$ rpki-client -vvf rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/23CFDCD244BE11EF8FA8A37FC4F9AE02.roa File: 23CFDCD244BE11EF8FA8A37FC4F9AE02.roa (raw, json) Hash identifier: b7tTkIQLwSx6JAaS4yo7JlLAOBsvulqfSiRwtnC5b7E= Subject key identifier: B7:CB:AD:E8:A7:96:1C:9C:0E:0C:BE:8D:AF:A1:F9:BD:E7:B7:97:35 Certificate issuer: /CN=A912F190/serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69 Certificate serial: 0172 Authority key identifier: D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/23CFDCD244BE11EF8FA8A37FC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:17:36 +0000 ROA not before: Wed 18 Feb 2026 07:24:36 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 24007 IP address blocks: 180.188.204.0/22 maxlen: 22 180.188.204.0/24 maxlen: 24 180.188.205.0/24 maxlen: 24 180.188.206.0/24 maxlen: 24 180.188.207.0/24 maxlen: 24 202.12.24.0/23 maxlen: 23 202.12.24.0/24 maxlen: 24 202.12.25.0/24 maxlen: 24 203.3.130.0/24 maxlen: 24 203.4.232.0/21 maxlen: 21 203.4.232.0/24 maxlen: 24 203.4.233.0/24 maxlen: 24 203.4.234.0/24 maxlen: 24 203.4.235.0/24 maxlen: 24 203.4.236.0/24 maxlen: 24 203.4.237.0/24 maxlen: 24 203.4.238.0/24 maxlen: 24 203.4.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F190, serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69 Validity Not Before: Feb 18 07:24:36 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a466a0-6993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:1f:5d:5c:34:b8:1f:73:ba:8e:7e:c6:da:85: ee:74:0d:73:1f:5c:dd:11:01:6f:b0:30:ed:ff:40: dd:d8:68:d7:3e:64:e6:51:24:b5:a1:87:7f:b5:cd: 11:45:10:36:b4:d0:25:57:eb:b8:00:15:b4:2e:2d: a5:2f:ab:4b:49:41:bd:d9:5e:f7:3e:71:a5:9d:eb: ba:6f:55:cc:24:64:b1:6b:cb:9f:62:1a:54:3a:32: d7:87:1f:fc:9d:cc:ad:b6:cd:05:a3:c9:88:0f:af: 2a:03:b7:7f:12:9c:ef:7a:e8:03:52:6b:1f:c3:13: d2:b6:a0:28:03:a1:31:31:7f:2a:4e:86:82:a6:dd: fb:68:e9:89:b2:ad:8f:bc:b2:2c:68:8c:61:7e:d6: 54:70:f6:ad:4a:ab:08:11:87:24:4f:74:f8:46:65: ba:99:92:81:bf:69:15:a8:fe:69:0c:72:5a:67:13: 23:19:75:5a:16:af:fe:ec:a1:d9:53:8f:65:f9:b7: c2:29:0d:f5:e6:6b:45:d6:07:14:f5:4a:c6:4c:ec: 79:79:17:ec:38:4f:2d:71:e3:fa:20:6b:a2:58:d7: 52:ec:18:79:06:ba:4b:b4:87:c0:54:e2:26:10:65: f1:bb:ec:94:d2:6c:25:ab:c0:b4:54:f7:67:bd:b5: 8b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CB:AD:E8:A7:96:1C:9C:0E:0C:BE:8D:AF:A1:F9:BD:E7:B7:97:35 X509v3 Authority Key Identifier: keyid:D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/23CFDCD244BE11EF8FA8A37FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 