$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/DD9C07828D8B11EBB959991DC4F9AE02.roa File: DD9C07828D8B11EBB959991DC4F9AE02.roa (raw, json) Hash identifier: k6CtfEJwOIjqwI8wE1ffbbr6dcu91HX2CafEBgOBGsc= Subject key identifier: E6:4F:7F:90:D2:E3:4C:D2:FF:63:B4:F5:6D:07:21:55:D9:D2:9F:9C Certificate issuer: /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Certificate serial: 1DD1 Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/DD9C07828D8B11EBB959991DC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:29:15 +0000 ROA not before: Thu 26 Jun 2025 16:35:44 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135104 IP address blocks: 203.28.58.0/23 maxlen: 29 203.28.58.152/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7633 (0x1dd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123AB4, serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Validity Not Before: Jun 26 16:35:44 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a4230b-ffdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:13:f1:7c:77:c3:df:6e:2e:90:33:73:b8:38: 74:76:42:51:ca:be:c3:5b:81:3b:f1:11:ec:13:1e: 9c:f2:5d:3d:fc:99:66:38:09:c4:69:70:10:0c:80: d4:87:04:1d:a3:84:bb:c3:fe:b6:ef:31:ac:39:73: 32:b9:d5:61:fc:84:98:ee:0e:8b:a7:0b:18:6c:c6: f7:54:1e:d4:3e:9a:65:e0:37:de:2c:53:96:3b:e4: 61:29:42:fd:5d:79:7b:1d:8f:d4:64:e3:62:4a:4c: 74:58:0e:f7:01:4c:b0:eb:d3:5e:9a:dc:1a:44:3f: 28:20:c0:83:d5:fc:57:18:9f:89:c1:d8:7d:d2:98: fc:9f:03:ab:14:ff:5c:dd:15:c9:b7:df:41:13:05: 09:70:5c:7d:ec:37:7c:3d:3d:ed:75:02:05:45:d4: c9:fb:48:3b:ac:38:d1:48:fd:be:c8:37:42:cc:19: 21:67:18:14:81:c8:c2:0a:f1:0c:30:d5:c8:be:6e: 77:d9:0e:56:4c:3e:61:80:8f:57:bb:92:9e:82:02: 2c:e0:87:a3:f4:8c:fb:e3:89:f3:f8:8e:a2:13:01: 3b:e3:70:63:7f:3f:13:45:a0:73:b8:6e:cc:5b:e8: 7d:8d:28:75:7c:e3:0c:56:d5:b6:6e:0f:e4:02:bf: 09:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4F:7F:90:D2:E3:4C:D2:FF:63:B4:F5:6D:07:21:55:D9:D2:9F:9C X509v3 Authority Key Identifier: keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/DD9C07828D8B11EBB959991DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.28.58.0/23 Signature Algorithm: sha256WithRSAEncryption 08:f8:af:af:b9:fa:53:b5:99:68:4e:74:0a:43:87:d8:a1:64: 47:17:f1:1d:4c:ff:b2:c4:a7:c9:52:0d:1d:2a:ac:8e:d1:ef: 95:5a:fb:b6:15:4e:d4:9c:94:bc:fd:64:06:9e:ba:f4:26:58: 0f:a6:84:2b:13:d5:47:77:ce:44:94:d0:f1:9f:c2:d0:a0:8a: d0:76:55:fd:a4:6a:01:dd:76:6b:4f:48:da:52:de:74:ea:22: 25:d7:6a:0a:e1:49:e7:0d:10:8f:30:c9:77:87:d7:f7:fb:e1: a2:26:17:8d:6d:fd:14:77:08:f9:09:5f:ed:a0:0b:82:30:1a: db:de:4f:3b:2b:e5:be:69:aa:ca:1d:1c:43:23:1f:d0:10:a1: 9e:be:a6:0f:7d:b3:b7:ea:5c:da:a7:e6:da:39:d9:a6:03:d4: 4b:c0:f1:a0:b0:85:78:39:51:02:c7:dc:e7:1e:e2:cc:fb:f7: e7:6f:d8:95:40:e8:d4:d8:ec:cc:90:43:65:77:92:18:bf:02: 61:43:5c:95:3c:0b:96:cb:bd:06:81:4a:62:83:6b:f6:4c:25: c7:1a:c0:53:ac:69:0c:96:df:a9:f8:4d:50:9b:4c:14:e1:5b: f8:f1:f8:64:c9:91:2c:59:d8:f2:0f:8a:77:d6:ad:13:9e:77: ab:42:0b:0f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICHdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNBQjQxMTAvBgNVBAUTKDM4NkM1Q0IyRDZFMEVDNjE0MUFFQjczRjQ5MzUyMUIw NTIwQTNDRkEwHhcNMjUwNjI2MTYzNTQ0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjMwYi1mZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRPxfHfD324ukDNzuDh0dkJRyr7DW4E78RHsEx6c8l09/JlmOAnEaXAQDIDU hwQdo4S7w/627zGsOXMyudVh/ISY7g6LpwsYbMb3VB7UPppl4DfeLFOWO+RhKUL9 XXl7HY/UZONiSkx0WA73AUyw69NemtwaRD8oIMCD1fxXGJ+Jwdh90pj8nwOrFP9c 3RXJt99BEwUJcFx97Dd8PT3tdQIFRdTJ+0g7rDjRSP2+yDdCzBkhZxgUgcjCCvEM MNXIvm532Q5WTD5hgI9Xu5KeggIs4Iej9Iz744nz+I6iEwE743Bjfz8TRaBzuG7M W+h9jSh1fOMMVtW2bg/kAr8JHQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOZPf5DS 40zS/2O09W0HIVXZ0p+cMB8GA1UdIwQYMBaAFDhsXLLW4OxhQa63P0k1IbBSCjz6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0FCNC8xRkIwNDBBMEIx NzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdHRkJycmNfU1RVaHNGSUtQ UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HeGNzdGJnN0dGQnJyY19TVFVoc0ZJS1BQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjNBQjQvMUZCMDQwQTBCMTc0MTFFNjhFQzg4NTE4QzRGOUFFMDIvREQ5QzA3ODI4 RDhCMTFFQkI5NTk5OTFEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQByxw6MA0GCSqGSIb3DQEBCwUAA4IBAQAI+K+vufpTtZloTnQKQ4fY oWRHF/EdTP+yxKfJUg0dKqyO0e+VWvu2FU7UnJS8/WQGnrr0JlgPpoQrE9VHd85E lNDxn8LQoIrQdlX9pGoB3XZrT0jaUt506iIl12oK4UnnDRCPMMl3h9f3++GiJheN bf0Udwj5CV/toAuCMBrb3k87K+W+aarKHRxDIx/QEKGevqYPfbO36lzap+baOdmm A9RLwPGgsIV4OVECx9znHuLM+/fnb9iVQOjU2OzMkENld5IYvwJhQ1yVPAuWy70G gUpig2v2TCXHGsBTrGkMlt+p+E1Qm0wU4Vv48fhkyZEsWdjyD4p31q0TnnerQgsP -----END CERTIFICATE-----Generated at Mon Mar 2 08:39:40 2026 by rpki-client