$ rpki-client -vvf rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/D3CE9058A5AD11ED95DBC66FC4F9AE02.roa File: D3CE9058A5AD11ED95DBC66FC4F9AE02.roa (raw, json) Hash identifier: 1d10xZbJawZOgiRoLspusD2wd9i5IKQYkPksSCGbosM= Subject key identifier: 9A:D2:C5:4F:21:16:BC:24:F7:93:DF:F3:43:D0:54:63:10:1B:56:F0 Certificate issuer: /CN=A918E469/serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103 Certificate serial: 0247 Authority key identifier: E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/D3CE9058A5AD11ED95DBC66FC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:20:27 +0000 ROA not before: Fri 05 Dec 2025 00:40:47 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 150672 IP address blocks: 203.24.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 01:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E469, serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103 Validity Not Before: Dec 5 00:40:47 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a43d1b-e5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:89:d8:d6:82:01:4a:2c:31:a1:57:60:9e:25: 0e:82:88:28:12:31:cf:2d:be:51:6c:08:85:ae:2f: 84:31:32:25:1e:f0:04:cd:79:5c:fa:e1:19:f1:4b: 9d:23:2c:69:e9:e7:91:e3:b2:dd:bd:b5:b6:90:b6: 08:44:91:5b:cc:9b:7f:34:82:9b:35:c6:b7:c8:e1: 45:67:25:70:0c:00:05:1f:5f:2b:58:7e:c3:9e:74: ff:14:b6:9f:05:71:e1:c0:19:d9:d0:5c:f5:95:82: b3:c5:6a:03:dc:29:b7:bb:f1:bb:b7:a0:c0:25:4c: 95:01:b3:2c:08:8e:6d:a7:aa:88:e2:66:e3:93:d4: 0d:e2:d5:ec:8d:31:21:64:d6:c0:a0:20:94:22:f9: 31:97:5f:76:a0:6a:ab:96:aa:45:be:27:08:af:a9: 47:f8:e5:a5:81:cd:74:e7:72:56:68:5a:1a:79:b7: f0:94:c8:c1:ec:ee:43:0d:0b:97:18:d2:1e:10:8c: a3:8f:16:fc:d6:d5:a6:e4:ee:e8:0f:78:ce:79:19: 1a:6b:e1:b3:f6:ae:f2:82:cd:10:20:90:7a:a1:74: 5c:a7:2b:55:fe:1d:d3:45:53:60:91:2b:25:1a:e0: 78:69:ba:e5:81:ee:9b:e9:4b:11:c5:ca:20:cd:57: d6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D2:C5:4F:21:16:BC:24:F7:93:DF:F3:43:D0:54:63:10:1B:56:F0 X509v3 Authority Key Identifier: keyid:E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/D3CE9058A5AD11ED95DBC66FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.24.9.0/24 Signature Algorithm: sha256WithRSAEncryption 98:71:52:0a:a0:10:f5:ed:14:71:6b:eb:63:3d:76:70:c8:ef: 46:fa:53:bd:05:3c:c5:d5:fb:1f:b9:f0:0b:6b:5a:95:77:d3: a7:60:68:fd:18:fd:4d:d7:be:dc:6c:91:09:92:7a:ba:29:a9: f6:eb:0c:5e:25:e5:71:ce:48:5f:8f:2b:a3:eb:1c:f4:ab:d0: 3f:58:a8:23:85:22:b6:96:ff:01:55:6b:5b:12:76:db:f0:4a: 77:b8:9b:81:08:53:26:b2:0c:aa:1f:6d:76:a1:24:d9:b0:d2: 2b:89:58:d3:62:c6:1e:71:0d:ab:a8:ed:81:b2:bf:63:70:26: 62:80:d7:b5:5f:90:b8:9a:50:62:ae:88:43:57:d0:5e:d1:81: 16:cb:69:e3:7e:12:1d:5a:17:b1:df:98:df:03:47:4a:16:75: b8:70:0a:d4:9d:6b:41:a3:d7:d9:80:ff:ab:1c:93:7d:58:e0: f6:a1:58:3f:30:b1:00:e7:e1:03:0d:db:3d:55:93:07:de:f0: 19:dc:3c:83:ba:eb:ae:dc:9b:62:78:30:ab:e6:79:2c:06:d8: 85:24:37:19:73:88:6c:bc:8d:19:2d:80:8d:f0:b7:b2:73:9d: d5:46:38:fc:ad:fd:7f:90:04:af:a5:f0:d0:d5:42:10:f4:5d: 5e:b6:13:2b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0NjkxMTAvBgNVBAUTKEUwRDU0NDVCODBCMTgxN0Y2MkYzQzY0QUE4QzhGNkQ3 RTEzQUUxMDMwHhcNMjUxMjA1MDA0MDQ3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0M2QxYi1lNWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAponY1oIBSiwxoVdgniUOgogoEjHPLb5RbAiFri+EMTIlHvAEzXlc+uEZ8Uud Iyxp6eeR47LdvbW2kLYIRJFbzJt/NIKbNca3yOFFZyVwDAAFH18rWH7DnnT/FLaf BXHhwBnZ0Fz1lYKzxWoD3Cm3u/G7t6DAJUyVAbMsCI5tp6qI4mbjk9QN4tXsjTEh ZNbAoCCUIvkxl192oGqrlqpFvicIr6lH+OWlgc1053JWaFoaebfwlMjB7O5DDQuX GNIeEIyjjxb81tWm5O7oD3jOeRkaa+Gz9q7ygs0QIJB6oXRcpytV/h3TRVNgkSsl GuB4abrlge6b6UsRxcogzVfWDQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJrSxU8h Frwk95Pf80PQVGMQG1bwMB8GA1UdIwQYMBaAFODVRFuAsYF/YvPGSqjI9tfhOuED MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTQ2OS9FRkE1NjNDOEE1 QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdYOWk4OFpLcU1qMjEtRTY0 UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROVkVXNEN4Z1g5aTg4WktxTWoyMS1FNjRRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU0NjkvRUZBNTYzQzhBNUE5MTFFRDhGRTMwNTUzQzRGOUFFMDIvRDNDRTkwNThB NUFEMTFFRDk1REJDNjZGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyxgJMA0GCSqGSIb3DQEBCwUAA4IBAQCYcVIKoBD17RRxa+tjPXZw yO9G+lO9BTzF1fsfufALa1qVd9OnYGj9GP1N177cbJEJknq6Kan26wxeJeVxzkhf jyuj6xz0q9A/WKgjhSK2lv8BVWtbEnbb8Ep3uJuBCFMmsgyqH212oSTZsNIriVjT YsYecQ2rqO2Bsr9jcCZigNe1X5C4mlBirohDV9Be0YEWy2njfhIdWhex35jfA0dK FnW4cArUnWtBo9fZgP+rHJN9WOD2oVg/MLEA5+EDDds9VZMH3vAZ3DyDuuuu3Jti eDCr5nksBtiFJDcZc4hsvI0ZLYCN8Leyc53VRjj8rf1/kASvpfDQ1UIQ9F1ethMr -----END CERTIFICATE-----Generated at Fri Mar 27 04:59:10 2026 by rpki-client