$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa File: 16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa (raw, json) Hash identifier: EV1+3PWec4LKe4Iury1bldFHU/9iuFWyT9hGkWhtClk= Subject key identifier: B9:D6:87:A7:43:82:02:4C:E1:26:C4:82:76:BC:B0:7F:93:3C:73:F6 Certificate issuer: /CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Certificate serial: 0269 Authority key identifier: C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa Signing time: Sun 01 Mar 2026 03:22:14 +0000 ROA not before: Sun 01 Mar 2026 03:22:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9898 IP address blocks: 202.36.16.0/21 maxlen: 24 202.36.24.0/22 maxlen: 24 2400:d0e0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 617 (0x269) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154EC0, serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Validity Not Before: Mar 1 03:22:14 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3b0e6-c276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:85:95:2d:de:b7:ee:6a:d6:a9:ed:73:25:73: 7d:22:54:8c:c3:3f:85:03:8c:2d:5c:bb:76:04:d6: 8a:0d:9f:46:86:27:9e:5a:4c:a2:69:22:fa:e5:97: 9d:21:88:13:86:d9:b0:59:81:af:20:2f:12:70:d2: c3:cf:90:70:39:9b:0e:d2:a3:5d:81:34:d7:a4:12: f7:5d:74:1d:57:72:a5:dd:59:4d:52:91:52:2d:d4: 53:06:91:14:c0:cb:31:9d:0a:77:99:36:e4:46:8a: 1c:9d:e0:2e:cc:88:17:7e:b0:7b:e6:ae:4e:40:a7: c0:d7:d6:d0:88:02:72:0c:b9:2b:ac:d9:49:bd:cf: 80:47:25:0f:9f:7e:82:37:c6:59:39:55:e5:a9:91: 31:c1:40:00:73:e9:6e:e4:be:be:5f:10:9d:a7:23: 63:4d:07:c3:bc:ba:4a:2b:ee:3d:50:3c:54:43:c7: dd:f1:f8:75:98:e4:be:f1:b7:49:ae:5a:c6:75:33: c8:90:48:8d:ea:34:a3:f3:2b:fa:2f:ad:da:65:c7: 54:cd:18:f7:71:b4:e0:a7:ec:f9:bc:ae:90:65:a5: 42:42:ef:06:f2:0f:4c:54:39:a7:8d:96:15:22:20: 79:5e:ed:e5:92:c3:ab:c6:c4:55:29:d7:a6:68:43: ab:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D6:87:A7:43:82:02:4C:E1:26:C4:82:76:BC:B0:7F:93:3C:73:F6 X509v3 Authority Key Identifier: keyid:C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.36.16.0-202.36.27.255 IPv6: 2400:d0e0::/32 Signature Algorithm: sha256WithRSAEncryption 8e:fc:f7:9e:9a:7b:c0:db:d3:72:9a:7a:3c:f5:dd:7e:0f:c8: 6f:60:87:9a:54:ff:15:c5:7f:64:1c:91:21:fe:7d:36:15:d0: a6:23:c6:21:9c:17:9a:a0:0e:f0:a2:80:15:5b:1c:25:6d:4d: fc:6a:1f:40:dd:18:72:4f:cd:41:d4:e9:32:db:c7:ab:2a:f1: f3:b1:e2:cb:f4:39:21:d1:08:7d:cf:7b:db:13:46:69:e3:50: d0:80:22:71:32:bf:f3:d5:60:a8:32:69:2b:48:7e:ba:99:3b: 9b:07:39:1a:98:76:ae:33:8d:c0:fc:1e:f6:d5:d5:c8:5e:2f: 1a:c9:9f:b9:5a:fe:a4:ba:1c:5f:d9:61:83:16:43:fb:60:ca: 25:fe:19:5b:7c:f6:4c:04:12:0d:e5:73:fa:36:98:4c:04:df: e6:f5:85:74:7b:fc:a1:b7:8e:fe:83:e3:33:99:d7:7a:0d:72: 6d:74:54:62:72:b5:ff:cd:96:e2:bb:cb:c1:2c:36:da:94:35: f6:b3:cf:47:30:d8:57:23:b8:74:57:84:2a:a3:59:4c:80:50: a5:29:63:ef:60:d5:bf:f5:9c:ed:ec:8e:25:36:5f:e5:88:ce: e5:53:26:cd:23:c2:6a:84:3a:67:7a:21:63:c2:84:d3:85:17: e0:f4:ed:08 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRFQzAxMTAvBgNVBAUTKEM2M0JBMDMxMDdDMTNEMTg5Qzc5RTBFNzRBOEM3Qjg0 N0E1Qzc0NzEwHhcNMjYwMzAxMDMyMjE0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OWEzYjBlNi1jMjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYWVLd637mrWqe1zJXN9IlSMwz+FA4wtXLt2BNaKDZ9GhieeWkyiaSL65Zed IYgThtmwWYGvIC8ScNLDz5BwOZsO0qNdgTTXpBL3XXQdV3Kl3VlNUpFSLdRTBpEU wMsxnQp3mTbkRoocneAuzIgXfrB75q5OQKfA19bQiAJyDLkrrNlJvc+ARyUPn36C N8ZZOVXlqZExwUAAc+lu5L6+XxCdpyNjTQfDvLpKK+49UDxUQ8fd8fh1mOS+8bdJ rlrGdTPIkEiN6jSj8yv6L63aZcdUzRj3cbTgp+z5vK6QZaVCQu8G8g9MVDmnjZYV IiB5Xu3lksOrxsRVKdemaEOrkQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFLnWh6dD ggJM4SbEgna8sH+TPHP2MB8GA1UdIwQYMBaAFMY7oDEHwT0YnHng50qMe4R6XHRx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEVDMC9EQUU2NzQwQzdG M0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBSaWNlZURuU294N2hIcGNk SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqdWdNUWZCUFJpY2VlRG5Tb3g3aEhwY2RIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTRFQzAvREFFNjc0MEM3RjNCMTFFREE3QTNFQzY4QzRGOUFFMDIvMTZERkMyNTQ4 RDZDMTFFREJCMUIxQzRGQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAU BAIAATAOMAwDBATKJBADBALKJBgwDQQCAAIwBwMFACQA0OAwDQYJKoZIhvcNAQEL BQADggEBAI78956ae8Db03Kaejz13X4PyG9gh5pU/xXFf2QckSH+fTYV0KYjxiGc F5qgDvCigBVbHCVtTfxqH0DdGHJPzUHU6TLbx6sq8fOx4sv0OSHRCH3Pe9sTRmnj UNCAInEyv/PVYKgyaStIfrqZO5sHORqYdq4zjcD8HvbV1cheLxrJn7la/qS6HF/Z YYMWQ/tgyiX+GVt89kwEEg3lc/o2mEwE3+b1hXR7/KG3jv6D4zOZ13oNcm10VGJy tf/NluK7y8EsNtqUNfazz0cw2FcjuHRXhCqjWUyAUKUpY+9g1b/1nO3sjiU2X+WI zuVTJs0jwmqEOmd6IWPChNOFF+D07Qg= -----END CERTIFICATE-----Generated at Mon Mar 2 02:01:00 2026 by rpki-client