$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/1361FD26EC2011EA8DFD251FC4F9AE02.roa File: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (raw, json) Hash identifier: PS301Jk6Y0cHef12GbxlhtyzdISxudlooBdL/pYkI1M= Subject key identifier: 4A:82:A1:59:25:FB:48:EB:A1:DD:4E:5A:05:3D:FC:42:A2:17:6B:6D Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 08C9 Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/1361FD26EC2011EA8DFD251FC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:43:09 +0000 ROA not before: Fri 04 Apr 2025 21:34:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55439 IP address blocks: 203.119.85.0/24 maxlen: 24 2001:dd8:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2249 (0x8c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Apr 4 21:34:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a45e8d-8f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:96:69:0c:f0:a3:42:cc:fc:0c:6b:72:de: 4b:ab:dc:44:83:d6:f2:b9:dd:54:26:5f:a1:81:70: 02:b4:e7:53:4d:e9:8d:a0:b5:9a:b0:de:79:67:e7: a9:0e:b2:94:8a:92:06:1d:4a:e2:10:30:50:e4:4f: c9:cc:c6:12:7e:9d:f1:a8:00:2f:e6:78:27:f0:99: e6:38:e1:03:6e:dc:ee:5d:ce:0e:da:fb:ce:3c:6f: 8c:10:5a:95:f0:e6:85:c7:e9:de:4e:f2:c9:65:f2: 5d:f7:7a:8e:3a:ac:7f:07:2a:63:03:9f:98:7e:24: 27:7d:55:97:db:83:27:20:9e:32:85:ef:dc:c6:9d: 5b:b0:fd:c7:b3:e9:8c:9e:18:9b:5d:77:70:97:ef: fd:c2:36:be:7f:5d:0c:97:82:e4:87:69:30:82:8d: c4:1b:02:c3:b3:20:3d:6d:20:50:e4:9e:ff:80:85: e8:ae:f9:bd:7d:27:c7:de:84:65:7b:70:da:2e:a3: d8:e3:43:94:f7:18:03:ce:52:d0:dc:77:29:80:9c: 1b:43:94:17:ac:ea:3d:f3:67:e5:a6:be:9c:73:98: 94:77:41:dd:f2:48:89:b4:ac:38:81:a8:4d:32:0b: 9c:48:85:9f:8b:d3:e9:70:0f:d3:58:29:b8:9d:9b: a5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:82:A1:59:25:FB:48:EB:A1:DD:4E:5A:05:3D:FC:42:A2:17:6B:6D X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/1361FD26EC2011EA8DFD251FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.119.85.0/24 IPv6: 2001:dd8:5::/48 Signature Algorithm: sha256WithRSAEncryption 11:ae:21:f5:08:80:b8:fc:7f:3d:ad:b1:15:91:2b:f1:43:cc: ed:1e:a0:ad:00:ad:4f:7f:93:97:15:78:1f:95:e4:0e:3b:9d: c5:0e:17:15:09:bc:86:71:be:69:01:12:e3:f8:ab:46:c0:a8: 21:cb:ed:e9:59:ba:01:98:3d:7b:cc:05:56:ad:0a:37:4a:f8: 0c:dc:d6:c4:f7:d0:b4:be:d1:76:ad:57:b3:2d:19:03:f1:f3: fd:a2:bf:8c:0a:f4:87:d8:98:43:ef:ed:13:49:89:cc:80:2d: 85:92:06:97:35:2c:1e:95:c9:76:b6:b4:f9:f7:91:1c:4f:1e: c8:c3:92:6b:c8:d4:2c:50:d7:9b:3d:14:2d:28:27:c0:39:ab: eb:74:0a:ce:1c:12:62:b5:dc:0c:38:f7:4f:85:7d:b7:5b:fc: 25:11:cc:e6:02:39:e3:d8:9e:5a:45:ea:bf:61:be:51:f8:bf: 97:98:d9:35:f4:30:ed:d1:62:a8:41:7a:77:93:56:7c:6b:89: 73:a4:95:73:7c:e4:c4:c0:65:b2:90:55:36:36:3b:4a:c4:1f: bd:df:22:e2:dc:0f:5d:d8:a7:dd:ae:8b:44:67:6d:59:95:2a: 24:ad:f4:12:72:2a:6c:64:c7:de:2e:fe:4b:5c:52:cd:b3:6f: 5c:5f:25:0a -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjUwNDA0MjEzNDM2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWU4ZC04ZjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfmWaQzwo0LM/Axrct5Lq9xEg9byud1UJl+hgXACtOdTTemNoLWasN55Z+ep DrKUipIGHUriEDBQ5E/JzMYSfp3xqAAv5ngn8JnmOOEDbtzuXc4O2vvOPG+MEFqV 8OaFx+neTvLJZfJd93qOOqx/BypjA5+YfiQnfVWX24MnIJ4yhe/cxp1bsP3Hs+mM nhibXXdwl+/9wja+f10Ml4Lkh2kwgo3EGwLDsyA9bSBQ5J7/gIXorvm9fSfH3oRl e3DaLqPY40OU9xgDzlLQ3HcpgJwbQ5QXrOo982flpr6cc5iUd0Hd8kiJtKw4gahN MgucSIWfi9PpcA/TWCm4nZulMwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFEqCoVkl +0jrod1OWgU9/EKiF2ttMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUI1MzYvRTRDODg5NzJFQjc0MTFFQUJBMEE5RTQ4QzRGOUFFMDIvMTM2MUZEMjZF QzIwMTFFQThERkQyNTFGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAy3dVMA8EAgACMAkDBwAgAQ3YAAUwDQYJKoZIhvcNAQELBQADggEB ABGuIfUIgLj8fz2tsRWRK/FDzO0eoK0ArU9/k5cVeB+V5A47ncUOFxUJvIZxvmkB EuP4q0bAqCHL7elZugGYPXvMBVatCjdK+Azc1sT30LS+0XatV7MtGQPx8/2iv4wK 9IfYmEPv7RNJicyALYWSBpc1LB6VyXa2tPn3kRxPHsjDkmvI1CxQ15s9FC0oJ8A5 q+t0Cs4cEmK13Aw490+Ffbdb/CURzOYCOePYnlpF6r9hvlH4v5eY2TX0MO3RYqhB eneTVnxriXOklXN85MTAZbKQVTY2O0rEH73fIuLcD13Yp92ui0RnbVmVKiSt9BJy Kmxkx94u/ktcUs2zb1xfJQo= -----END CERTIFICATE-----Generated at Mon Mar 2 20:15:23 2026 by rpki-client