$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/AF2CB5CE101E11ED9FA78415C4F9AE02.roa File: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (raw, json) Hash identifier: ygQB2y8hsTLzbf5SF7WCvYfKunhmdLdBTxW0WpljHeM= Subject key identifier: EA:C9:C3:EE:07:C2:08:05:2C:CB:65:55:70:6A:37:C8:BC:9B:2A:4D Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0DB6 Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/AF2CB5CE101E11ED9FA78415C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:28:01 +0000 ROA not before: Mon 02 Jun 2025 18:21:04 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 210504 IP address blocks: 144.48.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3510 (0xdb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Validity Not Before: Jun 2 18:21:04 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a46911-4ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:47:ec:d1:e3:66:7e:14:b9:c1:e5:9e:11:a1: 13:85:36:8b:db:fd:54:15:cc:31:c5:a4:bc:a2:aa: b0:d1:e3:54:d3:07:24:97:b6:99:21:ff:7c:16:8b: cc:a9:c5:c2:7d:b2:36:2e:39:e6:96:bc:a8:b1:a2: 39:d1:b0:83:a1:31:9d:09:fb:ff:e6:d9:73:14:5f: d9:9b:36:e7:8c:26:2d:d7:62:4a:93:8e:74:93:9d: b8:7d:78:dd:fe:dc:fe:52:ee:be:64:fd:67:20:37: 20:f9:11:d5:cf:60:bd:b9:ba:56:8d:61:2b:fe:b0: 73:18:4a:24:70:5c:da:c3:03:f8:ba:82:8e:d5:b1: 61:f2:2d:7e:11:6f:6d:7e:c8:25:88:f3:26:fb:eb: fc:98:18:d7:b0:6e:f9:d7:3b:11:31:89:17:f6:15: 0c:df:b1:54:64:a2:ed:51:ff:1c:d5:b6:14:e4:cc: b6:57:79:fd:72:01:17:28:33:7e:21:03:5a:ca:df: 66:d5:4c:b1:86:74:4e:2f:3d:0a:3a:68:37:5f:14: b7:a3:c4:d8:65:e3:4d:51:0e:b6:bc:94:52:cf:e0: bc:8e:16:5e:67:a7:44:43:b0:35:94:72:51:0e:8a: ff:17:83:f2:2b:3d:3b:20:63:90:6a:78:b2:7d:e2: 0f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C9:C3:EE:07:C2:08:05:2C:CB:65:55:70:6A:37:C8:BC:9B:2A:4D X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/AF2CB5CE101E11ED9FA78415C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 144.48.35.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:18:a2:f6:0d:67:cb:2a:e1:63:58:a8:5b:1a:b3:c3:30:5b: 55:87:aa:50:84:51:16:e7:29:63:08:0f:54:5b:ca:28:77:99: 74:76:bd:5e:0c:63:4e:8a:00:76:ec:5d:5c:07:ff:78:3c:82: 10:ae:00:f9:39:e0:0c:f8:fa:89:c2:c3:89:6a:cd:0d:f7:e0: 34:8d:68:cb:11:e4:ed:92:e4:17:a3:32:0a:b1:91:54:c0:d0: 75:4b:d9:29:51:3d:8e:b8:75:98:fb:88:2a:16:40:cd:8c:0a: 33:e7:e5:00:75:57:37:01:a6:1e:4d:8b:53:ad:af:44:7e:86: 87:75:87:f2:91:51:c7:d0:5e:0b:7a:70:61:31:88:79:52:73: f5:f4:7c:fd:99:ff:b1:c0:86:ce:19:f2:c2:3a:b3:e3:62:36: 4d:2a:14:61:ee:6e:ea:f8:c1:b4:d9:8e:49:c5:a0:57:14:81: 7e:1a:0f:74:3f:0a:c6:1c:9f:e6:30:20:ba:60:d0:a3:52:d9: 01:bf:78:e3:bd:0f:9b:16:29:7e:40:b5:c2:ee:46:21:57:00: 24:78:f0:3a:2e:59:ea:03:43:cb:44:a7:55:d8:ff:e4:d2:9e: f1:f9:c0:e8:2c:db:0b:dd:59:16:5e:35:6d:c9:36:cb:97:f1: 17:32:a5:aa -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjUwNjAyMTgyMTA0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjkxMS00ZGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Efs0eNmfhS5weWeEaEThTaL2/1UFcwxxaS8oqqw0eNU0wckl7aZIf98FovM qcXCfbI2LjnmlryosaI50bCDoTGdCfv/5tlzFF/ZmzbnjCYt12JKk450k524fXjd /tz+Uu6+ZP1nIDcg+RHVz2C9ubpWjWEr/rBzGEokcFzawwP4uoKO1bFh8i1+EW9t fsgliPMm++v8mBjXsG751zsRMYkX9hUM37FUZKLtUf8c1bYU5My2V3n9cgEXKDN+ IQNayt9m1UyxhnROLz0KOmg3XxS3o8TYZeNNUQ62vJRSz+C8jhZeZ6dEQ7A1lHJR Dor/F4PyKz07IGOQaniyfeIPMwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOrJw+4H wggFLMtlVXBqN8i8mypNMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUFFOEIvRUMyNTdDQzZFMDI1MTFFOTkxQTk3NzREQzRGOUFFMDIvQUYyQ0I1Q0Ux MDFFMTFFRDlGQTc4NDE1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAkDAjMA0GCSqGSIb3DQEBCwUAA4IBAQBMGKL2DWfLKuFjWKhbGrPD MFtVh6pQhFEW5yljCA9UW8ood5l0dr1eDGNOigB27F1cB/94PIIQrgD5OeAM+PqJ wsOJas0N9+A0jWjLEeTtkuQXozIKsZFUwNB1S9kpUT2OuHWY+4gqFkDNjAoz5+UA dVc3AaYeTYtTra9EfoaHdYfykVHH0F4LenBhMYh5UnP19Hz9mf+xwIbOGfLCOrPj YjZNKhRh7m7q+MG02Y5JxaBXFIF+Gg90PwrGHJ/mMCC6YNCjUtkBv3jjvQ+bFil+ QLXC7kYhVwAkePA6LlnqA0PLRKdV2P/k0p7x+cDoLNsL3VkWXjVtyTbLl/EXMqWq -----END CERTIFICATE-----Generated at Mon Mar 2 13:30:17 2026 by rpki-client