$ rpki-client -vvf rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/4AF78A4AFEC611EF86B4765BC4F9AE02.roa File: 4AF78A4AFEC611EF86B4765BC4F9AE02.roa (raw, json) Hash identifier: H75vp8KnVCyEkBU2ciSVAYWnVqr6J6YZvmHhlQG4SNQ= Subject key identifier: EB:A4:D2:6E:A8:76:B1:07:3E:5E:7F:4E:E6:6E:51:EC:86:23:13:D8 Certificate issuer: /CN=A9156971/serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC Certificate serial: 3520 Authority key identifier: 29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/4AF78A4AFEC611EF86B4765BC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:23:13 +0000 ROA not before: Thu 12 Jun 2025 15:20:46 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 55580 IP address blocks: 203.30.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13600 (0x3520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156971, serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC Validity Not Before: Jun 12 15:20:46 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a421a1-1650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6d:11:b6:d7:8e:bf:15:7a:89:71:81:31:cc: e2:c1:d6:12:15:01:1e:ec:89:fc:0f:44:98:95:68: ec:5d:94:5c:e9:53:f4:2a:c1:04:5d:ed:4d:08:96: 7f:3b:98:dc:8d:9c:e8:38:70:a0:16:02:b2:1a:46: 7e:41:09:71:6f:b7:fb:c6:35:04:77:1a:d2:32:3a: 26:d8:22:9e:b4:53:6d:c7:6e:2f:2f:62:64:14:1f: ec:a6:4b:3c:09:67:0f:81:ab:f9:5a:b9:1a:04:36: 72:9e:ec:6b:50:ab:2d:1d:09:46:60:59:f2:bb:c2: 53:18:10:e1:40:1c:ab:f0:d1:7c:8a:c7:16:8f:29: a3:99:1d:d1:98:e1:46:e6:f9:94:9d:d0:6e:f7:bc: 1c:28:1b:92:bb:90:1f:8f:e5:69:62:3e:d2:c9:da: 56:81:02:cd:a7:de:7d:a2:89:7e:2f:d0:08:8a:25: ba:12:85:ef:0f:29:b6:0d:37:ce:30:55:62:58:a4: c6:cf:1f:6b:cb:74:dd:4c:49:aa:5a:e9:a6:47:74: b8:9e:0f:c5:e4:84:89:ff:e9:77:ce:a8:63:41:69: a0:3a:98:37:9a:68:1e:98:0e:d8:b3:b5:75:e4:66: 70:aa:a8:37:e6:ff:d0:1b:93:33:0e:60:53:60:91: 81:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A4:D2:6E:A8:76:B1:07:3E:5E:7F:4E:E6:6E:51:EC:86:23:13:D8 X509v3 Authority Key Identifier: keyid:29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/4AF78A4AFEC611EF86B4765BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.30.245.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:97:26:b0:79:ae:52:6c:c6:ad:2d:4e:07:ff:db:94:c4:8e: 62:a8:f7:09:2f:f8:df:2a:52:24:82:d4:45:19:e1:1d:c1:0c: 92:1f:e6:63:86:eb:86:07:7e:1e:2b:19:cc:60:13:a0:59:a9: 4c:e2:d6:5b:64:68:72:05:e9:82:b8:68:6c:d0:21:18:89:b5: 4c:19:99:6d:0a:d9:d8:3e:ca:24:5c:de:47:c9:04:4d:89:87: a0:7b:f1:18:0c:ca:b5:eb:c7:61:1e:ec:d0:db:92:b4:7c:64: 59:9e:7c:b9:f2:46:25:22:ec:6b:30:53:60:8b:ff:be:78:55: 27:f9:dc:3e:38:b4:ae:74:32:39:50:7c:9f:83:85:39:ad:2e: 57:55:e1:f1:8d:14:08:7a:aa:91:40:e2:e1:71:92:2d:00:ef: af:40:75:22:bd:31:34:6d:67:bd:c0:05:72:2a:d4:28:c0:95: 00:7f:dd:71:73:aa:94:ff:5d:b1:78:7d:d9:f5:63:68:63:66: b2:aa:4a:1a:12:8d:01:63:52:da:dd:97:63:4b:75:8e:f9:b3: 3a:b9:c4:57:0f:4b:38:65:12:69:0d:7b:e1:52:dd:ee:2e:1d: 5e:09:7c:1f:a6:6f:c4:0e:8a:9e:09:8e:bf:1d:35:df:bd:9b: e8:1d:9f:60 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY5NzExMTAvBgNVBAUTKDI5MDVGQjMyMTJCRDYxNjQ2RkI3QUY2MzNFQTFBMjU3 QkMzQTNERUMwHhcNMjUwNjEyMTUyMDQ2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjFhMS0xNjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqW0RtteOvxV6iXGBMcziwdYSFQEe7In8D0SYlWjsXZRc6VP0KsEEXe1NCJZ/ O5jcjZzoOHCgFgKyGkZ+QQlxb7f7xjUEdxrSMjom2CKetFNtx24vL2JkFB/spks8 CWcPgav5WrkaBDZynuxrUKstHQlGYFnyu8JTGBDhQByr8NF8iscWjymjmR3RmOFG 5vmUndBu97wcKBuSu5Afj+VpYj7SydpWgQLNp959ool+L9AIiiW6EoXvDym2DTfO MFViWKTGzx9ry3TdTEmqWummR3S4ng/F5ISJ/+l3zqhjQWmgOpg3mmgemA7Ys7V1 5GZwqqg35v/QG5MzDmBTYJGBjwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOuk0m6o drEHPl5/TuZuUeyGIxPYMB8GA1UdIwQYMBaAFCkF+zISvWFkb7evYz6hole8Oj3s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njk3MS80OEMyMjE4NjFE OTIxMUUyQURCMzBCRjUwOEIwMkNEMi9LUVg3TWhLOVlXUnZ0NjlqUHFHaVY3dzZQ ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tRWDdNaEs5WVdSdnQ2OWpQcUdpVjd3NlBldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTY5NzEvNDhDMjIxODYxRDkyMTFFMkFEQjMwQkY1MDhCMDJDRDIvNEFGNzhBNEFG RUM2MTFFRjg2QjQ3NjVCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyx71MA0GCSqGSIb3DQEBCwUAA4IBAQBrlyawea5SbMatLU4H/9uU xI5iqPcJL/jfKlIkgtRFGeEdwQySH+ZjhuuGB34eKxnMYBOgWalM4tZbZGhyBemC uGhs0CEYibVMGZltCtnYPsokXN5HyQRNiYege/EYDMq168dhHuzQ25K0fGRZnny5 8kYlIuxrMFNgi/++eFUn+dw+OLSudDI5UHyfg4U5rS5XVeHxjRQIeqqRQOLhcZIt AO+vQHUivTE0bWe9wAVyKtQowJUAf91xc6qU/12xeH3Z9WNoY2ayqkoaEo0BY1La 3ZdjS3WO+bM6ucRXD0s4ZRJpDXvhUt3uLh1eCXwfpm/EDoqeCY6/HTXfvZvoHZ9g -----END CERTIFICATE-----Generated at Mon Mar 2 08:02:23 2026 by rpki-client