$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/A3C2B7D25DBC11EE80E75075C4F9AE02.roa File: A3C2B7D25DBC11EE80E75075C4F9AE02.roa (raw, json) Hash identifier: nfsBHK3pbqg3u2XpUSNLde+7rTh2tSGCTuAshZLmNUQ= Subject key identifier: 88:5E:0F:E9:8F:F2:7A:05:01:76:32:65:5A:E0:25:DD:1A:47:05:0D Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2BB0 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/A3C2B7D25DBC11EE80E75075C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:22:50 +0000 ROA not before: Fri 02 Jan 2026 16:12:53 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132821 IP address blocks: 58.64.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11184 (0x2bb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Jan 2 16:12:53 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4920a-724b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9d:05:fb:1c:1e:07:ab:73:1c:4a:be:e9:5e: 66:34:c5:78:93:b8:db:80:f1:32:59:e8:02:58:53: b9:06:fb:15:a2:21:a8:cf:ad:6a:d9:4a:af:34:b0: 04:82:53:ba:a2:ac:38:fd:61:25:16:4c:30:9e:83: a5:dd:5c:7c:69:19:e4:42:6a:80:14:62:de:ee:bd: 8a:82:3d:c7:f9:d8:d8:3b:13:a7:dc:fd:81:d6:b2: 77:d9:a9:f5:c9:e9:4d:8c:5f:ec:96:52:9a:78:29: fc:4d:5b:1d:87:94:61:0b:c0:4b:82:a2:95:af:f6: d9:44:57:63:62:5b:99:7e:c1:0d:92:4b:c6:4b:b5: f1:8e:a0:8d:cf:67:1e:71:b5:06:2d:13:46:65:7a: 63:3b:04:b1:80:95:36:f7:b6:33:fa:d5:e6:ff:8e: 15:57:36:6b:87:99:a3:73:49:56:c4:2f:23:84:82: e1:c0:e0:8e:b1:53:c9:fe:2d:7d:71:38:96:d9:9c: 95:d3:a5:2e:72:35:68:3e:79:6f:a7:a4:26:29:fd: df:e1:8f:8e:a7:00:2d:cb:4a:53:00:af:a0:c1:ca: 21:5b:8b:b0:93:47:1b:ef:e5:55:c9:1f:b5:3b:03: 8a:4e:71:de:67:ef:fa:ce:be:ad:a8:f3:7a:73:34: 43:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5E:0F:E9:8F:F2:7A:05:01:76:32:65:5A:E0:25:DD:1A:47:05:0D X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/A3C2B7D25DBC11EE80E75075C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.64.36.0/24 Signature Algorithm: sha256WithRSAEncryption 92:e2:a9:4c:c0:8b:27:0d:15:01:21:61:ea:4b:2e:e8:ce:2c: e5:35:21:cb:d0:98:09:59:54:b4:c3:5b:0a:a8:92:dc:a7:3c: ea:49:5e:f3:5b:93:f3:89:7b:96:be:e1:85:32:67:72:be:4c: 19:50:c7:6b:6b:3e:3e:39:31:64:86:80:f4:bf:f8:4c:d1:ae: d4:cf:7c:ac:e6:12:19:68:4a:ac:d0:3a:46:29:79:4c:f1:37: 18:34:7a:98:0a:0a:95:fe:7a:8e:a2:2e:a1:39:1b:2a:8b:f0: cb:34:8e:c2:56:aa:1d:08:25:14:3a:51:ca:f7:87:0c:55:b9: 51:d2:aa:79:40:33:b6:03:6f:35:40:e3:bf:50:74:b3:e6:4b: 4c:bf:65:b2:7c:b9:5c:bd:c0:29:51:3f:d7:53:b6:ed:00:0b: e7:77:1e:45:77:8a:c9:e8:6e:d2:7c:5d:b2:0b:5e:a2:5c:90: 89:8a:48:d9:c9:79:7d:43:d6:f8:c8:6c:a8:ff:5b:18:30:e2: 45:1f:f3:19:30:a7:fc:6c:0f:e8:aa:11:66:8b:cd:4f:d6:74: 80:89:45:41:ba:51:0c:76:b6:d2:18:b3:c8:9c:cf:83:70:b2: bc:51:5f:12:1a:f0:18:ec:80:b4:8a:82:a9:4d:78:e8:5f:f8: d7:39:d6:c9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICK7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjYwMTAyMTYxMjUzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTIwYS03MjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1J0F+xweB6tzHEq+6V5mNMV4k7jbgPEyWegCWFO5BvsVoiGoz61q2UqvNLAE glO6oqw4/WElFkwwnoOl3Vx8aRnkQmqAFGLe7r2Kgj3H+djYOxOn3P2B1rJ32an1 yelNjF/sllKaeCn8TVsdh5RhC8BLgqKVr/bZRFdjYluZfsENkkvGS7XxjqCNz2ce cbUGLRNGZXpjOwSxgJU297Yz+tXm/44VVzZrh5mjc0lWxC8jhILhwOCOsVPJ/i19 cTiW2ZyV06UucjVoPnlvp6QmKf3f4Y+OpwAty0pTAK+gwcohW4uwk0cb7+VVyR+1 OwOKTnHeZ+/6zr6tqPN6czRDywIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIheD+mP 8noFAXYyZVrgJd0aRwUNMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvQTNDMkI3RDI1 REJDMTFFRTgwRTc1MDc1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAOkAkMA0GCSqGSIb3DQEBCwUAA4IBAQCS4qlMwIsnDRUBIWHqSy7o zizlNSHL0JgJWVS0w1sKqJLcpzzqSV7zW5PziXuWvuGFMmdyvkwZUMdraz4+OTFk hoD0v/hM0a7Uz3ys5hIZaEqs0DpGKXlM8TcYNHqYCgqV/nqOoi6hORsqi/DLNI7C VqodCCUUOlHK94cMVblR0qp5QDO2A281QOO/UHSz5ktMv2WyfLlcvcApUT/XU7bt AAvndx5Fd4rJ6G7SfF2yC16iXJCJikjZyXl9Q9b4yGyo/1sYMOJFH/MZMKf8bA/o qhFmi81P1nSAiUVBulEMdrbSGLPInM+DcLK8UV8SGvAY7IC0ioKpTXjoX/jXOdbJ -----END CERTIFICATE-----Generated at Mon Mar 2 10:57:38 2026 by rpki-client