180.188.204.0/22 202.12.24.0/23 203.3.130.0/24 203.4.232.0/21 Signature Algorithm: sha256WithRSAEncryption bb:a0:ce:6c:9c:dc:21:44:65:ac:e0:d8:bf:fe:2a:1a:0c:79: 4e:82:29:72:6b:90:a5:fa:aa:30:f6:75:d0:a2:5b:eb:ac:f3: de:f7:0a:e6:08:2b:cd:c9:20:9a:3e:e7:29:a1:5d:6e:91:be: e4:48:84:a5:b3:d7:94:ae:cd:7d:85:91:07:40:c5:8c:bc:9e: e6:7f:c0:8b:a2:fe:73:c8:d7:a8:9e:65:83:1b:be:36:29:93: 94:25:49:87:55:35:38:6e:9e:70:fa:c5:b5:02:63:6b:39:97: da:10:68:14:14:0c:18:96:78:17:4e:b0:6d:08:08:f4:bd:01: f9:6f:6b:a5:cb:cd:ee:87:c5:77:83:93:b5:80:66:a0:5c:12: 91:8b:63:c3:c0:b3:b5:b4:fb:0e:89:4f:b2:c5:10:33:2f:95: e3:c4:be:f5:66:22:e1:6f:55:55:a6:4c:46:69:c6:4e:27:83: 2a:04:9b:65:eb:a8:9e:0e:b3:85:7e:dc:83:17:b8:c0:d6:69: 74:2c:1e:20:ce:5d:1d:56:ee:12:e9:8a:f6:4c:44:a9:2a:06: 38:a6:a1:8c:79:71:ea:00:63:f9:ab:28:e6:65:33:da:c7:ed: bb:d4:99:c9:a5:22:e5:60:01:59:d2:82:77:78:62:62:55:cb: 34:df:7d:a3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxOTAxMTAvBgNVBAUTKEQ2QkYzREUxNjQ0MUVEN0Q4NzUwNkRFMDlFNERENUQ2 MzhFMEJBNjkwHhcNMjYwMjE4MDcyNDM2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjZhMC02OTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8R9dXDS4H3O6jn7G2oXudA1zH1zdEQFvsDDt/0Dd2GjXPmTmUSS1oYd/tc0R RRA2tNAlV+u4ABW0Li2lL6tLSUG92V73PnGlneu6b1XMJGSxa8ufYhpUOjLXhx/8 ncytts0Fo8mID68qA7d/EpzveugDUmsfwxPStqAoA6ExMX8qToaCpt37aOmJsq2P vLIsaIxhftZUcPatSqsIEYckT3T4RmW6mZKBv2kVqP5pDHJaZxMjGXVaFq/+7KHZ U49l+bfCKQ315mtF1gcU9UrGTOx5eRfsOE8tceP6IGuiWNdS7Bh5BrpLtIfAVOIm EGXxu+yU0mwlq8C0VPdnvbWLAQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFLfLrein lhycDgy+ja+h+b3nt5c1MB8GA1UdIwQYMBaAFNa/PeFkQe19h1Bt4J5N1dY44Lpp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE5MC81N0I0MDU5NDNB ODQxMUVGQTU3MzE1ODRDNEY5QUUwMi8xcjg5NFdSQjdYMkhVRzNnbmszVjFqamd1 bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFyODk0V1JCN1gySFVHM2duazNWMWpqZ3Vtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkYxOTAvNTdCNDA1OTQzQTg0MTFFRkE1NzMxNTg0QzRGOUFFMDIvMjNDRkRDRDI0 NEJFMTFFRjhGQThBMzdGQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQCtLzMAwQBygwYAwQAywOCAwQDywToMA0GCSqGSIb3DQEBCwUAA4IB AQC7oM5snNwhRGWs4Ni//ioaDHlOgilya5Cl+qow9nXQolvrrPPe9wrmCCvNySCa PucpoV1ukb7kSISls9eUrs19hZEHQMWMvJ7mf8CLov5zyNeonmWDG742KZOUJUmH VTU4bp5w+sW1AmNrOZfaEGgUFAwYlngXTrBtCAj0vQH5b2uly83uh8V3g5O1gGag XBKRi2PDwLO1tPsOiU+yxRAzL5XjxL71ZiLhb1VVpkxGacZOJ4MqBJtl66ieDrOF ftyDF7jA1ml0LB4gzl0dVu4S6Yr2TESpKgY4pqGMeXHqAGP5qyjmZTPax+271JnJ pSLlYAFZ0oJ3eGJiVcs0332j -----END CERTIFICATE-----Generated at Mon Mar 2 19:27:23 2026 by rpki-client