$ rpki-client -vvf rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/7D88011ACF4011F08FF1FE52C4F9AE02.roa File: 7D88011ACF4011F08FF1FE52C4F9AE02.roa (raw, json) Hash identifier: oxGiq3YdbqPifkwMv61Ejkh1Wg1APW9Boq4rI1e6moA= Subject key identifier: E0:45:8C:67:9F:77:D9:D3:3F:1F:52:3A:36:9F:15:A5:14:A4:53:FB Certificate issuer: /CN=A915AC36/serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A Certificate serial: 36 Authority key identifier: 50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/7D88011ACF4011F08FF1FE52C4F9AE02.roa Signing time: Sun 01 Mar 2026 05:59:47 +0000 ROA not before: Tue 02 Dec 2025 05:33:54 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 29802 IP address blocks: 114.129.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AC36, serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A Validity Not Before: Dec 2 05:33:54 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a3d5d3-afa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ce:a8:4e:ea:61:33:f9:a6:ad:24:8d:99:c8: ac:40:a6:da:80:0e:cd:df:9d:25:12:18:74:2b:91: a3:51:4f:3a:d1:72:e7:fe:04:c0:2a:5d:ee:54:a8: 00:03:6e:a6:68:5c:e0:90:ce:1b:24:81:8e:64:17: ec:73:e1:a9:b6:8b:cc:d0:4e:22:9a:c5:f0:5b:48: 2e:f9:13:f6:26:20:33:a7:84:18:d2:04:b1:76:14: c6:2b:45:41:a6:41:61:01:23:68:ae:9b:52:c5:a8: 87:3b:4c:18:bc:21:c9:e4:53:9c:5f:21:6e:ca:57: 09:8c:10:de:a1:c9:6e:90:bb:25:cd:43:75:d2:21: b8:a6:1a:db:cb:b7:f7:28:51:be:69:82:7c:4b:c2: ad:48:ec:dd:b3:00:19:a2:79:3a:f7:00:d9:2f:c0: ed:4c:5a:98:ce:ef:3f:4f:7f:a4:8c:75:89:cd:b5: f7:c2:3f:f0:d1:27:a1:49:ed:1c:72:15:5b:82:15: f9:c5:1b:e1:3c:e0:91:d4:86:74:b9:c8:0d:01:9a: a1:c2:e1:06:f6:0d:62:bb:71:0d:ad:42:82:ca:9d: 52:6b:11:34:ca:b7:21:1f:e2:f1:4c:45:81:84:96: 06:65:64:64:26:c0:ae:d7:6f:04:2e:62:d9:75:dd: a1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:45:8C:67:9F:77:D9:D3:3F:1F:52:3A:36:9F:15:A5:14:A4:53:FB X509v3 Authority Key Identifier: keyid:50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/7D88011ACF4011F08FF1FE52C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 114.129.10.0/23 Signature Algorithm: sha256WithRSAEncryption 75:8a:9d:eb:58:92:8d:32:11:97:96:d9:8b:ac:03:97:5f:0b: 7f:5b:34:85:08:2d:25:85:98:18:04:52:93:0e:b5:1a:b4:c4: 0a:f2:2c:f2:46:00:cd:0b:be:b6:4e:91:c9:5c:2b:ad:cb:dd: d8:c6:44:09:39:76:e9:35:a7:fe:ec:39:4a:58:fe:6f:cc:b9: ec:3c:45:39:4f:a4:70:ee:19:1a:63:6c:d0:ae:05:99:6d:80: b0:47:51:fa:a1:ce:65:e3:4e:c3:8f:38:f2:84:d0:1b:e7:ad: e3:02:5a:fe:f5:3e:88:e6:22:da:59:28:70:11:97:15:3a:5c: 99:6e:83:1c:57:84:53:39:3f:db:f6:61:81:d3:14:e4:5a:73: 52:a3:d1:83:5b:2e:d1:30:16:89:c0:de:30:5d:15:cf:da:be: 89:96:8c:8b:b3:8d:18:4b:d2:2e:a3:46:bd:3c:31:c9:1d:2f: a0:60:1a:54:71:37:b4:52:63:de:0c:9f:6c:11:33:86:d0:34: 78:bd:1a:0a:cf:08:0f:6a:c3:ad:79:b6:da:f7:88:b7:ed:21: 16:11:a1:1e:6f:94:18:0d:66:aa:6b:75:e8:fd:a2:dc:01:55: af:c8:76:00:6b:37:cd:5f:32:87:64:4b:d7:59:24:97:de:f9: e2:64:3a:f6 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QUMzNjExMC8GA1UEBRMoNTBBRjFBQTI5MzAyMkY3NkNEMUY1MUJBMERENThBNUI4 OTY2OTE1QTAeFw0yNTEyMDIwNTMzNTRaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNWQzLWFmYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/zqhO6mEz+aatJI2ZyKxAptqADs3fnSUSGHQrkaNRTzrRcuf+BMAqXe5UqAAD bqZoXOCQzhskgY5kF+xz4am2i8zQTiKaxfBbSC75E/YmIDOnhBjSBLF2FMYrRUGm QWEBI2ium1LFqIc7TBi8IcnkU5xfIW7KVwmMEN6hyW6QuyXNQ3XSIbimGtvLt/co Ub5pgnxLwq1I7N2zABmieTr3ANkvwO1MWpjO7z9Pf6SMdYnNtffCP/DRJ6FJ7Rxy FVuCFfnFG+E84JHUhnS5yA0BmqHC4Qb2DWK7cQ2tQoLKnVJrETTKtyEf4vFMRYGE lgZlZGQmwK7XbwQuYtl13aE7AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU4EWMZ593 2dM/H1I6Np8VpRSkU/swHwYDVR0jBBgwFoAUUK8aopMCL3bNH1G6DdWKW4lmkVow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBQzM2L0VEMEM4MUEwQ0Mx QjExRjA5QURBOEYyQ0M0RjlBRTAyL1VLOGFvcE1DTDNiTkgxRzZEZFdLVzRsbWtW by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVUs4YW9wTUNMM2JOSDFHNkRkV0tXNGxta1ZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUMzNi9FRDBDODFBMENDMUIxMUYwOUFEQThGMkNDNEY5QUUwMi83RDg4MDExQUNG NDAxMUYwOEZGMUZFNTJDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFygQowDQYJKoZIhvcNAQELBQADggEBAHWKnetYko0yEZeW2YusA5df C39bNIUILSWFmBgEUpMOtRq0xAryLPJGAM0LvrZOkclcK63L3djGRAk5duk1p/7s OUpY/m/Muew8RTlPpHDuGRpjbNCuBZltgLBHUfqhzmXjTsOPOPKE0BvnreMCWv71 PojmItpZKHARlxU6XJlugxxXhFM5P9v2YYHTFORac1Kj0YNbLtEwFonA3jBdFc/a vomWjIuzjRhL0i6jRr08MckdL6BgGlRxN7RSY94Mn2wRM4bQNHi9GgrPCA9qw615 ttr3iLftIRYRoR5vlBgNZqprdej9otwBVa/IdgBrN81fModkS9dZJJfe+eJkOvY= -----END CERTIFICATE-----Generated at Sun Mar 1 23:22:25 2026 by rpki-client