$ rpki-client -vvf rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/B7FDD0B031E711EF9FBC7372C4F9AE02.roa File: B7FDD0B031E711EF9FBC7372C4F9AE02.roa (raw, json) Hash identifier: TVQSdwEfSaIR1+dTOJsBoZylToFNXJ9xhYYLtuRExiI= Subject key identifier: 38:34:A3:8A:66:5F:C1:DC:A9:4A:F6:D3:96:B2:E0:97:79:84:EE:8F Certificate issuer: /CN=A917D472/serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406 Certificate serial: 0141 Authority key identifier: 18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/B7FDD0B031E711EF9FBC7372C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:09:44 +0000 ROA not before: Fri 13 Jun 2025 05:15:28 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 152908 IP address blocks: 202.0.67.0/24 maxlen: 24 202.0.68.0/24 maxlen: 24 203.18.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D472, serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406 Validity Not Before: Jun 13 05:15:28 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a58c18-57e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:87:64:34:19:68:e5:44:64:dd:99:82:32:92: a9:c3:36:1a:82:92:b3:f9:11:9e:ae:8a:5b:34:cc: 60:c8:92:e9:ff:61:c4:90:63:c2:97:9b:6f:d9:69: 40:7b:6f:1d:11:f2:fc:d9:48:35:c3:32:84:ac:26: ef:0e:e6:9b:87:5a:95:c8:08:0a:78:99:a1:06:83: ec:9f:3c:ee:9d:3f:23:db:0c:f7:7c:5b:69:2f:26: 98:df:96:86:cc:e8:dc:d1:15:04:e5:58:9d:82:e7: 93:41:f0:5e:fe:80:52:d9:fb:11:4f:33:c9:45:4c: ee:e4:12:e0:24:a2:6c:b8:8f:c5:a0:2a:ec:e4:c7: 23:29:86:ee:7d:56:2f:7d:46:ac:c7:2f:54:a3:ea: 33:4c:e0:56:60:80:ec:2b:62:a2:e2:21:97:0b:02: f3:1c:3b:ba:57:ad:62:3b:ba:e0:65:07:4c:90:62: 30:6d:9a:29:43:e2:be:20:11:cc:29:67:a9:79:11: ce:24:c6:3b:6e:95:fe:b9:c4:63:60:c3:00:88:26: 74:d6:79:34:ec:fc:ee:39:d6:ef:4e:0b:a6:d0:c8: 97:c0:53:b1:bc:18:61:e6:3d:3e:2a:63:8e:f0:3f: 22:31:8d:31:6d:40:97:72:98:5c:22:16:72:44:ec: 18:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:34:A3:8A:66:5F:C1:DC:A9:4A:F6:D3:96:B2:E0:97:79:84:EE:8F X509v3 Authority Key Identifier: keyid:18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/B7FDD0B031E711EF9FBC7372C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.0.67.0-202.0.68.255 203.18.231.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:bf:ec:13:13:57:d5:22:6b:05:14:03:5a:0e:07:a9:44:a9: 0c:dd:ab:6f:7a:71:c4:33:53:ca:b8:37:a6:9e:b3:58:45:f0: 9a:80:00:d8:a9:17:b9:1f:27:6f:01:35:b0:44:df:a8:f3:67: 4e:33:de:44:b5:1b:97:50:90:74:07:b2:32:e3:ff:62:2e:db: 05:c0:45:84:71:5d:ba:35:e8:0c:3b:26:ea:4d:f2:85:6c:1b: b3:a6:1d:c6:9c:46:e5:db:03:20:51:be:97:de:e5:0c:99:5f: a3:28:f7:7d:33:a2:22:bb:60:42:d1:c3:79:b5:37:e8:ec:b1: 4c:22:1b:fb:17:f4:72:3a:e8:58:9b:62:dc:e9:a4:b2:86:c9: f1:92:ab:05:bd:44:ae:5a:cb:dc:b4:19:62:1d:4e:c1:43:f7: 77:51:41:e6:97:62:17:84:cf:27:1a:2e:81:8a:cc:8f:bb:dd: df:ea:2e:6d:bc:a3:0d:46:f1:ef:d4:e6:aa:a9:1c:da:7b:ef: 3f:cb:2f:80:f7:1f:06:26:ac:c6:2c:05:db:ae:9c:62:61:99: df:87:d0:fd:37:5a:d7:38:4b:ab:3f:d4:7f:35:6a:11:57:2d: 70:72:64:ab:b9:aa:7c:0f:61:5f:4d:48:e6:04:53:d7:48:4e: e4:ee:bb:b7 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q0NzIxMTAvBgNVBAUTKDE4OUYyREVDNUE3MDNGN0Q2Q0ZENUY5NkFBQjVBMkU4 QThERDk0MDYwHhcNMjUwNjEzMDUxNTI4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGMxOC01N2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIdkNBlo5URk3ZmCMpKpwzYagpKz+RGeropbNMxgyJLp/2HEkGPCl5tv2WlA e28dEfL82Ug1wzKErCbvDuabh1qVyAgKeJmhBoPsnzzunT8j2wz3fFtpLyaY35aG zOjc0RUE5VidgueTQfBe/oBS2fsRTzPJRUzu5BLgJKJsuI/FoCrs5McjKYbufVYv fUasxy9Uo+ozTOBWYIDsK2Ki4iGXCwLzHDu6V61iO7rgZQdMkGIwbZopQ+K+IBHM KWepeRHOJMY7bpX+ucRjYMMAiCZ01nk07PzuOdbvTgum0MiXwFOxvBhh5j0+KmOO 8D8iMY0xbUCXcphcIhZyROwYZQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFDg0o4pm X8HcqUr205ay4Jd5hO6PMB8GA1UdIwQYMBaAFBifLexacD99bP1flqq1ouio3ZQG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDQ3Mi8xM0E4RkI0NDMx RTYxMUVGQUU5RUU0NjBDNEY5QUUwMi9HSjh0N0Zwd1AzMXNfVi1XcXJXaTZLamRs QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dKOHQ3RnB3UDMxc19WLVdxcldpNktqZGxBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Q0NzIvMTNBOEZCNDQzMUU2MTFFRkFFOUVFNDYwQzRGOUFFMDIvQjdGREQwQjAz MUU3MTFFRjlGQkM3MzcyQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBADKAEMDBADKAEQDBADLEucwDQYJKoZIhvcNAQELBQADggEBAE2/ 7BMTV9UiawUUA1oOB6lEqQzdq296ccQzU8q4N6aes1hF8JqAANipF7kfJ28BNbBE 36jzZ04z3kS1G5dQkHQHsjLj/2Iu2wXARYRxXbo16Aw7JupN8oVsG7OmHcacRuXb AyBRvpfe5QyZX6Mo930zoiK7YELRw3m1N+jssUwiG/sX9HI66FibYtzppLKGyfGS qwW9RK5ay9y0GWIdTsFD93dRQeaXYheEzycaLoGKzI+73d/qLm28ow1G8e/U5qqp HNp77z/LL4D3HwYmrMYsBduunGJhmd+H0P03Wtc4S6s/1H81ahFXLXByZKu5qnwP YV9NSOYEU9dITuTuu7c= -----END CERTIFICATE-----Generated at Thu Mar 26 22:27:56 2026 by rpki-client