$ rpki-client -vvf rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/A6D6CA7E022C11EBAC47A831C4F9AE02.roa File: A6D6CA7E022C11EBAC47A831C4F9AE02.roa (raw, json) Hash identifier: k15XvHBFTQxYQednyHDCk4s/WtIgkfY4gwfxlATMUsU= Subject key identifier: 66:46:4B:56:6F:AA:30:A1:15:50:FE:2C:5D:33:A1:52:0C:7E:40:9E Certificate issuer: /CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Certificate serial: 3522 Authority key identifier: CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/A6D6CA7E022C11EBAC47A831C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:31:25 +0000 ROA not before: Mon 02 Feb 2026 15:11:08 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 23838 IP address blocks: 203.170.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13602 (0x3522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149905, serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Validity Not Before: Feb 2 15:11:08 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a44dbd-ec13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d5:fa:7d:1e:b0:a2:6f:e2:97:b2:6d:5d:19: 8c:c3:9d:46:76:8b:bc:e2:a7:ee:d9:18:ac:20:e9: 78:28:79:5b:04:c0:d8:61:15:b6:61:75:02:44:92: 56:d4:dd:31:e5:e5:ec:02:7b:4f:61:40:d8:75:17: e7:32:30:17:04:bd:fe:c6:2b:2f:4c:fa:98:2e:88: 47:c2:66:96:f8:91:9f:1a:69:a9:da:cc:83:4f:10: 70:49:c8:32:3d:f7:f8:04:63:0b:74:07:e7:61:41: ad:bf:7c:6f:07:a0:f2:b5:8e:e0:28:e1:06:9a:e6: a9:90:f1:89:be:b6:d2:13:3c:1e:30:6e:32:62:72: 7e:0a:59:43:8a:de:59:c1:d5:c4:9e:ae:f1:ec:f2: 72:51:87:6c:bf:b2:41:0f:e8:29:84:ab:59:f4:70: 27:aa:38:cc:75:e8:5a:50:29:9b:8b:01:28:cd:3a: 56:b3:19:4a:6b:e8:04:41:fc:cb:00:a5:70:be:fb: fb:c7:19:20:6c:bf:48:26:a8:e1:d6:62:6d:68:ed: 95:63:54:b4:a8:10:75:a2:1c:d7:79:fd:72:36:b4: 1d:52:ae:f8:56:75:e3:7d:ff:96:eb:ee:38:dd:9a: d6:2c:65:12:bd:ad:f9:b3:02:c6:9d:c3:6f:16:9d: 05:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:46:4B:56:6F:AA:30:A1:15:50:FE:2C:5D:33:A1:52:0C:7E:40:9E X509v3 Authority Key Identifier: keyid:CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/A6D6CA7E022C11EBAC47A831C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.170.56.0/24 Signature Algorithm: sha256WithRSAEncryption d5:5a:e8:69:11:0d:a5:6c:57:42:1c:dc:a2:87:5c:f6:4e:32: f1:53:ea:99:e6:66:c1:f6:53:5c:6c:41:a7:5f:3a:04:c4:93: 2e:62:54:ce:de:be:b7:c9:47:bf:25:fe:eb:a7:ad:45:73:b9: 16:55:de:11:41:8c:00:ae:8f:e8:3e:36:17:a8:0b:23:94:ab: 7d:3d:d7:83:c9:0b:21:ca:14:73:11:aa:9b:cb:77:d3:71:85: 6d:73:3d:dd:22:a9:58:13:fd:d5:86:af:51:a7:56:ff:83:f0: 3a:f5:6b:61:ea:f4:94:6c:42:0c:a5:b4:d3:7e:e6:2e:08:b7: d7:1f:93:bd:4a:77:41:90:60:8d:e6:cb:ea:49:4c:0e:77:68: fb:ba:bc:b4:fc:e6:da:bd:43:c9:0a:ef:77:75:fa:c1:62:ff: 99:75:a9:1d:9e:76:1f:89:1a:af:1d:23:03:5d:62:ee:e9:62: 7c:4c:69:21:d6:6f:08:d7:22:6b:5a:e5:94:d2:14:0f:5e:2b: 27:01:a0:d4:70:9f:0b:c3:4c:60:63:e0:21:3f:2f:3e:b6:02: 38:23:5e:60:df:b9:58:ec:21:49:56:4c:27:4d:84:94:96:0c: 9b:1a:cc:46:9e:01:0e:13:6d:ce:ef:33:e4:ad:1e:e3:26:b9: c9:74:3d:1b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDUxMTAvBgNVBAUTKENCQjY4RTk5MDUzQzFERTI0NzhBQkJFMkRGRjJBQkNF QzBEMUIxNDgwHhcNMjYwMjAyMTUxMTA4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGRiZC1lYzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNX6fR6wom/il7JtXRmMw51Gdou84qfu2RisIOl4KHlbBMDYYRW2YXUCRJJW 1N0x5eXsAntPYUDYdRfnMjAXBL3+xisvTPqYLohHwmaW+JGfGmmp2syDTxBwScgy Pff4BGMLdAfnYUGtv3xvB6DytY7gKOEGmuapkPGJvrbSEzweMG4yYnJ+CllDit5Z wdXEnq7x7PJyUYdsv7JBD+gphKtZ9HAnqjjMdehaUCmbiwEozTpWsxlKa+gEQfzL AKVwvvv7xxkgbL9IJqjh1mJtaO2VY1S0qBB1ohzXef1yNrQdUq74VnXjff+W6+44 3ZrWLGUSva35swLGncNvFp0FnQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGZGS1Zv qjChFVD+LF0zoVIMfkCeMB8GA1UdIwQYMBaAFMu2jpkFPB3iR4q74t/yq87A0bFI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNS8zOTREMDY0QTFE OUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhlSkhpcnZpM19LcnpzRFJz VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3YU9tUVU4SGVKSGlydmkzX0tyenNEUnNVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDk5MDUvMzk0RDA2NEExRDlCMTFFMkJFMTJFRjg4MDhCMDJDRDIvQTZENkNBN0Uw MjJDMTFFQkFDNDdBODMxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAy6o4MA0GCSqGSIb3DQEBCwUAA4IBAQDVWuhpEQ2lbFdCHNyih1z2 TjLxU+qZ5mbB9lNcbEGnXzoExJMuYlTO3r63yUe/Jf7rp61Fc7kWVd4RQYwAro/o PjYXqAsjlKt9PdeDyQshyhRzEaqby3fTcYVtcz3dIqlYE/3Vhq9Rp1b/g/A69Wth 6vSUbEIMpbTTfuYuCLfXH5O9SndBkGCN5svqSUwOd2j7ury0/ObavUPJCu93dfrB Yv+ZdakdnnYfiRqvHSMDXWLu6WJ8TGkh1m8I1yJrWuWU0hQPXisnAaDUcJ8Lw0xg Y+AhPy8+tgI4I15g37lY7CFJVkwnTYSUlgybGsxGngEOE23O7zPkrR7jJrnJdD0b -----END CERTIFICATE-----Generated at Mon Mar 2 10:58:02 2026 by rpki-client