$ rpki-client -vvf rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/C1D2BAAAE87711EFBE7C537EC4F9AE02.roa File: C1D2BAAAE87711EFBE7C537EC4F9AE02.roa (raw, json) Hash identifier: 1dR8cu3JeKWiVz0aJKgDN3j35TtK4bIh995eeCzg8so= Subject key identifier: 07:0E:99:09:74:8E:52:5C:D6:7F:ED:CE:16:82:50:7C:5E:84:93:0C Certificate issuer: /CN=A911A557/serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156 Certificate serial: D0 Authority key identifier: 67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/C1D2BAAAE87711EFBE7C537EC4F9AE02.roa Signing time: Sun 01 Mar 2026 08:04:10 +0000 ROA not before: Tue 17 Jun 2025 06:28:26 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 58627 IP address blocks: 45.119.0.0/24 maxlen: 24 45.119.1.0/24 maxlen: 24 45.119.2.0/24 maxlen: 24 45.119.3.0/24 maxlen: 24 110.92.76.0/24 maxlen: 24 110.92.77.0/24 maxlen: 24 110.92.78.0/24 maxlen: 24 110.92.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A557, serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156 Validity Not Before: Jun 17 06:28:26 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3f2fa-1b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:99:1a:d3:60:8c:ce:70:ff:d4:55:34:0f:3e: 01:58:f1:ff:a4:6e:46:ab:e0:5b:35:eb:45:47:03: a5:9a:a1:ea:7c:8d:57:32:5a:99:60:06:f0:ed:4a: 3d:3f:04:25:71:2e:c7:ab:eb:a6:58:43:1e:b5:7e: c2:a2:3d:f5:6e:6b:c5:96:13:b8:a9:2d:d9:af:0b: 40:e2:33:cb:74:3f:cf:b0:64:fd:a3:ec:8d:64:a9: df:cf:5e:c3:a5:35:43:80:74:5a:12:ed:91:4b:82: c8:ca:12:7d:31:7e:5e:f3:18:8b:2c:99:07:66:a9: a7:17:af:68:63:82:ba:4a:0d:5e:03:68:58:1c:6d: d3:66:30:51:95:da:4e:42:66:95:f8:a4:28:6f:1b: 5c:f2:23:6f:3b:46:fc:37:78:6c:a2:b9:8b:70:5e: 6f:f0:60:64:b5:0f:56:42:b7:e6:66:9b:2b:e5:7d: 2e:cf:30:34:2d:ac:49:f4:db:61:9c:31:da:01:30: 5d:35:3d:12:f1:9d:1a:9f:5c:fc:76:c1:07:ff:37: 63:c7:e0:15:14:53:09:26:18:f4:b3:b2:f8:85:2f: ec:e2:37:c5:bc:81:7b:f0:39:8f:15:d7:d3:82:c9: 80:84:74:e7:50:aa:b1:9a:fb:f4:7d:2c:b8:51:e9: 6c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0E:99:09:74:8E:52:5C:D6:7F:ED:CE:16:82:50:7C:5E:84:93:0C X509v3 Authority Key Identifier: keyid:67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/C1D2BAAAE87711EFBE7C537EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.119.0.0/22 110.92.76.0/22 Signature Algorithm: sha256WithRSAEncryption a9:a1:9d:23:fa:d8:70:59:6f:06:57:3e:6f:10:01:12:37:4e: ff:0f:e8:73:3f:89:47:e1:a8:29:4e:7e:a5:68:bd:25:94:8c: 43:ff:a8:5b:d9:e7:a2:03:01:67:56:84:42:e8:5a:fa:28:be: f0:85:16:7e:95:5f:e9:38:18:e6:f0:a4:65:04:34:6e:9b:bd: 25:00:21:ae:09:64:97:3f:2d:6d:73:ca:0b:5b:1b:df:85:05: 1e:1a:57:54:5c:73:c4:f8:91:99:9f:13:d6:49:1e:eb:af:e1: 97:a4:b2:53:f3:af:e7:b3:0a:b4:e6:75:18:19:0c:59:9f:d7: 22:05:66:99:52:ed:f6:c2:d4:49:8c:a3:19:86:97:71:85:0d: dd:5a:4d:85:0c:30:80:73:2d:d7:2a:f5:68:35:ae:98:13:fe: 00:92:76:21:80:d8:70:87:0c:e1:dd:32:66:08:49:1c:03:fd: a5:b7:23:c5:47:31:06:d6:19:f6:75:62:5d:fe:c8:e3:47:71: 6b:9a:49:62:f4:19:22:67:ac:4a:34:b0:32:fb:cf:6e:44:1f: ee:e3:17:03:b1:54:50:42:27:48:a1:b2:22:24:7b:92:18:bb: b1:70:99:37:c9:25:f8:0e:f9:cd:75:e5:c6:67:5a:22:fe:31: c2:b6:e7:8c -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE1NTcxMTAvBgNVBAUTKDY3Q0UzRDlDMjZBMTRCQ0RGRjlCMzM5NEQzMzU1NzY2 ODIxOEExNTYwHhcNMjUwNjE3MDYyODI2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZjJmYS0xYjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZka02CMznD/1FU0Dz4BWPH/pG5Gq+BbNetFRwOlmqHqfI1XMlqZYAbw7Uo9 PwQlcS7Hq+umWEMetX7Coj31bmvFlhO4qS3ZrwtA4jPLdD/PsGT9o+yNZKnfz17D pTVDgHRaEu2RS4LIyhJ9MX5e8xiLLJkHZqmnF69oY4K6Sg1eA2hYHG3TZjBRldpO QmaV+KQobxtc8iNvO0b8N3hsormLcF5v8GBktQ9WQrfmZpsr5X0uzzA0LaxJ9Nth nDHaATBdNT0S8Z0an1z8dsEH/zdjx+AVFFMJJhj0s7L4hS/s4jfFvIF78DmPFdfT gsmAhHTnUKqxmvv0fSy4UelsJQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFAcOmQl0 jlJc1n/tzhaCUHxehJMMMB8GA1UdIwQYMBaAFGfOPZwmoUvN/5szlNM1V2aCGKFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTU1Ny85MjY4M0UzQUU4 NkMxMUVGQjIzMjA1NkVDNEY5QUUwMi9aODQ5bkNhaFM4M19tek9VMHpWWFpvSVlv VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o4NDluQ2FoUzgzX216T1UwelZYWm9JWW9WWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUE1NTcvOTI2ODNFM0FFODZDMTFFRkIyMzIwNTZFQzRGOUFFMDIvQzFEMkJBQUFF ODc3MTFFRkJFN0M1MzdFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCLXcAAwQCblxMMA0GCSqGSIb3DQEBCwUAA4IBAQCpoZ0j+thwWW8G Vz5vEAESN07/D+hzP4lH4agpTn6laL0llIxD/6hb2eeiAwFnVoRC6Fr6KL7whRZ+ lV/pOBjm8KRlBDRum70lACGuCWSXPy1tc8oLWxvfhQUeGldUXHPE+JGZnxPWSR7r r+GXpLJT86/nswq05nUYGQxZn9ciBWaZUu32wtRJjKMZhpdxhQ3dWk2FDDCAcy3X KvVoNa6YE/4AknYhgNhwhwzh3TJmCEkcA/2ltyPFRzEG1hn2dWJd/sjjR3Frmkli 9BkiZ6xKNLAy+89uRB/u4xcDsVRQQidIobIiJHuSGLuxcJk3ySX4DvnNdeXGZ1oi /jHCtueM -----END CERTIFICATE-----Generated at Mon Mar 2 18:26:05 2026 by rpki-client