$ rpki-client -vvf rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/8CFEF8EE50AE11EBB71FB743C4F9AE02.roa File: 8CFEF8EE50AE11EBB71FB743C4F9AE02.roa (raw, json) Hash identifier: 0b0HxKXaBgsrMjbgtSVdcN+5q1xfdbTvPOaj8MWjzqw= Subject key identifier: B0:62:60:61:C2:AA:C0:F6:CD:7B:CC:35:99:CE:8A:3B:BF:43:55:FD Certificate issuer: /CN=A917D228/serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E Certificate serial: 077A Authority key identifier: 48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/8CFEF8EE50AE11EBB71FB743C4F9AE02.roa Signing time: Sat 14 Mar 2026 21:28:27 +0000 ROA not before: Sat 14 Mar 2026 21:28:27 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 1221 IP address blocks: 203.26.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1914 (0x77a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D228, serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E Validity Not Before: Mar 14 21:28:27 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69b5d2fb-1c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:61:6f:cf:66:45:c0:af:c3:ec:fe:89:bb:dc: 75:cc:d6:e7:70:97:55:0f:6f:e1:a3:81:11:cf:ec: 40:a8:37:28:b0:98:51:8e:36:e4:6e:5f:28:19:f4: 1c:c7:34:cc:65:78:0b:fb:6b:b4:ea:50:c4:f9:59: 2b:10:83:1d:d7:a7:d8:3c:8d:91:ad:52:4f:3f:be: eb:f5:ee:50:5c:c0:0b:64:d6:05:42:5f:99:14:5a: 2f:21:8b:76:62:eb:82:9a:88:35:aa:79:3b:ad:51: 13:fd:15:a5:94:a0:b7:ed:15:85:39:cc:d2:5b:0b: 56:68:95:d5:30:0b:b9:a3:c1:05:54:59:9c:96:6e: eb:5d:ed:ef:83:03:78:af:46:d9:18:e0:77:df:9d: 06:f9:62:9e:26:38:bf:12:94:8b:45:21:25:2f:c2: 5a:cb:98:ce:1c:41:b7:c0:81:07:cc:95:5e:2e:ac: 38:39:23:f6:5b:8f:d8:cb:d6:ad:bd:e1:7b:da:49: 6a:06:9c:66:d7:75:b4:68:09:d0:de:0c:c5:e9:81: 41:c8:5c:a0:6a:a5:71:1f:ee:fc:71:fc:15:a0:d4: 15:7c:68:cd:63:a7:39:79:c8:5a:4c:db:ef:47:cb: fa:29:11:57:b2:4d:61:cb:16:16:06:ba:d8:a4:12: de:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:62:60:61:C2:AA:C0:F6:CD:7B:CC:35:99:CE:8A:3B:BF:43:55:FD X509v3 Authority Key Identifier: keyid:48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/8CFEF8EE50AE11EBB71FB743C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.26.245.0/24 Signature Algorithm: sha256WithRSAEncryption 91:21:bc:5b:b7:f2:dd:aa:d8:6f:67:fc:4e:74:8d:91:38:21: a2:73:3e:d4:38:53:f8:28:19:c0:80:a6:cd:01:b6:d7:06:9b: 9a:9c:d6:59:85:72:e1:92:47:b8:21:6c:3a:73:29:56:09:06: 84:1e:98:93:a7:3d:a9:14:92:1c:1a:11:eb:27:e9:cb:97:48: d4:12:b5:26:0d:c5:c3:89:11:46:dc:a6:77:db:b8:6f:c7:43: 39:db:20:3e:33:82:9a:9e:af:07:9d:60:be:0f:1a:fa:d4:db: 63:db:f0:c7:d2:7c:0a:ec:52:39:c8:de:e9:8e:94:62:0c:f9: 9c:c0:ff:14:0e:31:50:03:31:dc:48:3b:c5:10:28:f5:21:0e: 24:6b:fc:bc:d3:db:ac:73:de:60:4d:05:f1:c6:91:b4:67:33: 05:e8:84:0f:94:05:a3:70:bf:ca:56:97:cd:d1:5c:cc:52:bc: 78:d9:f1:da:a4:2e:24:01:be:ad:d3:89:25:74:f7:4f:67:64: 37:d1:2a:52:73:9a:ad:77:4b:7b:b7:06:ce:d6:aa:ab:c8:b9: a6:11:10:a8:bf:06:56:0a:23:35:3c:42:58:3c:f9:1a:4f:e9: 97:8d:46:6d:bf:5a:06:b3:db:c7:c5:9a:81:d4:23:40:f3:f7: 40:0b:b7:ed -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QyMjgxMTAvBgNVBAUTKDQ4RTkwQjczQjQ5RkEzQURGNUVDOTFBNUNDRDIzREFE MzVEM0M0OEUwHhcNMjYwMzE0MjEyODI3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWI1ZDJmYi0xYzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA52Fvz2ZFwK/D7P6Ju9x1zNbncJdVD2/ho4ERz+xAqDcosJhRjjbkbl8oGfQc xzTMZXgL+2u06lDE+VkrEIMd16fYPI2RrVJPP77r9e5QXMALZNYFQl+ZFFovIYt2 YuuCmog1qnk7rVET/RWllKC37RWFOczSWwtWaJXVMAu5o8EFVFmclm7rXe3vgwN4 r0bZGOB3350G+WKeJji/EpSLRSElL8Jay5jOHEG3wIEHzJVeLqw4OSP2W4/Yy9at veF72klqBpxm13W0aAnQ3gzF6YFByFygaqVxH+78cfwVoNQVfGjNY6c5echaTNvv R8v6KRFXsk1hyxYWBrrYpBLeUQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLBiYGHC qsD2zXvMNZnOiju/Q1X9MB8GA1UdIwQYMBaAFEjpC3O0n6Ot9eyRpczSPa0108SO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDIyOC82QjREMkRBODUw QUMxMUVCQUYxNzhFM0VDNEY5QUUwMi9TT2tMYzdTZm82MzE3Skdsek5JOXJUWFR4 STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPa0xjN1NmbzYzMTdKR2x6Tkk5clRYVHhJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0QyMjgvNkI0RDJEQTg1MEFDMTFFQkFGMTc4RTNFQzRGOUFFMDIvOENGRUY4RUU1 MEFFMTFFQkI3MUZCNzQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyxr1MA0GCSqGSIb3DQEBCwUAA4IBAQCRIbxbt/LdqthvZ/xOdI2R OCGicz7UOFP4KBnAgKbNAbbXBpuanNZZhXLhkke4IWw6cylWCQaEHpiTpz2pFJIc GhHrJ+nLl0jUErUmDcXDiRFG3KZ327hvx0M52yA+M4Kanq8HnWC+Dxr61Ntj2/DH 0nwK7FI5yN7pjpRiDPmcwP8UDjFQAzHcSDvFECj1IQ4ka/y809usc95gTQXxxpG0 ZzMF6IQPlAWjcL/KVpfN0VzMUrx42fHapC4kAb6t04kldPdPZ2Q30SpSc5qtd0t7 twbO1qqryLmmERCovwZWCiM1PEJYPPkaT+mXjUZtv1oGs9vHxZqB1CNA8/dAC7ft -----END CERTIFICATE-----Generated at Thu Mar 26 08:48:25 2026 by rpki-client