$ rpki-client -vvf rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/DFC21CD8B1CF11EAA8732709C4F9AE02.roa File: DFC21CD8B1CF11EAA8732709C4F9AE02.roa (raw, json) Hash identifier: bJrrgsYLHjV75zVLzQBs3qgGPoWpvtfZTp73HYIJWw4= Subject key identifier: 74:A4:39:39:9A:68:22:D8:8C:C5:B1:7A:6F:A0:88:26:1D:3A:50:04 Certificate issuer: /CN=A9195262/serialNumber=5514FCE43863F5181AF349382D38414E960F096F Certificate serial: 0974 Authority key identifier: 55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/DFC21CD8B1CF11EAA8732709C4F9AE02.roa Signing time: Fri 06 Mar 2026 20:26:44 +0000 ROA not before: Fri 06 Mar 2026 20:26:44 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 55707 IP address blocks: 119.63.200.0/21 maxlen: 24 202.45.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2420 (0x974) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195262, serialNumber=5514FCE43863F5181AF349382D38414E960F096F Validity Not Before: Mar 6 20:26:44 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69ab3884-2d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bd:eb:c5:7a:98:fd:66:75:3b:85:2e:c2:72: 28:29:d9:75:95:81:e7:86:93:9c:8f:6f:4d:38:2d: 85:8e:d0:79:c3:42:59:bf:e9:fd:15:94:2f:08:6c: f0:fa:4a:11:b6:c4:0c:d9:e4:90:95:3a:ef:8d:60: 5d:63:bb:3d:9e:a7:fc:b4:8d:22:ea:0f:4d:2f:98: c2:8f:06:c3:5d:3f:14:9c:d9:d3:55:29:24:6b:9b: f0:e2:da:42:5f:4c:6e:97:90:25:15:9c:77:86:4e: 07:f6:6b:df:f7:64:c5:b1:f1:19:a8:c0:74:d2:64: fd:35:d0:00:6b:c4:3e:d1:ac:5f:95:63:1c:b2:01: 0e:14:36:de:ce:1a:e3:18:34:4f:00:5d:3a:85:0a: f7:91:ba:fc:30:ac:32:32:22:c4:28:66:01:86:84: 59:b1:9c:8a:a4:d6:5d:96:7c:32:86:16:71:7b:f5: 3f:5f:a7:8d:5d:17:25:7b:f6:28:ce:07:29:a6:16: 25:ad:c5:e5:73:0d:d6:99:92:33:33:e3:d3:6a:4e: bf:98:43:32:bf:43:4c:24:b5:00:39:94:2a:69:99: 97:7e:c5:bc:d6:a9:45:a1:be:b9:be:43:bf:e1:f5: f2:c1:2f:61:6a:7a:6c:6e:76:e4:fa:ff:3c:7f:41: eb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A4:39:39:9A:68:22:D8:8C:C5:B1:7A:6F:A0:88:26:1D:3A:50:04 X509v3 Authority Key Identifier: keyid:55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/DFC21CD8B1CF11EAA8732709C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 119.63.200.0/21 202.45.152.0/22 Signature Algorithm: sha256WithRSAEncryption c9:c7:b7:fb:26:0f:c1:1c:55:ed:e4:5f:06:75:d4:f5:df:ce: 8c:24:a9:20:8c:e2:42:25:db:a6:70:25:8f:38:7b:1d:0c:da: 15:82:1a:43:b5:a8:58:5d:44:46:46:84:93:6a:9a:c1:2f:4e: 68:bd:ec:a3:a2:88:e3:db:73:7b:cb:67:38:bc:d7:80:14:48: 33:c2:0f:ea:50:bc:bb:8a:e9:7c:da:1d:95:45:6b:54:ec:5d: 6b:03:90:15:af:5f:75:94:b2:85:8a:4a:12:36:9f:1d:c6:78: 5c:da:3a:70:7e:3d:7f:cb:a0:c8:8b:1d:20:68:03:eb:1a:2f: 4a:55:a8:73:92:99:1a:94:a8:b3:d1:cd:bb:bb:e5:ec:20:b0: 4b:ed:9f:4c:bc:3c:ff:52:a2:ff:22:a9:1a:ff:e2:5e:bf:78: 67:29:31:97:3b:0d:fa:6e:9f:74:9d:28:51:5a:d4:ac:ae:6c: 89:b8:58:55:f6:64:2a:2b:06:29:4b:be:b1:27:9e:c2:1b:12: 0c:b4:ab:30:0c:ae:a9:52:2a:f2:27:dc:b0:a8:f9:d2:82:cb: e3:8a:7f:79:30:84:7b:4e:7b:bb:06:ab:52:7d:d6:46:27:ef: 03:1a:3a:13:d2:5b:7f:a2:75:ce:07:2d:85:ba:87:56:88:fb: f9:95:56:c6 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUyNjIxMTAvBgNVBAUTKDU1MTRGQ0U0Mzg2M0Y1MTgxQUYzNDkzODJEMzg0MTRF OTYwRjA5NkYwHhcNMjYwMzA2MjAyNjQ0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFiMzg4NC0yZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyb3rxXqY/WZ1O4UuwnIoKdl1lYHnhpOcj29NOC2FjtB5w0JZv+n9FZQvCGzw +koRtsQM2eSQlTrvjWBdY7s9nqf8tI0i6g9NL5jCjwbDXT8UnNnTVSkka5vw4tpC X0xul5AlFZx3hk4H9mvf92TFsfEZqMB00mT9NdAAa8Q+0axflWMcsgEOFDbezhrj GDRPAF06hQr3kbr8MKwyMiLEKGYBhoRZsZyKpNZdlnwyhhZxe/U/X6eNXRcle/Yo zgcpphYlrcXlcw3WmZIzM+PTak6/mEMyv0NMJLUAOZQqaZmXfsW81qlFob65vkO/ 4fXywS9hanpsbnbk+v88f0HrkwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFHSkOTma aCLYjMWxem+giCYdOlAEMB8GA1UdIwQYMBaAFFUU/OQ4Y/UYGvNJOC04QU6WDwlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTI2Mi9GN0E2RDU5Q0Iw RkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlSZ2E4MGs0TFRoQlRwWVBD VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSVDg1RGhqOVJnYTgwazRMVGhCVHBZUENXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTUyNjIvRjdBNkQ1OUNCMEZDMTFFQTkyMjg5QzQxQzRGOUFFMDIvREZDMjFDRDhC MUNGMTFFQUE4NzMyNzA5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQDdz/IAwQCyi2YMA0GCSqGSIb3DQEBCwUAA4IBAQDJx7f7Jg/BHFXt 5F8GddT1386MJKkgjOJCJdumcCWPOHsdDNoVghpDtahYXURGRoSTaprBL05oveyj oojj23N7y2c4vNeAFEgzwg/qULy7iul82h2VRWtU7F1rA5AVr191lLKFikoSNp8d xnhc2jpwfj1/y6DIix0gaAPrGi9KVahzkpkalKiz0c27u+XsILBL7Z9MvDz/UqL/ Iqka/+Jev3hnKTGXOw36bp90nShRWtSsrmyJuFhV9mQqKwYpS76xJ57CGxIMtKsw DK6pUiryJ9ywqPnSgsvjin95MIR7Tnu7BqtSfdZGJ+8DGjoT0lt/onXOBy2FuodW iPv5lVbG -----END CERTIFICATE-----Generated at Thu Mar 26 14:56:58 2026 by rpki-client