$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/79FAE7BE5BAC11EF95A95882C4F9AE02.roa File: 79FAE7BE5BAC11EF95A95882C4F9AE02.roa (raw, json) Hash identifier: 2x/q+NkfI1+6vdFIZthnk4/hhw2RbPTy8nBQqiZG0z0= Subject key identifier: FB:9D:EC:F3:30:A3:77:4A:81:C8:18:FF:54:36:27:B1:8E:3E:7A:D9 Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 2055 Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/79FAE7BE5BAC11EF95A95882C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:12:58 +0000 ROA not before: Wed 17 Dec 2025 02:01:41 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 63527 IP address blocks: 203.12.88.0/24 maxlen: 24 203.12.89.0/24 maxlen: 24 203.89.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8277 (0x2055) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Dec 17 02:01:41 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a48fba-08f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:77:e4:25:23:51:df:03:ff:bd:3e:64:b8:c1: 66:98:af:e4:54:e6:cb:e9:5a:32:16:2f:08:c8:69: 54:dc:a1:79:c2:be:f0:d0:0f:c1:f0:6e:16:bb:62: 21:62:80:ff:32:0c:cb:f1:fb:4b:c1:02:7e:a7:e5: 91:4d:1d:73:ed:fd:d9:f9:69:3c:cd:1e:e4:c2:60: af:c2:87:b8:65:af:87:9e:f5:20:d1:e0:b7:bf:a8: cb:e9:b9:5e:71:f0:a8:bd:1c:9c:de:31:c0:9e:54: 7e:2a:59:9d:16:d1:db:fb:df:24:d6:3c:36:52:34: 17:d8:83:21:61:40:b1:1b:7b:13:7b:35:42:96:a6: df:6a:1e:47:a5:aa:8f:5f:79:2e:3b:de:be:0e:51: b6:0c:18:87:1c:2e:fc:5d:71:03:76:ab:31:a5:87: ba:2e:82:84:01:e4:0b:c5:00:16:af:85:1e:c7:2b: aa:85:1a:c4:6a:22:21:75:62:c7:0e:47:06:f8:b5: 89:28:34:31:3e:66:5b:79:97:92:9a:9e:09:5d:21: 6e:e2:a9:fa:15:bc:5a:28:90:1b:ea:fd:eb:d8:ac: 72:0e:9d:9a:35:da:cd:e5:52:02:57:e9:4f:b2:50: 2c:f1:ae:be:1e:3f:21:4d:70:36:b0:6e:0a:0e:af: 72:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9D:EC:F3:30:A3:77:4A:81:C8:18:FF:54:36:27:B1:8E:3E:7A:D9 X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/79FAE7BE5BAC11EF95A95882C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.12.88.0/23 203.89.13.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:c5:30:6b:b3:29:32:82:db:93:e3:86:30:e3:56:a8:f1:3f: 76:ea:16:f9:48:0b:15:8e:dc:ff:75:5f:da:a4:b6:39:ec:1a: fc:8e:3f:b1:a4:3e:3a:45:59:ae:1e:b0:29:d7:c1:98:a4:4e: d5:54:aa:cb:9b:65:08:b5:58:12:b5:45:6b:01:4a:17:3e:5e: bc:3c:5f:73:a5:53:f4:16:8e:a8:c0:2a:7b:17:05:d2:6a:ce: 03:2e:1c:4b:54:c4:24:bf:36:f6:d8:6d:6e:1f:db:84:47:3b: c1:a6:c3:2a:5f:4c:f8:82:84:1a:6d:a6:45:45:1c:2c:09:91: 88:87:ea:fe:fb:f5:5b:5d:c9:20:67:6b:ee:ec:b7:ff:69:3e: 8a:13:6d:a1:33:24:f9:c8:6e:29:f7:5d:e0:76:3a:62:d1:33: 5b:aa:21:25:1e:be:ab:d0:92:39:c9:36:0d:85:b7:1e:28:95: fc:1d:de:17:27:e4:b8:68:a3:b4:86:a9:a6:7e:e8:d0:3e:85: 9f:3a:b9:04:76:02:aa:fc:11:3b:47:a7:5f:67:36:3b:95:db: 2e:ac:b2:99:ba:93:50:b2:ed:c1:e9:bf:8e:54:4e:1b:9c:23: 8f:21:08:3a:4f:ee:06:72:4a:fa:3a:6f:1a:67:06:39:cb:e9: b9:95:a8:e7 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICIFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjUxMjE3MDIwMTQxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGZiYS0wOGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHfkJSNR3wP/vT5kuMFmmK/kVObL6VoyFi8IyGlU3KF5wr7w0A/B8G4Wu2Ih YoD/MgzL8ftLwQJ+p+WRTR1z7f3Z+Wk8zR7kwmCvwoe4Za+HnvUg0eC3v6jL6ble cfCovRyc3jHAnlR+KlmdFtHb+98k1jw2UjQX2IMhYUCxG3sTezVClqbfah5HpaqP X3kuO96+DlG2DBiHHC78XXEDdqsxpYe6LoKEAeQLxQAWr4UexyuqhRrEaiIhdWLH DkcG+LWJKDQxPmZbeZeSmp4JXSFu4qn6FbxaKJAb6v3r2KxyDp2aNdrN5VICV+lP slAs8a6+Hj8hTXA2sG4KDq9y5QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFPud7PMw o3dKgcgY/1Q2J7GOPnrZMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvNzlGQUU3QkU1 QkFDMTFFRjk1QTk1ODgyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBywxYAwQAy1kNMA0GCSqGSIb3DQEBCwUAA4IBAQCcxTBrsykygtuT 44Yw41ao8T926hb5SAsVjtz/dV/apLY57Br8jj+xpD46RVmuHrAp18GYpE7VVKrL m2UItVgStUVrAUoXPl68PF9zpVP0Fo6owCp7FwXSas4DLhxLVMQkvzb22G1uH9uE RzvBpsMqX0z4goQabaZFRRwsCZGIh+r++/VbXckgZ2vu7Lf/aT6KE22hMyT5yG4p 913gdjpi0TNbqiElHr6r0JI5yTYNhbceKJX8Hd4XJ+S4aKO0hqmmfujQPoWfOrkE dgKq/BE7R6dfZzY7ldsurLKZupNQsu3B6b+OVE4bnCOPIQg6T+4Gckr6Om8aZwY5 y+m5lajn -----END CERTIFICATE-----Generated at Mon Mar 2 07:17:12 2026 by rpki-client