$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/63EBB7C6DDD311E8B6169878C4F9AE02.roa File: 63EBB7C6DDD311E8B6169878C4F9AE02.roa (raw, json) Hash identifier: MY4DAZOKu2zT6HeC1X2VxPy7UXP74L8zd/vIMj/BrX4= Subject key identifier: D3:84:0E:8A:67:C3:D7:F2:FA:AE:86:3D:9B:5E:3B:4B:FC:C9:BA:C4 Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2BE5 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/63EBB7C6DDD311E8B6169878C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:23:36 +0000 ROA not before: Fri 02 Jan 2026 16:13:50 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 55476 IP address blocks: 202.80.233.0/24 maxlen: 24 2405:9800:c909::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:46:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11237 (0x2be5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Jan 2 16:13:50 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a49238-5a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:79:65:68:69:27:e5:1f:bb:e6:08:3f:4d:26: cd:ac:ae:22:75:02:d6:c1:f5:3e:01:f0:cb:26:3b: 6c:db:89:c2:f2:91:2d:4d:bb:5f:13:51:24:8a:44: 61:c7:94:53:85:e1:52:77:ef:7c:9b:6b:16:be:ea: 12:3c:fb:9b:02:44:fc:28:49:05:df:0f:6a:01:83: 2b:d7:e4:31:cb:38:22:4a:e0:df:a9:03:b6:93:d6: b6:be:9f:4d:6e:71:11:8e:33:31:34:e5:b9:07:70: db:92:a1:0c:df:dd:e4:9f:9d:96:9b:23:57:81:07: 72:dc:cc:a7:ed:dc:26:12:2b:09:74:f7:b7:97:4c: 6b:09:5a:38:30:ef:4d:6c:d0:e2:c6:5c:80:49:0a: 27:6f:c8:7b:bf:e5:3c:ad:e7:41:3c:5d:26:f5:d4: dd:c4:61:df:1f:a2:7d:c0:2b:65:2b:f9:30:f7:ef: dc:3e:de:67:62:4a:72:d1:91:0c:7d:fa:a9:ea:19: 29:9f:04:47:89:78:05:e6:61:ff:5f:26:a1:0b:13: 67:c2:f7:61:36:9e:a1:81:12:e6:2f:9e:b4:1a:8f: 3e:55:92:53:9c:bc:0b:a9:4d:c5:c1:bc:cd:8e:92: 22:50:2d:93:e9:24:81:d3:b7:77:e6:8c:72:39:a8: ba:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:84:0E:8A:67:C3:D7:F2:FA:AE:86:3D:9B:5E:3B:4B:FC:C9:BA:C4 X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/63EBB7C6DDD311E8B6169878C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.80.233.0/24 IPv6: 2405:9800:c909::/48 Signature Algorithm: sha256WithRSAEncryption 07:20:be:8a:ad:1a:92:ad:88:fb:4a:d1:80:12:82:ac:b2:46: 4d:b5:a6:9a:d6:44:23:99:6e:0a:03:0e:a2:d3:0f:d0:71:6d: 8b:86:b8:1d:b6:06:32:ea:61:a9:ed:87:42:6a:80:b9:fa:ea: f0:53:22:7d:82:8e:7b:26:af:0d:03:d0:d7:0d:60:84:16:ad: 3e:3b:86:21:db:6b:dc:e2:a5:d8:a2:9d:7d:2c:16:ad:a8:4c: fb:c6:a6:38:4f:30:07:25:d7:43:01:52:01:c0:3b:27:04:cc: 8d:88:00:d9:a6:42:a7:ab:e4:ed:b8:38:3c:9f:1c:c2:53:52: 75:ee:ff:16:45:ea:18:33:b0:c6:51:20:d0:43:d3:bf:b4:3d: f2:56:48:1e:cf:49:42:11:68:03:f4:81:fd:b4:96:4d:8a:b4: 09:10:96:e8:0f:80:2c:7e:21:f3:03:ac:04:da:6b:b2:50:7a: 7e:c5:88:ce:89:81:09:21:ab:3c:94:77:d8:e1:a1:22:e9:fd: df:d2:7b:72:eb:a2:b8:4d:3c:ae:db:cf:48:cb:03:43:78:fd: af:82:cd:28:24:b2:8d:bb:37:e4:6a:09:d4:56:ac:63:9e:f1: 1d:db:b7:0e:e4:be:1a:13:c3:82:a7:c9:8c:7a:9c:b1:fc:89: d4:58:ca:c2 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICK+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjYwMTAyMTYxMzUwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTIzOC01YTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl3llaGkn5R+75gg/TSbNrK4idQLWwfU+AfDLJjts24nC8pEtTbtfE1EkikRh x5RTheFSd+98m2sWvuoSPPubAkT8KEkF3w9qAYMr1+QxyzgiSuDfqQO2k9a2vp9N bnERjjMxNOW5B3DbkqEM393kn52WmyNXgQdy3Myn7dwmEisJdPe3l0xrCVo4MO9N bNDixlyASQonb8h7v+U8redBPF0m9dTdxGHfH6J9wCtlK/kw9+/cPt5nYkpy0ZEM ffqp6hkpnwRHiXgF5mH/XyahCxNnwvdhNp6hgRLmL560Go8+VZJTnLwLqU3FwbzN jpIiUC2T6SSB07d35oxyOai6UQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFNOEDopn w9fy+q6GPZteO0v8ybrEMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvNjNFQkI3QzZE REQzMTFFOEI2MTY5ODc4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAylDpMA8EAgACMAkDBwAkBZgAyQkwDQYJKoZIhvcNAQELBQADggEB AAcgvoqtGpKtiPtK0YASgqyyRk21pprWRCOZbgoDDqLTD9BxbYuGuB22BjLqYant h0JqgLn66vBTIn2Cjnsmrw0D0NcNYIQWrT47hiHba9zipdiinX0sFq2oTPvGpjhP MAcl10MBUgHAOycEzI2IANmmQqer5O24ODyfHMJTUnXu/xZF6hgzsMZRINBD07+0 PfJWSB7PSUIRaAP0gf20lk2KtAkQlugPgCx+IfMDrATaa7JQen7FiM6JgQkhqzyU d9jhoSLp/d/Se3LrorhNPK7bz0jLA0N4/a+CzSgkso27N+RqCdRWrGOe8R3btw7k vhoTw4KnyYx6nLH8idRYysI= -----END CERTIFICATE-----Generated at Mon Mar 2 21:12:22 2026 by rpki-client