$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/0EF9BE4E276F11EEB328204AC4F9AE02.roa File: 0EF9BE4E276F11EEB328204AC4F9AE02.roa (raw, json) Hash identifier: rJLxdr4XZ4oqpkH7S/LP6Q9L0HTP8eSINSv/SKNt+vc= Subject key identifier: 36:6B:45:C0:1C:93:28:FC:F6:90:FA:FE:18:28:9F:9E:03:C7:61:27 Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Certificate serial: 0D53 Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/0EF9BE4E276F11EEB328204AC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:56:48 +0000 ROA not before: Tue 10 Feb 2026 18:15:36 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 394881 IP address blocks: 45.119.4.0/24 maxlen: 24 103.133.94.0/24 maxlen: 24 203.23.176.0/24 maxlen: 24 203.23.177.0/24 maxlen: 24 203.34.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3411 (0xd53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EB5, serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Validity Not Before: Feb 10 18:15:36 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a47de0-f2fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4d:51:93:98:34:0d:74:24:32:ca:50:76:a4: 51:f2:5f:1e:6a:ef:f9:80:30:f7:d3:83:39:00:d7: b8:da:83:89:c2:99:0b:11:df:f6:72:0d:6f:f8:1b: ab:61:40:60:d0:31:4a:e2:a3:45:72:1b:70:a8:ab: d6:0d:51:f2:22:0b:4e:94:87:6b:2c:67:66:1b:ef: 2f:4c:5b:a6:de:ae:86:3c:10:65:1c:c1:cc:a8:a5: 74:6c:be:f5:82:1b:03:28:47:92:1d:4d:ff:1c:87: ce:de:6d:ed:0b:4e:ad:83:64:2f:3b:72:26:21:87: 94:65:08:c2:eb:86:16:72:bb:a0:01:e9:77:9d:02: ef:50:da:fc:83:ad:64:59:61:9f:1f:09:8e:2f:1f: 40:d9:17:41:04:68:5f:3e:5f:dc:d7:3c:37:c5:f3: c9:45:82:b0:5b:e8:52:8e:60:0f:b7:c1:df:1d:7c: 65:18:ae:d4:ed:67:32:9e:b9:cb:ee:15:b2:e6:48: 17:4b:ed:f0:d5:5a:ef:2f:7f:9a:cc:04:e4:94:c3: 14:af:a7:e5:57:a0:3b:99:66:09:33:10:66:97:d6: 9a:44:95:1b:4a:5d:fc:1b:19:92:61:ec:e1:98:1b: ba:a6:cb:7b:92:7f:2e:74:a6:a1:8e:bc:1c:3c:dd: 50:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6B:45:C0:1C:93:28:FC:F6:90:FA:FE:18:28:9F:9E:03:C7:61:27 X509v3 Authority Key Identifier: keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/0EF9BE4E276F11EEB328204AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.119.4.0/24 103.133.94.0/24 203.23.176.0/23 203.34.110.0/24 Signature Algorithm: sha256WithRSAEncryption 26:5c:7f:3a:0c:28:5c:16:4f:66:eb:3a:f8:64:0f:d8:44:f9: a1:72:de:6a:ee:5c:c9:f7:d8:13:cf:ec:22:24:4a:5f:bc:c8: 3d:90:a1:f1:2b:04:71:cb:46:36:37:87:11:c3:c7:c7:60:cc: 6c:a1:18:2e:ed:3c:47:1c:d1:ac:73:95:69:8e:0f:04:0a:d9: a3:21:c5:6b:bc:66:85:60:31:2b:a3:62:51:8c:c0:ce:9a:03: 99:77:05:76:f0:6c:ce:2f:59:1e:fd:ef:93:cb:43:db:19:07: de:a8:5e:5e:3a:0c:e2:ec:fe:7b:b9:c1:73:ec:0b:ed:d6:88: 5b:f3:ac:cd:22:21:2f:51:d9:24:90:ee:6a:fb:60:7d:bd:6b: dd:ef:a9:e6:85:21:d3:70:e0:4d:2d:a8:e7:d3:d7:db:a1:4b: 05:03:cf:f5:66:b4:28:d6:78:ba:cc:e2:f2:f8:b9:1c:f4:ee: 5b:59:ae:8c:f2:64:4d:07:a6:16:53:62:6d:6b:33:4e:77:00: 03:2c:f1:da:51:47:41:8f:e2:20:34:ed:09:f8:bc:aa:fd:0c: 88:b2:01:6d:61:62:d5:a2:46:a3:12:5a:0e:0a:19:0b:50:50: 6f:21:f7:ac:e9:39:c8:6c:15:c8:d3:a4:dd:bc:26:da:57:4f: 18:ac:6a:61 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICDVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My MEVEMUE4QzQwHhcNMjYwMjEwMTgxNTM2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2RlMC1mMmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvU1Rk5g0DXQkMspQdqRR8l8eau/5gDD304M5ANe42oOJwpkLEd/2cg1v+Bur YUBg0DFK4qNFchtwqKvWDVHyIgtOlIdrLGdmG+8vTFum3q6GPBBlHMHMqKV0bL71 ghsDKEeSHU3/HIfO3m3tC06tg2QvO3ImIYeUZQjC64YWcrugAel3nQLvUNr8g61k WWGfHwmOLx9A2RdBBGhfPl/c1zw3xfPJRYKwW+hSjmAPt8HfHXxlGK7U7WcynrnL 7hWy5kgXS+3w1VrvL3+azATklMMUr6flV6A7mWYJMxBml9aaRJUbSl38GxmSYezh mBu6pst7kn8udKahjrwcPN1Q9QIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFDZrRcAc kyj89pD6/hgon54Dx2EnMB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2 MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRFQjUvQUZFQTI5QzIwNjE5MTFFQTg1NEEzNTE2QzRGOUFFMDIvMEVGOUJFNEUy NzZGMTFFRUIzMjgyMDRBQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQALXcEAwQAZ4VeAwQByxewAwQAyyJuMA0GCSqGSIb3DQEBCwUAA4IB AQAmXH86DChcFk9m6zr4ZA/YRPmhct5q7lzJ99gTz+wiJEpfvMg9kKHxKwRxy0Y2 N4cRw8fHYMxsoRgu7TxHHNGsc5Vpjg8ECtmjIcVrvGaFYDEro2JRjMDOmgOZdwV2 8GzOL1ke/e+Ty0PbGQfeqF5eOgzi7P57ucFz7Avt1ohb86zNIiEvUdkkkO5q+2B9 vWvd76nmhSHTcOBNLajn09fboUsFA8/1ZrQo1ni6zOLy+Lkc9O5bWa6M8mRNB6YW U2JtazNOdwADLPHaUUdBj+IgNO0J+Lyq/QyIsgFtYWLVokajEloOChkLUFBvIfes 6TnIbBXI06TdvCbaV08YrGph -----END CERTIFICATE-----Generated at Mon Mar 2 08:38:25 2026 by rpki-client