$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/0B989CC8BC6711EAA9856B6AC4F9AE02.roa File: 0B989CC8BC6711EAA9856B6AC4F9AE02.roa (raw, json) Hash identifier: 4OaGCsSJoSkwjyVsooZcDtrW62MDlolRB9l+ZnzI/uM= Subject key identifier: C0:B8:B2:D3:05:F7:C2:7F:EA:04:86:0C:C9:DA:AE:54:DD:22:45:FB Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 203E Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/0B989CC8BC6711EAA9856B6AC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:12:38 +0000 ROA not before: Sat 30 Aug 2025 16:35:31 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 17799 IP address blocks: 218.30.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8254 (0x203e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Aug 30 16:35:31 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a48fa6-c424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fe:07:a4:9d:da:5c:c0:a1:ad:de:87:46:bc: 3e:5f:63:6d:0f:b1:ef:e1:cf:6c:4a:c2:26:bb:19: 37:d5:cf:da:89:19:be:c3:65:e5:e0:dd:61:0a:bf: aa:ba:ca:c0:99:fc:49:8b:c0:68:4a:cd:2d:fe:2a: 01:24:b7:06:16:19:51:b6:be:a1:a2:00:32:45:74: 77:c8:ae:e0:6a:6d:d5:b9:a1:e6:d4:82:16:34:68: c1:9d:62:69:70:3b:cc:b0:2c:c4:3e:96:34:4e:ab: 85:70:84:11:df:ff:22:a0:9b:4c:e3:dd:90:43:da: 0a:0b:cb:0f:6e:02:6c:05:46:47:69:42:f3:9a:ec: 77:f4:f3:d7:5b:7d:95:a5:f3:2d:7a:65:98:a0:61: 5f:f6:41:3e:05:b6:b2:70:53:83:49:b1:ac:21:bd: a2:25:60:79:c1:4f:78:27:d9:f9:0b:90:2f:dc:38: 7e:a9:d9:9a:6c:24:25:be:7d:ec:4a:17:b3:ca:dd: 08:2a:a1:ab:23:b8:f8:63:7c:dd:e0:76:e7:6d:6a: 05:bf:3a:0b:88:be:b8:e5:07:67:7f:76:e1:93:88: f5:43:8c:21:b9:47:1a:36:0e:73:01:db:e5:db:ae: 0a:ce:81:fe:83:81:bf:74:90:7a:1a:9b:65:da:07: 62:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B8:B2:D3:05:F7:C2:7F:EA:04:86:0C:C9:DA:AE:54:DD:22:45:FB X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/0B989CC8BC6711EAA9856B6AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 218.30.170.0/24 Signature Algorithm: sha256WithRSAEncryption ad:d6:cf:26:27:68:e4:66:e8:7c:f4:e5:11:44:51:67:dd:00: f9:97:2d:68:a2:bc:d3:83:1d:7d:99:09:cf:c5:58:fa:78:dd: 19:2f:b6:52:20:10:92:cc:9c:e6:67:33:19:df:a2:b2:61:7e: 02:ab:0b:3f:1b:9b:80:27:e7:ab:d5:de:d0:5d:a3:2a:02:21: c9:17:83:31:fc:05:06:21:d3:2c:43:bf:a2:c4:f9:07:e1:f6: e0:d0:f1:6e:a4:ef:9a:e6:aa:7e:2a:10:f8:f7:74:66:e1:3d: 94:1f:30:04:a2:c6:6e:f7:eb:3c:16:fe:3a:f8:34:08:4b:35: 27:e5:77:3c:89:c8:61:46:e1:39:e2:58:57:f0:58:7c:03:fb: e0:70:bd:bf:b5:2f:3c:f0:8b:47:1f:0c:1a:84:58:d7:42:30: 2c:ea:4f:0b:11:6e:ff:f3:67:e8:c7:ff:88:cf:a8:16:1d:ef: 07:55:cb:d2:b7:fd:5f:ea:3f:2b:ba:a1:0d:43:27:48:20:7c: b8:0c:30:35:b0:31:c0:62:e9:ef:ed:f6:f1:c8:8a:8c:79:a0: ce:87:4d:1a:18:de:5d:e7:ec:64:c1:ae:3a:27:bd:e0:83:87: bd:89:a4:6e:6d:7c:69:6d:fb:6e:cc:5f:b1:f1:7d:f5:e8:64: e2:54:2f:1e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICID4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjUwODMwMTYzNTMxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGZhNi1jNDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkf4HpJ3aXMChrd6HRrw+X2NtD7Hv4c9sSsImuxk31c/aiRm+w2Xl4N1hCr+q usrAmfxJi8BoSs0t/ioBJLcGFhlRtr6hogAyRXR3yK7gam3VuaHm1IIWNGjBnWJp cDvMsCzEPpY0TquFcIQR3/8ioJtM492QQ9oKC8sPbgJsBUZHaULzmux39PPXW32V pfMtemWYoGFf9kE+BbaycFODSbGsIb2iJWB5wU94J9n5C5Av3Dh+qdmabCQlvn3s Shezyt0IKqGrI7j4Y3zd4HbnbWoFvzoLiL645Qdnf3bhk4j1Q4whuUcaNg5zAdvl 264KzoH+g4G/dJB6Gptl2gdi4QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMC4stMF 98J/6gSGDMnarlTdIkX7MB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvMEI5ODlDQzhC QzY3MTFFQUE5ODU2QjZBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQA2h6qMA0GCSqGSIb3DQEBCwUAA4IBAQCt1s8mJ2jkZuh89OURRFFn 3QD5ly1oorzTgx19mQnPxVj6eN0ZL7ZSIBCSzJzmZzMZ36KyYX4Cqws/G5uAJ+er 1d7QXaMqAiHJF4Mx/AUGIdMsQ7+ixPkH4fbg0PFupO+a5qp+KhD493Rm4T2UHzAE osZu9+s8Fv46+DQISzUn5Xc8ichhRuE54lhX8Fh8A/vgcL2/tS888ItHHwwahFjX QjAs6k8LEW7/82fox/+Iz6gWHe8HVcvSt/1f6j8ruqENQydIIHy4DDA1sDHAYunv 7fbxyIqMeaDOh00aGN5d5+xkwa46J73gg4e9iaRubXxpbftuzF+x8X316GTiVC8e -----END CERTIFICATE-----Generated at Mon Mar 2 10:13:39 2026 by rpki-client