$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/E8716FD4EA3511EF89116C52C4F9AE02.roa File: E8716FD4EA3511EF89116C52C4F9AE02.roa (raw, json) Hash identifier: 78jC0oScEcc8GX6FoClPALgg9krtUuM84yc1F5InfRU= Subject key identifier: C6:29:9C:5D:54:B5:62:35:69:88:43:AF:DA:31:AA:08:68:0E:E5:A8 Certificate issuer: /CN=A9144CB7/serialNumber=A298059F06537DF8C08B89255F795941A31C1800 Certificate serial: D0 Authority key identifier: A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/E8716FD4EA3511EF89116C52C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:27:14 +0000 ROA not before: Sun 01 Mar 2026 08:27:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12008 IP address blocks: 203.119.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CB7, serialNumber=A298059F06537DF8C08B89255F795941A31C1800 Validity Not Before: Mar 1 08:27:14 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3f861-a838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d4:65:42:c2:e9:b9:7d:6d:67:fc:95:9d:c1: 9d:66:d8:26:39:0d:7b:b8:e7:eb:33:e8:d9:4e:87: 8f:e8:73:11:d6:cf:c0:84:be:54:c4:9c:ca:3d:37: 8f:83:a1:36:96:e4:8f:8e:96:9b:db:59:68:6e:e0: 63:60:e2:b5:02:66:0a:bc:5d:0c:b3:17:89:04:54: cf:14:31:c9:b2:2f:8b:3d:b5:4d:f4:db:8d:4e:e3: 64:a1:14:e0:03:fd:70:29:41:14:6b:84:9b:19:55: 95:4b:cf:54:1d:ac:76:30:b9:d0:db:d9:a7:f9:7e: fc:53:fc:3e:a7:f6:9a:4f:c7:07:6b:c3:43:95:94: 55:ca:f9:ec:98:94:c6:a8:44:4c:2e:82:a0:ad:07: 2a:4a:19:48:6e:f4:16:5f:13:44:ea:5a:8c:f8:14: f7:e5:e5:14:25:19:21:6a:c7:62:69:3d:54:ea:41: c3:2d:11:90:03:1a:09:8e:f9:a7:aa:3f:18:78:78: 59:3a:cb:cb:dd:b8:51:37:df:ba:70:72:8d:25:22: b2:d4:e4:88:ec:ee:9d:a7:c0:cf:92:24:6a:d3:2a: 1d:3a:4f:bf:7f:92:34:53:9f:bd:27:ca:b8:2c:91: 96:b9:cc:bc:e5:eb:a9:4b:ee:38:26:72:61:e7:79: 7e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:29:9C:5D:54:B5:62:35:69:88:43:AF:DA:31:AA:08:68:0E:E5:A8 X509v3 Authority Key Identifier: keyid:A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/E8716FD4EA3511EF89116C52C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.119.15.0/24 Signature Algorithm: sha256WithRSAEncryption 78:91:b1:d2:f8:ed:37:95:0d:7a:f9:b6:7e:18:52:31:03:72: 8a:fe:b4:1a:72:c1:c3:21:36:af:d4:91:da:cf:18:2a:6d:85: c8:16:df:bc:57:51:56:ee:a1:dc:e6:3b:69:95:e3:2e:2f:c3: 70:79:cb:f4:79:d8:ec:27:71:5a:a5:64:f6:56:63:53:d9:e6: 01:80:e8:52:9b:dd:f9:87:70:03:c1:5f:8b:17:14:cb:5f:b0: f6:7b:da:88:8d:47:c3:8f:ac:58:e3:cf:c6:ba:3a:02:d2:e3: 7c:7d:a1:19:d2:88:33:1a:ee:de:46:b8:f2:8c:25:db:ef:fe: 48:f2:dc:53:5b:03:8a:82:d6:83:43:6c:7d:2e:27:1b:12:97: 06:de:79:30:b7:11:69:ba:1d:f1:5e:2b:22:9e:b7:b7:f3:fe: e7:56:a7:fa:fc:cc:3d:09:c1:87:61:d1:32:9a:0e:dd:83:9e: c4:f3:ab:87:e8:b8:1d:05:a7:81:50:37:f9:4c:55:4f:4a:51: 3f:1b:ca:f5:fc:bb:77:b7:e1:30:65:16:8f:4e:ef:0e:77:bd: 9d:d8:c5:dd:e0:e1:2f:9a:17:2f:ff:5e:ee:88:04:65:3d:ba: 24:af:01:65:d5:22:52:30:16:50:82:ba:07:4e:2a:fe:ed:c9: f6:b8:7a:6f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRDQjcxMTAvBgNVBAUTKEEyOTgwNTlGMDY1MzdERjhDMDhCODkyNTVGNzk1OTQx QTMxQzE4MDAwHhcNMjYwMzAxMDgyNzE0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZjg2MS1hODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA79RlQsLpuX1tZ/yVncGdZtgmOQ17uOfrM+jZToeP6HMR1s/AhL5UxJzKPTeP g6E2luSPjpab21lobuBjYOK1AmYKvF0MsxeJBFTPFDHJsi+LPbVN9NuNTuNkoRTg A/1wKUEUa4SbGVWVS89UHax2MLnQ29mn+X78U/w+p/aaT8cHa8NDlZRVyvnsmJTG qERMLoKgrQcqShlIbvQWXxNE6lqM+BT35eUUJRkhasdiaT1U6kHDLRGQAxoJjvmn qj8YeHhZOsvL3bhRN9+6cHKNJSKy1OSI7O6dp8DPkiRq0yodOk+/f5I0U5+9J8q4 LJGWucy85eupS+44JnJh53l+uwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMYpnF1U tWI1aYhDr9oxqghoDuWoMB8GA1UdIwQYMBaAFKKYBZ8GU334wIuJJV95WUGjHBgA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NENCNy84QzkzRjc2Q0Ux NzYxMUVGQjc5ODFCMTlDNEY5QUUwMi9vcGdGbndaVGZmakFpNGtsWDNsWlFhTWNH QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29wZ0Zud1pUZmZqQWk0a2xYM2xaUWFNY0dBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDRDQjcvOEM5M0Y3NkNFMTc2MTFFRkI3OTgxQjE5QzRGOUFFMDIvRTg3MTZGRDRF QTM1MTFFRjg5MTE2QzUyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAy3cPMA0GCSqGSIb3DQEBCwUAA4IBAQB4kbHS+O03lQ16+bZ+GFIx A3KK/rQacsHDITav1JHazxgqbYXIFt+8V1FW7qHc5jtpleMuL8Nwecv0edjsJ3Fa pWT2VmNT2eYBgOhSm935h3ADwV+LFxTLX7D2e9qIjUfDj6xY48/GujoC0uN8faEZ 0ogzGu7eRrjyjCXb7/5I8txTWwOKgtaDQ2x9LicbEpcG3nkwtxFpuh3xXisinre3 8/7nVqf6/Mw9CcGHYdEymg7dg57E86uH6LgdBaeBUDf5TFVPSlE/G8r1/Lt3t+Ew ZRaPTu8Od72d2MXd4OEvmhcv/17uiARlPbokrwFl1SJSMBZQgroHTir+7cn2uHpv -----END CERTIFICATE-----Generated at Mon Mar 2 09:46:04 2026 by rpki-client