$ rpki-client -vvf rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/81A901FA8A0411EEA251F746C4F9AE02.roa File: 81A901FA8A0411EEA251F746C4F9AE02.roa (raw, json) Hash identifier: 5/jz+C40zLVMH2SNYsrHp/ff3x36CKwapZ0lQnBenzc= Subject key identifier: A9:CD:42:E5:77:60:F0:5C:B0:34:BC:A1:84:29:5F:47:46:55:8F:48 Certificate issuer: /CN=A912EE4D/serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888 Certificate serial: 01B4 Authority key identifier: 94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/81A901FA8A0411EEA251F746C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:26:40 +0000 ROA not before: Wed 07 Jan 2026 03:22:25 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 38315 IP address blocks: 203.169.24.0/21 maxlen: 21 203.169.24.0/22 maxlen: 22 203.169.24.0/23 maxlen: 23 203.169.24.0/24 maxlen: 24 203.169.25.0/24 maxlen: 24 203.169.26.0/23 maxlen: 23 203.169.26.0/24 maxlen: 24 203.169.27.0/24 maxlen: 24 203.169.28.0/22 maxlen: 22 203.169.28.0/23 maxlen: 23 203.169.28.0/24 maxlen: 24 203.169.29.0/24 maxlen: 24 203.169.30.0/23 maxlen: 23 203.169.30.0/24 maxlen: 24 203.169.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EE4D, serialNumber=9459A07AFEB46F799245FEC2356D3CBAC9BED888 Validity Not Before: Jan 7 03:22:25 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a41460-0707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0c:da:55:99:11:5d:de:6c:96:ea:51:c6:7b: e0:d8:c3:b4:de:f8:0b:f2:6c:d0:b7:e4:e9:14:eb: 79:57:a1:ce:ce:d4:30:3c:62:c3:6d:bb:df:43:82: dd:b9:03:4f:63:95:85:64:f8:b2:18:19:62:2e:3f: 78:64:83:5e:d4:b0:1a:39:16:61:b9:c6:ed:dd:b4: 1c:81:85:e7:ae:41:c0:2a:a3:c9:ae:b4:f2:26:c0: 7f:3e:82:1a:b5:97:37:80:23:9e:1a:57:37:19:12: f8:af:f9:d5:2e:a4:55:bf:cf:0a:51:44:a0:63:34: 4f:28:35:94:af:4d:5d:f8:2d:26:60:af:5b:c6:50: ff:58:fb:58:d4:20:98:07:df:76:d9:2d:90:7e:75: ef:3c:b2:fe:cf:50:7f:af:c0:3a:dd:84:15:17:a4: 3c:aa:34:9c:99:b1:c7:21:cf:e1:cd:e5:49:1f:93: 1b:d5:44:87:7a:e4:59:a1:bd:ad:46:b9:60:3d:a6: 06:c8:a4:a4:5b:8e:c5:56:c5:c7:29:9e:59:46:07: 59:b3:de:55:9e:8a:6d:77:05:be:64:96:23:59:6e: f9:64:59:54:35:d4:73:c4:72:ad:63:81:72:d3:1f: 9a:7a:58:b3:ba:42:1c:f3:05:5e:82:a9:ac:a9:f5: 04:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CD:42:E5:77:60:F0:5C:B0:34:BC:A1:84:29:5F:47:46:55:8F:48 X509v3 Authority Key Identifier: keyid:94:59:A0:7A:FE:B4:6F:79:92:45:FE:C2:35:6D:3C:BA:C9:BE:D8:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/lFmgev60b3mSRf7CNW08usm-2Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFmgev60b3mSRf7CNW08usm-2Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EE4D/523FDA808A0211EEB289032CC4F9AE02/81A901FA8A0411EEA251F746C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.169.24.0/21 