$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/B24078AA6A8D11EB82AF1144C4F9AE02.roa File: B24078AA6A8D11EB82AF1144C4F9AE02.roa (raw, json) Hash identifier: +eX/IhPIgzcgEej3nFPqU8lcNjTSKxrNxHm69wcEBYA= Subject key identifier: D8:3D:F5:C1:8A:F1:E9:CD:C3:CD:A7:56:54:CE:0D:7C:24:15:4B:4C Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Certificate serial: 07E9 Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/B24078AA6A8D11EB82AF1144C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:42:09 +0000 ROA not before: Thu 30 Oct 2025 22:12:05 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 10103 IP address blocks: 58.64.128.0/17 maxlen: 24 59.188.0.0/16 maxlen: 24 103.84.32.0/22 maxlen: 24 113.10.128.0/17 maxlen: 24 123.1.128.0/17 maxlen: 24 192.188.82.0/23 maxlen: 24 202.4.162.0/23 maxlen: 24 203.98.128.0/18 maxlen: 24 203.176.192.0/18 maxlen: 24 210.209.64.0/18 maxlen: 24 210.245.128.0/17 maxlen: 24 2401:4a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2025 (0x7e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF1F, serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Validity Not Before: Oct 30 22:12:05 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a47a71-3f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:60:f9:4c:c0:6a:ad:3b:c4:af:e9:8f:0d:af: 54:82:d3:31:f6:ce:d9:90:2e:b0:58:23:4c:8d:60: 91:42:a4:a8:a8:76:ed:18:de:e5:7f:11:81:dc:90: 03:2d:43:7c:3b:59:c1:a6:12:ad:fe:47:f9:65:32: 1d:ca:27:4c:e2:21:ec:d8:d0:b8:af:ec:89:d3:11: fa:d6:59:e0:7e:c3:69:53:04:42:ac:a1:31:00:92: c2:68:1e:6e:dd:bd:a0:43:37:ff:00:b7:ab:20:2f: 69:50:dc:9e:58:d7:f2:b5:18:ee:15:3c:46:26:61: 56:b0:c9:a8:02:a9:bd:6e:d9:ed:00:86:c6:ea:95: cd:09:ea:ef:ce:93:96:37:19:62:5c:29:85:7c:29: 2d:8f:69:9c:75:b0:ce:8f:bd:29:0c:ab:fd:42:cd: 58:3c:36:14:2c:0f:71:89:b1:87:f5:41:c5:ee:61: 5d:0b:74:9d:8f:16:1c:aa:53:df:2c:ec:60:b5:ab: 4d:a7:5b:a3:ea:92:68:2b:52:e6:ee:53:fe:f9:ae: b9:c2:73:f7:06:fb:b3:4b:a8:ce:84:f2:0c:43:3a: e2:f1:bf:41:d6:a8:89:a6:30:c7:bc:d6:77:df:ef: fa:7f:6c:43:97:72:fb:bf:97:eb:c8:c8:8f:1d:e1: a3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3D:F5:C1:8A:F1:E9:CD:C3:CD:A7:56:54:CE:0D:7C:24:15:4B:4C X509v3 Authority Key Identifier: keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/B24078AA6A8D11EB82AF1144C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.64.128.0/17 59.188.0.0/16 103.84.32.0/22 113.10.128.0/17 123.1.128.0/17 192.188.82.0/23 202.4.162.0/23 203.98.128.0/18 203.176.192.0/18 210.209.64.0/18 210.245.128.0/17 IPv6: 2401:4a00::/32 Signature Algorithm: sha256WithRSAEncryption 