$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/DE5B018C8D8B11EBB959991DC4F9AE02.roa File: DE5B018C8D8B11EBB959991DC4F9AE02.roa (raw, json) Hash identifier: x37ecenCy3jbXj6Gv2z3koAXtHNV/RyDae1qY9A2y4M= Subject key identifier: CE:A4:E6:8F:76:E5:F3:95:D8:F9:85:13:33:DF:DA:A8:5D:15:95:A1 Certificate issuer: /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Certificate serial: 1DD2 Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/DE5B018C8D8B11EBB959991DC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:29:16 +0000 ROA not before: Thu 26 Jun 2025 16:35:45 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 17477 IP address blocks: 203.28.58.0/23 maxlen: 24 203.28.58.0/24 maxlen: 24 203.28.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7634 (0x1dd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123AB4, serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Validity Not Before: Jun 26 16:35:45 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a4230c-3b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:21:77:17:24:87:85:7b:87:7a:3a:c8:a2:21: d8:a6:71:09:89:46:d3:f3:0d:87:0d:a1:9c:b5:54: 13:4a:62:48:2a:f8:a7:26:31:96:a1:8d:42:a3:51: 45:05:26:17:02:c3:59:e7:c4:3c:4b:58:a2:9c:b7: 1e:86:4b:52:9e:39:56:63:a6:96:93:3b:35:9f:56: d8:f3:eb:9b:97:cc:7a:e9:43:9e:31:44:00:ec:1d: 3b:04:59:a4:db:c9:61:6c:c3:b7:e1:5e:53:73:7b: 05:6d:e2:4c:8d:cd:9a:62:e1:40:5a:d4:36:d9:57: 5d:33:98:7e:7a:ee:91:dd:37:9a:2e:fa:b4:61:ae: 69:63:af:4c:1c:6d:45:5f:67:d6:ef:d6:44:80:d1: d9:e1:24:75:99:f0:b5:c7:f8:6a:d8:63:00:e8:fe: 37:e8:60:a7:1d:ed:bb:de:a6:d5:c5:dd:52:25:c5: 04:3f:28:56:b3:db:ac:ca:fc:bf:6b:bb:3d:bd:d4: c5:7b:c3:08:57:b8:f9:e2:23:74:1e:90:8d:33:ae: 93:ff:52:76:c5:74:ea:65:86:94:4d:25:a7:bf:18: d5:6f:6d:ae:06:c7:42:49:4f:b9:c7:b7:4d:33:59: 4d:24:e0:2a:94:20:e2:00:ac:f8:68:0f:21:94:ca: fd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A4:E6:8F:76:E5:F3:95:D8:F9:85:13:33:DF:DA:A8:5D:15:95:A1 X509v3 Authority Key Identifier: keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/DE5B018C8D8B11EBB959991DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.28.58.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:60:f0:45:64:08:8a:a6:31:1c:68:4f:2e:fd:d9:ad:6b:5c: 94:a8:36:0a:63:d7:87:2e:85:60:7f:38:32:93:00:79:c7:85: 9f:41:de:d2:1d:3e:18:b9:db:fe:7e:34:c5:bc:de:b0:ec:f5: 5c:a9:1f:60:7a:2e:db:8e:d1:e7:13:2e:fb:97:e7:2a:c2:a9: a6:5e:51:3c:b9:b6:e2:62:e5:e0:00:d6:42:6c:4c:db:b9:4f: f3:cb:31:bb:80:18:2c:a3:e4:3d:d9:e4:d4:c6:2e:52:9e:08: 93:87:6b:d1:e3:74:d7:89:1d:20:2d:23:85:f5:c9:b5:ae:f5: 9d:b7:c5:57:ae:b7:b0:e6:14:c5:8a:cf:76:15:1e:5c:b5:e8: 37:e9:b9:e8:79:fe:ba:b3:1a:e4:4d:eb:8d:84:cb:39:0f:81: 0e:52:38:2b:bf:0a:2c:65:5d:7a:a1:c8:85:da:64:9c:06:36: 1a:ef:fe:4e:b5:38:86:90:ca:3e:20:28:e3:4f:70:8d:67:5f: 03:4e:53:9a:65:6b:ef:78:d8:1c:84:63:7f:54:3d:25:ec:75: ac:62:c3:86:cf:c3:de:d0:ed:75:83:c6:18:b6:bf:a7:20:5b: 04:b0:d4:87:5a:12:b6:f1:ee:0d:8e:c4:2e:82:8f:e0:33:b9: ad:6f:2a:82 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICHdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNBQjQxMTAvBgNVBAUTKDM4NkM1Q0IyRDZFMEVDNjE0MUFFQjczRjQ5MzUyMUIw NTIwQTNDRkEwHhcNMjUwNjI2MTYzNTQ1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjMwYy0zYjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5CF3FySHhXuHejrIoiHYpnEJiUbT8w2HDaGctVQTSmJIKvinJjGWoY1Co1FF BSYXAsNZ58Q8S1iinLcehktSnjlWY6aWkzs1n1bY8+ubl8x66UOeMUQA7B07BFmk 28lhbMO34V5Tc3sFbeJMjc2aYuFAWtQ22VddM5h+eu6R3TeaLvq0Ya5pY69MHG1F X2fW79ZEgNHZ4SR1mfC1x/hq2GMA6P436GCnHe273qbVxd1SJcUEPyhWs9usyvy/ a7s9vdTFe8MIV7j54iN0HpCNM66T/1J2xXTqZYaUTSWnvxjVb22uBsdCSU+5x7dN M1lNJOAqlCDiAKz4aA8hlMr9owIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFM6k5o92 5fOV2PmFEzPf2qhdFZWhMB8GA1UdIwQYMBaAFDhsXLLW4OxhQa63P0k1IbBSCjz6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0FCNC8xRkIwNDBBMEIx NzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdHRkJycmNfU1RVaHNGSUtQ UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HeGNzdGJnN0dGQnJyY19TVFVoc0ZJS1BQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjNBQjQvMUZCMDQwQTBCMTc0MTFFNjhFQzg4NTE4QzRGOUFFMDIvREU1QjAxOEM4 RDhCMTFFQkI5NTk5OTFEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQByxw6MA0GCSqGSIb3DQEBCwUAA4IBAQCfYPBFZAiKpjEcaE8u/dmt a1yUqDYKY9eHLoVgfzgykwB5x4WfQd7SHT4Yudv+fjTFvN6w7PVcqR9gei7bjtHn Ey77l+cqwqmmXlE8ubbiYuXgANZCbEzbuU/zyzG7gBgso+Q92eTUxi5SngiTh2vR 43TXiR0gLSOF9cm1rvWdt8VXrrew5hTFis92FR5cteg36bnoef66sxrkTeuNhMs5 D4EOUjgrvwosZV16ociF2mScBjYa7/5OtTiGkMo+ICjjT3CNZ18DTlOaZWvveNgc hGN/VD0l7HWsYsOGz8Pe0O11g8YYtr+nIFsEsNSHWhK28e4NjsQugo/gM7mtbyqC -----END CERTIFICATE-----Generated at Mon Mar 2 15:17:45 2026 by rpki-client