$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/670087C4EEF011ED9C693D31C4F9AE02.roa File: 670087C4EEF011ED9C693D31C4F9AE02.roa (raw, json) Hash identifier: 9EODo3VTRqYwzjAsn5kOJ1RRcS5qGi8SpwuOaYpySHc= Subject key identifier: 4C:37:04:9C:06:4C:75:D2:39:41:4C:D5:AC:F8:CB:6C:B4:BB:3A:FE Certificate issuer: /CN=A915CE2F/serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F Certificate serial: 026D Authority key identifier: B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/670087C4EEF011ED9C693D31C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:43:57 +0000 ROA not before: Sat 03 Jan 2026 01:20:45 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 9483 IP address blocks: 202.50.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 621 (0x26d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CE2F, serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F Validity Not Before: Jan 3 01:20:45 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a5941d-cb7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b2:5c:c4:96:82:12:1a:69:74:a9:14:24:0a: 01:a4:bb:02:e2:e4:a3:4a:ef:9d:f9:eb:b9:7e:c3: 4e:fd:17:75:8e:3d:68:89:23:fe:22:bc:5b:41:02: 73:b6:69:83:71:c6:30:40:4d:34:3c:73:5a:10:98: d9:53:3a:50:2f:18:27:3b:38:05:2a:f3:7b:f4:58: 2b:22:f3:7e:de:45:15:75:3a:2e:76:95:98:ca:f4: 97:f3:22:b3:a1:75:97:75:fe:54:2b:f3:37:29:da: 74:03:76:40:d6:71:4c:3e:f2:aa:33:12:80:31:fd: f1:84:07:d6:db:7e:7c:6e:7d:d1:34:dc:a2:ff:07: a8:ce:64:5e:46:20:3d:d8:b0:4b:86:de:47:b4:1a: 09:a3:d5:0f:7c:de:90:50:9a:6c:82:10:51:98:57: 46:8f:7b:e1:f8:35:07:fd:c5:b2:67:17:86:5b:71: 01:f2:0d:f2:9c:e6:78:8e:3c:07:e3:b6:10:27:10: 3e:d8:ad:f4:54:c8:cf:3b:a4:a3:ea:9f:14:48:ef: 65:06:b2:15:17:3a:27:ca:79:3a:1d:1f:ca:3b:a1: 08:f2:4b:2e:df:f3:57:f6:75:78:a0:37:b5:58:72: d6:33:eb:61:15:95:54:98:b4:8a:f5:a7:0b:1e:f7: ba:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:37:04:9C:06:4C:75:D2:39:41:4C:D5:AC:F8:CB:6C:B4:BB:3A:FE X509v3 Authority Key Identifier: keyid:B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/670087C4EEF011ED9C693D31C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.50.109.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:ac:52:30:01:aa:dc:d9:b1:37:86:13:83:9c:f6:b9:68:4e: 6e:45:d6:2a:d0:54:20:f1:4a:c3:ae:2c:e1:35:10:95:49:d0: 58:8a:16:ea:41:39:d5:43:5d:5e:fb:b8:e4:06:32:4b:c9:3c: 44:f3:bc:e1:6a:2f:46:eb:97:8e:f2:0e:7c:9a:72:3b:a2:20: e8:79:b2:1b:4f:06:44:be:83:bd:a0:9e:3e:0e:37:88:01:bd: 8a:d6:f4:e1:14:70:b4:a1:0b:4f:f0:02:73:67:c7:18:6f:41: af:80:e7:7f:5d:c9:50:af:0c:c8:22:69:fe:9f:01:a7:bd:7a: 00:e0:ec:07:b3:f1:c7:6b:7b:2f:11:c4:7f:a3:74:f6:85:b6: 5c:97:d5:a8:78:7c:ee:9d:b4:be:9f:7d:18:91:93:dc:8f:e0: 2c:89:92:3d:96:ec:9a:42:31:5d:e9:52:b5:4b:65:e0:2a:78: f3:98:4a:4e:93:fa:ed:76:6f:98:f7:d8:0a:b0:a1:ec:58:10: 63:54:20:6d:2a:08:f0:58:2c:61:02:43:73:a3:22:9e:08:86: 6d:eb:3b:74:cf:a7:3d:cc:7e:cd:12:d1:30:40:a8:a6:80:c7: 8f:dd:a4:d7:61:f5:3c:4d:50:b9:e1:06:41:1e:95:38:64:a6: 2a:ac:b6:04 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNFMkYxMTAvBgNVBAUTKEIxMEI0RjQzNDNGQUFFMkIyQzREM0RENjYwNjRCRTky NkVDNzRDOUYwHhcNMjYwMTAzMDEyMDQ1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTQxZC1jYjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgrJcxJaCEhppdKkUJAoBpLsC4uSjSu+d+eu5fsNO/Rd1jj1oiSP+IrxbQQJz tmmDccYwQE00PHNaEJjZUzpQLxgnOzgFKvN79FgrIvN+3kUVdToudpWYyvSX8yKz oXWXdf5UK/M3Kdp0A3ZA1nFMPvKqMxKAMf3xhAfW2358bn3RNNyi/weozmReRiA9 2LBLht5HtBoJo9UPfN6QUJpsghBRmFdGj3vh+DUH/cWyZxeGW3EB8g3ynOZ4jjwH 47YQJxA+2K30VMjPO6Sj6p8USO9lBrIVFzonynk6HR/KO6EI8ksu3/NX9nV4oDe1 WHLWM+thFZVUmLSK9acLHve6HQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEw3BJwG THXSOUFM1az4y2y0uzr+MB8GA1UdIwQYMBaAFLELT0ND+q4rLE091mBkvpJux0yf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0UyRi8wQkRFQTUyODcw RTMxMUVEQjU3NzA0M0ZDNEY5QUUwMi9zUXRQUTBQNnJpc3NUVDNXWUdTLWttN0hU SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NRdFBRMFA2cmlzc1RUM1dZR1Mta203SFRKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUNFMkYvMEJERUE1Mjg3MEUzMTFFREI1NzcwNDNGQzRGOUFFMDIvNjcwMDg3QzRF RUYwMTFFRDlDNjkzRDMxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyjJtMA0GCSqGSIb3DQEBCwUAA4IBAQBcrFIwAarc2bE3hhODnPa5 aE5uRdYq0FQg8UrDrizhNRCVSdBYihbqQTnVQ11e+7jkBjJLyTxE87zhai9G65eO 8g58mnI7oiDoebIbTwZEvoO9oJ4+DjeIAb2K1vThFHC0oQtP8AJzZ8cYb0GvgOd/ XclQrwzIImn+nwGnvXoA4OwHs/HHa3svEcR/o3T2hbZcl9WoeHzunbS+n30YkZPc j+AsiZI9luyaQjFd6VK1S2XgKnjzmEpOk/rtdm+Y99gKsKHsWBBjVCBtKgjwWCxh AkNzoyKeCIZt6zt0z6c9zH7NEtEwQKimgMeP3aTXYfU8TVC54QZBHpU4ZKYqrLYE -----END CERTIFICATE-----Generated at Thu Mar 26 02:33:19 2026 by rpki-client