$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/E33945D6B0ED11E5B7779F44C4F9AE02.roa File: E33945D6B0ED11E5B7779F44C4F9AE02.roa (raw, json) Hash identifier: 9I/UF8wVS9sTnXr5fHjV7Fm4AlFC8LAa0hnWMtmsfp4= Subject key identifier: BD:92:B4:CD:12:06:F2:A8:8E:73:B5:E1:BF:46:0B:72:D5:FA:3C:88 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2D47 Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/E33945D6B0ED11E5B7779F44C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:56:45 +0000 ROA not before: Fri 04 Jul 2025 15:52:33 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 17741 IP address blocks: 114.31.96.0/21 maxlen: 21 202.44.75.0/24 maxlen: 24 2401:2800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11591 (0x2d47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: Jul 4 15:52:33 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a48bed-8e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c5:f2:74:90:4e:70:cb:fa:03:2c:f8:55:9c: b4:27:c9:55:37:45:fc:06:7c:1c:9b:be:dc:02:5a: e1:e6:5b:2e:c7:51:0b:28:e5:60:25:85:bb:34:08: 3c:04:cc:27:5a:a9:4c:5e:47:21:90:eb:24:3b:42: ab:41:0a:68:1a:e9:dd:01:8e:b9:e7:c4:94:5d:e2: 98:a7:d6:3b:67:b3:b8:41:ba:ae:a2:8e:25:78:64: cb:7d:9c:c6:40:37:7e:5d:3c:39:fe:01:d2:89:11: ae:4b:ae:a9:55:ea:9e:2d:6f:04:d7:93:df:a4:81: 56:94:0a:29:ad:ef:3b:c3:fe:2b:66:bc:57:10:00: d5:f5:a0:53:ba:a9:10:ae:4e:ff:66:f4:1e:72:4b: 82:8e:8a:44:ce:b5:91:b2:a7:42:0f:1d:b2:e5:e3: 94:f6:a1:da:77:3b:cf:e2:98:81:b1:a1:6a:18:9c: ac:41:89:f1:62:e9:44:8f:e6:5e:22:11:1c:75:32: 12:b6:7d:68:a1:04:b2:c3:8c:1f:8c:54:22:42:58: 18:3a:8d:0a:49:fe:e7:11:f6:34:e4:a9:85:c5:6a: 89:72:18:68:da:b3:65:ab:15:91:dc:45:68:0a:1c: c3:b6:7a:08:22:76:88:b8:b6:58:c6:eb:0f:3e:74: e6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:92:B4:CD:12:06:F2:A8:8E:73:B5:E1:BF:46:0B:72:D5:FA:3C:88 X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/E33945D6B0ED11E5B7779F44C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 114.31.96.0/21 202.44.75.0/24 IPv6: 2401:2800::/32 Signature Algorithm: sha256WithRSAEncryption 4f:62:e1:1e:eb:df:a0:11:d4:e2:fa:d2:9c:7a:d7:af:d7:d2: 09:ad:9e:b2:19:43:8b:2a:95:81:26:20:64:e8:84:82:b7:a2: 77:a8:fe:c5:8f:03:40:e8:e9:8b:a1:ed:80:31:8d:17:97:81: 03:18:84:a6:86:fa:3e:f3:f2:a1:e1:9f:7e:96:d2:c0:f4:c4: 1d:8c:55:82:06:0a:97:7f:17:b9:45:44:c2:05:f6:95:43:21: bd:17:1e:21:ab:b8:07:8c:b4:6a:a7:b4:7e:b6:05:c9:4e:41: 43:4c:12:2b:26:72:5f:6f:0c:f2:fc:fb:fc:01:60:ac:7a:3a: 08:b3:4e:0a:7d:ce:c7:58:94:b0:0b:c4:97:d6:08:b0:12:f4: 6f:f9:3a:e8:47:6c:5f:39:c9:24:e4:28:24:04:4e:5b:f9:2b: a5:13:78:78:0b:98:d5:d2:e6:d9:ff:dd:60:84:a5:f3:12:5a: d3:7e:4c:8d:4a:4c:00:0f:3f:ed:e3:27:47:3e:43:8d:61:50: 7b:92:dc:89:24:48:20:9f:86:86:52:9c:7d:bb:1a:99:ec:dd: 89:34:a2:3a:43:93:09:f7:89:f8:aa:c1:60:4d:f6:89:96:2b: cb:e9:8d:8f:80:38:cf:a4:0e:b7:a6:0f:88:ce:91:5e:05:14: b3:0d:9a:1d -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICLUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjUwNzA0MTU1MjMzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGJlZC04ZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcXydJBOcMv6Ayz4VZy0J8lVN0X8Bnwcm77cAlrh5lsux1ELKOVgJYW7NAg8 BMwnWqlMXkchkOskO0KrQQpoGundAY6558SUXeKYp9Y7Z7O4Qbquoo4leGTLfZzG QDd+XTw5/gHSiRGuS66pVeqeLW8E15PfpIFWlAopre87w/4rZrxXEADV9aBTuqkQ rk7/ZvQeckuCjopEzrWRsqdCDx2y5eOU9qHadzvP4piBsaFqGJysQYnxYulEj+Ze IhEcdTIStn1ooQSyw4wfjFQiQlgYOo0KSf7nEfY05KmFxWqJchho2rNlqxWR3EVo ChzDtnoIInaIuLZYxusPPnTmHQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFL2StM0S BvKojnO14b9GC3LV+jyIMB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhBQzQvMjA2QkM4NkNBRTZBMTFFMzkzNzlENTUwNTkxMUVBMzIvRTMzOTQ1RDZC MEVEMTFFNUI3Nzc5RjQ0QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQDch9gAwQAyixLMA0EAgACMAcDBQAkASgAMA0GCSqGSIb3DQEBCwUA A4IBAQBPYuEe69+gEdTi+tKcetev19IJrZ6yGUOLKpWBJiBk6ISCt6J3qP7FjwNA 6OmLoe2AMY0Xl4EDGISmhvo+8/Kh4Z9+ltLA9MQdjFWCBgqXfxe5RUTCBfaVQyG9 Fx4hq7gHjLRqp7R+tgXJTkFDTBIrJnJfbwzy/Pv8AWCsejoIs04Kfc7HWJSwC8SX 1giwEvRv+TroR2xfOckk5CgkBE5b+SulE3h4C5jV0ubZ/91ghKXzElrTfkyNSkwA Dz/t4ydHPkONYVB7ktyJJEggn4aGUpx9uxqZ7N2JNKI6Q5MJ94n4qsFgTfaJlivL 6Y2PgDjPpA63pg+IzpFeBRSzDZod -----END CERTIFICATE-----Generated at Mon Mar 2 22:22:07 2026 by rpki-client