$ rpki-client -vvf rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/EB96EEB2CFB111EA8E6F7029C4F9AE02.roa File: EB96EEB2CFB111EA8E6F7029C4F9AE02.roa (raw, json) Hash identifier: k0slGk6THhklii8X86eyYXN7YTIBN/mn56HfkDFdmb0= Subject key identifier: BB:0D:8F:BD:D4:D5:5C:9F:63:30:0D:B1:52:67:51:C7:7D:9B:4F:92 Certificate issuer: /CN=A9158635/serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5 Certificate serial: 08D0 Authority key identifier: 18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/EB96EEB2CFB111EA8E6F7029C4F9AE02.roa Signing time: Fri 06 Mar 2026 20:27:39 +0000 ROA not before: Fri 06 Mar 2026 20:27:39 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 135415 IP address blocks: 203.21.200.0/24 maxlen: 24 203.21.201.0/24 maxlen: 24 203.21.202.0/24 maxlen: 24 203.21.203.0/24 maxlen: 24 2404:6080::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2256 (0x8d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158635, serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5 Validity Not Before: Mar 6 20:27:39 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69ab38bb-245b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f3:07:fe:7c:b2:7e:e4:bb:98:ba:fd:59:c5: 39:ea:69:c5:65:fa:7e:1b:15:5c:2e:3e:f6:38:ad: 49:10:ac:b1:58:57:ff:c4:2f:91:fc:62:16:14:50: 70:15:f0:36:e4:91:86:1c:31:d3:40:2d:30:c2:d8: 04:0d:cd:6e:ad:f2:78:17:8f:f9:e2:4e:79:e8:65: 63:06:96:3f:a1:d3:28:7f:ad:5e:c8:da:30:60:c8: f4:e3:b0:3a:45:f6:7f:18:e7:a4:9f:41:f0:52:37: 31:c4:38:c2:bb:9b:77:d9:78:79:8f:6a:05:34:d7: e6:d0:a1:9d:ac:bc:79:6f:f6:b6:33:51:2c:b5:c3: aa:f8:1f:1b:f3:a1:0b:75:7f:14:31:45:31:70:88: ca:92:41:56:99:e9:0f:56:51:e5:c6:c1:2b:0d:51: a7:6e:2e:18:e8:b7:67:d1:22:bd:be:71:75:67:59: 19:55:8d:82:9a:9f:bf:34:ef:b0:e8:34:74:00:73: 15:91:bd:5f:72:96:c5:9b:84:05:de:f9:31:6a:03: 28:72:cb:b7:0c:84:a5:8f:cb:0f:f6:ae:68:1d:bb: 59:f2:15:a4:c8:87:e1:21:7a:3b:44:1b:76:9f:cb: d3:45:22:9e:e4:57:bf:cf:a9:23:b2:1f:08:dc:2a: 6b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0D:8F:BD:D4:D5:5C:9F:63:30:0D:B1:52:67:51:C7:7D:9B:4F:92 X509v3 Authority Key Identifier: keyid:18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/EB96EEB2CFB111EA8E6F7029C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.21.200.0/22 IPv6: 2404:6080::/32 Signature Algorithm: sha256WithRSAEncryption 5b:be:85:a9:cb:82:de:1d:72:35:42:79:20:d2:49:2c:ae:ee: 51:9a:b9:81:c5:80:73:97:08:96:58:6f:d9:60:09:e9:75:9c: ce:97:bf:35:e3:93:ba:d5:7c:26:2f:a5:98:3c:03:d9:14:53: 3f:7a:c8:b2:eb:79:7d:fe:01:06:17:c7:4b:94:d3:a1:73:c5: 69:1d:c3:1e:c8:7a:d8:41:03:97:95:c7:37:23:29:ec:66:ae: 1f:25:c2:f9:93:0d:9c:40:1d:8c:88:bc:ad:1e:cb:32:a9:00: 5b:0e:e5:fe:6c:13:d6:ba:49:78:a6:10:c5:2a:f0:04:ee:9b: f3:77:9c:1f:bf:a9:e6:4f:c4:be:3e:58:05:6a:cf:43:22:25: 33:52:3b:d1:41:d6:e8:91:dc:11:4d:0c:9b:12:3e:fb:25:2a: 4e:64:16:48:f8:1c:f4:f9:ef:10:c4:be:41:24:f2:5a:5c:1f: a6:d5:b4:82:54:3d:e7:49:83:c2:6a:40:98:21:9a:8e:4f:9b: e2:60:3a:70:f8:26:f0:0e:69:50:65:ac:bd:15:ac:d6:7b:55: 6a:e5:0d:4c:bc:98:88:bf:1b:be:92:a7:cf:c1:55:c0:ef:07: d9:b0:c4:3b:c5:e0:0f:87:9f:de:b8:88:46:dc:cc:1e:f2:f3: de:07:4f:c9 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2MzUxMTAvBgNVBAUTKDE4NTE5RTJCQzRBNjRGN0JENTg5Q0Q5NjNERjA3NEIx QTMzMDVERjUwHhcNMjYwMzA2MjAyNzM5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWFiMzhiYi0yNDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPMH/nyyfuS7mLr9WcU56mnFZfp+GxVcLj72OK1JEKyxWFf/xC+R/GIWFFBw FfA25JGGHDHTQC0wwtgEDc1urfJ4F4/54k556GVjBpY/odMof61eyNowYMj047A6 RfZ/GOekn0HwUjcxxDjCu5t32Xh5j2oFNNfm0KGdrLx5b/a2M1EstcOq+B8b86EL dX8UMUUxcIjKkkFWmekPVlHlxsErDVGnbi4Y6Ldn0SK9vnF1Z1kZVY2Cmp+/NO+w 6DR0AHMVkb1fcpbFm4QF3vkxagMocsu3DISlj8sP9q5oHbtZ8hWkyIfhIXo7RBt2 n8vTRSKe5Fe/z6kjsh8I3CprhQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFLsNj73U 1VyfYzANsVJnUcd9m0+SMB8GA1UdIwQYMBaAFBhRnivEpk971YnNlj3wdLGjMF31 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODYzNS9BOTk3Nzk1NkNG QjAxMUVBQTg2QkVDMjdDNEY5QUUwMi9HRkdlSzhTbVQzdlZpYzJXUGZCMHNhTXdY ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dGR2VLOFNtVDN2VmljMldQZkIwc2FNd1hmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTg2MzUvQTk5Nzc5NTZDRkIwMTFFQUE4NkJFQzI3QzRGOUFFMDIvRUI5NkVFQjJD RkIxMTFFQThFNkY3MDI5QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCyxXIMA0EAgACMAcDBQAkBGCAMA0GCSqGSIb3DQEBCwUAA4IBAQBb voWpy4LeHXI1Qnkg0kksru5RmrmBxYBzlwiWWG/ZYAnpdZzOl78145O61XwmL6WY PAPZFFM/esiy63l9/gEGF8dLlNOhc8VpHcMeyHrYQQOXlcc3IynsZq4fJcL5kw2c QB2MiLytHssyqQBbDuX+bBPWukl4phDFKvAE7pvzd5wfv6nmT8S+PlgFas9DIiUz UjvRQdbokdwRTQybEj77JSpOZBZI+Bz0+e8QxL5BJPJaXB+m1bSCVD3nSYPCakCY IZqOT5viYDpw+CbwDmlQZay9FazWe1Vq5Q1MvJiIvxu+kqfPwVXA7wfZsMQ7xeAP h5/euIhG3Mwe8vPeB0/J -----END CERTIFICATE-----Generated at Thu Mar 26 13:50:59 2026 by rpki-client