$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/DC4BD210A17B11EAB16F4954C4F9AE02.roa File: DC4BD210A17B11EAB16F4954C4F9AE02.roa (raw, json) Hash identifier: eIAHLPD+G1WHeALpmNDjCvEhWTMycfos5yNXip7qHSk= Subject key identifier: A4:2F:ED:47:01:6A:4A:B6:96:B6:8E:DE:2A:1F:9E:FA:06:A9:F2:58 Certificate issuer: /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Certificate serial: 09D9 Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/DC4BD210A17B11EAB16F4954C4F9AE02.roa Signing time: Fri 20 Mar 2026 18:23:33 +0000 ROA not before: Fri 20 Mar 2026 18:23:33 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.250.72.0/22 maxlen: 24 103.226.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2521 (0x9d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08, serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Validity Not Before: Mar 20 18:23:33 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69bd90a5-600b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b0:70:86:4e:57:e0:19:4a:2b:c0:44:d7:b9: 38:cf:c1:cf:90:72:a0:1c:b5:9f:b5:01:83:1e:eb: 66:98:cb:f8:ea:c3:c8:2b:2d:8f:9e:6f:c5:75:02: da:0f:59:49:6a:be:25:dd:89:8e:02:b2:77:80:22: 2c:44:36:40:eb:fc:c6:eb:68:97:eb:a1:fe:0b:b1: 80:28:d4:8c:dd:8a:9e:8d:27:29:20:dc:74:b2:04: 39:28:e7:26:b6:9b:62:3e:c2:c3:ff:23:30:da:0b: 59:c5:5d:a4:44:72:e2:e6:63:b0:87:dc:45:8d:85: 76:68:43:2d:92:cf:0d:c6:ab:33:e2:c3:f1:d1:bd: 7f:1a:1d:6c:5f:87:30:f2:63:8e:0d:b3:51:52:25: d6:ad:ed:95:67:35:99:00:b0:83:6f:73:11:1f:75: 9c:36:d3:ec:ae:74:2f:58:f1:b3:a8:fd:f7:8b:c2: a6:2d:3f:9f:da:2f:fb:38:f0:ca:38:8e:fe:0c:33: 3b:47:10:99:25:75:c0:c8:7f:e7:26:e0:98:eb:85: 10:ca:a4:55:f0:87:69:46:eb:c1:df:36:64:1e:77: 95:75:47:c7:1c:cf:93:26:47:2b:5d:31:a1:ae:dd: f4:e9:a8:43:80:c5:f2:59:ab:53:79:ee:dd:3b:9b: 9b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2F:ED:47:01:6A:4A:B6:96:B6:8E:DE:2A:1F:9E:FA:06:A9:F2:58 X509v3 Authority Key Identifier: keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/DC4BD210A17B11EAB16F4954C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.250.72.0/22 103.226.68.0/22 Signature Algorithm: sha256WithRSAEncryption b0:7f:40:5a:9d:79:2b:65:21:f8:1f:10:8f:13:44:06:a5:3a: e7:2c:96:9c:93:4e:a9:86:fb:dc:56:69:ee:16:fe:33:ac:10: 84:98:df:93:79:a8:ab:0e:7b:90:ce:55:c5:3a:b0:ac:b5:c8: a3:1e:bc:d5:09:a4:f4:14:8b:fa:f5:aa:db:ca:cf:93:0e:85: bd:f4:41:85:7c:7b:0a:1a:20:ab:31:81:d2:0e:29:8a:2b:33: 81:84:c1:6f:03:cc:b6:e8:bd:4c:8d:63:66:e9:cc:5e:5f:f0: be:a7:3d:79:d9:32:d3:8a:64:6e:48:f6:3b:22:ce:15:e1:06: 17:f3:f5:9c:06:4b:57:31:d5:90:c1:0e:e2:7b:eb:a1:c0:67: 22:ce:6a:02:0f:1e:bd:8e:5d:68:bb:54:45:12:a6:64:33:a7: 00:22:d4:e3:b3:55:9b:c2:07:ff:74:5e:b9:91:4e:8d:34:8c: da:64:9a:4b:bb:f4:15:74:60:4b:05:ec:f6:66:d9:96:f5:df: 70:c5:10:2e:07:eb:51:da:16:82:da:0e:0c:6d:8e:b6:00:21: f3:9c:91:32:65:03:d8:c7:1e:81:e7:2c:53:ad:ef:81:c2:1a: 85:3a:3a:cd:6e:64:ac:d8:84:05:76:7e:da:46:3e:72:e7:9f: a4:53:b5:cf -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKEIyQTc4NEVFODVGNTUzODM2NzI5N0I1MUMwODY4RjhG MUMwMkY5MTEwHhcNMjYwMzIwMTgyMzMzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWJkOTBhNS02MDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7Bwhk5X4BlKK8BE17k4z8HPkHKgHLWftQGDHutmmMv46sPIKy2Pnm/FdQLa D1lJar4l3YmOArJ3gCIsRDZA6/zG62iX66H+C7GAKNSM3YqejScpINx0sgQ5KOcm tptiPsLD/yMw2gtZxV2kRHLi5mOwh9xFjYV2aEMtks8Nxqsz4sPx0b1/Gh1sX4cw 8mOODbNRUiXWre2VZzWZALCDb3MRH3WcNtPsrnQvWPGzqP33i8KmLT+f2i/7OPDK OI7+DDM7RxCZJXXAyH/nJuCY64UQyqRV8IdpRuvB3zZkHneVdUfHHM+TJkcrXTGh rt306ahDgMXyWatTee7dO5ubtwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKQv7UcB akq2lraO3iofnvoGqfJYMB8GA1UdIwQYMBaAFLKnhO6F9VODZyl7UcCGj48cAvkR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0Tm5LWHRSd0lhUGp4d0Mt UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxZUU3b1gxVTRObktYdFJ3SWFQanh3Qy1SRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThGMDgvNUIxN0Y2RDIwN0QwMTFFQUE0ODQ4NjQ0QzRGOUFFMDIvREM0QkQyMTBB MTdCMTFFQUIxNkY0OTU0QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCLfpIAwQCZ+JEMA0GCSqGSIb3DQEBCwUAA4IBAQCwf0BanXkrZSH4 HxCPE0QGpTrnLJack06phvvcVmnuFv4zrBCEmN+TeairDnuQzlXFOrCstcijHrzV CaT0FIv69arbys+TDoW99EGFfHsKGiCrMYHSDimKKzOBhMFvA8y26L1MjWNm6cxe X/C+pz152TLTimRuSPY7Is4V4QYX8/WcBktXMdWQwQ7ie+uhwGcizmoCDx69jl1o u1RFEqZkM6cAItTjs1Wbwgf/dF65kU6NNIzaZJpLu/QVdGBLBez2ZtmW9d9wxRAu B+tR2haC2g4MbY62ACHznJEyZQPYxx6B5yxTre+BwhqFOjrNbmSs2IQFdn7aRj5y 55+kU7XP -----END CERTIFICATE-----Generated at Thu Mar 26 03:40:47 2026 by rpki-client