$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/E3CD40BE7D6611ECBA65C232C4F9AE02.roa File: E3CD40BE7D6611ECBA65C232C4F9AE02.roa (raw, json) Hash identifier: WD9MrIU1Zj3w+mVYD7v9tJ6t/TRXPSfmjh+WqlfPWrY= Subject key identifier: A3:F7:28:F2:D1:9E:77:FA:74:48:41:DD:1D:26:1B:EA:50:BF:F6:C4 Certificate issuer: /CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Certificate serial: 0487 Authority key identifier: E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/E3CD40BE7D6611ECBA65C232C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:49:30 +0000 ROA not before: Wed 25 Jun 2025 00:45:21 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 7575 IP address blocks: 203.22.214.0/24 maxlen: 24 2401:2fc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1159 (0x487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E9C, serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Validity Not Before: Jun 25 00:45:21 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a435da-68eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:73:b1:33:9d:02:2f:da:17:3a:29:58:18:53: 55:41:e9:46:de:35:9e:58:15:b5:72:60:02:f7:77: 13:95:38:8a:d0:48:11:cc:ab:0e:43:6e:e1:83:48: da:36:af:87:38:2b:2a:fa:9b:ad:d1:eb:18:b5:af: de:18:1a:8c:6f:0e:0f:b9:ac:10:d6:84:91:54:d8: 6d:29:cd:07:e9:c5:81:ad:a0:2a:9e:b7:d5:60:9c: 46:95:65:73:ba:f2:41:80:70:8a:98:5a:57:37:fb: f9:75:93:cc:e0:cf:ac:1d:1c:ae:53:34:49:d6:f6: 03:bc:9a:50:c2:10:98:63:de:97:ed:87:8c:08:ce: 04:b1:af:9e:ae:e6:f8:f5:6a:d6:65:19:18:72:e6: 43:99:20:c4:32:78:c2:17:ad:ca:54:c8:d8:34:8f: 9a:88:46:cf:5e:1b:48:0a:a0:8d:dc:16:74:40:79: bb:89:e7:2d:29:34:94:17:35:d1:a3:b5:82:b8:88: b9:73:69:91:1b:1d:88:7f:67:4c:b2:8c:d8:40:2b: 66:de:64:e9:f0:5e:dc:db:da:29:26:04:ce:22:81: c7:ea:6e:32:b0:97:11:28:8d:b0:cb:50:a5:f0:aa: ab:f4:41:75:cd:e0:c7:a4:c4:e6:77:41:93:af:3d: 00:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F7:28:F2:D1:9E:77:FA:74:48:41:DD:1D:26:1B:EA:50:BF:F6:C4 X509v3 Authority Key Identifier: keyid:E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/E3CD40BE7D6611ECBA65C232C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.22.214.0/24 IPv6: 2401:2fc0::/32 Signature Algorithm: sha256WithRSAEncryption 95:58:b9:08:16:e8:11:c6:83:35:50:21:58:2d:14:e1:b7:fd: 4f:fe:6d:5f:9d:76:88:df:43:c1:e7:ef:0b:2a:42:e2:ff:b4: 5a:f3:de:df:64:e5:20:a8:a1:95:da:72:3e:46:8f:9f:d3:33: d5:59:2e:6c:4b:4d:46:c0:5b:32:20:98:29:ce:fb:c2:77:b6: 20:4d:7f:0c:5e:2b:bc:46:cb:3c:88:03:3c:45:f6:9e:ae:03: e4:40:7d:dd:c3:8a:84:b5:86:c7:f6:38:eb:de:e0:fa:46:7b: 61:89:d5:60:e7:7c:92:b9:cf:ce:34:7b:b7:e5:cb:57:53:d4: 7c:80:86:3a:c6:6f:6c:d1:4d:98:9a:68:60:26:a7:6b:f6:3a: 0d:53:68:82:be:7c:43:59:d2:13:a0:eb:75:73:15:4c:a7:a8: b0:ed:38:c6:6c:83:61:68:1c:6c:bb:63:96:fb:f5:ec:e4:60: a8:d6:8f:ac:f5:52:98:ae:5e:66:b5:c0:e0:d8:7d:7a:6c:1b: 99:5d:4e:ce:19:db:47:9c:60:e6:87:cb:80:60:b3:11:d5:a8: a2:00:9e:ae:96:61:c1:21:ed:d7:fb:3d:69:30:6a:00:e1:25: 88:49:a5:c6:e2:03:14:bc:9f:8d:19:48:0d:39:3b:d3:64:cf: 79:53:3e:64 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFOUMxMTAvBgNVBAUTKEU5OUZGMDQ0OEIwQkRBMzc3MUNEQzRBOTZDNTlGN0M5 RjlDODc5NDQwHhcNMjUwNjI1MDA0NTIxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzVkYS02OGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXOxM50CL9oXOilYGFNVQelG3jWeWBW1cmAC93cTlTiK0EgRzKsOQ27hg0ja Nq+HOCsq+put0esYta/eGBqMbw4PuawQ1oSRVNhtKc0H6cWBraAqnrfVYJxGlWVz uvJBgHCKmFpXN/v5dZPM4M+sHRyuUzRJ1vYDvJpQwhCYY96X7YeMCM4Esa+erub4 9WrWZRkYcuZDmSDEMnjCF63KVMjYNI+aiEbPXhtICqCN3BZ0QHm7iectKTSUFzXR o7WCuIi5c2mRGx2If2dMsozYQCtm3mTp8F7c29opJgTOIoHH6m4ysJcRKI2wy1Cl 8Kqr9EF1zeDHpMTmd0GTrz0A2QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFKP3KPLR nnf6dEhB3R0mG+pQv/bEMB8GA1UdIwQYMBaAFOmf8ESLC9o3cc3EqWxZ98n5yHlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U5Qy81MEM5OTNDRTdE NjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJqZHh6Y1NwYkZuM3lmbkll VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaX3dSSXNMMmpkeHpjU3BiRm4zeWZuSWVVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdFOUMvNTBDOTkzQ0U3RDYzMTFFQ0FDNUM3RjFFQzRGOUFFMDIvRTNDRDQwQkU3 RDY2MTFFQ0JBNjVDMjMyQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQAyxbWMA0EAgACMAcDBQAkAS/AMA0GCSqGSIb3DQEBCwUAA4IBAQCV WLkIFugRxoM1UCFYLRTht/1P/m1fnXaI30PB5+8LKkLi/7Ra897fZOUgqKGV2nI+ Ro+f0zPVWS5sS01GwFsyIJgpzvvCd7YgTX8MXiu8Rss8iAM8RfaergPkQH3dw4qE tYbH9jjr3uD6RnthidVg53ySuc/ONHu35ctXU9R8gIY6xm9s0U2YmmhgJqdr9joN U2iCvnxDWdIToOt1cxVMp6iw7TjGbINhaBxsu2OW+/Xs5GCo1o+s9VKYrl5mtcDg 2H16bBuZXU7OGdtHnGDmh8uAYLMR1aiiAJ6ulmHBIe3X+z1pMGoA4SWISaXG4gMU vJ+NGUgNOTvTZM95Uz5k -----END CERTIFICATE-----Generated at Thu Mar 26 10:03:33 2026 by rpki-client