$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/CE53574A54B411EBAC30E864C4F9AE02.roa File: CE53574A54B411EBAC30E864C4F9AE02.roa (raw, json) Hash identifier: ICnzriyTIsH7n800kGFF8GkhdicFX/3RUBqxf7Fo8kc= Subject key identifier: 70:D8:C6:68:5F:F0:B9:E2:17:DD:43:FB:2A:22:83:7A:5B:C3:41:4A Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2BC8 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/CE53574A54B411EBAC30E864C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:23:11 +0000 ROA not before: Fri 02 Jan 2026 16:13:19 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 141454 IP address blocks: 49.0.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:46:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11208 (0x2bc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Jan 2 16:13:19 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4921f-c86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:95:09:60:33:7a:cd:32:07:6c:4e:05:e4: a1:ec:ba:63:6e:8a:6e:20:34:10:6a:b0:16:a1:79: 06:31:20:99:89:dc:ad:05:81:8f:28:2b:32:9a:9f: 12:e9:4f:71:7f:53:7d:a9:24:4f:04:2c:14:d1:46: a0:b7:d9:90:42:76:5b:5a:65:b1:46:e3:36:89:75: 0f:c8:91:80:eb:8d:20:87:67:e1:f4:22:0d:b7:a4: 35:db:eb:c1:65:05:c0:c5:0b:e2:8f:4a:c1:cc:14: b1:05:8a:d3:f6:ac:8f:de:6b:4f:de:0f:8b:5d:01: 6f:5f:28:1f:8d:c3:c2:cb:bf:52:87:e2:f2:34:3d: 2a:ba:86:08:05:f0:36:be:e2:16:ba:08:3e:74:5e: d9:d1:54:3c:60:0e:c6:af:b7:c5:2b:2c:99:c3:a5: 48:74:d1:32:06:5a:46:75:b7:86:86:1a:4d:6f:6c: 29:fe:0e:e9:83:01:19:fc:c1:55:1c:8e:e4:eb:e8: 46:44:45:bb:8b:e9:e2:e3:52:1f:0e:2b:cf:5f:2d: 34:67:48:85:1e:49:8b:71:49:60:17:d1:8a:e4:72: bb:36:1d:48:22:28:d1:3e:71:07:69:5b:82:86:79: 0c:37:88:70:13:5d:6e:c9:c3:7a:f8:94:71:e5:e5: ce:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D8:C6:68:5F:F0:B9:E2:17:DD:43:FB:2A:22:83:7A:5B:C3:41:4A X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/CE53574A54B411EBAC30E864C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 49.0.119.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:f2:35:d9:81:7d:dd:04:c5:f1:be:18:94:eb:4f:3f:cc:c3: 4f:ab:61:4f:58:b0:6a:a5:8f:76:66:92:84:1a:80:65:c4:65: ef:3a:1f:7f:d7:16:41:c1:fb:69:d5:cf:d8:ae:bd:db:cf:f8: cb:49:71:ef:5b:c3:6c:e2:64:d9:ff:d2:c1:ac:46:51:10:6a: a9:2a:4e:c5:43:70:15:90:19:f3:e6:b1:dc:72:e1:c0:97:ce: 27:47:44:89:b1:26:f0:e3:90:bd:8d:48:69:51:f0:d1:8a:27: 6d:48:3e:dd:9b:7b:e1:cb:74:00:1c:e5:84:55:4d:2f:c9:15: b5:10:7b:fb:10:70:ff:eb:20:b6:e0:fe:93:0d:7b:a7:5e:04: c4:70:dc:0f:3f:5c:6b:ab:31:e8:a0:11:4b:c4:36:e8:c3:03: 81:0e:a6:30:72:16:9e:1b:3e:ec:63:24:55:78:33:83:32:f3: 00:64:07:95:e3:49:80:8c:c6:ef:8f:1b:1b:6b:a4:78:f4:4a: 8c:a2:c6:36:96:62:3e:3d:75:4f:01:e9:e1:ae:2f:9f:95:95: ac:fb:2a:2c:ae:01:b0:9f:08:05:aa:18:f3:4d:ec:95:0e:28: 31:9e:5f:2c:34:e8:cf:8e:83:d7:75:27:63:c2:12:de:eb:82: 37:e3:99:d0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICK8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjYwMTAyMTYxMzE5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTIxZi1jODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTeVCWAzes0yB2xOBeSh7LpjbopuIDQQarAWoXkGMSCZidytBYGPKCsymp8S 6U9xf1N9qSRPBCwU0Uagt9mQQnZbWmWxRuM2iXUPyJGA640gh2fh9CINt6Q12+vB ZQXAxQvij0rBzBSxBYrT9qyP3mtP3g+LXQFvXygfjcPCy79Sh+LyND0quoYIBfA2 vuIWugg+dF7Z0VQ8YA7Gr7fFKyyZw6VIdNEyBlpGdbeGhhpNb2wp/g7pgwEZ/MFV HI7k6+hGREW7i+ni41IfDivPXy00Z0iFHkmLcUlgF9GK5HK7Nh1IIijRPnEHaVuC hnkMN4hwE11uycN6+JRx5eXOfQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHDYxmhf 8LniF91D+yoig3pbw0FKMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvQ0U1MzU3NEE1 NEI0MTFFQkFDMzBFODY0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAMQB3MA0GCSqGSIb3DQEBCwUAA4IBAQA+8jXZgX3dBMXxvhiU608/ zMNPq2FPWLBqpY92ZpKEGoBlxGXvOh9/1xZBwftp1c/Yrr3bz/jLSXHvW8Ns4mTZ /9LBrEZREGqpKk7FQ3AVkBnz5rHccuHAl84nR0SJsSbw45C9jUhpUfDRiidtSD7d m3vhy3QAHOWEVU0vyRW1EHv7EHD/6yC24P6TDXunXgTEcNwPP1xrqzHooBFLxDbo wwOBDqYwchaeGz7sYyRVeDODMvMAZAeV40mAjMbvjxsba6R49EqMosY2lmI+PXVP Aenhri+flZWs+yosrgGwnwgFqhjzTeyVDigxnl8sNOjPjoPXdSdjwhLe64I345nQ -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:23 2026 by rpki-client