$ rpki-client -vvf rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/45CED05E2D2511EBAA63DE82C4F9AE02.roa File: 45CED05E2D2511EBAA63DE82C4F9AE02.roa (raw, json) Hash identifier: 1F7Sq0lh3z209PrBTE+xR3jyBY1TlnIGSj+WUyADeNI= Subject key identifier: 43:D4:48:CA:BC:96:77:04:31:57:1A:35:B5:86:3B:9C:3B:14:03:20 Certificate issuer: /CN=A914287F/serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F Certificate serial: 07D8 Authority key identifier: E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/45CED05E2D2511EBAA63DE82C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:17:34 +0000 ROA not before: Fri 14 Feb 2025 23:00:08 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 4637 IP address blocks: 203.28.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2008 (0x7d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914287F, serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F Validity Not Before: Feb 14 23:00:08 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a44a7e-0056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:46:89:90:ad:ef:fa:fe:d7:d8:a7:39:d1:04: 41:99:8c:59:3e:5f:6e:8d:95:79:06:01:aa:d9:4f: 1c:09:f5:20:01:44:49:2c:c7:14:48:03:0c:a9:a7: c3:b4:e8:80:65:94:e3:ff:fc:0f:8c:47:57:e3:32: 2d:e7:f1:cb:5a:d0:e1:f7:bb:c9:58:c9:cd:4b:aa: 9b:c8:ea:3e:a5:d2:3c:fc:02:17:94:ea:1f:68:42: 94:6c:18:4a:e3:19:0b:fd:5a:44:c3:72:9a:a5:e4: 80:cf:72:2c:aa:a3:bc:66:57:7d:70:04:eb:87:a0: f0:eb:04:5e:60:21:40:03:1e:20:26:08:c4:c2:21: b6:80:4a:53:ac:16:02:3d:d4:bc:42:9c:ed:39:61: 42:43:4c:91:9b:a7:bd:08:9a:aa:23:51:1c:d7:25: 1a:ce:0e:e0:ec:8d:b8:5b:11:fe:ec:36:c7:7e:04: 2f:5f:21:26:9a:38:71:f8:16:89:01:7e:e3:03:ed: ac:e4:80:9c:92:c0:7f:f4:23:cd:28:dd:43:8a:36: 67:cd:86:31:cd:e1:1d:63:83:66:70:e3:37:31:cd: 38:f9:04:e4:c1:a2:5a:77:8f:8d:a3:0d:b4:ec:29: ca:ec:4f:43:79:61:4f:27:7f:5c:a9:90:b6:93:d6: e2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D4:48:CA:BC:96:77:04:31:57:1A:35:B5:86:3B:9C:3B:14:03:20 X509v3 Authority Key Identifier: keyid:E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/45CED05E2D2511EBAA63DE82C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.28.106.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:94:f8:7f:4b:e4:6a:33:9d:cc:e7:64:c6:ab:c1:78:e4:29: 68:a9:01:6c:9c:6e:3c:ae:f7:1c:03:0d:81:85:bb:d6:72:76: b1:2f:29:80:f8:6b:18:20:56:d2:b6:64:96:b9:cc:1c:b1:0e: c9:4a:09:18:6f:ae:3e:50:28:4a:63:b6:34:41:3e:2d:38:e4: ff:75:b0:24:09:11:6e:02:30:45:11:cb:06:a2:81:90:5b:de: 4a:60:e5:36:12:b8:60:9b:44:64:58:45:8a:75:dd:d4:be:99: 5f:18:1f:dc:b6:00:7a:83:80:34:93:d9:89:e3:50:52:00:6a: 86:04:8f:bd:32:3f:af:9b:44:87:6c:fc:11:ad:96:2c:91:55: dd:63:9d:01:aa:cc:da:24:fb:09:db:f9:d9:7e:c4:92:2e:32: 92:89:19:ef:30:9f:74:61:07:dc:9b:c2:56:76:41:f3:f8:c9: 13:ab:b4:a8:e5:6f:1b:b4:76:71:0f:68:1c:d4:3a:ee:cc:5a: 0c:3d:6c:1f:a0:7b:57:81:64:34:11:57:44:a0:76:84:a0:32: 73:39:40:21:9b:fa:c9:f6:b6:a3:53:84:e8:3b:ea:91:11:42: c1:b9:c4:67:2d:69:b0:00:87:51:62:d7:44:ef:1e:fc:ab:66: 3a:59:a9:d4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI4N0YxMTAvBgNVBAUTKEUwOUM5RjcyNDVCOTg0OThBRTkyMzNCMTk4MEQ3QjRG NEM3MzhEMEYwHhcNMjUwMjE0MjMwMDA4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGE3ZS0wMDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEaJkK3v+v7X2Kc50QRBmYxZPl9ujZV5BgGq2U8cCfUgAURJLMcUSAMMqafD tOiAZZTj//wPjEdX4zIt5/HLWtDh97vJWMnNS6qbyOo+pdI8/AIXlOofaEKUbBhK 4xkL/VpEw3KapeSAz3IsqqO8Zld9cATrh6Dw6wReYCFAAx4gJgjEwiG2gEpTrBYC PdS8QpztOWFCQ0yRm6e9CJqqI1Ec1yUazg7g7I24WxH+7DbHfgQvXyEmmjhx+BaJ AX7jA+2s5ICcksB/9CPNKN1DijZnzYYxzeEdY4NmcOM3Mc04+QTkwaJad4+Now20 7CnK7E9DeWFPJ39cqZC2k9bitwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEPUSMq8 lncEMVcaNbWGO5w7FAMgMB8GA1UdIwQYMBaAFOCcn3JFuYSYrpIzsZgNe09Mc40P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjg3Ri82NDQ4OUVFMDJE MjMxMUVCOTE5MTg0ODBDNEY5QUUwMi80SnlmY2tXNWhKaXVrak94bUExN1QweHpq UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRKeWZja1c1aEppdWtqT3htQTE3VDB4empROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDI4N0YvNjQ0ODlFRTAyRDIzMTFFQjkxOTE4NDgwQzRGOUFFMDIvNDVDRUQwNUUy RDI1MTFFQkFBNjNERTgyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyxxqMA0GCSqGSIb3DQEBCwUAA4IBAQALlPh/S+RqM53M52TGq8F4 5CloqQFsnG48rvccAw2BhbvWcnaxLymA+GsYIFbStmSWucwcsQ7JSgkYb64+UChK Y7Y0QT4tOOT/dbAkCRFuAjBFEcsGooGQW95KYOU2Erhgm0RkWEWKdd3UvplfGB/c tgB6g4A0k9mJ41BSAGqGBI+9Mj+vm0SHbPwRrZYskVXdY50BqszaJPsJ2/nZfsSS LjKSiRnvMJ90YQfcm8JWdkHz+MkTq7So5W8btHZxD2gc1DruzFoMPWwfoHtXgWQ0 EVdEoHaEoDJzOUAhm/rJ9rajU4ToO+qREULBucRnLWmwAIdRYtdE7x78q2Y6WanU -----END CERTIFICATE-----Generated at Mon Mar 2 09:55:53 2026 by rpki-client