$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/D36E1CE02A3211EFA7554C59C4F9AE02.roa File: D36E1CE02A3211EFA7554C59C4F9AE02.roa (raw, json) Hash identifier: jezkpeGjeNMy/RlYmBlt9Ho3DSfw1C75XL9w674SZ0o= Subject key identifier: EA:53:3D:72:34:CE:5D:1B:FD:C5:4D:FF:C5:63:34:25:46:58:55:27 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 08D5 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/D36E1CE02A3211EFA7554C59C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:53:42 +0000 ROA not before: Wed 08 Oct 2025 22:54:05 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 141750 IP address blocks: 163.53.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2261 (0x8d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 8 22:54:05 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a48b36-e1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ca:59:a7:86:21:42:f1:62:7d:44:7e:9c:d1: 30:b1:3d:e2:e2:83:c1:39:8d:69:2e:fc:4e:20:2a: ca:c6:1a:b2:7a:46:c8:39:da:57:0e:a6:0c:5a:db: 14:53:42:1f:5b:c9:67:57:fe:60:b4:af:fc:c1:7b: 4a:7e:ed:85:a1:9d:bd:70:44:e2:dd:71:1b:f9:d1: bf:12:29:f5:bd:e9:b8:7e:ac:f1:df:8d:51:57:0c: 22:38:88:f9:ff:4f:bc:b1:28:c7:21:4e:ed:bc:db: ee:74:f9:ea:8c:55:9b:69:42:bb:b7:f1:b6:0d:b3: 73:a3:ab:dc:fa:1d:68:5a:2b:7b:bb:c2:d4:0b:c2: b4:ac:a8:16:24:02:6f:12:60:a8:c1:09:7d:c5:8a: 67:4f:1e:6b:06:d4:05:49:c3:82:1a:92:47:d3:fa: aa:96:08:21:e2:34:ff:df:52:43:c1:6b:91:91:35: 21:08:31:f4:df:67:48:2f:ce:93:3e:19:cf:ad:3c: 21:25:9c:56:49:3f:cf:7a:44:49:7e:12:71:51:ba: 32:c1:8f:04:ea:5b:d6:2c:55:de:b9:69:14:b2:a2: cd:09:fe:fa:06:3f:ed:e7:7c:ff:eb:54:9e:93:ec: a7:65:94:e8:d0:48:fd:c5:70:9e:2a:a1:c6:9d:fa: dd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:53:3D:72:34:CE:5D:1B:FD:C5:4D:FF:C5:63:34:25:46:58:55:27 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/D36E1CE02A3211EFA7554C59C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 163.53.16.0/24 Signature Algorithm: sha256WithRSAEncryption 82:c6:eb:e6:a8:4c:f0:29:82:18:a5:1d:aa:2f:0a:59:53:b4: 3b:bb:7b:71:21:2c:dd:7c:d7:8b:44:87:66:19:fd:ea:3b:a3: 68:a3:ef:34:95:6b:bd:fa:c0:c1:58:0a:9e:12:88:98:8d:dc: d1:d6:4c:03:9b:6a:c7:ba:0a:43:b4:f6:44:5f:dc:af:a5:9c: e2:22:9a:34:29:6e:4f:9b:cd:08:ee:4f:a0:f1:53:65:77:ba: 28:39:31:cf:0b:58:e9:87:e2:17:51:3f:22:44:d4:8c:66:1e: e5:ff:4e:e2:e4:e0:cb:d0:b8:72:cc:d2:10:82:6d:15:3a:61: 74:14:07:8f:00:95:26:28:b6:c6:19:de:ae:72:ee:48:54:31: 00:b6:2a:d0:cd:9a:be:f2:b1:a7:19:97:1a:b0:11:21:b2:a7: a7:fb:74:43:b7:42:77:be:c4:df:66:88:35:89:2d:91:20:8c: b8:b4:34:86:6d:1f:8b:2e:e6:c0:06:e1:ab:ad:5c:cf:0b:53: fc:be:97:dc:5d:f8:a1:07:cc:8e:f2:03:78:21:2d:b6:07:ed: 57:81:a9:71:9b:b1:7d:d3:cc:7d:2f:e1:a0:a7:cf:0f:f6:41: 39:b9:ff:7d:ff:c7:8d:a5:bd:44:f4:c3:4b:8d:dc:aa:5f:9a: e4:32:da:d0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUxMDA4MjI1NDA1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGIzNi1lMWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuspZp4YhQvFifUR+nNEwsT3i4oPBOY1pLvxOICrKxhqyekbIOdpXDqYMWtsU U0IfW8lnV/5gtK/8wXtKfu2FoZ29cETi3XEb+dG/Ein1vem4fqzx341RVwwiOIj5 /0+8sSjHIU7tvNvudPnqjFWbaUK7t/G2DbNzo6vc+h1oWit7u8LUC8K0rKgWJAJv EmCowQl9xYpnTx5rBtQFScOCGpJH0/qqlggh4jT/31JDwWuRkTUhCDH032dIL86T PhnPrTwhJZxWST/PekRJfhJxUboywY8E6lvWLFXeuWkUsqLNCf76Bj/t53z/61Se k+ynZZTo0Ej9xXCeKqHGnfrdFQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOpTPXI0 zl0b/cVN/8VjNCVGWFUnMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvRDM2RTFDRTAy QTMyMTFFRkE3NTU0QzU5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAozUQMA0GCSqGSIb3DQEBCwUAA4IBAQCCxuvmqEzwKYIYpR2qLwpZ U7Q7u3txISzdfNeLRIdmGf3qO6Noo+80lWu9+sDBWAqeEoiYjdzR1kwDm2rHugpD tPZEX9yvpZziIpo0KW5Pm80I7k+g8VNld7ooOTHPC1jph+IXUT8iRNSMZh7l/07i 5ODL0LhyzNIQgm0VOmF0FAePAJUmKLbGGd6ucu5IVDEAtirQzZq+8rGnGZcasBEh sqen+3RDt0J3vsTfZog1iS2RIIy4tDSGbR+LLubABuGrrVzPC1P8vpfcXfihB8yO 8gN4IS22B+1Xgalxm7F908x9L+Ggp88P9kE5uf99/8eNpb1E9MNLjdyqX5rkMtrQ -----END CERTIFICATE-----Generated at Mon Mar 2 02:15:58 2026 by rpki-client