$ rpki-client -vvf rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/CF53E5E6240411F0B73CB374C4F9AE02.roa File: CF53E5E6240411F0B73CB374C4F9AE02.roa (raw, json) Hash identifier: U5gwqnMdvGT4M62Ix2oVqHn4FSHNIgCobyiRQLOLzyg= Subject key identifier: 1E:82:13:68:2B:CA:C6:E1:03:EB:05:37:77:26:94:32:CC:DE:19:76 Certificate issuer: /CN=A913E62B/serialNumber=F2E073092976058EB98656141437F8FB68B7215D Certificate serial: A2 Authority key identifier: F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/CF53E5E6240411F0B73CB374C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:08:08 +0000 ROA not before: Wed 07 May 2025 07:43:56 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135425 IP address blocks: 203.34.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E62B, serialNumber=F2E073092976058EB98656141437F8FB68B7215D Validity Not Before: May 7 07:43:56 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3f3e8-72d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:72:9b:2e:4c:10:1e:09:e5:d2:17:e4:4d: 57:7c:10:69:df:1e:cf:16:cb:90:42:3f:3b:57:49: e1:ea:54:40:56:18:2e:8a:8d:b0:ca:99:9a:3e:cb: 3e:9e:e8:3b:38:1f:ee:fc:f1:96:19:2f:79:3d:11: 40:3b:f6:64:13:e6:6b:cb:21:77:96:7b:2a:6d:fb: 4c:82:85:7d:64:c7:1b:5b:52:a3:0d:00:3a:6a:7e: e1:e9:2a:46:7f:a2:e1:12:ec:3a:b3:96:5a:01:25: 6c:e7:91:73:83:22:55:17:b9:a3:83:71:18:40:0c: 5f:e8:44:75:86:5a:ac:66:43:e3:b5:a2:e7:23:15: 89:a7:ea:fb:4a:86:75:ce:1b:2f:7f:9c:6e:88:45: f8:79:5e:65:6e:f2:df:0f:6f:e0:12:9f:5b:b4:41: 8f:04:93:72:ef:73:0a:14:bd:91:73:b0:31:65:3a: 88:c0:57:6a:aa:a6:73:83:23:12:ac:f0:37:6c:ba: 2d:79:3d:b9:b9:c7:4f:2d:04:a3:45:b5:68:3a:12: 69:ca:88:dd:aa:b2:31:0b:5c:36:ca:7d:03:23:ef: 10:e1:66:86:22:53:cf:b4:f2:50:70:c5:e0:89:59: b9:a0:f2:32:15:a8:99:0a:48:e4:53:e5:04:d3:ef: 70:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:82:13:68:2B:CA:C6:E1:03:EB:05:37:77:26:94:32:CC:DE:19:76 X509v3 Authority Key Identifier: keyid:F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/CF53E5E6240411F0B73CB374C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.34.212.0/24 Signature Algorithm: sha256WithRSAEncryption cb:80:36:4e:b1:7c:33:98:ff:fc:32:ca:b6:e0:3a:2a:ae:47: 95:e2:b3:8d:82:94:d9:49:a0:c8:6e:c3:93:b6:36:3c:c7:9c: 99:5a:2f:76:c1:7f:b3:f0:1d:b7:7c:4a:f2:ed:cc:73:1f:65: 28:51:17:56:7f:0e:65:aa:b8:cd:d2:b4:89:1b:eb:b9:c7:7e: 50:b3:dd:38:d6:64:88:00:90:7a:75:fa:e5:fd:64:1a:66:4f: f2:47:82:29:93:8a:fc:86:c8:85:0a:f4:25:f1:f2:bd:73:03: 34:fe:8e:1b:23:38:af:b2:f4:c1:1f:78:35:39:66:88:65:f3: 84:17:91:06:14:da:24:f0:2e:6a:a8:c3:8e:26:ea:aa:5f:76: a6:bd:2a:70:94:90:f4:75:40:4f:5c:3f:6d:0e:3e:29:b3:5b: 00:66:e1:e3:30:1c:34:bd:b3:11:ff:3f:56:e6:ea:5f:8f:7e: e1:ee:cd:af:7a:fd:5f:dd:11:65:45:86:80:35:0b:40:13:f0: 24:72:ab:98:6d:ec:38:24:9c:7e:6f:73:ab:46:b9:6c:62:d7: 3e:64:cd:bb:61:76:44:73:2d:81:39:a6:f7:5d:f4:02:cb:eb: 88:31:9e:28:4c:5b:7b:e7:b5:80:75:d1:cf:d7:67:87:57:71: da:5f:7e:2c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U2MkIxMTAvBgNVBAUTKEYyRTA3MzA5Mjk3NjA1OEVCOTg2NTYxNDE0MzdGOEZC NjhCNzIxNUQwHhcNMjUwNTA3MDc0MzU2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZjNlOC03MmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+pymy5MEB4J5dIX5E1XfBBp3x7PFsuQQj87V0nh6lRAVhguio2wypmaPss+ nug7OB/u/PGWGS95PRFAO/ZkE+ZryyF3lnsqbftMgoV9ZMcbW1KjDQA6an7h6SpG f6LhEuw6s5ZaASVs55FzgyJVF7mjg3EYQAxf6ER1hlqsZkPjtaLnIxWJp+r7SoZ1 zhsvf5xuiEX4eV5lbvLfD2/gEp9btEGPBJNy73MKFL2Rc7AxZTqIwFdqqqZzgyMS rPA3bLoteT25ucdPLQSjRbVoOhJpyojdqrIxC1w2yn0DI+8Q4WaGIlPPtPJQcMXg iVm5oPIyFaiZCkjkU+UE0+9wywIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB6CE2gr ysbhA+sFN3cmlDLM3hl2MB8GA1UdIwQYMBaAFPLgcwkpdgWOuYZWFBQ3+PtotyFd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTYyQi82MUIzNTYxNjI0 MDQxMUYwQTREMDcyNzNDNEY5QUUwMi84dUJ6Q1NsMkJZNjVobFlVRkRmNC0yaTNJ VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1QnpDU2wyQlk2NWhsWVVGRGY0LTJpM0lWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0U2MkIvNjFCMzU2MTYyNDA0MTFGMEE0RDA3MjczQzRGOUFFMDIvQ0Y1M0U1RTYy NDA0MTFGMEI3M0NCMzc0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyyLUMA0GCSqGSIb3DQEBCwUAA4IBAQDLgDZOsXwzmP/8Msq24Doq rkeV4rONgpTZSaDIbsOTtjY8x5yZWi92wX+z8B23fEry7cxzH2UoURdWfw5lqrjN 0rSJG+u5x35Qs9041mSIAJB6dfrl/WQaZk/yR4Ipk4r8hsiFCvQl8fK9cwM0/o4b IzivsvTBH3g1OWaIZfOEF5EGFNok8C5qqMOOJuqqX3amvSpwlJD0dUBPXD9tDj4p s1sAZuHjMBw0vbMR/z9W5upfj37h7s2vev1f3RFlRYaANQtAE/AkcquYbew4JJx+ b3OrRrlsYtc+ZM27YXZEcy2BOab3XfQCy+uIMZ4oTFt757WAddHP12eHV3HaX34s -----END CERTIFICATE-----Generated at Mon Mar 2 12:42:20 2026 by rpki-client