$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa File: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (raw, json) Hash identifier: EH518Dy6MrAFwmekT0SecOdweFL+FTqCksa8EB6seaE= Subject key identifier: 24:48:44:14:5E:5B:A8:B3:21:64:92:99:EB:87:AB:3B:E8:DF:26:AA Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 044D Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:50:00 +0000 ROA not before: Wed 11 Feb 2026 10:36:10 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 45248 IP address blocks: 116.193.150.0/23 maxlen: 24 117.121.212.0/24 maxlen: 24 117.121.213.0/24 maxlen: 24 119.63.64.0/24 maxlen: 24 119.63.71.0/24 maxlen: 24 124.197.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1101 (0x44d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: Feb 11 10:36:10 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a48a58-d407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:db:74:bc:67:1f:47:8f:2b:15:33:74:dd:62: e2:2a:d2:cf:01:73:80:3a:05:6a:c2:67:20:72:0d: 78:d8:55:c1:95:8f:8e:c5:5b:17:9c:2f:17:43:b9: 73:8b:0e:b7:ee:ee:d7:71:f2:b3:52:34:2e:eb:94: 41:4a:1b:35:8a:63:bb:0f:f1:fb:3d:83:44:f5:6d: 12:df:f1:33:6b:56:b7:9d:a7:17:d2:18:7d:bc:24: 6c:07:33:f4:e4:bf:ed:8a:1c:4c:93:85:44:e3:9a: 9c:10:1b:43:3b:6f:9c:51:70:19:2d:32:f1:bd:92: 19:c1:f5:1e:33:97:3b:84:dc:b3:b0:ad:9f:53:52: f2:b2:c7:e2:a2:f5:10:35:d3:ae:2b:6d:5e:69:65: c9:4b:ee:6d:50:c5:bb:2d:6c:70:70:f6:2e:f7:25: d8:95:be:4b:37:d8:26:97:5e:1d:94:65:56:2e:86: f5:f6:3f:1e:84:bc:0d:f8:97:3e:5e:1d:bd:94:cb: 60:1b:a7:61:43:f0:92:ff:6c:4f:e0:5b:f1:65:23: 90:2d:ef:25:5c:af:29:8a:77:db:35:d2:9a:ba:37: ab:4e:06:7c:0a:ad:b9:a4:e1:99:9e:17:a9:47:be: 56:82:0d:3d:5a:1f:70:7e:32:87:be:e7:31:c8:c9: 14:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:48:44:14:5E:5B:A8:B3:21:64:92:99:EB:87:AB:3B:E8:DF:26:AA X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.193.150.0/23 117.121.212.0/23 119.63.64.0/24 119.63.71.0/24 124.197.49.0/24 Signature Algorithm: sha256WithRSAEncryption 97:c5:12:30:de:0e:4a:29:a1:1d:af:a2:16:2b:85:cc:3f:de: 94:8b:c0:df:2e:e0:39:f9:d9:55:c6:0e:b3:5b:d3:13:62:e8: ba:8e:82:a0:e5:93:26:b7:c0:a9:05:05:50:e6:b3:18:90:bf: 28:0a:61:a3:9a:20:14:22:df:e7:21:c0:3b:6a:86:87:55:7d: f3:b7:61:7a:80:aa:39:fe:51:67:4b:b8:0a:93:58:2f:3d:41: f2:7b:55:0f:c2:ea:f5:04:85:9c:e0:16:50:6a:49:64:67:6d: 27:3c:ec:2c:81:94:9c:3e:64:8c:2b:d1:25:04:26:c2:17:95: a6:bc:f6:9f:6b:92:75:ea:ea:a4:ed:62:27:d5:9b:35:93:36: 31:7e:62:de:01:aa:bd:82:f9:d6:88:c5:17:91:2f:75:a2:64: dd:b3:11:09:69:25:9d:9d:e5:5c:ca:b4:da:75:cb:79:85:dc: 5e:c8:83:82:4d:46:aa:9a:39:57:9f:bf:8c:48:10:c9:14:f1: 2a:bd:23:66:a1:ce:e0:3c:0d:1c:e0:f0:c5:fb:cb:4e:0a:d9: d4:ce:3a:06:20:3d:9c:4d:ff:3f:6f:df:3f:80:82:67:43:d5: 44:5d:7e:2e:af:04:5b:cd:56:14:dd:ba:f7:c8:12:c9:8c:9b: 86:d0:5f:92 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICBE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjYwMjExMTAzNjEwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGE1OC1kNDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdt0vGcfR48rFTN03WLiKtLPAXOAOgVqwmcgcg142FXBlY+OxVsXnC8XQ7lz iw637u7XcfKzUjQu65RBShs1imO7D/H7PYNE9W0S3/Eza1a3nacX0hh9vCRsBzP0 5L/tihxMk4VE45qcEBtDO2+cUXAZLTLxvZIZwfUeM5c7hNyzsK2fU1LyssfiovUQ NdOuK21eaWXJS+5tUMW7LWxwcPYu9yXYlb5LN9gml14dlGVWLob19j8ehLwN+Jc+ Xh29lMtgG6dhQ/CS/2xP4FvxZSOQLe8lXK8pinfbNdKaujerTgZ8Cq25pOGZnhep R75Wgg09Wh9wfjKHvucxyMkUgQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFCRIRBRe W6izIWSSmeuHqzvo3yaqMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvREZCN0ExRkU2 OEZBMTFFRkIyQ0I2RTYwQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQBdMGWAwQBdXnUAwQAdz9AAwQAdz9HAwQAfMUxMA0GCSqGSIb3DQEB CwUAA4IBAQCXxRIw3g5KKaEdr6IWK4XMP96Ui8DfLuA5+dlVxg6zW9MTYui6joKg 5ZMmt8CpBQVQ5rMYkL8oCmGjmiAUIt/nIcA7aoaHVX3zt2F6gKo5/lFnS7gKk1gv PUHye1UPwur1BIWc4BZQaklkZ20nPOwsgZScPmSMK9ElBCbCF5WmvPafa5J16uqk 7WIn1Zs1kzYxfmLeAaq9gvnWiMUXkS91omTdsxEJaSWdneVcyrTadct5hdxeyIOC TUaqmjlXn7+MSBDJFPEqvSNmoc7gPA0c4PDF+8tOCtnUzjoGID2cTf8/b98/gIJn Q9VEXX4urwRbzVYU3br3yBLJjJuG0F+S -----END CERTIFICATE-----Generated at Mon Mar 2 02:12:34 2026 by rpki-client