$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/30612F364BE411F09B3BB887C4F9AE02.roa File: 30612F364BE411F09B3BB887C4F9AE02.roa (raw, json) Hash identifier: Wpdrm+r8544LPX1gXHLSDbcur2llemVTtrJUj1zdDIM= Subject key identifier: C9:EA:95:FD:F7:2B:F9:13:97:89:A3:DD:3C:75:F9:F2:E4:8F:AB:41 Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 0BF5 Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/30612F364BE411F09B3BB887C4F9AE02.roa Signing time: Thu 02 Apr 2026 20:22:59 +0000 ROA not before: Thu 02 Apr 2026 20:22:59 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 17497 IP address blocks: 203.168.240.0/22 maxlen: 22 203.168.240.0/24 maxlen: 24 203.168.241.0/24 maxlen: 24 203.168.242.0/24 maxlen: 24 203.168.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3061 (0xbf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Validity Not Before: Apr 2 20:22:59 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69ced023-e80d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:c7:ac:8e:f2:62:19:7b:c9:9e:83:1d:b3: 7d:bf:0b:76:cc:eb:81:c3:88:01:ee:ab:37:b0:8e: 05:2d:8b:b0:a3:be:f3:25:62:f4:f3:b0:e6:d5:bc: a9:cd:e3:9c:08:49:52:b1:38:16:6e:e3:41:b9:17: 72:bd:24:df:d3:8d:b7:8b:5d:af:11:25:54:5f:63: 7e:5b:95:51:d5:69:0c:69:ae:13:03:fe:68:a8:ae: f3:66:69:d9:7e:92:1e:80:02:5a:39:3b:0d:fe:7b: cf:c4:cd:8e:46:20:30:28:50:85:b2:f1:e3:a2:d7: 47:df:e9:49:36:bc:c1:95:8b:39:17:2f:46:c1:b6: e0:66:f2:6e:63:71:e6:42:37:7e:b9:5f:64:8b:1f: 03:87:0e:9e:24:f0:9b:2e:b5:5a:bf:d6:dc:4f:b1: eb:d0:a4:63:4d:e8:3c:d4:c7:76:9b:7a:84:35:7d: c3:de:22:5d:65:a8:38:2b:86:24:52:04:c4:19:05: fa:c3:6a:6f:60:8f:0b:5b:3c:9a:39:c2:41:6c:f9: ea:1b:f0:80:96:58:e1:02:05:4b:d9:79:58:69:9b: 62:46:ca:f3:81:7a:e2:0e:8f:b3:1a:03:80:41:bd: d3:91:01:21:52:d7:fa:90:fb:e7:b6:0c:5f:b7:bb: 30:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EA:95:FD:F7:2B:F9:13:97:89:A3:DD:3C:75:F9:F2:E4:8F:AB:41 X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/30612F364BE411F09B3BB887C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.168.240.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:42:b4:80:20:83:32:a4:9e:ce:f1:ef:9d:54:a3:f3:54:b7: 4b:44:3d:cf:0e:7f:34:96:55:a8:eb:68:2f:72:6d:c0:6a:64: 33:3e:1c:41:18:3f:b5:0c:77:10:94:f2:59:63:a0:a0:f8:67: 55:cc:a9:32:5f:54:48:48:3b:80:0d:41:cb:c8:ed:55:08:89: 6f:10:c5:1e:fe:24:36:ab:87:e7:d6:81:8c:18:10:a8:57:27: b3:40:c0:b9:1e:fc:85:61:3b:90:58:46:64:ff:22:6f:55:32: cf:15:f8:29:e4:80:ed:a3:36:91:fe:34:fa:dc:d0:e7:10:22: bd:92:e9:45:57:eb:2d:93:fa:02:96:35:8c:f6:b2:1b:a9:60: de:8e:4c:1e:61:53:25:fa:16:95:1c:ca:bb:d6:d2:e7:0e:dc: f6:db:34:99:93:ed:42:79:4c:54:3f:16:49:5e:9f:64:b0:d7: 22:94:b8:da:24:ab:2b:f5:48:79:e3:a3:e2:be:e9:50:ad:43: 6b:aa:50:db:77:e7:05:8e:9d:c6:cd:27:75:4f:38:35:f6:52: 55:4d:c2:e5:0d:c1:8b:fb:f5:08:83:be:d7:1a:48:74:55:68: 25:d4:28:aa:f8:13:f9:6f:ef:41:22:db:4f:8a:74:d9:af:98: 49:8a:4a:72 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICC/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjYwNDAyMjAyMjU5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNlZDAyMy1lODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7rHrI7yYhl7yZ6DHbN9vwt2zOuBw4gB7qs3sI4FLYuwo77zJWL087Dm1byp zeOcCElSsTgWbuNBuRdyvSTf0423i12vESVUX2N+W5VR1WkMaa4TA/5oqK7zZmnZ fpIegAJaOTsN/nvPxM2ORiAwKFCFsvHjotdH3+lJNrzBlYs5Fy9GwbbgZvJuY3Hm Qjd+uV9kix8Dhw6eJPCbLrVav9bcT7Hr0KRjTeg81Md2m3qENX3D3iJdZag4K4Yk UgTEGQX6w2pvYI8LWzyaOcJBbPnqG/CAlljhAgVL2XlYaZtiRsrzgXriDo+zGgOA Qb3TkQEhUtf6kPvntgxft7swcQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMnqlf33 K/kTl4mj3Tx1+fLkj6tBMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvMzA2MTJGMzY0 QkU0MTFGMDlCM0JCODg3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCy6jwMA0GCSqGSIb3DQEBCwUAA4IBAQAvQrSAIIMypJ7O8e+dVKPz VLdLRD3PDn80llWo62gvcm3AamQzPhxBGD+1DHcQlPJZY6Cg+GdVzKkyX1RISDuA DUHLyO1VCIlvEMUe/iQ2q4fn1oGMGBCoVyezQMC5HvyFYTuQWEZk/yJvVTLPFfgp 5IDtozaR/jT63NDnECK9kulFV+stk/oCljWM9rIbqWDejkweYVMl+haVHMq71tLn Dtz22zSZk+1CeUxUPxZJXp9ksNcilLjaJKsr9Uh546PivulQrUNrqlDbd+cFjp3G zSd1Tzg19lJVTcLlDcGL+/UIg77XGkh0VWgl1Ciq+BP5b+9BIttPinTZr5hJikpy -----END CERTIFICATE-----Generated at Fri Apr 17 18:21:30 2026 by rpki-client