$ rpki-client -vvf rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/233E4D90309811ECAED04B4AC4F9AE02.roa File: 233E4D90309811ECAED04B4AC4F9AE02.roa (raw, json) Hash identifier: weDFmKA+OeY6LyvEaG7tZKipvC9cPrmqdRCDJ7Yuam4= Subject key identifier: B0:AE:66:77:73:B2:BB:EC:26:1E:D2:2D:BA:75:57:D9:58:FE:64:C1 Certificate issuer: /CN=A918A0B8/serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF Certificate serial: 0543 Authority key identifier: D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/233E4D90309811ECAED04B4AC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:57:09 +0000 ROA not before: Tue 03 Jun 2025 00:33:49 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 45753 IP address blocks: 110.173.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1347 (0x543) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A0B8, serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF Validity Not Before: Jun 3 00:33:49 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a40d75-70cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:49:14:c5:aa:95:d3:1f:c2:b3:8d:bf:0c:7b: 45:5b:10:37:37:f6:6d:3a:ed:2d:c9:48:15:67:bb: 96:69:f0:ee:6d:99:90:24:96:ba:da:f3:05:b4:9c: c2:31:3c:bb:33:76:64:34:55:53:c9:88:31:ce:22: f6:64:5a:29:50:0b:d3:02:2f:20:4e:5e:15:ae:69: 84:ed:94:ec:03:49:42:0f:ec:78:ef:f2:18:b6:3d: f4:c5:87:47:0a:f1:d7:8d:6a:ab:08:8a:df:f2:26: 7c:ca:76:b2:1b:b4:9b:49:58:41:f1:3a:31:37:e9: 35:b2:52:10:b1:6f:82:4c:ed:3b:68:39:45:a8:2b: 42:a7:99:2f:26:41:c2:56:47:5f:63:28:8c:65:cf: bd:0c:15:19:d3:2d:44:de:1a:90:c9:fb:0c:14:64: 61:49:93:da:1f:72:52:ec:24:90:b8:25:40:91:6f: 13:54:74:1c:7c:84:26:20:da:51:ee:72:fb:62:d0: c6:26:36:64:46:23:ad:d3:18:0c:0a:62:6e:74:47: c4:05:fd:1f:ef:2d:17:bd:fa:e2:f7:7a:56:10:ef: 46:50:56:55:6a:88:98:b2:b5:dc:07:6e:4e:96:56: 47:59:f1:f2:d0:c9:c1:6e:45:17:59:e6:6f:db:21: 3e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AE:66:77:73:B2:BB:EC:26:1E:D2:2D:BA:75:57:D9:58:FE:64:C1 X509v3 Authority Key Identifier: keyid:D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/233E4D90309811ECAED04B4AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 110.173.48.0/20 Signature Algorithm: sha256WithRSAEncryption 4e:2e:c8:8d:04:2f:e1:87:c5:0b:5f:cb:02:16:c6:9d:38:03: bb:a4:22:45:46:bc:69:b9:a5:b1:d1:c0:2c:21:03:65:b4:ba: 2f:25:db:44:2a:af:1a:29:d8:62:35:eb:7f:54:86:b6:f2:56: 21:10:65:75:db:a6:67:35:7f:15:5e:bc:d2:f6:30:cf:79:48: 78:33:ce:b6:5c:2e:b0:15:bf:65:9b:14:8a:8b:dc:3f:3d:57: db:93:ff:94:b5:23:28:b8:cc:b4:9d:81:54:63:7f:8a:03:7b: de:74:45:b2:e6:8e:94:01:64:81:00:23:38:78:59:a4:6c:ca: 78:6b:1f:26:61:25:49:0c:5e:2a:a8:38:a9:e3:f0:88:0d:20: 99:21:31:7a:3d:ba:5b:29:3b:0c:ec:cb:db:97:7a:a9:10:76: 27:98:b8:8b:55:d6:97:d4:d0:a1:65:65:fb:01:93:7a:66:de: f3:9d:08:97:cb:f7:1d:e3:4c:ec:8e:48:48:c1:d4:0a:c5:81: 2b:81:45:2a:c9:fa:4d:7f:d0:ce:c1:a4:7e:f9:c7:d8:c1:d5: de:a3:07:08:30:12:e5:0d:2d:30:46:87:e3:b2:66:01:c0:3c: fe:bf:fa:e2:a8:11:2b:91:70:8a:a9:c0:1f:4c:0e:bb:6b:f3: df:6f:6f:6d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEwQjgxMTAvBgNVBAUTKEQ3REMwNDkwRDhFRTczRUI5NjUzRThFMjQ3NkZGQ0ZC ODk3NEFBREYwHhcNMjUwNjAzMDAzMzQ5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGQ3NS03MGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUkUxaqV0x/Cs42/DHtFWxA3N/ZtOu0tyUgVZ7uWafDubZmQJJa62vMFtJzC MTy7M3ZkNFVTyYgxziL2ZFopUAvTAi8gTl4VrmmE7ZTsA0lCD+x47/IYtj30xYdH CvHXjWqrCIrf8iZ8ynayG7SbSVhB8ToxN+k1slIQsW+CTO07aDlFqCtCp5kvJkHC VkdfYyiMZc+9DBUZ0y1E3hqQyfsMFGRhSZPaH3JS7CSQuCVAkW8TVHQcfIQmINpR 7nL7YtDGJjZkRiOt0xgMCmJudEfEBf0f7y0Xvfri93pWEO9GUFZVaoiYsrXcB25O llZHWfHy0MnBbkUXWeZv2yE+4QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLCuZndz srvsJh7SLbp1V9lY/mTBMB8GA1UdIwQYMBaAFNfcBJDY7nPrllPo4kdv/PuJdKrf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTBCOC8xN0RFRkYxNDJG RjYxMUVDOTA0N0EyNDNDNEY5QUUwMi8xOXdFa05qdWMtdVdVLWppUjJfOC00bDBx dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE5d0VrTmp1Yy11V1UtamlSMl84LTRsMHF0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEEwQjgvMTdERUZGMTQyRkY2MTFFQzkwNDdBMjQzQzRGOUFFMDIvMjMzRTREOTAz MDk4MTFFQ0FFRDA0QjRBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEbq0wMA0GCSqGSIb3DQEBCwUAA4IBAQBOLsiNBC/hh8ULX8sCFsad OAO7pCJFRrxpuaWx0cAsIQNltLovJdtEKq8aKdhiNet/VIa28lYhEGV126ZnNX8V XrzS9jDPeUh4M862XC6wFb9lmxSKi9w/PVfbk/+UtSMouMy0nYFUY3+KA3vedEWy 5o6UAWSBACM4eFmkbMp4ax8mYSVJDF4qqDip4/CIDSCZITF6PbpbKTsM7Mvbl3qp EHYnmLiLVdaX1NChZWX7AZN6Zt7znQiXy/cd40zsjkhIwdQKxYErgUUqyfpNf9DO waR++cfYwdXeowcIMBLlDS0wRofjsmYBwDz+v/riqBErkXCKqcAfTA67a/Pfb29t -----END CERTIFICATE-----Generated at Thu Mar 26 16:02:22 2026 by rpki-client