$ rpki-client -vvf rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/96540A72CD0E11ED9A9CAE58C4F9AE02.roa File: 96540A72CD0E11ED9A9CAE58C4F9AE02.roa (raw, json) Hash identifier: VUhX4V+uuAXCvJJx8gbFvjg2DTFUtnIh9VNRCqvzwQY= Subject key identifier: C6:34:E3:9A:DD:7A:FC:46:E6:0A:0C:C1:6B:82:7A:9C:AF:B5:74:28 Certificate issuer: /CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A Certificate serial: 022E Authority key identifier: 48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/96540A72CD0E11ED9A9CAE58C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:12:12 +0000 ROA not before: Fri 05 Dec 2025 01:10:30 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 7647 IP address blocks: 203.18.78.0/24 maxlen: 24 203.21.83.0/24 maxlen: 24 203.22.196.0/24 maxlen: 24 203.22.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916899E, serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A Validity Not Before: Dec 5 01:10:30 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a410fc-8189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ee:e8:fa:48:5f:86:ba:f4:ad:8b:6b:de:33: 90:d0:c5:eb:b1:1b:cf:1a:cd:4d:6e:ae:30:af:f3: 39:24:a0:c5:a3:79:b8:de:0f:6d:a8:d9:e1:68:91: c1:da:6a:1d:02:18:f8:eb:9f:3d:11:7a:02:44:3e: fa:4f:5c:11:f1:fd:84:23:3c:0a:d9:b9:da:d1:97: 5e:ae:a4:c3:49:1d:8a:b1:37:36:4d:c0:64:74:2e: 53:5e:0d:c8:8a:a2:02:e1:b3:d3:07:9b:c3:56:e9: 4a:b5:a0:4e:3d:74:af:7e:10:99:e8:40:d8:ac:01: 7f:b7:39:22:bc:b7:7b:35:29:79:9f:22:84:fc:a0: 5c:18:c9:63:53:05:02:83:d9:f6:c3:b9:b6:63:bb: 62:44:a6:ad:ed:8b:77:d9:90:63:5a:20:c2:60:cd: bc:e5:a7:d8:29:24:32:3b:a1:87:2d:3d:02:3b:d8: 7a:7b:0f:5d:06:9e:6f:3a:a8:da:11:a1:60:17:ed: e5:50:02:ee:8a:4c:26:90:7d:16:a5:ee:37:df:78: f9:ec:16:1e:c4:6f:3b:de:7c:3e:ef:1c:b0:e6:b3: 04:3c:ff:70:c3:8b:a9:db:e8:5c:1e:cb:14:d5:07: c0:02:0d:4b:c0:35:fe:69:70:e4:93:01:3a:61:7f: 99:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:34:E3:9A:DD:7A:FC:46:E6:0A:0C:C1:6B:82:7A:9C:AF:B5:74:28 X509v3 Authority Key Identifier: keyid:48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/96540A72CD0E11ED9A9CAE58C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.18.78.0/24 203.21.83.0/24 203.22.196.0/24 203.22.202.0/24 Signature Algorithm: sha256WithRSAEncryption 04:73:13:24:4f:ff:26:90:5c:12:27:15:c2:d9:cb:27:7b:2b: 5c:4d:38:cf:09:4d:ad:93:87:7b:55:3e:0f:76:37:7f:f9:94: 10:a0:b9:0c:3a:1e:f4:d9:fb:d0:80:85:a0:23:84:00:b1:ff: a4:3c:6d:15:bd:57:3d:bc:25:2d:68:fb:00:2a:3f:75:7c:a0: 93:8e:c7:f9:a6:33:ef:23:73:38:ed:b9:19:e4:99:58:5c:19: 52:65:18:99:9a:44:2b:5a:bd:b0:44:07:f3:f4:81:2c:5e:99: 07:bf:47:d3:b1:ea:69:35:74:c6:55:fe:f3:cf:de:0b:11:9f: cb:df:4c:e8:2b:17:38:31:c1:58:3a:0e:5c:d9:ac:43:ca:f2: 11:fd:a4:6c:b9:7a:0b:cc:f0:6b:d9:28:4d:98:52:58:a3:3a: 92:46:6e:36:81:cb:6e:7a:a4:6c:35:66:bd:bc:9c:c2:bd:95: 10:88:22:49:90:4d:9b:d0:00:dc:bd:50:e9:a5:98:4d:00:e5: e1:5c:17:57:3b:45:02:21:18:53:20:e5:9d:ad:45:db:48:2e: 95:6b:ab:ef:3a:b9:fd:14:e6:87:a1:68:de:63:f6:d5:a7:5d: 4e:97:9b:c4:75:e0:4e:45:fc:2d:15:c6:b9:63:29:cc:dc:61: 3b:fd:b0:34 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5OUUxMTAvBgNVBAUTKDQ4N0NCNjMzMTcxQTBEREYzOEFDQkI2QUQxRUQ4QUU2 OTY1NTg2MEEwHhcNMjUxMjA1MDExMDMwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTBmYy04MTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzu7o+khfhrr0rYtr3jOQ0MXrsRvPGs1Nbq4wr/M5JKDFo3m43g9tqNnhaJHB 2modAhj46589EXoCRD76T1wR8f2EIzwK2bna0ZderqTDSR2KsTc2TcBkdC5TXg3I iqIC4bPTB5vDVulKtaBOPXSvfhCZ6EDYrAF/tzkivLd7NSl5nyKE/KBcGMljUwUC g9n2w7m2Y7tiRKat7Yt32ZBjWiDCYM285afYKSQyO6GHLT0CO9h6ew9dBp5vOqja EaFgF+3lUALuikwmkH0Wpe4333j57BYexG873nw+7xyw5rMEPP9ww4up2+hcHssU 1QfAAg1LwDX+aXDkkwE6YX+ZywIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFMY045rd evxG5goMwWuCepyvtXQoMB8GA1UdIwQYMBaAFEh8tjMXGg3fOKy7atHtiuaWVYYK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk5RS82QzEzNTQzNEM5 RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURkODRyTHRxMGUySzVwWlZo Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NIeTJNeGNhRGQ4NHJMdHEwZTJLNXBaVmhnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg5OUUvNkMxMzU0MzRDOUYzMTFFREE1ODQ5MjY5QzRGOUFFMDIvOTY1NDBBNzJD RDBFMTFFRDlBOUNBRTU4QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAyxJOAwQAyxVTAwQAyxbEAwQAyxbKMA0GCSqGSIb3DQEBCwUAA4IB AQAEcxMkT/8mkFwSJxXC2csneytcTTjPCU2tk4d7VT4Pdjd/+ZQQoLkMOh702fvQ gIWgI4QAsf+kPG0VvVc9vCUtaPsAKj91fKCTjsf5pjPvI3M47bkZ5JlYXBlSZRiZ mkQrWr2wRAfz9IEsXpkHv0fTseppNXTGVf7zz94LEZ/L30zoKxc4McFYOg5c2axD yvIR/aRsuXoLzPBr2ShNmFJYozqSRm42gctueqRsNWa9vJzCvZUQiCJJkE2b0ADc vVDppZhNAOXhXBdXO0UCIRhTIOWdrUXbSC6Va6vvOrn9FOaHoWjeY/bVp11Ol5vE deBORfwtFca5YynM3GE7/bA0 -----END CERTIFICATE-----Generated at Mon Mar 2 13:48:29 2026 by rpki-client