$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/49ADA7183C6111F0BB3B1A85C4F9AE02.roa File: 49ADA7183C6111F0BB3B1A85C4F9AE02.roa (raw, json) Hash identifier: swrCPqokaD5gtVZiwh46FSPGf/pjIaVEfTgshjOCQ+A= Subject key identifier: F8:73:FF:DF:69:C1:EB:3A:BE:D1:A2:08:68:42:FB:B8:16:27:6A:B9 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0DA7 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/49ADA7183C6111F0BB3B1A85C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:17:21 +0000 ROA not before: Sat 04 Oct 2025 18:17:42 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141209 IP address blocks: 59.152.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3495 (0xda7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Oct 4 18:17:42 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a482b1-c262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:95:82:fc:0a:56:3d:8b:fe:79:c8:c3:8e:ca: a2:29:11:f9:ce:d3:5e:f9:61:34:82:46:73:9d:de: 08:fc:c3:70:c1:b5:c8:44:19:5e:2b:25:b3:c8:a7: c4:f0:d4:f7:e1:aa:cc:b5:33:af:cc:68:f8:eb:a7: 3f:33:c7:24:3f:82:71:2e:e5:e7:4d:20:69:f0:b2: 58:3c:ef:9a:d5:bc:aa:05:6f:a4:8a:17:17:9c:54: b5:d9:71:33:6d:1e:b2:57:f1:ae:22:49:5b:5e:f9: 3c:36:0e:a4:fb:7f:33:61:7b:00:13:4a:b1:ff:9e: 9b:f7:1b:c9:10:95:45:7d:cf:93:eb:eb:6f:48:2e: a6:4e:eb:65:50:43:cb:5f:75:e8:e2:2d:3a:4c:60: 5f:47:85:2f:b7:64:2b:7f:ea:8a:6f:e8:11:cc:34: 66:12:fb:0e:87:10:86:a2:96:71:41:17:fd:d5:48: d7:78:e6:fd:50:17:0c:d3:92:83:1e:95:ba:ec:a0: 4a:58:87:af:82:5f:60:16:07:0c:91:27:59:ee:5b: 64:76:13:ca:32:56:02:1f:d6:ce:46:93:1c:cd:6a: ff:51:08:9d:7f:4f:60:36:ee:e0:7b:2e:41:a3:da: c6:d2:e1:36:85:46:da:e1:d0:d3:f8:f1:57:28:09: cc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:73:FF:DF:69:C1:EB:3A:BE:D1:A2:08:68:42:FB:B8:16:27:6A:B9 X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/49ADA7183C6111F0BB3B1A85C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 59.152.106.0/24 Signature Algorithm: sha256WithRSAEncryption 50:3f:ef:f4:34:73:57:1a:f9:48:a9:6f:ae:c2:f9:df:3c:b9: 49:61:14:1b:ee:4c:c1:03:8c:28:75:b2:bf:31:a0:27:27:95: 1b:f1:71:44:0a:4e:8e:b5:7c:f5:63:d6:a7:f8:f4:fe:c7:11: 24:4b:ef:f3:e5:8b:9e:0e:65:be:b3:09:96:7d:55:32:e5:d5: 0e:83:57:82:d0:2e:cd:94:08:2c:7b:a8:1a:19:41:f6:b0:36: 99:0d:ae:c0:5f:f7:d0:60:bc:0d:6d:9f:ca:28:dc:16:3c:49: 16:be:95:07:3f:98:46:a9:e5:7f:22:26:25:90:2b:43:8b:40: 12:74:e7:ac:59:d8:7e:f2:75:46:ba:72:25:05:17:f2:b5:04: a5:00:df:13:68:80:2b:82:c9:95:ee:64:21:43:12:19:b7:27: 4a:38:30:ec:11:e4:5b:45:88:4e:26:80:84:34:ef:2a:35:a8: f3:f3:82:9c:2a:86:8f:b2:cd:ab:52:b5:6d:69:39:a6:32:bc: 3b:ab:3e:11:9d:f3:07:16:0c:75:e4:eb:0a:21:95:1d:39:05: 30:39:67:39:82:c3:b2:0d:3e:3e:d5:72:84:c3:74:f9:2b:90: c2:96:2b:d7:cf:6e:9b:81:51:36:43:8e:cc:11:fb:c6:22:db: a3:4e:98:22 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjUxMDA0MTgxNzQyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODJiMS1jMjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15WC/ApWPYv+ecjDjsqiKRH5ztNe+WE0gkZznd4I/MNwwbXIRBleKyWzyKfE 8NT34arMtTOvzGj466c/M8ckP4JxLuXnTSBp8LJYPO+a1byqBW+kihcXnFS12XEz bR6yV/GuIklbXvk8Ng6k+38zYXsAE0qx/56b9xvJEJVFfc+T6+tvSC6mTutlUEPL X3Xo4i06TGBfR4Uvt2Qrf+qKb+gRzDRmEvsOhxCGopZxQRf91UjXeOb9UBcM05KD HpW67KBKWIevgl9gFgcMkSdZ7ltkdhPKMlYCH9bORpMczWr/UQidf09gNu7gey5B o9rG0uE2hUba4dDT+PFXKAnMvQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPhz/99p wes6vtGiCGhC+7gWJ2q5MB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE5OTgvQUIzNEZCRDRGMjU4MTFFOUI3NUUzQzcwQzRGOUFFMDIvNDlBREE3MTgz QzYxMTFGMEJCM0IxQTg1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAO5hqMA0GCSqGSIb3DQEBCwUAA4IBAQBQP+/0NHNXGvlIqW+uwvnf PLlJYRQb7kzBA4wodbK/MaAnJ5Ub8XFECk6OtXz1Y9an+PT+xxEkS+/z5YueDmW+ swmWfVUy5dUOg1eC0C7NlAgse6gaGUH2sDaZDa7AX/fQYLwNbZ/KKNwWPEkWvpUH P5hGqeV/IiYlkCtDi0ASdOesWdh+8nVGunIlBRfytQSlAN8TaIArgsmV7mQhQxIZ tydKODDsEeRbRYhOJoCENO8qNajz84KcKoaPss2rUrVtaTmmMrw7qz4RnfMHFgx1 5OsKIZUdOQUwOWc5gsOyDT4+1XKEw3T5K5DClivXz26bgVE2Q47MEfvGItujTpgi -----END CERTIFICATE-----Generated at Thu Mar 26 22:03:58 2026 by rpki-client