$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/D85FB84853BE11EF819E6347C4F9AE02.roa File: D85FB84853BE11EF819E6347C4F9AE02.roa (raw, json) Hash identifier: fWuhRWvQ3Edrdp8Xh2OPG31qXzaHDm9E0X4C1jpzpIA= Subject key identifier: 0F:48:83:97:C5:D5:F0:02:B2:9D:BF:A1:29:6C:11:25:2F:3F:DF:55 Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Certificate serial: 3605 Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/D85FB84853BE11EF819E6347C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:56:23 +0000 ROA not before: Mon 02 Feb 2026 15:11:34 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 24455 IP address blocks: 203.130.144.0/24 maxlen: 24 203.130.145.0/24 maxlen: 24 203.156.116.0/24 maxlen: 24 203.156.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13829 (0x3605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Validity Not Before: Feb 2 15:11:34 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a48bd7-f5bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:60:9b:ab:06:af:37:55:7a:96:70:97:0b: 11:c0:72:d6:4d:ee:e5:95:f5:5c:0b:2c:98:80:a7: c8:03:b6:1c:9b:14:2d:32:f1:c4:3a:4e:00:66:20: fa:3f:94:aa:59:14:18:46:ff:7a:e9:2d:a7:0b:02: c7:18:c1:31:14:b4:b3:53:e9:d9:56:dd:15:3e:8f: 1c:23:ea:a0:20:e0:c7:6a:1e:c0:cd:49:a3:89:a3: e5:29:b7:d2:de:2e:48:42:95:c1:6a:dd:f1:09:5b: 36:16:1b:01:92:da:b6:de:5b:6b:06:81:7f:a8:1e: 64:af:d9:cf:79:c7:05:9a:9a:ff:f2:5d:5b:dd:f5: 68:04:43:0e:3e:55:45:02:f2:7b:18:00:ce:54:0d: c5:2d:d1:ff:72:04:71:e8:68:39:b1:cc:49:1e:c5: c9:ae:20:6e:1e:e1:4b:c5:af:4a:45:ee:6c:e2:55: 36:d8:85:c8:45:82:06:80:fd:63:43:08:43:2e:71: 1d:a6:d9:8d:0e:2c:6e:16:b0:6b:82:70:51:5f:96: c7:27:49:f6:a7:ca:cf:1a:a6:d1:6c:5a:07:d4:11: b8:92:cb:23:53:a7:de:04:8d:f0:93:6f:18:5d:22: 8c:45:45:d7:b6:b9:49:1b:d1:05:36:72:a8:5d:e7: 45:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:48:83:97:C5:D5:F0:02:B2:9D:BF:A1:29:6C:11:25:2F:3F:DF:55 X509v3 Authority Key Identifier: keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/D85FB84853BE11EF819E6347C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.130.144.0/23 203.156.116.0/23 Signature Algorithm: sha256WithRSAEncryption e3:7e:83:7b:10:ef:f4:8c:70:e0:b8:29:7a:2f:53:64:56:d9: ac:be:ad:0f:e0:22:e4:b7:ca:c3:2d:1e:f0:c2:40:ea:be:3c: 8d:07:c6:c3:2e:90:84:ff:1e:51:95:91:77:4f:db:21:02:3c: 5f:3d:f3:67:e0:9a:b9:36:b0:a5:37:42:3e:b9:22:80:9b:38: 0d:5d:00:09:c7:9c:da:a5:99:5d:52:28:7e:ba:20:e0:80:93: 10:a3:b8:96:f8:bb:25:92:11:28:8d:de:7d:8e:66:8e:6e:45: de:1e:78:dd:85:8d:5d:8c:3e:c8:03:32:6d:0e:07:73:4c:2f: 14:4f:8f:2d:52:08:7b:a1:3b:e1:57:09:29:f1:59:6d:b8:f3: 43:0b:88:00:8c:a2:fa:4c:67:59:4b:e7:10:08:6c:84:6f:76: b2:b4:1d:5c:66:c8:d6:72:1c:66:0c:3d:64:fa:b7:b2:55:fd: 0e:af:0a:a0:2b:bc:fa:82:55:fb:6b:ea:fe:f6:3c:e1:cf:04: e9:ca:d6:8d:27:65:ed:ab:d8:61:9b:d7:1f:8a:05:9f:57:90: d0:26:81:cf:71:ec:2b:a0:d7:d3:8e:92:82:8b:ac:98:cf:cf: a3:eb:65:18:77:75:a3:66:c6:50:42:fb:da:11:3b:6f:d9:c1: 7b:f4:f7:4e -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICNgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5 QzhGNjU5MEQwHhcNMjYwMjAyMTUxMTM0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGJkNy1mNWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtc9gm6sGrzdVepZwlwsRwHLWTe7llfVcCyyYgKfIA7YcmxQtMvHEOk4AZiD6 P5SqWRQYRv966S2nCwLHGMExFLSzU+nZVt0VPo8cI+qgIODHah7AzUmjiaPlKbfS 3i5IQpXBat3xCVs2FhsBktq23ltrBoF/qB5kr9nPeccFmpr/8l1b3fVoBEMOPlVF AvJ7GADOVA3FLdH/cgRx6Gg5scxJHsXJriBuHuFLxa9KRe5s4lU22IXIRYIGgP1j QwhDLnEdptmNDixuFrBrgnBRX5bHJ0n2p8rPGqbRbFoH1BG4kssjU6feBI3wk28Y XSKMRUXXtrlJG9EFNnKoXedFuQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFA9Ig5fF 1fACsp2/oSlsESUvP99VMB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc4MUEvRDUyMTQyNzAxRDlCMTFFMkI4MjFGRDg5MDhCMDJDRDIvRDg1RkI4NDg1 M0JFMTFFRjgxOUU2MzQ3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBy4KQAwQBy5x0MA0GCSqGSIb3DQEBCwUAA4IBAQDjfoN7EO/0jHDg uCl6L1NkVtmsvq0P4CLkt8rDLR7wwkDqvjyNB8bDLpCE/x5RlZF3T9shAjxfPfNn 4Jq5NrClN0I+uSKAmzgNXQAJx5zapZldUih+uiDggJMQo7iW+LslkhEojd59jmaO bkXeHnjdhY1djD7IAzJtDgdzTC8UT48tUgh7oTvhVwkp8VltuPNDC4gAjKL6TGdZ S+cQCGyEb3aytB1cZsjWchxmDD1k+reyVf0OrwqgK7z6glX7a+r+9jzhzwTpytaN J2Xtq9hhm9cfigWfV5DQJoHPcewroNfTjpKCi6yYz8+j62UYd3WjZsZQQvvaETtv 2cF79PdO -----END CERTIFICATE-----Generated at Mon Mar 2 09:14:45 2026 by rpki-client