Signature Algorithm: sha256WithRSAEncryption a8:7c:67:9f:92:38:ba:e8:3e:62:21:de:90:7d:b9:d0:aa:a7: ea:5d:7b:3b:46:ae:c0:5a:64:07:88:e9:c4:8d:a0:96:bc:ca: 32:c7:7d:c9:e3:31:30:c2:18:cf:1f:70:6d:ea:62:6a:a7:2d: 05:5b:f6:9e:be:73:82:fd:8d:45:c5:0c:17:1b:89:35:79:1d: b6:f6:7c:46:86:f3:95:65:28:8c:9d:65:21:5e:d8:a1:f9:c8: 1b:06:ae:14:d5:79:d2:f2:99:81:ed:da:5a:46:8f:c8:60:d7: e5:83:39:5d:27:e6:03:bc:be:80:f4:e9:e8:76:5c:32:05:cc: bd:26:b6:9b:d9:cc:58:ce:43:2e:b0:72:7b:0f:39:cd:51:83: a4:b9:11:a6:9a:d4:85:48:72:35:d7:54:67:a2:b7:bb:53:d8: 67:bd:03:70:88:8b:40:fd:03:2a:94:67:98:b6:3d:de:b7:3a: 30:ff:d6:e2:55:be:80:d0:c9:4d:ed:14:03:ac:0a:72:68:74: ba:7b:74:27:b2:0a:de:37:a4:ea:1e:64:9e:45:5e:9f:d9:54: 5a:e4:df:a1:f0:9e:fb:c9:44:21:00:8c:23:9a:99:e3:f6:74: 27:11:0b:95:42:01:a7:88:2e:fe:5b:f5:01:ef:4d:6f:69:11: d7:95:de:a7 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVFNEQxMTAvBgNVBAUTKDk0NTlBMDdBRkVCNDZGNzk5MjQ1RkVDMjM1NkQzQ0JB QzlCRUQ4ODgwHhcNMjYwMTA3MDMyMjI1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTQ2MC0wNzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAzaVZkRXd5slupRxnvg2MO03vgL8mzQt+TpFOt5V6HOztQwPGLDbbvfQ4Ld uQNPY5WFZPiyGBliLj94ZINe1LAaORZhucbt3bQcgYXnrkHAKqPJrrTyJsB/PoIa tZc3gCOeGlc3GRL4r/nVLqRVv88KUUSgYzRPKDWUr01d+C0mYK9bxlD/WPtY1CCY B9922S2QfnXvPLL+z1B/r8A63YQVF6Q8qjScmbHHIc/hzeVJH5Mb1USHeuRZob2t RrlgPaYGyKSkW47FVsXHKZ5ZRgdZs95VnoptdwW+ZJYjWW75ZFlUNdRzxHKtY4Fy 0x+aelizukIc8wVegqmsqfUEyQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKnNQuV3 YPBcsDS8oYQpX0dGVY9IMB8GA1UdIwQYMBaAFJRZoHr+tG95kkX+wjVtPLrJvtiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUU0RC81MjNGREE4MDhB MDIxMUVFQjI4OTAzMkNDNEY5QUUwMi9sRm1nZXY2MGIzbVNSZjdDTlcwOHVzbS0y SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGbWdldjYwYjNtU1JmN0NOVzA4dXNtLTJJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkVFNEQvNTIzRkRBODA4QTAyMTFFRUIyODkwMzJDQzRGOUFFMDIvODFBOTAxRkE4 QTA0MTFFRUEyNTFGNzQ2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDy6kYMA0GCSqGSIb3DQEBCwUAA4IBAQCofGefkji66D5iId6QfbnQ qqfqXXs7Rq7AWmQHiOnEjaCWvMoyx33J4zEwwhjPH3Bt6mJqpy0FW/aevnOC/Y1F xQwXG4k1eR229nxGhvOVZSiMnWUhXtih+cgbBq4U1XnS8pmB7dpaRo/IYNflgzld J+YDvL6A9OnodlwyBcy9Jrab2cxYzkMusHJ7DznNUYOkuRGmmtSFSHI111Rnore7 U9hnvQNwiItA/QMqlGeYtj3etzow/9biVb6A0MlN7RQDrApyaHS6e3QnsgreN6Tq HmSeRV6f2VRa5N+h8J77yUQhAIwjmpnj9nQnEQuVQgGniC7+W/UB701vaRHXld6n -----END CERTIFICATE-----Generated at Mon Mar 2 09:06:59 2026 by rpki-client