$ rpki-client -vvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/35D40EDE9F8511ECBE806D30C4F9AE02.roa File: 35D40EDE9F8511ECBE806D30C4F9AE02.roa (raw, json) Hash identifier: 1vekZfH5YPC346cj2UThTBYzXSPYL/qmo6xjKnBtyW0= Subject key identifier: B8:1C:5A:BB:4F:63:B1:27:80:85:2D:EC:52:16:A0:FB:A3:5B:CB:A7 Certificate issuer: /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Certificate serial: 1D66 Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/35D40EDE9F8511ECBE806D30C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:14:23 +0000 ROA not before: Mon 30 Jun 2025 16:26:30 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135409 IP address blocks: 202.134.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7526 (0x1d66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164390, serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Validity Not Before: Jun 30 16:26:30 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a42d9f-0b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d8:b7:e9:e6:a0:50:26:36:ce:89:7a:b1:f3: c7:50:e1:20:6c:44:b5:f9:6c:2d:39:ab:66:1d:b2: 4a:64:5c:f2:d1:05:97:4f:82:d4:ad:ec:15:27:27: 1f:e9:cc:da:db:79:ab:48:0b:18:ba:f6:67:bb:f9: bf:19:b2:dd:55:e6:0d:4f:4c:0f:7d:74:3a:df:fa: 3f:18:6c:20:43:8d:35:9a:6a:77:cf:dc:ad:de:2c: 5f:fc:b7:96:70:e2:eb:76:c8:d0:66:54:42:fc:ce: f0:5c:bd:a9:0f:c7:8a:84:71:48:12:a1:af:8b:0e: 41:78:96:18:1a:9e:5e:60:36:e3:f0:08:c9:bd:00: 10:aa:d4:2c:e7:84:6d:81:a1:a1:f2:d3:3b:e9:7c: b3:47:ee:da:c2:4b:31:24:a0:4b:d4:9d:d8:9a:2d: 1e:21:1a:63:22:d1:f0:98:0c:65:5a:fd:c5:2c:21: 42:3d:0d:69:d7:cf:62:9d:90:ce:c5:1d:c2:bc:8c: 91:8f:d6:36:bd:87:b0:c9:2f:4c:4f:b0:52:5f:33: 35:bf:c7:29:e5:76:73:8a:86:5d:87:ec:ef:d3:7c: 26:6b:0b:f8:c4:16:47:34:0f:98:9f:0b:0c:83:1c: 46:0b:ce:69:ae:e3:33:06:0f:61:11:6d:ab:6a:94: f4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1C:5A:BB:4F:63:B1:27:80:85:2D:EC:52:16:A0:FB:A3:5B:CB:A7 X509v3 Authority Key Identifier: keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/35D40EDE9F8511ECBE806D30C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.134.29.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:98:b3:6d:30:15:84:19:70:2c:d7:8b:68:45:67:b1:0c:8d: ff:6b:4e:98:68:a2:63:8b:45:f5:05:6d:2a:e5:5c:05:36:2e: 12:2f:b0:84:6e:d4:49:ae:c5:9a:b8:03:e9:b8:8d:e1:3e:43: ad:48:55:ec:54:8a:5f:9e:e9:2e:c6:82:13:6d:87:a6:96:59: bc:6a:ec:88:4e:96:c3:7e:a7:ea:e9:72:4a:1d:41:ad:83:b0: 72:a4:44:f4:53:b6:7e:f4:8a:57:2d:2e:f6:c8:12:bb:12:38: e6:33:f8:c1:fb:dd:19:2a:8f:0b:f5:49:77:ba:a6:86:f5:48: 10:9f:84:58:cd:c4:42:b0:f0:8b:20:46:63:6e:9c:fb:8d:87: 2d:ae:28:37:60:a3:2b:2e:ca:5f:92:69:2e:e3:ec:cb:49:5f: 9e:a1:34:07:72:56:c2:d3:56:80:04:69:09:99:5c:cd:69:dd: d8:7b:f7:ee:97:c1:a6:0c:73:fb:80:55:2c:3d:75:e1:24:64: 2d:34:14:a7:fe:c8:02:21:3e:1b:5f:e8:59:3c:e2:f1:1c:02: 40:2d:17:aa:b8:8a:f5:e6:b7:27:1a:1d:47:20:9f:3a:99:4c: 37:f8:b2:16:14:9c:cc:f0:09:c3:50:57:8d:cf:f0:03:16:48: 95:32:35:3b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICHWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQzOTAxMTAvBgNVBAUTKEM2NDMzQzQ5RTYzQ0Q5MjAzNUIzMDdFOEY3OTYzNzYw OEZFQURCRjUwHhcNMjUwNjMwMTYyNjMwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmQ5Zi0wYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNi36eagUCY2zol6sfPHUOEgbES1+WwtOatmHbJKZFzy0QWXT4LUrewVJycf 6cza23mrSAsYuvZnu/m/GbLdVeYNT0wPfXQ63/o/GGwgQ401mmp3z9yt3ixf/LeW cOLrdsjQZlRC/M7wXL2pD8eKhHFIEqGviw5BeJYYGp5eYDbj8AjJvQAQqtQs54Rt gaGh8tM76XyzR+7awksxJKBL1J3Ymi0eIRpjItHwmAxlWv3FLCFCPQ1p189inZDO xR3CvIyRj9Y2vYewyS9MT7BSXzM1v8cp5XZzioZdh+zv03wmawv4xBZHNA+YnwsM gxxGC85pruMzBg9hEW2rapT0eQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLgcWrtP Y7EngIUt7FIWoPujW8unMB8GA1UdIwQYMBaAFMZDPEnmPNkgNbMH6PeWN2CP6tv1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDM5MC8wRTkzNTRGQ0RD NUMxMUU2OEU5MTVFMzJDNEY5QUUwMi94a004U2VZODJTQTFzd2ZvOTVZM1lJX3Ey X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hrTThTZVk4MlNBMXN3Zm85NVkzWUlfcTJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjQzOTAvMEU5MzU0RkNEQzVDMTFFNjhFOTE1RTMyQzRGOUFFMDIvMzVENDBFREU5 Rjg1MTFFQ0JFODA2RDMwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyoYdMA0GCSqGSIb3DQEBCwUAA4IBAQA+mLNtMBWEGXAs14toRWex DI3/a06YaKJji0X1BW0q5VwFNi4SL7CEbtRJrsWauAPpuI3hPkOtSFXsVIpfnuku xoITbYemllm8auyITpbDfqfq6XJKHUGtg7BypET0U7Z+9IpXLS72yBK7EjjmM/jB +90ZKo8L9Ul3uqaG9UgQn4RYzcRCsPCLIEZjbpz7jYctrig3YKMrLspfkmku4+zL SV+eoTQHclbC01aABGkJmVzNad3Ye/ful8GmDHP7gFUsPXXhJGQtNBSn/sgCIT4b X+hZPOLxHAJALRequIr15rcnGh1HIJ86mUw3+LIWFJzM8AnDUFeNz/ADFkiVMjU7 -----END CERTIFICATE-----Generated at Mon Mar 2 10:13:42 2026 by rpki-client