$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/D23FC546011111F1B3598E67446F56BC.roa File: D23FC546011111F1B3598E67446F56BC.roa (raw, json) Hash identifier: TuJfvHHVX0A6yfj6WE+4oini8CaUXIpP8OQUAMJPO/w= Subject key identifier: 3B:AE:EC:16:4C:0A:5D:CE:39:3E:47:38:AE:24:8B:32:18:61:CC:91 Certificate issuer: /CN=A914EBB2/serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A Certificate serial: 21 Authority key identifier: 58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/D23FC546011111F1B3598E67446F56BC.roa Signing time: Sun 01 Mar 2026 05:47:02 +0000 ROA not before: Tue 03 Feb 2026 15:05:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 17476 IP address blocks: 206.109.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBB2, serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A Validity Not Before: Feb 3 15:05:48 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3d2d6-e798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:eb:e4:3f:57:9d:03:cf:3d:f5:af:f8:4e:ae: 4a:a5:fb:69:7a:27:ca:c3:8b:e7:f9:f2:2e:ca:65: 65:a3:f5:de:8c:92:73:6e:e3:9f:0d:26:54:bb:b2: 30:7a:13:b9:b6:bd:88:bd:eb:18:8a:e4:11:e0:d7: 91:fc:32:01:9f:47:8d:52:88:ff:9c:8b:cb:3a:ac: 2b:19:49:aa:9d:11:3a:eb:ec:2f:48:27:17:f9:e5: 62:49:76:2c:7e:1e:46:e9:60:3c:58:ec:8f:ee:5e: 7d:1c:ec:70:42:a2:cb:c8:db:e8:b0:5b:fb:9c:08: c9:3c:bc:ad:92:23:55:56:03:bf:64:c4:8f:14:56: 42:40:bd:90:e8:e1:a8:f9:fe:ac:90:74:c8:14:9a: 9a:11:fe:7f:a2:4a:a0:c6:5b:f6:6d:3f:40:e4:44: a9:b4:b4:18:7d:3e:3b:15:89:41:b5:ab:da:3d:ac: 1f:d8:aa:20:05:8e:08:a7:32:d3:15:70:a8:03:1d: 8c:2f:82:cf:f1:02:d4:b6:56:30:82:80:d7:f3:93: cc:b1:5e:9a:4f:40:27:60:7b:cd:10:71:94:34:53: cd:b4:81:94:d7:cb:61:f4:15:21:a1:a1:8e:37:ac: 06:2e:91:9e:7a:bc:96:ed:5c:30:44:dd:5e:d4:f5: ae:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AE:EC:16:4C:0A:5D:CE:39:3E:47:38:AE:24:8B:32:18:61:CC:91 X509v3 Authority Key Identifier: keyid:58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/D23FC546011111F1B3598E67446F56BC.roa sbgp-ipAddrBlock: critical IPv4: 206.109.72.0/22 Signature Algorithm: sha256WithRSAEncryption 43:6f:b3:79:52:e7:be:aa:6f:2a:06:68:78:ae:66:7d:ed:3c: 4a:cc:a6:23:72:72:2e:82:4b:22:35:f7:2a:1b:6d:4c:2b:4e: e7:12:46:77:db:ae:a1:9b:9e:c7:f0:a6:fb:06:85:01:f0:9b: b2:3e:44:1c:e4:fb:58:f7:a2:42:ae:1d:64:b1:63:22:67:51: ec:12:d2:9a:77:4f:05:60:25:4a:a5:c5:ec:0d:e2:82:7b:89: 9f:66:3e:fe:b3:52:85:59:30:17:58:1c:c0:ce:c5:40:cc:67: 4d:c8:09:b1:a2:f0:a8:8f:04:25:be:bd:1e:66:f4:28:2b:75: c1:6f:a3:cd:0c:76:8d:e1:4f:6d:b8:e9:d4:90:32:97:af:58: 2e:b4:30:d8:3f:95:27:b4:4b:99:de:cd:fe:f2:d1:43:13:2f: d7:c6:f5:53:1d:12:7a:7a:c6:7e:b4:62:d8:9b:ac:86:25:12: 64:b5:fb:c6:89:28:22:af:7c:fa:e4:f8:55:e1:53:52:1e:24: d6:b8:ca:dd:4c:70:3f:69:a9:0a:99:25:8a:47:5c:7a:08:66: bb:81:4f:f7:5b:39:0a:38:7b:19:30:42:88:69:40:e5:2c:5a: a7:47:69:16:3e:7e:2b:c7:05:e9:4a:78:90:92:93:89:df:c0: 93:4c:93:54 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RUJCMjExMC8GA1UEBRMoNThBQThFNkY2MDlCRjU1ODE0MDM2RDI2QTEyQTVFMkIy NTE1ODkzQTAeFw0yNjAyMDMxNTA1NDhaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkMmQ2LWU3OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC16+Q/V50Dzz31r/hOrkql+2l6J8rDi+f58i7KZWWj9d6MknNu458NJlS7sjB6 E7m2vYi96xiK5BHg15H8MgGfR41SiP+ci8s6rCsZSaqdETrr7C9IJxf55WJJdix+ HkbpYDxY7I/uXn0c7HBCosvI2+iwW/ucCMk8vK2SI1VWA79kxI8UVkJAvZDo4aj5 /qyQdMgUmpoR/n+iSqDGW/ZtP0DkRKm0tBh9PjsViUG1q9o9rB/YqiAFjginMtMV cKgDHYwvgs/xAtS2VjCCgNfzk8yxXppPQCdge80QcZQ0U820gZTXy2H0FSGhoY43 rAYukZ56vJbtXDBE3V7U9a4LAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUO67sFkwK Xc45Pkc4riSLMhhhzJEwHwYDVR0jBBgwFoAUWKqOb2Cb9VgUA20moSpeKyUViTow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFQkIyL0YwOTFGMDcwRUQw RjExRjBBODEwMzQwNEExRUU1MjhFL1dLcU9iMkNiOVZnVUEyMG1vU3BlS3lVVmlU by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV0txT2IyQ2I5VmdVQTIwbW9TcGVLeVVWaVRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJCMi9GMDkxRjA3MEVEMEYxMUYwQTgxMDM0MDRBMUVFNTI4RS9EMjNGQzU0NjAx MTExMUYxQjM1OThFNjc0NDZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBALObUgwDQYJKoZIhvcNAQELBQADggEBAENvs3lS576qbyoGaHiuZn3t PErMpiNyci6CSyI19yobbUwrTucSRnfbrqGbnsfwpvsGhQHwm7I+RBzk+1j3okKu HWSxYyJnUewS0pp3TwVgJUqlxewN4oJ7iZ9mPv6zUoVZMBdYHMDOxUDMZ03ICbGi 8KiPBCW+vR5m9CgrdcFvo80Mdo3hT2246dSQMpevWC60MNg/lSe0S5nezf7y0UMT L9fG9VMdEnp6xn60YtibrIYlEmS1+8aJKCKvfPrk+FXhU1IeJNa4yt1McD9pqQqZ JYpHXHoIZruBT/dbOQo4exkwQohpQOUsWqdHaRY+fivHBelKeJCSk4nfwJNMk1Q= -----END CERTIFICATE-----Generated at Mon Mar 2 10:09:12 2026 by rpki-client