$ rpki-client -vvf rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/688EAE1E8A1911EC94921D85C4F9AE02.roa File: 688EAE1E8A1911EC94921D85C4F9AE02.roa (raw, json) Hash identifier: PSZyKZNLeC+ynTVNPefbaajpAUQPkgVzephvNIxcZqc= Subject key identifier: 18:9C:3D:B3:C7:D7:0D:05:AC:02:13:68:B8:D8:BC:50:C7:CD:0F:AC Certificate issuer: /CN=A912BC39/serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A Certificate serial: 07AE Authority key identifier: 5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/688EAE1E8A1911EC94921D85C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:28:34 +0000 ROA not before: Tue 02 Sep 2025 22:12:33 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 138186 IP address blocks: 110.76.176.0/23 maxlen: 24 110.76.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1966 (0x7ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BC39, serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A Validity Not Before: Sep 2 22:12:33 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a430f2-985a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:97:6a:55:14:e7:f7:c4:5b:cb:85:c6:2d:7b: bb:93:cc:3c:7d:17:c3:41:be:b6:2f:da:44:f3:fc: 3d:a8:54:bf:56:85:a6:0f:6b:18:09:aa:07:22:53: fe:24:0f:c8:88:55:63:6d:45:7d:7a:71:ce:af:bb: bf:92:f9:3c:a4:69:ab:5c:25:8d:01:f5:cd:eb:34: 81:28:f5:88:59:6f:10:4f:61:26:3b:75:00:93:7c: a0:22:b7:e6:b2:e7:94:00:a8:de:c8:86:fe:27:33: 3c:a5:88:0f:e5:c7:ae:1b:9c:71:95:d9:e6:dc:90: 27:c8:8d:45:94:02:22:46:8f:59:96:d4:8a:e4:83: 00:cd:86:71:e2:b5:6d:86:fc:21:54:c6:5c:ef:d4: 15:e4:f9:38:0c:b8:1b:51:03:35:85:f3:39:83:cc: 62:af:2f:aa:8c:29:d1:fb:7e:09:99:8e:eb:d5:b8: 1f:fc:ce:53:a1:b8:cd:c1:89:5c:cd:26:14:6a:45: e4:e9:b7:26:34:c1:7e:c0:ba:a6:d0:2a:ca:d9:b8: 43:c6:76:bd:81:33:f0:18:a5:86:4f:bc:0d:85:b6: fd:0a:ef:b4:1e:87:2c:64:9f:71:04:e7:e6:67:86: 02:a6:20:f5:71:3a:d8:2c:e4:bc:b9:94:87:53:93: 0b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:9C:3D:B3:C7:D7:0D:05:AC:02:13:68:B8:D8:BC:50:C7:CD:0F:AC X509v3 Authority Key Identifier: keyid:5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/688EAE1E8A1911EC94921D85C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 110.76.176.0/22 Signature Algorithm: sha256WithRSAEncryption 02:a0:2b:f8:56:90:e0:00:40:1b:db:d4:18:c3:e7:11:43:0b: c7:3c:5d:ae:70:1e:c1:d8:ce:e1:82:44:6f:b0:07:8c:49:18: 27:13:d6:f9:6f:6b:7a:93:94:d6:8c:78:fe:1d:15:90:63:3a: 8f:b7:1c:4e:3b:ec:e7:87:dd:44:bc:1d:7c:e1:3d:11:01:4b: d4:c9:37:f6:67:cd:09:f8:aa:21:03:02:fd:df:bc:30:b2:50: e9:b7:f1:72:1b:19:32:a2:92:83:38:1d:0d:25:90:8f:9f:b3: 70:21:3a:6e:a8:b7:98:22:4d:b5:f4:17:6f:9c:98:b9:15:8c: b0:32:40:86:c3:8e:69:34:db:a2:0d:33:7c:48:f7:9a:db:78: 18:75:0f:45:40:37:37:7c:97:b9:76:0b:ef:63:4d:8b:46:07: 94:7f:ef:e4:28:1c:68:76:e1:14:03:a9:f8:56:fa:a4:d3:9e: ca:f3:36:0b:bc:1d:74:59:0c:27:d6:1a:e1:81:ee:3d:83:6c: 5d:00:03:45:51:3d:92:1e:4b:71:ca:66:16:c9:22:32:15:1c: a0:d5:b0:aa:b5:44:99:86:4f:64:18:2e:4a:9e:85:14:5f:78: 58:08:80:4f:5f:51:ff:79:e2:68:75:27:2b:18:ac:64:e9:31: 51:db:da:2c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDMzkxMTAvBgNVBAUTKDVEMEQ3NTAwNDk1NkVEQ0NBQjlCODQyNzFBNzM0MEU2 Mzg1NUZGOEEwHhcNMjUwOTAyMjIxMjMzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzBmMi05ODVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5dqVRTn98Rby4XGLXu7k8w8fRfDQb62L9pE8/w9qFS/VoWmD2sYCaoHIlP+ JA/IiFVjbUV9enHOr7u/kvk8pGmrXCWNAfXN6zSBKPWIWW8QT2EmO3UAk3ygIrfm sueUAKjeyIb+JzM8pYgP5ceuG5xxldnm3JAnyI1FlAIiRo9ZltSK5IMAzYZx4rVt hvwhVMZc79QV5Pk4DLgbUQM1hfM5g8xiry+qjCnR+34JmY7r1bgf/M5TobjNwYlc zSYUakXk6bcmNMF+wLqm0CrK2bhDxna9gTPwGKWGT7wNhbb9Cu+0HocsZJ9xBOfm Z4YCpiD1cTrYLOS8uZSHU5MLJQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBicPbPH 1w0FrAITaLjYvFDHzQ+sMB8GA1UdIwQYMBaAFF0NdQBJVu3Mq5uEJxpzQOY4Vf+K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkMzOS9CMzdCMTU4RTNG MjkxMUVCOUI5QTIzMTRDNEY5QUUwMi9YUTExQUVsVzdjeXJtNFFuR25OQTVqaFZf NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hRMTFBRWxXN2N5cm00UW5Hbk5BNWpoVl80by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkJDMzkvQjM3QjE1OEUzRjI5MTFFQjlCOUEyMzE0QzRGOUFFMDIvNjg4RUFFMUU4 QTE5MTFFQzk0OTIxRDg1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCbkywMA0GCSqGSIb3DQEBCwUAA4IBAQACoCv4VpDgAEAb29QYw+cR QwvHPF2ucB7B2M7hgkRvsAeMSRgnE9b5b2t6k5TWjHj+HRWQYzqPtxxOO+znh91E vB184T0RAUvUyTf2Z80J+KohAwL937wwslDpt/FyGxkyopKDOB0NJZCPn7NwITpu qLeYIk219BdvnJi5FYywMkCGw45pNNuiDTN8SPea23gYdQ9FQDc3fJe5dgvvY02L RgeUf+/kKBxoduEUA6n4Vvqk057K8zYLvB10WQwn1hrhge49g2xdAANFUT2SHktx ymYWySIyFRyg1bCqtUSZhk9kGC5KnoUUX3hYCIBPX1H/eeJodScrGKxk6TFR29os -----END CERTIFICATE-----Generated at Mon Mar 2 04:19:44 2026 by rpki-client