$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/014A2E90BC5C11EF9108934FC4F9AE02.roa File: 014A2E90BC5C11EF9108934FC4F9AE02.roa (raw, json) Hash identifier: 5mI5iLsJ/T2fZGeMI3zRSHtjx0hZAzxh+aJrfrQ7jGE= Subject key identifier: A5:33:6B:3C:7A:03:B9:A4:42:28:9B:9B:35:F1:74:1D:09:4B:C4:CB Certificate issuer: /CN=A9173D12/serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2 Certificate serial: 0148 Authority key identifier: 5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/014A2E90BC5C11EF9108934FC4F9AE02.roa Signing time: Mon 02 Mar 2026 12:59:49 +0000 ROA not before: Wed 27 Aug 2025 06:12:43 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 14618 IP address blocks: 203.0.207.0/24 maxlen: 24 203.0.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D12, serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2 Validity Not Before: Aug 27 06:12:43 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a589c5-d6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8e:22:10:fc:c7:40:f9:a3:26:be:fe:34:bc: 61:aa:c4:a3:8a:15:cb:ac:15:70:c6:b1:c1:17:4c: 45:50:13:6b:4a:37:fa:3f:b4:fc:94:37:90:aa:fe: 6b:4f:39:66:f6:ad:7f:9e:ef:93:2c:5b:53:9e:4b: 4a:4e:34:06:82:5d:76:8c:0e:4c:93:e0:5d:d2:15: 3d:37:d5:1c:11:a6:e7:0b:49:8f:0a:82:1c:4d:b0: c3:3c:56:07:cd:21:04:98:cd:50:7a:58:74:88:6b: 99:99:af:81:24:6f:00:75:4e:d0:f3:f9:67:16:47: db:5e:1e:96:1f:1d:7d:25:7e:fa:b4:92:b4:76:74: b7:b7:0e:da:4a:cf:80:84:eb:da:2d:97:3d:a6:18: 47:95:92:84:38:99:dc:f8:3a:02:e3:f5:41:ec:ed: 11:57:b1:ce:74:38:e2:8a:cf:58:64:6b:b8:4c:ed: 1b:69:e1:53:87:ab:48:be:4d:57:39:ab:bf:45:6b: 95:51:92:db:ec:4b:0c:0b:02:33:5e:55:e2:f5:81: 62:bb:19:20:eb:66:9b:97:95:e4:8b:62:45:f4:47: e6:87:f4:a7:a9:84:11:d0:e0:38:a9:69:37:50:6d: 00:5b:fc:da:ef:8b:8e:00:6c:e6:c8:d2:c5:10:af: 4f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:33:6B:3C:7A:03:B9:A4:42:28:9B:9B:35:F1:74:1D:09:4B:C4:CB X509v3 Authority Key Identifier: keyid:5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/014A2E90BC5C11EF9108934FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.0.207.0-203.0.208.255 Signature Algorithm: sha256WithRSAEncryption 56:8c:86:98:3a:19:84:7e:ab:3d:02:72:2f:e8:cf:65:81:5a: 88:fa:07:6c:8f:e9:c1:26:91:76:fe:2e:fb:53:48:64:5b:37: 63:81:68:55:a7:2d:7d:63:39:34:11:99:90:28:5c:55:09:40: d0:6f:d0:5e:f0:75:ab:f2:c9:f6:f9:c9:e0:8a:d5:27:cc:9b: ee:44:77:71:85:ee:f8:0a:41:d0:40:f2:6a:6d:a4:e8:8e:03: 95:8e:0f:5e:5f:df:19:c8:b3:f0:1a:d0:29:58:be:ec:fc:50: db:5b:fd:65:6f:a9:e5:dc:95:0e:32:2f:8a:39:a0:fd:75:70: 43:e4:c2:48:2d:4c:1a:f5:0d:14:15:ec:d8:80:79:68:49:a2: 10:72:c1:0a:12:45:18:32:5d:2f:4f:18:fe:d9:ba:f8:a2:30: 90:65:2d:35:aa:dd:3c:1c:c3:68:f1:6e:ca:c7:f8:cf:f3:6d: 33:4c:1e:49:78:a5:00:5a:b9:aa:77:9f:a0:db:52:0a:04:61: fb:ff:c9:3e:1f:8f:2c:01:f4:78:c8:f2:6f:1b:3a:d3:84:aa: 60:2d:01:d3:2d:dc:47:92:5f:cc:f1:cd:d7:be:74:f0:b7:41: a7:13:3e:3f:e0:02:02:de:88:6e:01:ca:64:d9:41:40:d2:2e: 92:b5:08:d6 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNEMTIxMTAvBgNVBAUTKDVBOEI2MUJDNTNBMzI0RDdBMkI0RjQxNTNEMDc3NDZF QzJBMzM1RDIwHhcNMjUwODI3MDYxMjQzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ODljNS1kNmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6o4iEPzHQPmjJr7+NLxhqsSjihXLrBVwxrHBF0xFUBNrSjf6P7T8lDeQqv5r Tzlm9q1/nu+TLFtTnktKTjQGgl12jA5Mk+Bd0hU9N9UcEabnC0mPCoIcTbDDPFYH zSEEmM1Qelh0iGuZma+BJG8AdU7Q8/lnFkfbXh6WHx19JX76tJK0dnS3tw7aSs+A hOvaLZc9phhHlZKEOJnc+DoC4/VB7O0RV7HOdDjiis9YZGu4TO0baeFTh6tIvk1X Oau/RWuVUZLb7EsMCwIzXlXi9YFiuxkg62abl5Xki2JF9Efmh/SnqYQR0OA4qWk3 UG0AW/za74uOAGzmyNLFEK9PdQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFKUzazx6 A7mkQiibmzXxdB0JS8TLMB8GA1UdIwQYMBaAFFqLYbxToyTXorT0FT0HdG7CozXS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0QxMi9BQjg5MzRGMjUy QzQxMUVGOERERkQ1M0ZDNEY5QUUwMi9Xb3RodkZPakpOZWl0UFFWUFFkMGJzS2pO ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dvdGh2Rk9qSk5laXRQUVZQUWQwYnNLak5kSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzNEMTIvQUI4OTM0RjI1MkM0MTFFRjhEREZENTNGQzRGOUFFMDIvMDE0QTJFOTBC QzVDMTFFRjkxMDg5MzRGQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBADLAM8DBADLANAwDQYJKoZIhvcNAQELBQADggEBAFaMhpg6GYR+ qz0Cci/oz2WBWoj6B2yP6cEmkXb+LvtTSGRbN2OBaFWnLX1jOTQRmZAoXFUJQNBv 0F7wdavyyfb5yeCK1SfMm+5Ed3GF7vgKQdBA8mptpOiOA5WOD15f3xnIs/Aa0ClY vuz8UNtb/WVvqeXclQ4yL4o5oP11cEPkwkgtTBr1DRQV7NiAeWhJohBywQoSRRgy XS9PGP7ZuviiMJBlLTWq3Twcw2jxbsrH+M/zbTNMHkl4pQBauap3n6DbUgoEYfv/ yT4fjywB9HjI8m8bOtOEqmAtAdMt3EeSX8zxzde+dPC3QacTPj/gAgLeiG4BymTZ QUDSLpK1CNY= -----END CERTIFICATE-----Generated at Thu Mar 26 17:32:17 2026 by rpki-client