$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/2CE57E8636DD11EC88BBAC6EC4F9AE02.roa File: 2CE57E8636DD11EC88BBAC6EC4F9AE02.roa (raw, json) Hash identifier: 5FvBqRKNLqDOY3vPmuyNUZSZ7gaUs+zbLkGyVNkE0B8= Subject key identifier: 70:47:A3:5A:35:D8:62:32:EA:54:74:EE:31:B0:37:CA:BC:64:BB:86 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3B37 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/2CE57E8636DD11EC88BBAC6EC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:28:07 +0000 ROA not before: Mon 14 Jul 2025 14:50:37 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 138685 IP address blocks: 110.170.134.0/24 maxlen: 24 2001:fb0:10b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15159 (0x3b37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:50:37 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a49347-a3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c3:e7:8a:c6:24:95:32:10:c7:f9:e6:e5:65: b3:dd:fe:b2:91:41:e5:ab:13:fb:a5:63:cd:77:1a: b4:ff:c1:d9:6e:d0:29:8f:cf:22:9c:59:26:22:60: 02:8f:b4:cd:14:71:a8:e5:75:73:7f:0c:10:00:2c: 48:eb:97:29:70:5d:b9:24:b8:05:ce:fa:2e:0b:6c: e1:19:1e:9d:8c:02:0c:53:6b:bf:34:f5:3a:d8:f3: 88:12:55:fe:e1:ad:a2:4e:32:94:bc:7f:79:13:0a: 8a:9e:6d:22:19:1a:3c:d8:62:7b:df:50:c9:20:bc: ae:5a:ac:bb:c0:b7:4e:8c:61:68:6a:cb:a8:96:de: 4d:56:60:d3:e0:73:ed:46:ef:f3:5f:66:1f:1d:2c: cb:31:4c:d5:d3:91:a3:a1:f7:bf:f6:0c:82:ee:df: b6:3b:5d:39:27:01:7b:89:93:26:d3:0c:38:12:e2: 0e:e5:ba:44:51:12:84:db:aa:4c:2d:23:5a:2c:7f: 52:06:c5:ee:b3:f6:20:2e:35:48:fa:8e:32:42:37: 9c:0b:c9:d2:e2:98:a1:cd:f8:d9:a8:49:3b:e9:f8: 66:b3:8c:c2:cc:45:8d:9d:5c:8a:35:f5:6e:f8:65: 74:56:ee:d6:16:33:5e:0d:dc:35:f7:d2:73:c4:31: ef:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:47:A3:5A:35:D8:62:32:EA:54:74:EE:31:B0:37:CA:BC:64:BB:86 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/2CE57E8636DD11EC88BBAC6EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 110.170.134.0/24 IPv6: 2001:fb0:10b5::/48 Signature Algorithm: sha256WithRSAEncryption 5c:0c:53:03:f7:cc:b6:46:d4:b9:15:24:47:d6:98:84:7c:fa: 81:ba:7c:f5:88:fd:45:50:90:78:f2:e4:2a:f2:45:d1:16:85: d8:05:f0:fb:4e:9e:f1:66:bb:7c:5b:33:18:36:0c:8c:cd:dc: 02:f6:e7:21:3b:3b:bc:20:e4:8c:74:8d:e3:97:98:67:ca:67: cd:7a:45:a2:fb:ee:98:39:e6:57:35:af:ef:a1:eb:84:0d:dc: b4:f5:ec:8f:9f:1c:65:64:90:ac:a4:be:f3:74:ac:c0:a7:e1: ff:e8:aa:0d:fa:50:65:f0:c6:d0:48:02:a9:20:0b:d9:42:fc: a7:ca:b7:bc:e2:63:c0:f7:7c:ab:2c:17:d5:61:a1:e1:f7:11: db:88:5c:78:c0:d0:d6:66:39:8b:aa:21:11:d4:1e:10:7d:9d: c5:a7:60:4d:df:06:e9:26:d3:15:b9:00:16:f8:82:9b:6c:b9: 31:c9:e5:4d:eb:4f:bf:7c:ed:3a:6a:84:eb:43:77:53:3f:64: 56:31:a1:a1:35:bd:1e:03:20:d2:ff:72:d4:39:d6:cd:27:0c: fb:3b:e8:58:da:d0:ce:e7:f3:5b:db:d5:d3:eb:90:74:7b:c7: dd:1f:5e:e8:a5:64:92:8d:a1:3e:89:96:d8:87:df:20:b0:a5: e5:00:33:df -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICOzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MDM3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTM0Ny1hM2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8PnisYklTIQx/nm5WWz3f6ykUHlqxP7pWPNdxq0/8HZbtApj88inFkmImAC j7TNFHGo5XVzfwwQACxI65cpcF25JLgFzvouC2zhGR6djAIMU2u/NPU62POIElX+ 4a2iTjKUvH95EwqKnm0iGRo82GJ731DJILyuWqy7wLdOjGFoasuolt5NVmDT4HPt Ru/zX2YfHSzLMUzV05Gjofe/9gyC7t+2O105JwF7iZMm0ww4EuIO5bpEURKE26pM LSNaLH9SBsXus/YgLjVI+o4yQjecC8nS4pihzfjZqEk76fhms4zCzEWNnVyKNfVu +GV0Vu7WFjNeDdw199JzxDHveQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHBHo1o1 2GIy6lR07jGwN8q8ZLuGMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvMkNFNTdFODYz NkREMTFFQzg4QkJBQzZFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAbqqGMA8EAgACMAkDBwAgAQ+wELUwDQYJKoZIhvcNAQELBQADggEB AFwMUwP3zLZG1LkVJEfWmIR8+oG6fPWI/UVQkHjy5CryRdEWhdgF8PtOnvFmu3xb Mxg2DIzN3AL25yE7O7wg5Ix0jeOXmGfKZ816RaL77pg55lc1r++h64QN3LT17I+f HGVkkKykvvN0rMCn4f/oqg36UGXwxtBIAqkgC9lC/KfKt7ziY8D3fKssF9VhoeH3 EduIXHjA0NZmOYuqIRHUHhB9ncWnYE3fBukm0xW5ABb4gptsuTHJ5U3rT7987Tpq hOtDd1M/ZFYxoaE1vR4DINL/ctQ51s0nDPs76Fja0M7n81vb1dPrkHR7x90fXuil ZJKNoT6JltiH3yCwpeUAM98= -----END CERTIFICATE-----Generated at Mon Mar 2 04:33:22 2026 by rpki-client