00:57:2b:c3:cf:66:61:39:5f:ca:ac:c6:45:ee:0f:3c:5b:bc: ab:4b:1e:42:78:85:74:88:74:92:5a:ae:76:43:78:08:a4:12: 11:e4:b6:59:8a:3f:e7:45:5b:5d:b7:07:d9:9a:4c:74:da:0c: 45:db:6b:7f:ad:92:52:99:a9:fd:24:33:c8:1d:88:88:ec:f4: ee:0c:53:19:08:60:e4:2e:cc:7b:9d:29:e3:57:f6:71:ed:b7: cc:0a:a3:5f:00:e7:cd:51:d8:0f:2f:44:5e:6d:b6:5c:ad:a5: c0:08:d6:84:b1:6b:00:64:ea:57:86:0c:67:98:03:ba:e7:84: 6f:93:89:7a:6f:fb:b9:e6:fb:03:eb:3d:4d:79:7a:8b:24:ae: b9:b5:eb:b1:2a:95:07:66:53:4e:51:e0:61:c5:81:f2:a2:0d: 14:65:f6:03:6e:ef:1c:4f:35:68:be:06:b4:df:e2:bb:59:8f: da:0c:24:77:92:2d:52:4f:0d:ef:16:2f:22:7f:ee:da:d8:a5: 27:eb:3e:c3:a8:c6:52:66:8d:ee:90:fd:c6:a2:3a:85:bf:72: 61:f4:22:54:2e:51:90:02:6a:e8:d7:c3:7f:2c:c0:f6:9f:92: 8c:78:f9:fb:01:77:9e:ae:72:15:ea:3b:f5:00:07:fa:9c:f8: 9e:3b:9b:6d -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICB+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGMUYxMTAvBgNVBAUTKEQzNzE3OUNCQjk3RDY4MEU2QTgwREMxMkVFNDIyRkU4 QjZFMzYzRjUwHhcNMjUxMDMwMjIxMjA1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2E3MS0zZjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWD5TMBqrTvEr+mPDa9UgtMx9s7ZkC6wWCNMjWCRQqSoqHbtGN7lfxGB3JAD LUN8O1nBphKt/kf5ZTIdyidM4iHs2NC4r+yJ0xH61lngfsNpUwRCrKExAJLCaB5u 3b2gQzf/ALerIC9pUNyeWNfytRjuFTxGJmFWsMmoAqm9btntAIbG6pXNCervzpOW NxliXCmFfCktj2mcdbDOj70pDKv9Qs1YPDYULA9xibGH9UHF7mFdC3SdjxYcqlPf LOxgtatNp1uj6pJoK1Lm7lP++a65wnP3BvuzS6jOhPIMQzri8b9B1qiJpjDHvNZ3 3+/6f2xDl3L7v5fryMiPHeGjWwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFNg99cGK 8enNw82nVlTODXwkFUtMMB8GA1UdIwQYMBaAFNNxecu5fWgOaoDcEu5CL+i242P1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREYxRi9GNUNCNkU2QTVD NTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFBNXFnTndTN2tJdjZMYmpZ X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzRjV5N2w5YUE1cWdOd1M3a0l2NkxiallfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MURGMUYvRjVDQjZFNkE1QzUzMTFFQkI2NjI3ODUzQzRGOUFFMDIvQjI0MDc4QUE2 QThEMTFFQjgyQUYxMTQ0QzRGOUFFMDIucm9hMGkGCCsGAQUFBwEHAQH/BFowWDBH BAIAATBBAwQHOkCAAwMAO7wDBAJnVCADBAdxCoADBAd7AYADBAHAvFIDBAHKBKID BAbLYoADBAbLsMADBAbS0UADBAfS9YAwDQQCAAIwBwMFACQBSgAwDQYJKoZIhvcN AQELBQADggEBAABXK8PPZmE5X8qsxkXuDzxbvKtLHkJ4hXSIdJJarnZDeAikEhHk tlmKP+dFW123B9maTHTaDEXba3+tklKZqf0kM8gdiIjs9O4MUxkIYOQuzHudKeNX 9nHtt8wKo18A581R2A8vRF5ttlytpcAI1oSxawBk6leGDGeYA7rnhG+TiXpv+7nm +wPrPU15eoskrrm167EqlQdmU05R4GHFgfKiDRRl9gNu7xxPNWi+BrTf4rtZj9oM JHeSLVJPDe8WLyJ/7trYpSfrPsOoxlJmje6Q/caiOoW/cmH0IlQuUZACaujXw38s wPafkox4+fsBd56uchXqO/UAB/qc+J47m20= -----END CERTIFICATE-----Generated at Mon Mar 2 06:22:12 2026 by rpki-client