIxMUYwQTkzQjkxMzdDNEY5QUUwMi9EMzIzRDYxRTI2 QkUxMUYxODE2NzA1MTdDODgzMzc3My5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE AgABMAYDBAHKBswwDwQCAAIwCQMHACABDfYRwDANBgkqhkiG9w0BAQsFAAOCAQEA sNwVhxR8l13VgJPyPL++ceWkVmOX2QwAOIpOjyrMIfA1Up1caqbRSP+6lbgi+oN+ 07pf4sZ3vTMdJxY5HTR0+G8nMBWYwwkjX5nCUOK0r4uYJBumKgFA0YBGzufsj+sw uDuYG5tTtYlXSkNOVAt2ZqfCYbMvH+LlKOOH4/dE+aqDWOQeEC1sTxG3cd93LyuS KDbqa+es5VDPRjh3yD4TpAnIge5UDm7ntRaKZed2RSQ85kGsKC6zBXWLTZru371K MTZWlcQ9WNSsR8EiZZdxzX4L3Z//6R+A4cqplS42Ri2dVAS76o9sE4JATOqADTwV E4KoO3q6DgAAMnUNFjVwFA== -----END CERTIFICATE-----Generated at Thu Mar 26 20:53:16 2026 by rpki-client