$ rpki-client -vvf rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/235D2836A1F111F084328A39C4F9AE02.roa File: 235D2836A1F111F084328A39C4F9AE02.roa (raw, json) Hash identifier: 9k6+Xj+W+Lqv1+Yo0t+v/d771PSS2yGUc+XPXaL3AnM= Subject key identifier: 12:AA:F1:E6:AB:F2:BC:16:68:0D:9C:07:E3:4B:F0:18:DE:F6:E4:D3 Certificate issuer: /CN=A9168949/serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977 Certificate serial: 0198 Authority key identifier: 10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/235D2836A1F111F084328A39C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:38:08 +0000 ROA not before: Sun 05 Oct 2025 13:42:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137444 IP address blocks: 203.20.108.0/24 maxlen: 24 2001:df3:9340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168949, serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977 Validity Not Before: Oct 5 13:42:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a592c0-8f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7f:d8:49:86:05:13:68:17:7f:e0:87:c0:77: 2c:da:de:65:3b:35:96:b0:8b:c4:58:39:e5:3f:ca: c3:ed:a8:e2:06:0e:3c:9e:3c:2f:07:4c:96:5a:ae: 85:71:1e:af:02:41:27:2d:45:9c:54:79:49:54:16: 87:f6:6a:00:12:89:c5:31:63:b0:af:a1:b0:09:22: ca:1e:01:11:2c:cf:bf:ff:88:d4:31:ee:45:84:52: 44:be:2a:3c:af:7a:eb:82:75:a4:4d:82:73:6d:b6: 7f:04:64:a2:22:2d:22:45:96:81:73:aa:bb:d1:4f: 62:64:a7:22:9b:c1:d4:69:c0:24:db:ae:1d:92:79: 1e:6b:58:d6:d3:fd:3d:34:2f:23:d5:9d:a6:1a:34: 43:90:69:a6:ca:e3:6b:e8:f9:d3:56:bd:08:3c:a8: 35:51:a8:be:1f:ca:da:f7:c8:c9:8e:c6:c9:1e:b9: 84:55:e4:18:99:79:69:e8:4a:b3:d1:b1:91:89:88: be:d6:e0:c9:7c:72:35:03:b7:fb:b3:d3:15:d0:a4: 29:f9:de:75:3e:d7:73:b9:05:c5:65:bf:e8:db:df: 32:93:7b:a3:fb:a0:97:b8:8b:4c:6a:62:79:fa:7a: 5d:cd:27:5f:c4:a5:a3:04:54:66:dd:23:14:f1:12: 94:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AA:F1:E6:AB:F2:BC:16:68:0D:9C:07:E3:4B:F0:18:DE:F6:E4:D3 X509v3 Authority Key Identifier: keyid:10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/235D2836A1F111F084328A39C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.20.108.0/24 IPv6: 2001:df3:9340::/48 Signature Algorithm: sha256WithRSAEncryption 80:b1:f1:4f:8d:96:ac:44:21:35:b2:ad:9a:d5:4a:d1:dd:bb: 99:59:c3:1e:23:11:ab:61:31:cd:40:b8:5a:18:4c:d5:48:a0: 41:56:1e:49:93:1d:b4:8c:5f:bd:e4:1f:c8:c3:d3:f2:d9:dd: c2:f7:19:c1:ac:bd:30:27:47:1e:e9:e1:2b:0d:3d:0f:a1:de: ae:2f:9c:92:a9:d7:d5:90:36:44:d7:38:fd:9e:f2:bb:d4:03: 1f:cf:5e:65:30:f0:0f:40:80:17:bf:2c:37:e8:9e:b6:38:6d: 79:d8:75:32:9f:8f:ab:91:47:87:f0:87:47:56:07:dd:3b:96: 56:e8:49:5b:aa:e2:55:f2:f9:c4:db:18:68:14:69:4f:e8:17: 7d:bc:de:55:97:99:26:ff:98:66:7c:a9:e4:c5:3f:e4:de:ab: 64:b3:e9:85:1b:72:fb:df:4f:dc:c8:e7:78:3d:d9:49:d7:72: 31:80:93:01:5f:e5:13:fc:90:dd:74:3b:94:7b:cd:b5:63:9c: 36:d8:a9:f6:c0:18:32:7e:7f:02:b4:20:0c:d9:9f:cf:aa:e1: e1:28:4f:7f:59:40:ab:e9:47:25:69:3a:0e:c1:14:46:09:4c: 56:cb:5e:2b:40:47:18:a3:dc:bb:e3:0f:2f:36:b9:f9:20:f2: e9:e5:5c:c3 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5NDkxMTAvBgNVBAUTKDEwRTA1MDJGM0QzODJFOEMxNTY2RUNDQzJBMTIxQjZD NDM5REU5NzcwHhcNMjUxMDA1MTM0MjMwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTJjMC04Zjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxX/YSYYFE2gXf+CHwHcs2t5lOzWWsIvEWDnlP8rD7ajiBg48njwvB0yWWq6F cR6vAkEnLUWcVHlJVBaH9moAEonFMWOwr6GwCSLKHgERLM+//4jUMe5FhFJEvio8 r3rrgnWkTYJzbbZ/BGSiIi0iRZaBc6q70U9iZKcim8HUacAk264dknkea1jW0/09 NC8j1Z2mGjRDkGmmyuNr6PnTVr0IPKg1Uai+H8ra98jJjsbJHrmEVeQYmXlp6Eqz 0bGRiYi+1uDJfHI1A7f7s9MV0KQp+d51PtdzuQXFZb/o298yk3uj+6CXuItMamJ5 +npdzSdfxKWjBFRm3SMU8RKUHwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFBKq8ear 8rwWaA2cB+NL8Bje9uTTMB8GA1UdIwQYMBaAFBDgUC89OC6MFWbszCoSG2xDnel3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk0OS8zRjI0MkFDMkU0 RjMxMUVFOTkxMDE0MzhDNEY5QUUwMi9FT0JRTHowNExvd1ZadXpNS2hJYmJFT2Q2 WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VPQlFMejA0TG93Vlp1ek1LaEliYkVPZDZYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg5NDkvM0YyNDJBQzJFNEYzMTFFRTk5MTAxNDM4QzRGOUFFMDIvMjM1RDI4MzZB MUYxMTFGMDg0MzI4QTM5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAyxRsMA8EAgACMAkDBwAgAQ3zk0AwDQYJKoZIhvcNAQELBQADggEB AICx8U+NlqxEITWyrZrVStHdu5lZwx4jEathMc1AuFoYTNVIoEFWHkmTHbSMX73k H8jD0/LZ3cL3GcGsvTAnRx7p4SsNPQ+h3q4vnJKp19WQNkTXOP2e8rvUAx/PXmUw 8A9AgBe/LDfonrY4bXnYdTKfj6uRR4fwh0dWB907llboSVuq4lXy+cTbGGgUaU/o F3283lWXmSb/mGZ8qeTFP+Teq2Sz6YUbcvvfT9zI53g92UnXcjGAkwFf5RP8kN10 O5R7zbVjnDbYqfbAGDJ+fwK0IAzZn8+q4eEoT39ZQKvpRyVpOg7BFEYJTFbLXitA Rxij3LvjDy82ufkg8unlXMM= -----END CERTIFICATE-----Generated at Thu Mar 26 10:05:44 2026 by rpki-client