$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/E137AAE4914011EDABD5F778C4F9AE02.roa File: E137AAE4914011EDABD5F778C4F9AE02.roa (raw, json) Hash identifier: LkF5oYRIVtud1TlZnXT75FqzafJ3cOedylwYvC/BvFg= Subject key identifier: 84:E9:DE:D4:33:7D:7A:43:BA:17:5D:75:A6:FC:DC:09:3A:BD:66:84 Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: 0295 Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/E137AAE4914011EDABD5F778C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:44:58 +0000 ROA not before: Sun 07 Dec 2025 00:40:08 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139736 IP address blocks: 203.89.200.0/24 maxlen: 24 203.89.214.0/24 maxlen: 24 203.89.228.0/24 maxlen: 24 203.89.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Validity Not Before: Dec 7 00:40:08 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a47b1a-7077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:68:b5:95:6a:f7:41:7f:9a:68:24:1d:ce:ab: 1b:74:9d:3b:0a:db:26:30:7b:48:2f:0c:c3:2a:86: 9b:51:5b:68:82:21:48:1c:b9:02:18:fa:7a:11:6a: 97:17:f7:20:4f:de:ea:1b:59:15:b3:11:8a:be:40: c8:58:78:c8:14:2a:c7:9b:1a:81:e3:92:2c:e1:72: a8:e1:01:ed:1f:80:b5:e7:56:7d:36:47:af:e8:37: d6:21:4a:10:30:ed:53:8a:e0:74:aa:9a:2b:1a:3e: 4b:6b:aa:df:78:75:d1:8e:db:b3:1d:67:4b:22:c5: c2:3b:49:40:b4:3b:57:a5:05:5b:22:3e:da:3e:c2: c0:63:67:2d:a0:23:be:98:41:45:c5:68:d2:33:56: 17:db:0e:9e:b6:c6:cd:2b:40:34:75:85:1e:e6:7b: 39:6a:39:a0:db:33:c9:05:96:f4:92:75:60:ff:08: d7:cf:8f:4a:d2:6d:42:d3:2b:24:ae:d8:2c:14:9b: 57:df:bb:d1:bc:9b:7b:4d:c4:6c:09:71:aa:fa:44: 46:8c:15:1c:ef:c7:be:5c:79:2e:b6:1b:51:f0:65: 68:0e:a2:f6:84:29:8b:ea:28:54:76:79:a4:eb:ec: 4a:2f:a6:d7:70:1c:36:68:ed:b8:b2:7e:bd:1b:c1: 4a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E9:DE:D4:33:7D:7A:43:BA:17:5D:75:A6:FC:DC:09:3A:BD:66:84 X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/E137AAE4914011EDABD5F778C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.89.200.0/24 203.89.214.0/24 203.89.228.0/24 203.89.231.0/24 Signature Algorithm: sha256WithRSAEncryption 51:ce:fb:16:23:6b:63:83:88:44:6e:03:57:fe:6a:fb:c9:bd: 1c:d7:ae:06:d2:b6:af:62:86:b8:82:d0:84:13:0e:2b:8e:31: 45:22:ea:87:62:b7:7f:dd:45:0e:dd:f0:7f:ac:ec:43:7a:44: 4f:06:08:7f:76:34:87:ea:1b:8d:67:c6:e9:1e:58:20:f1:c9: 88:db:6d:e6:ba:5c:7b:6a:65:2c:df:ee:c9:80:2d:a6:6d:d2: 43:b0:e7:23:e1:63:73:39:9f:a6:8d:9f:d4:98:5a:1a:00:9d: 95:0b:b3:e4:f8:6c:43:3c:7f:f5:25:34:15:94:ab:67:e9:ba: 8d:9e:6f:60:ff:be:57:62:49:08:8f:29:c5:1e:4d:f6:48:53: 8b:82:98:e6:9f:cc:05:75:e3:8c:0c:df:05:40:c8:87:69:3f: 68:33:8f:9a:c0:02:7b:8c:11:74:b4:ee:24:88:44:1a:aa:f3: bf:55:b8:49:d5:97:e9:27:a0:c1:58:df:8e:6d:12:8d:47:c8: c5:e5:c5:e6:2b:ca:c5:59:0a:7a:0f:37:78:92:04:9f:6c:2e: a0:c0:cd:df:e4:80:e2:ea:b4:52:ff:b5:0d:f1:c4:e4:f2:16: a5:5d:b9:6d:ab:1d:0d:40:b6:90:fd:50:83:56:fe:35:95:60: 5d:3d:f0:f3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjUxMjA3MDA0MDA4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2IxYS03MDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhGi1lWr3QX+aaCQdzqsbdJ07CtsmMHtILwzDKoabUVtogiFIHLkCGPp6EWqX F/cgT97qG1kVsxGKvkDIWHjIFCrHmxqB45Is4XKo4QHtH4C151Z9Nkev6DfWIUoQ MO1TiuB0qporGj5La6rfeHXRjtuzHWdLIsXCO0lAtDtXpQVbIj7aPsLAY2ctoCO+ mEFFxWjSM1YX2w6etsbNK0A0dYUe5ns5ajmg2zPJBZb0knVg/wjXz49K0m1C0ysk rtgsFJtX37vRvJt7TcRsCXGq+kRGjBUc78e+XHkuthtR8GVoDqL2hCmL6ihUdnmk 6+xKL6bXcBw2aO24sn69G8FKCQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFITp3tQz fXpDuhdddab83Ak6vWaEMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU5QjYvNzkxOENCMEM3RkY1MTFFRDlFRDQ2NDFEQzRGOUFFMDIvRTEzN0FBRTQ5 MTQwMTFFREFCRDVGNzc4QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAy1nIAwQAy1nWAwQAy1nkAwQAy1nnMA0GCSqGSIb3DQEBCwUAA4IB AQBRzvsWI2tjg4hEbgNX/mr7yb0c164G0ravYoa4gtCEEw4rjjFFIuqHYrd/3UUO 3fB/rOxDekRPBgh/djSH6huNZ8bpHlgg8cmI223mulx7amUs3+7JgC2mbdJDsOcj 4WNzOZ+mjZ/UmFoaAJ2VC7Pk+GxDPH/1JTQVlKtn6bqNnm9g/75XYkkIjynFHk32 SFOLgpjmn8wFdeOMDN8FQMiHaT9oM4+awAJ7jBF0tO4kiEQaqvO/VbhJ1ZfpJ6DB WN+ObRKNR8jF5cXmK8rFWQp6Dzd4kgSfbC6gwM3f5IDi6rRS/7UN8cTk8halXblt qx0NQLaQ/VCDVv41lWBdPfDz -----END CERTIFICATE-----Generated at Mon Mar 2 04:07:17 2026 by rpki-client