$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/423DBDA2BD3011EFBEFB5F49C4F9AE02.roa File: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (raw, json) Hash identifier: VkKyUkZvufLeqNWH4XS4MFj5LEClAP479cUeOm9p8S8= Subject key identifier: FE:B5:F8:D7:D8:50:F1:30:CE:8A:94:C5:E3:18:54:EE:0A:87:0D:F1 Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Certificate serial: 054A Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/423DBDA2BD3011EFBEFB5F49C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:34:10 +0000 ROA not before: Thu 05 Jun 2025 01:47:44 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 202656 IP address blocks: 203.32.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1354 (0x54a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Validity Not Before: Jun 5 01:47:44 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a486a2-18a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:55:9b:32:16:f4:4b:77:97:24:61:2f:77:d6: d3:54:2f:a6:5a:82:2d:42:57:2a:f7:da:c3:dc:8e: 84:2e:12:81:66:18:29:f3:8b:c2:9d:e1:01:51:e3: dd:a6:44:d1:48:69:58:06:9f:b3:5e:8c:70:2b:02: d1:3e:33:99:7e:5b:29:11:8e:7c:06:3c:60:88:8b: ca:39:a3:d6:32:a0:e0:e3:7c:2c:60:46:29:e2:5a: d8:38:49:4d:10:60:7d:5a:ea:86:ac:46:6c:44:63: 68:18:36:b3:4e:ea:b9:cb:77:d1:ba:25:97:8e:bc: fa:71:bf:7b:46:01:86:92:86:17:3f:29:33:ea:86: 1e:15:d7:19:30:fb:19:43:50:fd:38:b9:80:f2:74: b7:88:6c:37:ec:3a:70:d0:75:5e:4b:96:83:d2:13: 45:d9:e7:09:f8:5f:ae:83:33:77:9f:37:fa:b5:80: 6f:d4:04:1f:fd:a9:0e:d3:49:7b:02:ac:c9:28:a1: a7:da:53:fc:10:50:12:6a:ee:44:7b:ac:25:b1:56: 39:b7:51:0d:25:cb:13:80:0f:ae:da:9d:69:d7:5f: 91:15:74:6e:d4:41:78:63:a9:03:e5:60:b8:37:69: ff:40:c2:7c:be:af:ed:31:40:64:5f:09:a5:e2:ba: e6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B5:F8:D7:D8:50:F1:30:CE:8A:94:C5:E3:18:54:EE:0A:87:0D:F1 X509v3 Authority Key Identifier: keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/423DBDA2BD3011EFBEFB5F49C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.32.23.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:ff:c2:21:4a:89:61:2d:d5:fe:17:6e:68:d7:e6:59:6f:79: 35:db:32:00:98:a8:03:65:b1:d6:4b:56:8a:9b:fc:c5:78:21: fa:8e:5c:26:58:75:31:53:cc:50:7d:28:aa:78:4f:4f:86:b1: 1a:15:c0:e5:ff:2d:4a:c9:35:7e:2e:23:61:c3:e6:98:b8:5b: a4:bf:46:b3:7c:9b:5f:4c:ea:43:8c:c7:b7:61:c4:a7:34:07: b0:07:eb:2c:f7:5d:d9:fc:3d:63:84:85:37:e1:61:40:58:64: 69:92:40:54:b5:04:8a:92:54:c7:ad:11:70:e5:2a:c2:63:75: 5f:85:60:31:75:f8:83:7d:02:d7:05:f2:8e:26:0c:4f:4d:53: 01:de:df:fe:04:c8:c3:40:04:e7:30:54:9e:20:a3:f9:d5:a6: 30:4d:c7:4e:66:3f:5d:09:d9:6a:49:46:86:b3:41:30:c6:e2: d8:99:46:b5:70:b2:36:8a:93:11:08:58:58:29:d3:0f:05:f1: a2:4a:11:b3:3f:39:00:4e:b4:51:84:0e:b3:5a:8c:79:67:4a: a0:18:41:0b:67:9a:7f:b4:0a:ae:31:eb:31:8d:1c:86:32:ca: 7b:3c:61:85:21:f0:5b:9b:4b:88:55:92:64:a0:84:48:52:b2: 46:e6:56:5d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF RDk4NDY0OUQwHhcNMjUwNjA1MDE0NzQ0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODZhMi0xOGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVWbMhb0S3eXJGEvd9bTVC+mWoItQlcq99rD3I6ELhKBZhgp84vCneEBUePd pkTRSGlYBp+zXoxwKwLRPjOZflspEY58BjxgiIvKOaPWMqDg43wsYEYp4lrYOElN EGB9WuqGrEZsRGNoGDazTuq5y3fRuiWXjrz6cb97RgGGkoYXPykz6oYeFdcZMPsZ Q1D9OLmA8nS3iGw37Dpw0HVeS5aD0hNF2ecJ+F+ugzN3nzf6tYBv1AQf/akO00l7 AqzJKKGn2lP8EFASau5Ee6wlsVY5t1ENJcsTgA+u2p1p11+RFXRu1EF4Y6kD5WC4 N2n/QMJ8vq/tMUBkXwml4rrmyQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP61+NfY UPEwzoqUxeMYVO4Khw3xMB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZDNzUvM0FBNURFRTBERDU4MTFFQzg3MEZDMjBEQzRGOUFFMDIvNDIzREJEQTJC RDMwMTFFRkJFRkI1RjQ5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyyAXMA0GCSqGSIb3DQEBCwUAA4IBAQB+/8IhSolhLdX+F25o1+ZZ b3k12zIAmKgDZbHWS1aKm/zFeCH6jlwmWHUxU8xQfSiqeE9PhrEaFcDl/y1KyTV+ LiNhw+aYuFukv0azfJtfTOpDjMe3YcSnNAewB+ss913Z/D1jhIU34WFAWGRpkkBU tQSKklTHrRFw5SrCY3VfhWAxdfiDfQLXBfKOJgxPTVMB3t/+BMjDQATnMFSeIKP5 1aYwTcdOZj9dCdlqSUaGs0EwxuLYmUa1cLI2ipMRCFhYKdMPBfGiShGzPzkATrRR hA6zWox5Z0qgGEELZ5p/tAquMesxjRyGMsp7PGGFIfBbm0uIVZJkoIRIUrJG5lZd -----END CERTIFICATE-----Generated at Thu Mar 26 18:45:09 2026 by rpki-client