$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/2D89A3B4139A11F182E65A043E3D8C67.roa File: 2D89A3B4139A11F182E65A043E3D8C67.roa (raw, json) Hash identifier: WzPoHRZ+sD0Tq4NDMGpvPyaJehMoEm7aBtLHe8LWFq8= Subject key identifier: C9:B2:6F:45:B1:3C:A7:51:04:57:12:1B:42:95:F2:98:32:D3:C5:27 Certificate issuer: /CN=A914C725/serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B Certificate serial: 08 Authority key identifier: 34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/2D89A3B4139A11F182E65A043E3D8C67.roa Signing time: Sun 01 Mar 2026 05:31:51 +0000 ROA not before: Fri 27 Feb 2026 05:07:14 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 56286 IP address blocks: 205.209.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C725, serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B Validity Not Before: Feb 27 05:07:14 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a3cf47-17bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:10:19:42:9b:e2:b9:de:5a:6b:74:23:60:e0: f8:22:73:1f:e9:d9:2a:b2:01:b5:18:7e:4d:9f:d0: 5e:72:2b:b9:74:df:82:c0:69:09:9b:54:f8:16:d1: d3:d5:2e:7b:1c:23:7c:da:a9:2d:4a:2f:62:55:66: c9:8e:ec:14:37:3b:54:af:2c:42:5c:2c:75:c0:4c: 3b:4c:70:44:93:d7:4f:76:98:da:de:d3:9a:2e:d4: 27:2e:90:0c:18:51:64:41:c3:c3:5e:30:28:fc:34: d6:1c:42:e8:cf:1b:1a:e1:f5:5b:d8:a5:5d:4d:b3: 48:07:d3:fe:56:9d:49:a1:c0:fc:d1:83:91:81:e0: 2b:af:6a:26:57:51:01:b8:71:29:6e:15:57:62:3c: ea:02:01:69:c0:92:fc:8e:be:72:10:2e:3d:92:7f: 47:7d:98:44:ce:99:70:f9:aa:52:b3:b3:dc:ee:9a: c9:4a:f4:6d:93:00:4b:c5:df:69:e6:0d:20:9b:a4: 29:84:ba:2a:74:c1:48:fc:c6:bd:52:f1:70:e3:6e: e1:5f:e3:f6:f5:de:ae:77:5d:ab:4f:73:63:f7:b9: 2a:fb:ed:c6:a7:fc:88:b7:00:54:47:a2:bd:f9:90: 93:4c:af:26:c7:81:0a:71:75:6c:81:ff:93:12:1b: 9d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B2:6F:45:B1:3C:A7:51:04:57:12:1B:42:95:F2:98:32:D3:C5:27 X509v3 Authority Key Identifier: keyid:34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/2D89A3B4139A11F182E65A043E3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 205.209.31.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:a7:56:0a:30:ab:22:8a:9d:e2:49:e7:35:6b:9c:6a:77:d1: d3:56:a9:a0:06:3f:e9:d7:de:e2:30:5e:9c:fd:bf:2c:56:f9: 75:62:57:bc:74:d9:b2:e2:a9:a5:cb:2e:db:45:97:c9:9b:74: c3:eb:a6:51:d6:0e:2d:53:aa:a4:9c:53:21:f2:46:65:45:5c: 74:54:14:8d:0f:00:0d:94:ce:95:45:4c:26:66:24:f9:08:13: 71:21:4b:4b:de:c2:f5:3d:f2:6b:a7:22:6c:02:35:62:98:80: 0b:c1:27:a6:2c:e7:43:80:05:36:05:7f:ed:c8:fd:23:a0:6d: fc:51:1f:a7:0f:67:60:a0:7e:b2:14:d4:8a:bf:e9:75:7f:d4: 54:c6:44:cc:67:5b:61:ed:5e:cb:dd:3b:88:c0:15:9a:65:66: dd:dd:2b:8d:2d:6d:6c:8a:58:fa:3d:af:ea:31:d3:8b:f2:72: 2e:99:2e:03:66:0a:ca:ee:2d:c4:0e:dd:88:64:d0:fb:f0:3f: d2:e7:eb:a2:5d:d3:c5:0e:42:a3:70:bb:32:cf:91:02:80:d3: ce:3b:b6:4d:c5:8d:7a:a5:bf:59:ca:17:bb:a7:58:50:a2:0d: 61:31:93:c4:e6:83:e4:38:c6:68:0e:ed:85:95:62:43:20:0d: 7a:26:5b:db -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QzcyNTExMC8GA1UEBRMoMzQ4MThCQ0YwRDg0RTE1OTlCRDk5ODE3OTk1RTVFQzM5 QjFCMDE0QjAeFw0yNjAyMjcwNTA3MTRaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNjZjQ3LTE3YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAEBlCm+K53lprdCNg4Pgicx/p2SqyAbUYfk2f0F5yK7l034LAaQmbVPgW0dPV LnscI3zaqS1KL2JVZsmO7BQ3O1SvLEJcLHXATDtMcEST1092mNre05ou1CcukAwY UWRBw8NeMCj8NNYcQujPGxrh9VvYpV1Ns0gH0/5WnUmhwPzRg5GB4CuvaiZXUQG4 cSluFVdiPOoCAWnAkvyOvnIQLj2Sf0d9mETOmXD5qlKzs9zumslK9G2TAEvF32nm DSCbpCmEuip0wUj8xr1S8XDjbuFf4/b13q53XatPc2P3uSr77can/Ii3AFRHor35 kJNMrybHgQpxdWyB/5MSG51lAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUybJvRbE8 p1EEVxIbQpXymDLTxScwHwYDVR0jBBgwFoAUNIGLzw2E4Vmb2ZgXmV5ew5sbAUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDNzI1L0FDNkNEMTVDMTM5 OTExRjE5QzI0NzBCMUIzRUU1MjhFL05JR0x6dzJFNFZtYjJaZ1htVjVldzVzYkFV cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTklHTHp3MkU0Vm1iMlpnWG1WNWV3NXNiQVVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzcyNS9BQzZDRDE1QzEzOTkxMUYxOUMyNDcwQjFCM0VFNTI4RS8yRDg5QTNCNDEz OUExMUYxODJFNjVBMDQzRTNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADN0R8wDQYJKoZIhvcNAQELBQADggEBADunVgowqyKKneJJ5zVrnGp3 0dNWqaAGP+nX3uIwXpz9vyxW+XViV7x02bLiqaXLLttFl8mbdMPrplHWDi1TqqSc UyHyRmVFXHRUFI0PAA2UzpVFTCZmJPkIE3EhS0vewvU98munImwCNWKYgAvBJ6Ys 50OABTYFf+3I/SOgbfxRH6cPZ2CgfrIU1Iq/6XV/1FTGRMxnW2HtXsvdO4jAFZpl Zt3dK40tbWyKWPo9r+ox04vyci6ZLgNmCsruLcQO3Yhk0PvwP9Ln66Jd08UOQqNw uzLPkQKA0847tk3FjXqlv1nKF7unWFCiDWExk8Tmg+Q4xmgO7YWVYkMgDXomW9s= -----END CERTIFICATE-----Generated at Mon Mar 2 08:25:31 2026 by rpki-client