$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/73DDDA0206FF11ED8C6B565FC4F9AE02.roa File: 73DDDA0206FF11ED8C6B565FC4F9AE02.roa (raw, json) Hash identifier: Qa3ZVxRSqepvqAijHMmNtkgWygbAStjiNRtfVCddju0= Subject key identifier: 33:3D:1B:93:D9:89:11:A4:4A:EE:AB:6E:D2:88:33:82:7A:22:62:CD Certificate issuer: /CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881 Certificate serial: 0855 Authority key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/73DDDA0206FF11ED8C6B565FC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:37:31 +0000 ROA not before: Wed 30 Apr 2025 21:31:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 4739 IP address blocks: 203.215.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2133 (0x855) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B0A3, serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881 Validity Not Before: Apr 30 21:31:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a408db-c2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:75:a0:29:95:77:61:98:c4:5b:e5:5b:42:b7: 21:34:ff:38:fd:ad:18:74:7d:3e:e6:fb:51:3b:c2: d0:45:c8:93:d8:7e:d4:52:01:b1:28:33:b8:50:37: 44:2e:e1:33:02:15:1d:80:5c:0f:98:c2:c0:13:4a: 0e:1e:7f:da:d7:d1:2d:9f:23:83:61:5e:6e:7e:f4: d1:66:af:37:d4:18:ed:c9:94:33:df:b1:23:6c:33: 14:4c:ce:0d:2a:1f:32:4b:b9:d8:ab:ae:2b:17:58: 4d:d4:79:5a:f0:c1:e8:ca:72:fd:b8:b2:f7:78:dc: 19:e7:8f:7a:a8:93:0c:ba:c1:e9:d7:8c:a0:a8:af: 71:ce:30:3b:61:80:8d:97:2c:1b:4e:0c:e6:19:aa: 0c:ef:24:09:58:18:9e:8d:63:25:dd:27:da:96:69: 75:b1:9c:ac:7c:98:37:67:66:48:be:c7:97:7d:9d: b7:34:79:af:2f:b9:77:0b:8a:23:83:0e:7f:86:d0: f1:b4:b0:a7:dc:55:ad:38:c4:25:36:4d:72:fb:82: a2:11:9b:69:44:e4:c2:37:16:03:53:4e:c3:3a:29: 2f:fb:e4:b6:50:e8:79:a1:b3:e2:b2:02:6f:82:6c: 77:4e:2b:47:d4:55:39:bd:28:e3:e3:5f:c0:f3:d8: f3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3D:1B:93:D9:89:11:A4:4A:EE:AB:6E:D2:88:33:82:7A:22:62:CD X509v3 Authority Key Identifier: keyid:32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/73DDDA0206FF11ED8C6B565FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.215.29.0/24 Signature Algorithm: sha256WithRSAEncryption ae:dd:0a:4e:3b:b6:f6:75:87:7e:10:bd:ea:94:71:28:0b:b1: 34:ec:e6:93:72:58:4b:fb:84:a3:e7:21:93:e4:9b:79:4c:a7: 53:d3:08:67:1a:1a:c8:33:fd:fe:68:20:d3:96:55:47:d9:d2: cf:0e:17:6c:1c:4e:7f:55:a9:b5:5f:bf:13:97:a3:3f:03:4e: ab:e4:22:61:39:4d:3f:fe:4b:3e:2d:e3:35:65:5f:11:f4:a4: b5:06:31:05:14:79:a1:db:77:9b:5b:2e:48:ba:4f:b6:3d:9f: bb:32:3b:81:25:b1:3b:d2:27:de:f7:49:3f:09:96:17:70:e2: c2:c1:3e:15:47:64:c2:3b:f6:8e:a4:2a:e2:92:28:c3:37:f1: 07:92:fc:39:5e:d0:b4:f2:e1:ce:18:d5:c5:b7:5a:a8:ef:98: 73:9d:5b:74:f3:7b:46:3c:d4:8b:bf:85:28:7a:23:30:b1:9a: cb:20:0f:d4:d0:48:12:f4:af:f6:6d:e5:29:32:04:15:26:85: 88:3f:33:f6:af:14:49:a6:52:a5:ab:6f:90:0b:59:a8:c9:57: af:24:ea:87:b2:18:4f:68:cb:30:f3:dd:54:af:4c:09:7c:36: 0b:2a:8b:7e:0e:fe:8e:31:5a:b9:b2:87:02:55:86:a6:0a:79: 1e:4b:91:39 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwQTMxMTAvBgNVBAUTKDMyNDJCQUUwMEJBOUYwREY0RTlFREE2RkU1QzA4RjEy OUY5MTY4ODEwHhcNMjUwNDMwMjEzMTQ3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDhkYi1jMmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgXWgKZV3YZjEW+VbQrchNP84/a0YdH0+5vtRO8LQRciT2H7UUgGxKDO4UDdE LuEzAhUdgFwPmMLAE0oOHn/a19EtnyODYV5ufvTRZq831BjtyZQz37EjbDMUTM4N Kh8yS7nYq64rF1hN1Hla8MHoynL9uLL3eNwZ5496qJMMusHp14ygqK9xzjA7YYCN lywbTgzmGaoM7yQJWBiejWMl3Sfalml1sZysfJg3Z2ZIvseXfZ23NHmvL7l3C4oj gw5/htDxtLCn3FWtOMQlNk1y+4KiEZtpROTCNxYDU07DOikv++S2UOh5obPisgJv gmx3TitH1FU5vSjj41/A89jzQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDM9G5PZ iRGkSu6rbtKIM4J6ImLNMB8GA1UdIwQYMBaAFDJCuuALqfDfTp7ab+XAjxKfkWiB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjBBMy83NTQ1NDVCQzAz QjcxMUVCOTdGQkU1NjhDNEY5QUUwMi9Na0s2NEF1cDhOOU9udHB2NWNDUEVwLVJh SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01rSzY0QXVwOE45T250cHY1Y0NQRXAtUmFJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkIwQTMvNzU0NTQ1QkMwM0I3MTFFQjk3RkJFNTY4QzRGOUFFMDIvNzNERERBMDIw NkZGMTFFRDhDNkI1NjVGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAy9cdMA0GCSqGSIb3DQEBCwUAA4IBAQCu3QpOO7b2dYd+EL3qlHEo C7E07OaTclhL+4Sj5yGT5Jt5TKdT0whnGhrIM/3+aCDTllVH2dLPDhdsHE5/Vam1 X78Tl6M/A06r5CJhOU0//ks+LeM1ZV8R9KS1BjEFFHmh23ebWy5Iuk+2PZ+7MjuB JbE70ife90k/CZYXcOLCwT4VR2TCO/aOpCrikijDN/EHkvw5XtC08uHOGNXFt1qo 75hznVt083tGPNSLv4UoeiMwsZrLIA/U0EgS9K/2beUpMgQVJoWIPzP2rxRJplKl q2+QC1moyVevJOqHshhPaMsw891Ur0wJfDYLKot+Dv6OMVq5socCVYamCnkeS5E5 -----END CERTIFICATE-----Generated at Mon Mar 2 03:56:12 2026 by rpki-client