$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/9D107CE43FD311F08A76B677C4F9AE02.roa File: 9D107CE43FD311F08A76B677C4F9AE02.roa (raw, json) Hash identifier: SbL1x0M6rhtATPydg1N6LL5pOz+qbg/l/56fetrDa6o= Subject key identifier: C3:CB:72:F3:90:9D:6B:79:34:55:5A:E6:37:61:B1:3E:42:7C:45:BD Certificate issuer: /CN=A912981B/serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC Certificate serial: 019B Authority key identifier: 33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/9D107CE43FD311F08A76B677C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:24:01 +0000 ROA not before: Thu 29 Jan 2026 03:23:42 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 139879 IP address blocks: 157.10.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912981B, serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC Validity Not Before: Jan 29 03:23:42 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a43df1-8f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4e:a6:95:05:79:f6:a0:2b:e6:fe:b0:55:15: a2:fd:ab:84:15:4f:70:6e:2f:3d:a8:f5:e9:4d:99: 58:5c:9c:a7:ce:d4:b0:f2:90:4d:72:3f:5c:ed:ff: 65:e9:aa:22:a3:e4:78:c4:14:e7:43:b1:ae:a6:4a: db:ca:0c:48:ac:81:2d:19:cc:e5:68:f1:39:11:32: 9f:59:fb:58:98:ad:5d:7c:1c:6b:18:da:c9:69:ff: 12:ca:f2:78:66:29:43:99:56:f9:59:18:57:e7:f3: 24:11:c5:04:12:b6:a5:ce:71:14:65:bf:f0:a1:52: 5b:b3:ae:19:a7:b6:85:9a:4d:07:31:6f:f2:45:2d: 0d:c7:a7:65:00:12:a9:11:73:ba:52:48:27:c5:99: 69:cd:7f:03:8f:b6:15:05:65:d7:f9:b3:b5:c0:d8: 23:9e:d2:5a:69:ac:22:e5:ca:f4:65:58:25:f4:fe: 25:df:1f:53:53:32:ae:56:e4:4d:8f:3e:90:b4:57: 20:18:68:5a:9f:5e:5b:29:55:36:b4:36:cd:a8:e7: 7b:ad:d8:fb:13:a2:7c:1d:28:5d:eb:dc:ad:a3:07: 6f:55:7e:33:53:89:b0:0d:0d:bd:b9:54:cc:b6:a2: 83:20:5f:aa:21:a6:5f:f8:45:c7:a5:8b:fd:89:2a: 04:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CB:72:F3:90:9D:6B:79:34:55:5A:E6:37:61:B1:3E:42:7C:45:BD X509v3 Authority Key Identifier: keyid:33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/9D107CE43FD311F08A76B677C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.10.31.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:bb:9c:10:87:f1:e6:c3:af:12:60:e9:5e:cd:63:f4:1f:82: 19:5c:59:33:a3:f8:77:02:b8:e8:e5:ff:4f:46:75:a9:bf:9d: 17:56:d7:b7:d2:82:f8:4a:13:84:92:23:e2:d4:16:a9:9e:ef: 81:f1:f7:f7:58:bd:93:20:53:e9:74:5a:64:52:c2:a8:03:80: 4b:a1:0f:45:0f:b8:48:f3:3c:4d:94:44:3e:5d:28:a4:b4:c3: 94:d9:31:e1:99:92:7e:16:15:d0:d2:e6:3c:fa:7b:79:62:a0: 05:3d:b6:da:88:27:e8:c2:1d:58:e7:cc:8e:5b:40:38:15:7b: 01:89:cb:6b:24:8f:13:3d:5d:d8:2c:6b:9d:f5:09:69:ff:17: a8:0a:84:9b:83:e7:04:3f:e3:fc:1e:be:33:6c:0b:92:bd:b6: a4:5c:dc:c6:94:bc:a7:04:a7:20:5c:a1:73:5c:83:25:9c:7d: 53:db:d1:e4:81:63:ac:fe:6f:5d:47:d8:5d:cf:8a:3d:76:e8: 6a:11:f7:70:4b:cc:ce:93:da:72:f0:fc:cf:8c:af:2f:76:2a: a4:ab:c5:e4:3a:4d:38:3a:8b:68:18:c6:25:c5:4d:d5:4f:fb: e7:0b:e5:cd:c5:23:d8:be:fb:cc:13:a5:4b:20:5e:42:28:b5: 6b:4a:e4:8e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4MUIxMTAvBgNVBAUTKDMzN0I0NTBGRERDOUZDNzAyMjFEQTVDQTA5Nzg1ODg1 QjFEMUI3Q0MwHhcNMjYwMTI5MDMyMzQyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0M2RmMS04ZjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5E6mlQV59qAr5v6wVRWi/auEFU9wbi89qPXpTZlYXJynztSw8pBNcj9c7f9l 6aoio+R4xBTnQ7GupkrbygxIrIEtGczlaPE5ETKfWftYmK1dfBxrGNrJaf8SyvJ4 ZilDmVb5WRhX5/MkEcUEEralznEUZb/woVJbs64Zp7aFmk0HMW/yRS0Nx6dlABKp EXO6UkgnxZlpzX8Dj7YVBWXX+bO1wNgjntJaaawi5cr0ZVgl9P4l3x9TUzKuVuRN jz6QtFcgGGhan15bKVU2tDbNqOd7rdj7E6J8HShd69ytowdvVX4zU4mwDQ29uVTM tqKDIF+qIaZf+EXHpYv9iSoEFQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMPLcvOQ nWt5NFVa5jdhsT5CfEW9MB8GA1UdIwQYMBaAFDN7RQ/dyfxwIh2lygl4WIWx0bfM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTgxQi9CQzVDRUFCNkNB OEExMUVFQjA1NkU2MUZDNEY5QUUwMi9NM3RGRDkzSl9IQWlIYVhLQ1hoWWhiSFJ0 OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00zdEZEOTNKX0hBaUhhWEtDWGhZaGJIUnQ4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjk4MUIvQkM1Q0VBQjZDQThBMTFFRUIwNTZFNjFGQzRGOUFFMDIvOUQxMDdDRTQz RkQzMTFGMDhBNzZCNjc3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAnQofMA0GCSqGSIb3DQEBCwUAA4IBAQBPu5wQh/Hmw68SYOlezWP0 H4IZXFkzo/h3Arjo5f9PRnWpv50XVte30oL4ShOEkiPi1Bapnu+B8ff3WL2TIFPp dFpkUsKoA4BLoQ9FD7hI8zxNlEQ+XSiktMOU2THhmZJ+FhXQ0uY8+nt5YqAFPbba iCfowh1Y58yOW0A4FXsBictrJI8TPV3YLGud9Qlp/xeoCoSbg+cEP+P8Hr4zbAuS vbakXNzGlLynBKcgXKFzXIMlnH1T29HkgWOs/m9dR9hdz4o9duhqEfdwS8zOk9py 8PzPjK8vdiqkq8XkOk04OotoGMYlxU3VT/vnC+XNxSPYvvvME6VLIF5CKLVrSuSO -----END CERTIFICATE-----Generated at Mon Mar 2 06:49:26 2026 by rpki-client