$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/A90EFDD2184E11F1A5F3D04C283D8C67.roa File: A90EFDD2184E11F1A5F3D04C283D8C67.roa (raw, json) Hash identifier: 41o1xFvxv8xU0sfJZnGCZodYFoVfZm4EROBfY2dH3IU= Subject key identifier: C4:FD:86:B6:45:41:11:1B:BD:97:B7:22:E8:FC:B6:AC:35:96:74:EE Certificate issuer: /CN=A918C287/serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26 Certificate serial: 21 Authority key identifier: BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/A90EFDD2184E11F1A5F3D04C283D8C67.roa Signing time: Wed 22 Apr 2026 22:38:18 +0000 ROA not before: Wed 22 Apr 2026 22:38:18 +0000 ROA not after: Sat 01 May 2038 00:00:00 +0000 asID: 131211 IP address blocks: 203.176.189.0/24 maxlen: 24 2401:4600::/32 maxlen: 32 2401:4600:1000::/36 maxlen: 36 2401:4600:2000::/36 maxlen: 36 2401:4600:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.crl rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C287, serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26 Validity Not Before: Apr 22 22:38:18 2026 GMT Not After : May 1 00:00:00 2038 GMT Subject: CN=69e94dd9-c3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:37:07:a7:44:14:89:6a:22:dc:be:94:f3:14: 48:b2:72:85:a7:4d:14:b0:e6:21:cb:27:36:15:7f: b5:34:9e:1d:df:a8:55:e5:c7:73:62:df:c1:33:e4: dd:d1:9a:d0:5e:0a:1d:4e:2d:1a:74:cd:3c:2a:c8: 1a:6d:8e:9b:cc:0c:b6:5b:3e:4a:17:2e:24:1c:75: 60:d8:b5:aa:00:ea:0d:de:94:4e:eb:24:e3:54:ce: 58:4e:b8:59:5e:e8:cf:34:95:1c:86:5b:2b:db:ae: a6:8a:98:28:d7:c4:7a:b5:5e:1a:df:62:52:74:0b: 01:24:85:b5:0a:17:56:63:dd:94:48:56:8d:bd:4a: 14:b7:23:81:38:9d:6c:1f:d5:7a:c2:47:10:fd:9d: ba:71:3f:50:66:bd:7c:0c:04:07:84:0d:77:30:ea: bc:68:80:f4:d6:ab:d3:6d:79:7b:48:da:c6:07:2a: 79:e8:bd:4d:a6:fa:ec:8f:19:3c:c0:9a:5b:7b:00: 33:7a:56:a8:64:e6:05:3d:20:85:cd:8a:5e:57:84: e9:fc:a8:77:00:57:f1:d9:66:c5:bf:61:0c:7d:b8: 5d:03:7e:c5:7b:a1:21:26:3f:d8:2a:25:aa:97:92: 6c:fd:8a:1a:a4:49:ef:9d:8f:06:79:12:ec:2b:04: ac:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FD:86:B6:45:41:11:1B:BD:97:B7:22:E8:FC:B6:AC:35:96:74:EE X509v3 Authority Key Identifier: keyid:BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/A90EFDD2184E11F1A5F3D04C283D8C67.roa sbgp-ipAddrBlock: critical IPv4: 203.176.189.0/24 IPv6: 2401:4600::/32 Signature Algorithm: sha256WithRSAEncryption 85:5c:51:4b:06:d7:76:13:7c:a9:c1:f1:41:5e:6d:50:3a:ad: 