$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/967D3674CB7911F0B5816B84C4F9AE02.roa File: 967D3674CB7911F0B5816B84C4F9AE02.roa (raw, json) Hash identifier: 0KMQ/55D5rrZWDAZvQGMwOpEu4hRv1HBS+IR1ld3fas= Subject key identifier: 37:05:0E:1D:76:E2:FF:61:53:B2:BD:82:EA:E2:62:C1:7A:75:49:02 Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Certificate serial: 35BA Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/967D3674CB7911F0B5816B84C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:28:30 +0000 ROA not before: Wed 28 Jan 2026 15:10:36 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 9831 IP address blocks: 202.3.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13754 (0x35ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Validity Not Before: Jan 28 15:10:36 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a4854e-b37b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:51:f3:30:ca:3f:ec:94:9a:bd:5a:52:96:c8: 20:e8:3c:52:f3:65:69:9b:a6:3e:05:08:1d:d7:e5: a8:91:d5:7a:5a:eb:08:22:8b:b0:3f:4c:dc:b8:4a: 10:24:fc:60:c3:70:b1:32:ce:e5:14:42:20:f7:14: 49:fa:f7:d4:f9:86:5d:d3:4b:cd:d6:1d:97:0c:ec: 0c:65:4b:91:39:c9:9c:6a:ab:b2:3f:c0:24:38:6d: ff:05:e5:74:c3:ae:aa:57:fa:5b:de:97:a9:72:8c: 56:bd:d9:62:33:3b:c3:c0:37:e1:bf:dd:5a:81:6a: c1:c6:37:59:c1:63:f5:78:4b:36:e7:2f:85:bb:d2: 9d:92:a0:81:9b:ff:06:2b:e7:1c:ed:e3:20:d1:4a: eb:c6:e1:6f:84:f1:9d:47:93:82:16:27:eb:06:a4: cc:8d:22:98:7c:ab:33:71:ab:03:fd:35:3a:08:10: 0e:86:9d:fd:1a:a4:e9:6c:bc:c6:87:60:28:43:0d: 39:26:78:19:85:56:71:e8:ec:45:49:db:15:12:3a: d1:68:6e:a9:3c:c2:48:c8:c6:d4:59:5e:1d:66:75: 6e:3b:97:14:b8:cb:92:39:d5:14:64:51:c2:ae:95: 23:b2:1b:28:c3:69:a8:2f:e2:8a:89:7f:4f:94:c1: fe:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:05:0E:1D:76:E2:FF:61:53:B2:BD:82:EA:E2:62:C1:7A:75:49:02 X509v3 Authority Key Identifier: keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/967D3674CB7911F0B5816B84C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.3.190.0/23 Signature Algorithm: sha256WithRSAEncryption a4:a9:8a:9a:b2:fc:c9:ef:42:e2:9e:d5:f5:a8:59:89:1e:a9: f9:5f:54:44:1e:92:ba:95:12:26:11:f4:17:1c:21:35:e4:14: 13:1e:87:0f:34:c0:6d:10:f3:fa:50:a6:6b:d5:6f:0a:87:a4: db:44:e8:9e:3d:c8:17:eb:1c:cf:bf:bc:16:e6:85:43:94:fc: 66:ba:00:76:d2:90:2d:e4:81:67:ee:43:ea:d7:20:92:85:6d: 1d:80:85:b1:79:f8:f6:d5:f0:e9:a4:89:03:2e:a6:b9:09:6e: de:3f:ba:5d:5e:2d:37:70:77:f8:28:e3:e6:c3:74:f3:30:e6: e5:e1:ae:3e:ce:48:3b:29:b5:64:38:70:9b:a8:05:f5:d6:f7: 9c:40:49:7f:85:af:f5:19:0e:99:1f:72:0a:6b:16:fc:5c:13: 65:fa:5b:46:bb:37:63:8c:87:ff:d2:30:24:18:07:40:d5:c3: 33:71:a5:0f:ce:cc:1c:9e:64:bf:73:ba:2d:d0:2f:34:1e:1d: 09:58:10:e8:5f:a8:93:d6:95:88:d3:84:a5:7d:d8:b9:f4:da: 0e:fa:15:c0:9f:bc:cb:45:7b:bf:46:fe:cd:27:34:f8:81:ca: 5c:42:67:82:61:12:aa:48:91:6f:2c:1f:c8:0c:4b:4e:c8:5e: 45:53:21:a7 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw NERBMTJGOUQwHhcNMjYwMTI4MTUxMDM2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODU0ZS1iMzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslHzMMo/7JSavVpSlsgg6DxS82Vpm6Y+BQgd1+WokdV6WusIIouwP0zcuEoQ JPxgw3CxMs7lFEIg9xRJ+vfU+YZd00vN1h2XDOwMZUuROcmcaquyP8AkOG3/BeV0 w66qV/pb3pepcoxWvdliMzvDwDfhv91agWrBxjdZwWP1eEs25y+Fu9KdkqCBm/8G K+cc7eMg0UrrxuFvhPGdR5OCFifrBqTMjSKYfKszcasD/TU6CBAOhp39GqTpbLzG h2AoQw05JngZhVZx6OxFSdsVEjrRaG6pPMJIyMbUWV4dZnVuO5cUuMuSOdUUZFHC rpUjshsow2moL+KKiX9PlMH+ewIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDcFDh12 4v9hU7K9guriYsF6dUkCMB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjlFM0EvMTk3RUMwQjYxRDg2MTFFMkFCRUYyMkREMDhCMDJDRDIvOTY3RDM2NzRD Qjc5MTFGMEI1ODE2Qjg0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBygO+MA0GCSqGSIb3DQEBCwUAA4IBAQCkqYqasvzJ70LintX1qFmJ Hqn5X1REHpK6lRImEfQXHCE15BQTHocPNMBtEPP6UKZr1W8Kh6TbROiePcgX6xzP v7wW5oVDlPxmugB20pAt5IFn7kPq1yCShW0dgIWxefj21fDppIkDLqa5CW7eP7pd Xi03cHf4KOPmw3TzMObl4a4+zkg7KbVkOHCbqAX11vecQEl/ha/1GQ6ZH3IKaxb8 XBNl+ltGuzdjjIf/0jAkGAdA1cMzcaUPzswcnmS/c7ot0C80Hh0JWBDoX6iT1pWI 04Slfdi59NoO+hXAn7zLRXu/Rv7NJzT4gcpcQmeCYRKqSJFvLB/IDEtOyF5FUyGn -----END CERTIFICATE-----Generated at Mon Mar 2 09:03:41 2026 by rpki-client