$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/D45F1712A8B311EFADA46649C4F9AE02.roa File: D45F1712A8B311EFADA46649C4F9AE02.roa (raw, json) Hash identifier: L+a99ChcdYXTUdlI8SMcM9q/gOf4xiAhNQHMn9pOfHo= Subject key identifier: 1A:2C:65:A1:E8:1D:42:BF:40:91:C6:80:22:70:BE:86:81:C2:98:B0 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0D21 Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/D45F1712A8B311EFADA46649C4F9AE02.roa Signing time: Fri 20 Mar 2026 19:24:00 +0000 ROA not before: Fri 20 Mar 2026 19:24:00 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 49532 IP address blocks: 101.99.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3361 (0xd21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Mar 20 19:24:00 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69bd9ed0-666b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:50:f9:3a:8c:6b:40:75:6c:14:5f:36:49:94: 7f:bd:8f:4a:ea:a3:6f:96:c2:b9:dc:c8:0c:1a:c9: 4b:00:b2:1d:83:53:6c:3a:ef:bf:de:b6:fe:87:31: 07:16:a5:72:0c:c2:2a:a5:c7:c1:b4:11:50:de:88: 1b:3b:e9:43:30:a2:6d:83:a2:a0:d5:54:c6:82:b4: a8:a1:3f:e4:49:7a:1e:3f:18:35:2c:2d:bd:c3:d5: a1:de:a2:f0:b7:d7:fa:e4:d1:f8:41:6e:0c:3b:4d: 23:c0:3b:d7:51:c9:ca:ba:d2:29:1a:b8:3a:8e:34: 0a:bc:1a:37:9a:4f:85:4d:e3:d1:f1:19:40:df:46: b1:93:b7:33:bb:21:1c:85:d5:8c:fb:be:44:05:66: 80:4e:4b:7c:d2:1b:3d:40:26:3b:2d:b4:bd:fb:23: 40:9d:9c:3c:84:b4:71:5e:a0:8d:b0:41:17:df:c8: 36:db:92:f3:ab:c9:45:86:e9:54:a4:70:f3:2b:8a: 89:e2:42:8d:c7:6a:f7:ce:09:84:a3:a3:b8:f4:ee: 6c:ec:77:e7:34:95:89:1b:f3:d7:8b:be:45:f4:a0: be:cd:09:d4:fb:5c:37:9d:af:47:0d:90:21:d3:7b: cd:e8:d7:6b:f0:59:96:7d:6b:fd:f6:b7:32:77:25: 52:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2C:65:A1:E8:1D:42:BF:40:91:C6:80:22:70:BE:86:81:C2:98:B0 X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/D45F1712A8B311EFADA46649C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 101.99.92.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:ca:ac:f8:f1:d3:f4:76:5f:c7:4f:fb:24:60:01:7d:0a:c2: ba:84:1c:2a:54:ff:05:6d:98:24:bf:16:9c:45:4e:d2:eb:e5: 68:0e:97:38:e5:86:ae:26:14:89:76:04:09:50:99:0a:60:71: e7:2b:54:c7:2e:9c:47:7e:b1:9d:6f:55:e2:8a:1b:e3:a5:eb: 81:b1:1e:0c:cd:99:d8:85:d7:03:10:61:02:b1:15:61:3e:1d: 50:68:d3:ef:cc:88:14:d7:0b:9e:96:53:5d:43:db:48:aa:9e: c1:bf:cd:54:a6:51:ac:1d:01:eb:4f:68:74:ab:bd:2a:fd:2a: 48:8b:ba:11:1e:43:a8:22:dd:dd:cf:86:2b:e2:3c:51:26:00: f3:19:6e:da:f0:df:d5:f4:94:4b:be:d3:16:10:13:5a:e5:cc: bd:b1:9d:35:37:da:d8:62:19:89:b7:a0:6b:4f:e1:52:87:94: 83:63:12:11:2f:eb:fc:d5:73:39:ba:45:83:4f:e9:9f:e1:04: 12:79:6d:7c:2b:73:26:42:9b:5b:14:f1:76:6e:28:4b:3e:66: 1b:95:e9:94:25:13:7e:e5:f3:bb:6a:8d:8b:35:8b:25:21:8a: 7a:21:25:a5:fb:6e:f5:df:33:97:9a:fc:73:47:4b:e8:f9:0c: 1f:cb:15:20 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjYwMzIwMTkyNDAwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWJkOWVkMC02NjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlD5OoxrQHVsFF82SZR/vY9K6qNvlsK53MgMGslLALIdg1NsOu+/3rb+hzEH FqVyDMIqpcfBtBFQ3ogbO+lDMKJtg6Kg1VTGgrSooT/kSXoePxg1LC29w9Wh3qLw t9f65NH4QW4MO00jwDvXUcnKutIpGrg6jjQKvBo3mk+FTePR8RlA30axk7czuyEc hdWM+75EBWaATkt80hs9QCY7LbS9+yNAnZw8hLRxXqCNsEEX38g225Lzq8lFhulU pHDzK4qJ4kKNx2r3zgmEo6O49O5s7HfnNJWJG/PXi75F9KC+zQnU+1w3na9HDZAh 03vN6Ndr8FmWfWv99rcydyVSTQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBosZaHo HUK/QJHGgCJwvoaBwpiwMB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTJEMDgvRjlDMzMzOTIxRDg3MTFFQUE5QzVCMTcwQzRGOUFFMDIvRDQ1RjE3MTJB OEIzMTFFRkFEQTQ2NjQ5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZWNcMA0GCSqGSIb3DQEBCwUAA4IBAQBLyqz48dP0dl/HT/skYAF9 CsK6hBwqVP8FbZgkvxacRU7S6+VoDpc45YauJhSJdgQJUJkKYHHnK1THLpxHfrGd b1XiihvjpeuBsR4MzZnYhdcDEGECsRVhPh1QaNPvzIgU1wuellNdQ9tIqp7Bv81U plGsHQHrT2h0q70q/SpIi7oRHkOoIt3dz4Yr4jxRJgDzGW7a8N/V9JRLvtMWEBNa 5cy9sZ01N9rYYhmJt6BrT+FSh5SDYxIRL+v81XM5ukWDT+mf4QQSeW18K3MmQptb FPF2bihLPmYblemUJRN+5fO7ao2LNYslIYp6ISWl+2713zOXmvxzR0vo+QwfyxUg -----END CERTIFICATE-----Generated at Thu Mar 26 18:01:21 2026 by rpki-client