5e:9f:28:bd:81:b5:06:c4:cd:cd:cd:f7:96:76:bb:81:e0:f7: 21:95:aa:eb:95:83:8a:ee:11:b5:0c:7c:24:52:14:18:2b:99: 4b:36:5b:c4:62:e6:13:87:4e:55:d7:de:fd:51:50:4d:56:20: 0d:5d:de:47:ce:68:d9:f6:d6:8a:0e:fe:00:4c:1d:ef:b5:b2: 6f:53:5e:ed:f9:a5:1b:23:1b:a6:de:5b:2d:3d:ba:b3:22:5e: fa:af:60:ec:bd:d6:13:6a:e8:7f:cf:f2:38:2f:4f:4f:02:ff: ad:c9:6a:00:99:7d:59:0b:20:a3:66:75:fb:e4:cd:79:c7:83: b9:5a:3a:c0:f6:62:9a:41:7c:62:29:ab:e4:2f:73:b6:e0:a8: e7:9c:9b:c2:a3:b5:b7:be:04:38:7a:5c:d3:89:af:c2:ce:c4: 94:0b:df:5e:7e:aa:66:9a:d0:43:e8:b9:03:82:e5:3b:e5:2e: 40:3a:4f:7e:27:39:f7:ca:df:f5:4c:47:64:14:f1:dd:b6:e6: 29:3d:62:e5:84:ab:87:84:63:d8:aa:ac:c4:64:56:8e:7d:f0: f1:ce:19:56:4f:06:4a:6a:a0:a2:dd:ba:b5:4c:6b:22:24:65: f7:0b:a9:de -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzI4NzExMC8GA1UEBRMoQkQ3MjE0M0RCN0FGRjYxM0U4MkVBMjkwQjRDOUMyQkZG QTg4QkMyNjAeFw0yNjA0MjIyMjM4MThaFw0zODA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5ZTk0ZGQ5LWMzZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCINwenRBSJaiLcvpTzFEiycoWnTRSw5iHLJzYVf7U0nh3fqFXlx3Ni38Ez5N3R mtBeCh1OLRp0zTwqyBptjpvMDLZbPkoXLiQcdWDYtaoA6g3elE7rJONUzlhOuFle 6M80lRyGWyvbrqaKmCjXxHq1XhrfYlJ0CwEkhbUKF1Zj3ZRIVo29ShS3I4E4nWwf 1XrCRxD9nbpxP1BmvXwMBAeEDXcw6rxogPTWq9NteXtI2sYHKnnovU2m+uyPGTzA mlt7ADN6Vqhk5gU9IIXNil5XhOn8qHcAV/HZZsW/YQx9uF0DfsV7oSEmP9gqJaqX kmz9ihqkSe+djwZ5EuwrBKxvAgMBAAGjggJvMIICazAdBgNVHQ4EFgQUxP2GtkVB ERu9l7ci6Py2rDWWdO4wHwYDVR0jBBgwFoAUvXIUPbev9hPoLqKQtMnCv/qIvCYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMjg3LzYzMDI3REY2MTg0 RDExRjFCMkY5QjQyRDI4M0Q4QzY3L3ZYSVVQYmV2OWhQb0xxS1F0TW5Ddl9xSXZD WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdlhJVVBiZXY5aFBvTHFLUXRNbkN2X3FJdkNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzI4Ny82MzAyN0RGNjE4NEQxMUYxQjJGOUI0MkQyODNEOEM2Ny9BOTBFRkREMjE4 NEUxMUYxQTVGM0QwNEMyODNEOEM2Ny5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE AgABMAYDBADLsL0wDQQCAAIwBwMFACQBRgAwDQYJKoZIhvcNAQELBQADggEBAIVc UUsG13YTfKnB8UFebVA6rV6fKL2BtQbEzc3N95Z2u4Hg9yGVquuVg4ruEbUMfCRS FBgrmUs2W8Ri5hOHTlXX3v1RUE1WIA1d3kfOaNn21ooO/gBMHe+1sm9TXu35pRsj G6beWy09urMiXvqvYOy91hNq6H/P8jgvT08C/63JagCZfVkLIKNmdfvkzXnHg7la OsD2YppBfGIpq+Qvc7bgqOecm8Kjtbe+BDh6XNOJr8LOxJQL315+qmaa0EPouQOC 5TvlLkA6T34nOffK3/VMR2QU8d225ik9YuWEq4eEY9iqrMRkVo598PHOGVZPBkpq oKLdurVMayIkZfcLqd4= -----END CERTIFICATE-----Generated at Wed May 13 09:55:49 2026 by rpki-client