$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D931AD927E0F11EE97A4761DC4F9AE02.roa File: D931AD927E0F11EE97A4761DC4F9AE02.roa (raw, json) Hash identifier: YBs4p1+A3roeJirvn2iZNpMDPQ+EYQMw+rdTVjXHq/w= Subject key identifier: 39:98:A0:5E:8F:3F:C8:E4:1D:23:88:CA:85:15:25:DD:53:59:C3:55 Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 203B Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D931AD927E0F11EE97A4761DC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:12:35 +0000 ROA not before: Sat 30 Aug 2025 16:35:29 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 151397 IP address blocks: 203.86.116.0/24 maxlen: 24 240e:983:2010::/48 maxlen: 48 240e:983:2020::/48 maxlen: 48 240e:983:2030::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8251 (0x203b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Aug 30 16:35:29 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a48fa3-8eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:58:8e:d6:91:06:60:73:09:3d:b3:b5:e3:10: 80:ba:65:6d:ac:35:73:6a:10:be:82:73:86:73:95: 7b:2a:5d:30:da:98:8f:2b:09:b7:0b:75:ea:f0:b9: 23:82:6f:57:12:21:cb:78:0b:04:0c:7e:ad:0f:00: c6:ab:c6:eb:c9:f6:68:28:3a:47:52:4a:4b:8c:f1: cf:1e:9d:c3:21:22:56:97:4f:58:0c:e4:df:ea:e4: 79:19:46:70:fb:8b:bc:00:ac:0d:c7:14:19:ba:c1: 93:3a:f0:fc:4e:3c:a4:c1:97:7b:f9:c7:11:b3:93: 53:eb:99:7e:7e:8a:94:aa:f5:67:00:5f:08:d7:3b: 8e:20:2a:fc:98:6d:d2:24:a0:27:b7:92:24:f0:e9: 4a:d4:9d:f9:33:32:8b:fd:26:98:74:37:dc:b3:84: 70:e4:c6:9d:b2:5b:fa:48:03:4b:49:ac:81:de:b8: 4c:1f:4f:28:2e:33:6d:2b:eb:ca:76:98:6e:3d:c5: 9c:2b:fd:bd:f8:05:4c:5b:d6:43:5e:5b:d5:7c:9a: d6:48:57:f9:8b:02:e4:c4:95:d6:ea:25:e3:31:ba: bc:4c:47:a0:55:24:31:e7:78:cb:f8:7d:1b:93:d3: 22:90:5e:d7:94:97:76:ab:61:54:52:2f:05:dc:07: d1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:98:A0:5E:8F:3F:C8:E4:1D:23:88:CA:85:15:25:DD:53:59:C3:55 X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D931AD927E0F11EE97A4761DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.86.116.0/24 IPv6: 240e:983:2010::/48 240e:983:2020::/48 240e:983:2030::/48 Signature Algorithm: sha256WithRSAEncryption 7f:dc:25:08:0d:59:a0:62:db:e8:96:8f:7f:f3:b1:c5:12:66: e2:62:bc:0e:ce:6f:7e:78:d5:f0:3a:a6:c3:5d:ce:b6:96:75: 67:43:b9:7d:67:ca:9b:31:0f:44:bf:9a:94:88:85:2a:b6:64: 9c:dd:67:92:f9:76:2c:1f:ee:71:6d:2d:f3:76:a2:da:11:f5: 02:98:0e:31:51:97:14:c2:e5:be:f3:42:8d:2b:6e:15:39:1e: 48:52:0e:df:50:ed:1b:89:b9:02:6e:eb:5e:c4:18:22:4a:77: af:1c:5e:b6:32:61:ca:77:b3:56:ee:78:cb:8d:0e:f7:5e:13: 0c:49:93:a8:46:a2:59:52:c2:66:09:19:9d:2f:da:7a:39:50: 3a:03:4f:45:d6:b4:dc:27:d4:0e:cf:b6:42:a5:df:00:86:74: 4d:06:77:cf:00:f9:79:77:1c:9d:7a:49:96:c3:82:52:59:8c: 29:75:66:9a:19:eb:de:5a:84:85:3e:8f:32:91:b9:ec:a2:1c: f7:76:4b:24:1e:3b:06:c4:1f:88:3e:84:7f:ac:ac:e9:c1:b3: 31:9b:37:21:b8:2f:be:4e:3f:48:10:2d:75:50:ed:41:0d:f5: 82:0f:00:38:06:22:d2:10:10:7c:f4:5f:20:ac:69:71:99:6e: 57:7a:3e:41 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgICIDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjUwODMwMTYzNTI5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGZhMy04ZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtViO1pEGYHMJPbO14xCAumVtrDVzahC+gnOGc5V7Kl0w2piPKwm3C3Xq8Lkj gm9XEiHLeAsEDH6tDwDGq8bryfZoKDpHUkpLjPHPHp3DISJWl09YDOTf6uR5GUZw +4u8AKwNxxQZusGTOvD8TjykwZd7+ccRs5NT65l+foqUqvVnAF8I1zuOICr8mG3S JKAnt5Ik8OlK1J35MzKL/SaYdDfcs4Rw5Madslv6SANLSayB3rhMH08oLjNtK+vK dphuPcWcK/29+AVMW9ZDXlvVfJrWSFf5iwLkxJXW6iXjMbq8TEegVSQx53jL+H0b k9MikF7XlJd2q2FUUi8F3AfRswIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFDmYoF6P P8jkHSOIyoUVJd1TWcNVMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvRDkzMUFEOTI3 RTBGMTFFRTk3QTQ3NjFEQzRGOUFFMDIucm9hMEIGCCsGAQUFBwEHAQH/BDMwMTAM BAIAATAGAwQAy1Z0MCEEAgACMBsDBwAkDgmDIBADBwAkDgmDICADBwAkDgmDIDAw DQYJKoZIhvcNAQELBQADggEBAH/cJQgNWaBi2+iWj3/zscUSZuJivA7Ob3541fA6 psNdzraWdWdDuX1nypsxD0S/mpSIhSq2ZJzdZ5L5diwf7nFtLfN2otoR9QKYDjFR lxTC5b7zQo0rbhU5HkhSDt9Q7RuJuQJu617EGCJKd68cXrYyYcp3s1bueMuNDvde EwxJk6hGollSwmYJGZ0v2no5UDoDT0XWtNwn1A7PtkKl3wCGdE0Gd88A+Xl3HJ16 SZbDglJZjCl1ZpoZ695ahIU+jzKRueyiHPd2SyQeOwbEH4g+hH+srOnBszGbNyG4 L75OP0gQLXVQ7UEN9YIPADgGItIQEHz0XyCsaXGZbld6PkE= -----END CERTIFICATE-----Generated at Mon Mar 2 11:00:29 2026 by rpki-client