$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5218D5921E0111E9A590C837C4F9AE02.roa File: 5218D5921E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: LPtsjgf+Z8ycJV1h9n53RKreHj2dpz3VKZuDxlk3S44= Subject key identifier: 50:DB:F1:8E:3B:6F:8C:15:8F:A5:61:BB:17:1C:CC:45:3B:0B:91:34 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3B68 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5218D5921E0111E9A590C837C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:28:50 +0000 ROA not before: Mon 14 Jul 2025 14:51:21 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 55476 IP address blocks: 110.170.246.0/24 maxlen: 24 203.144.129.0/24 maxlen: 24 2001:fb0:101c::/48 maxlen: 48 2001:fb0:109e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15208 (0x3b68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:51:21 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a49371-51b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3b:54:fd:d5:f1:03:89:89:40:9c:19:65:bf: b0:a2:fb:9c:8f:64:05:a8:c3:3d:95:3d:f1:4a:ca: 29:0f:4e:45:73:d5:58:85:d0:b7:c4:68:fa:98:aa: b8:2e:b8:b2:eb:25:58:1e:65:1c:a5:fd:2e:0b:bd: 73:8d:c6:c1:bb:7e:84:bc:a9:6f:5d:19:b1:e0:39: b8:d6:1e:89:86:5a:d1:a0:0d:8f:e9:8f:f3:89:cd: bc:8c:08:00:3f:16:fe:cb:a3:52:5d:ce:8d:25:34: 8c:ac:d1:ba:c0:fa:48:79:ae:eb:aa:3a:71:5c:06: f9:83:79:3f:3b:40:f2:8d:d7:26:44:75:45:59:3e: bd:b5:70:1a:fd:89:27:f1:c6:19:da:1a:44:5a:62: fa:b7:70:18:56:68:1b:de:04:9d:47:2b:bb:83:ab: 05:ea:8d:49:09:4e:32:62:73:a7:9b:a8:dd:07:ca: f6:ea:ea:7f:77:84:aa:89:42:39:25:26:49:f6:27: 33:b7:1a:2e:84:f4:ed:b9:2b:68:7f:62:e5:11:88: 68:6e:39:5b:e4:37:6b:8c:5a:dc:cb:c2:ea:23:34: 40:8d:dd:e5:07:f6:f6:05:c9:f4:97:be:c9:51:d8: ba:76:ba:cf:67:03:e9:ff:94:7a:05:6d:32:b2:84: aa:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DB:F1:8E:3B:6F:8C:15:8F:A5:61:BB:17:1C:CC:45:3B:0B:91:34 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5218D5921E0111E9A590C837C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 110.170.246.0/24 203.144.129.0/24 IPv6: 2001:fb0:101c::/48 2001:fb0:109e::/48 Signature Algorithm: sha256WithRSAEncryption 70:ce:f0:e3:43:07:38:1e:5d:3a:75:19:2b:dd:d7:82:31:9b: 2c:6d:09:ad:52:5e:20:c1:d7:2c:2c:b9:de:dc:94:9e:fc:8a: 4b:fd:c7:98:b1:84:3c:c0:35:7d:e9:dc:cf:14:48:b1:c2:65: c3:b4:68:7f:cf:4d:89:22:a8:b3:25:94:20:a2:8e:32:ca:6a: 07:3c:96:85:03:39:87:e5:6a:df:f0:54:d9:2e:af:19:ad:e8: 82:6c:51:32:e7:ca:15:bd:32:18:ed:c1:4f:78:4a:c0:78:2e: 9c:ea:46:3e:51:78:82:bf:08:1a:df:5a:f8:40:ea:d1:20:4c: 15:7c:0a:56:68:55:aa:73:64:08:ce:35:71:4a:a1:48:29:b8: ea:fd:b6:88:d7:be:a5:97:92:79:8a:b4:1a:a1:c7:66:fc:4c: e4:bd:f3:60:b3:f8:29:79:fd:ce:b6:b8:b4:58:fd:3b:72:7e: fe:1a:86:7e:d9:ed:30:fb:ef:05:6c:96:78:91:cb:f9:47:57: 99:cc:54:c8:27:8d:a8:49:77:7e:23:e7:15:02:be:df:0e:42: 9b:8d:f0:df:9b:6b:88:c1:3d:b6:71:a5:1f:9d:9b:83:7b:2e: c3:8c:99:ee:62:de:5a:5a:4b:24:63:70:8e:e4:8e:09:8c:d1: ad:51:5f:a8 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICO2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTIxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTM3MS01MWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAijtU/dXxA4mJQJwZZb+wovucj2QFqMM9lT3xSsopD05Fc9VYhdC3xGj6mKq4 Lriy6yVYHmUcpf0uC71zjcbBu36EvKlvXRmx4Dm41h6JhlrRoA2P6Y/zic28jAgA Pxb+y6NSXc6NJTSMrNG6wPpIea7rqjpxXAb5g3k/O0DyjdcmRHVFWT69tXAa/Ykn 8cYZ2hpEWmL6t3AYVmgb3gSdRyu7g6sF6o1JCU4yYnOnm6jdB8r26up/d4SqiUI5 JSZJ9icztxouhPTtuStof2LlEYhobjlb5DdrjFrcy8LqIzRAjd3lB/b2Bcn0l77J Udi6drrPZwPp/5R6BW0ysoSq4wIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFFDb8Y47 b4wVj6VhuxcczEU7C5E0MB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNTIxOEQ1OTIx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAS BAIAATAMAwQAbqr2AwQAy5CBMBgEAgACMBIDBwAgAQ+wEBwDBwAgAQ+wEJ4wDQYJ KoZIhvcNAQELBQADggEBAHDO8ONDBzgeXTp1GSvd14IxmyxtCa1SXiDB1ywsud7c lJ78ikv9x5ixhDzANX3p3M8USLHCZcO0aH/PTYkiqLMllCCijjLKagc8loUDOYfl at/wVNkurxmt6IJsUTLnyhW9MhjtwU94SsB4LpzqRj5ReIK/CBrfWvhA6tEgTBV8 ClZoVapzZAjONXFKoUgpuOr9tojXvqWXknmKtBqhx2b8TOS982Cz+Cl5/c62uLRY /Ttyfv4ahn7Z7TD77wVslniRy/lHV5nMVMgnjahJd34j5xUCvt8OQpuN8N+ba4jB PbZxpR+dm4N7LsOMme5i3lpaSyRjcI7kjgmM0a1RX6g= -----END CERTIFICATE-----Generated at Mon Mar 2 17:40:59 2026 by rpki-client