$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/D0870A60C92211F0B4FDBA21C4F9AE02.roa File: D0870A60C92211F0B4FDBA21C4F9AE02.roa (raw, json) Hash identifier: f9M4eZERDUVlex/pW13JItVAWRs39TWzzBz4G4/5e6M= Subject key identifier: 16:A0:5F:E5:0E:CB:95:C5:AB:2E:10:8A:B0:02:AB:53:6D:B1:2F:63 Certificate issuer: /CN=A912598D/serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719 Certificate serial: 37 Authority key identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/D0870A60C92211F0B4FDBA21C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:01:02 +0000 ROA not before: Mon 24 Nov 2025 10:46:21 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 131090 IP address blocks: 2.57.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719 Validity Not Before: Nov 24 10:46:21 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a3d61d-c405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0e:3e:77:40:4e:1d:fc:94:83:f4:d0:c4:a8: 7b:6e:34:1b:8b:5a:2e:60:16:1e:84:77:4c:db:a4: 12:3c:96:1f:a6:2d:44:d8:cb:cc:b2:0e:17:a6:42: bb:e5:e2:5e:71:fd:8c:09:0b:42:e5:2a:c3:43:71: e4:01:a0:75:39:ed:3d:25:bc:af:43:18:24:69:7c: 84:20:28:7f:89:70:67:a9:62:1f:c6:3c:5d:19:59: a8:ab:4b:52:b7:bc:f6:97:05:e7:76:8d:3c:45:a2: f9:e3:ae:18:99:7c:3a:f4:f2:3b:64:69:b1:e8:76: 2e:81:d5:2d:e0:7c:c9:66:38:06:77:81:74:ef:e2: 42:e4:f6:8a:ac:83:14:23:a2:33:0c:a5:b4:cf:df: fb:3c:42:97:6f:9b:a7:1b:e7:4c:84:0c:52:e1:46: 49:c1:a7:41:d6:69:98:29:e6:7e:84:f6:c6:ca:bf: 97:38:65:7b:2c:92:f8:aa:ea:5a:72:bc:b2:40:b1: bc:a6:10:64:83:f7:48:af:da:06:a9:40:98:93:a1: bc:a4:5b:0b:b3:96:a8:ee:54:1c:e2:56:19:70:a5: 7d:ad:3e:67:c7:5c:b7:ef:4e:ad:ee:b2:18:c5:00: 99:f6:f5:c7:29:29:9c:4f:32:fc:80:65:6c:e1:4b: 64:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A0:5F:E5:0E:CB:95:C5:AB:2E:10:8A:B0:02:AB:53:6D:B1:2F:63 X509v3 Authority Key Identifier: keyid:A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/D0870A60C92211F0B4FDBA21C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 2.57.124.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:f2:ad:df:f0:02:64:d2:a7:b2:77:27:e9:97:97:6e:c4:27: e4:d2:74:19:67:87:4b:85:33:f3:ee:41:5d:8b:b6:0a:b0:4b: cf:d3:cd:ea:8b:34:c3:de:ea:c4:13:e2:8c:b4:0b:87:07:fa: a6:b9:ea:e6:c6:0a:3a:c4:ca:45:40:30:d3:43:8a:58:f4:46: 74:0c:ee:ef:3d:6d:8e:12:b0:1f:eb:a5:c1:0e:ba:31:5b:ec: 0e:4e:43:26:93:d5:fc:ca:7e:91:49:45:d9:f0:35:59:25:46: 6d:e9:fe:a9:f2:79:85:e6:3b:b3:00:82:e3:2e:aa:b0:77:0e: 5a:3f:d0:13:b2:34:65:37:d2:17:cb:3f:d6:38:fe:e1:16:ff: 45:d2:0f:a9:36:1b:b1:e0:22:b0:cb:c7:70:8e:1b:1c:49:a6: c7:61:4f:ce:fc:c5:f1:f8:8b:dd:7b:67:72:62:58:d3:d1:cd: 0e:a5:53:26:a7:48:d7:bf:b8:e6:12:d2:5b:8b:6f:66:11:57: a3:87:77:18:a4:3e:2f:3b:f8:55:60:8f:69:25:70:d8:fe:5e: e7:65:d1:58:9c:8a:e6:f2:96:6b:6a:c6:38:54:ea:dd:b5:19: c8:b5:fe:e3:4b:be:ba:4a:67:43:d0:84:be:51:f8:05:fd:90: bd:cb:5d:44 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoQTI1Njk3NTEyQUEyNjUyN0NFNEFENjFBQ0MwOUExMEJF RDNDOTcxOTAeFw0yNTExMjQxMDQ2MjFaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNjFkLWM0MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzDj53QE4d/JSD9NDEqHtuNBuLWi5gFh6Ed0zbpBI8lh+mLUTYy8yyDhemQrvl 4l5x/YwJC0LlKsNDceQBoHU57T0lvK9DGCRpfIQgKH+JcGepYh/GPF0ZWairS1K3 vPaXBed2jTxFovnjrhiZfDr08jtkabHodi6B1S3gfMlmOAZ3gXTv4kLk9oqsgxQj ojMMpbTP3/s8Qpdvm6cb50yEDFLhRknBp0HWaZgp5n6E9sbKv5c4ZXsskviq6lpy vLJAsbymEGSD90iv2gapQJiTobykWwuzlqjuVBziVhlwpX2tPmfHXLfvTq3ushjF AJn29ccpKZxPMvyAZWzhS2TpAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUFqBf5Q7L lcWrLhCKsAKrU22xL2MwHwYDVR0jBBgwFoAUolaXUSqiZSfOStYazAmhC+08lxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0UzOUQ4RTBDQzhF QzExRjA4Qzc4QUI0NUM0RjlBRTAyL29sYVhVU3FpWlNmT1N0WWF6QW1oQy0wOGx4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvb2xhWFVTcWlaU2ZPU3RZYXpBbWhDLTA4bHhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTk4RC9FMzlEOEUwQ0M4RUMxMUYwOEM3OEFCNDVDNEY5QUUwMi9EMDg3MEE2MEM5 MjIxMUYwQjRGREJBMjFDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAICOXwwDQYJKoZIhvcNAQELBQADggEBAH7yrd/wAmTSp7J3J+mXl27E J+TSdBlnh0uFM/PuQV2LtgqwS8/TzeqLNMPe6sQT4oy0C4cH+qa56ubGCjrEykVA MNNDilj0RnQM7u89bY4SsB/rpcEOujFb7A5OQyaT1fzKfpFJRdnwNVklRm3p/qny eYXmO7MAguMuqrB3Dlo/0BOyNGU30hfLP9Y4/uEW/0XSD6k2G7HgIrDLx3COGxxJ psdhT878xfH4i917Z3JiWNPRzQ6lUyanSNe/uOYS0luLb2YRV6OHdxikPi87+FVg j2klcNj+Xudl0ViciubylmtqxjhU6t21Gci1/uNLvrpKZ0PQhL5R+AX9kL3LXUQ= -----END CERTIFICATE-----Generated at Mon Mar 2 10:52:21 2026 by rpki-client