$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/3352C1BAECFC11EFA398671BC4F9AE02.roa File: 3352C1BAECFC11EFA398671BC4F9AE02.roa (raw, json) Hash identifier: ByTjShjzlXNDkMN69/J18p3VnbTj5vjjzwheoKvtWG4= Subject key identifier: 20:D7:3E:6D:01:82:E9:79:41:38:C6:FA:F3:BF:3E:07:27:CC:7D:D3 Certificate issuer: /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Certificate serial: 0290 Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/3352C1BAECFC11EFA398671BC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:04:32 +0000 ROA not before: Sat 31 May 2025 03:50:57 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 138699 IP address blocks: 101.47.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Validity Not Before: May 31 03:50:57 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a47fb0-253f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7c:0e:89:87:af:33:d8:f7:53:09:00:73:69: cb:86:f6:d3:1e:0e:08:14:5c:96:62:75:6a:66:36: c1:0d:52:35:c9:25:ef:c1:34:57:29:3e:01:de:9d: c8:a5:90:e5:2b:13:b3:8a:98:a0:6b:1c:a7:2e:0a: 52:44:c1:6c:f5:24:c8:0d:3e:1d:e6:ce:91:90:67: c7:09:1c:02:ed:eb:b2:82:96:8b:bc:d6:ba:81:38: d2:3d:53:50:8f:db:e2:f2:56:8a:98:76:88:ce:ee: dd:2f:72:56:87:ed:96:d5:e1:1a:b2:c8:1f:6e:77: 06:f0:16:b4:f6:cc:2f:43:24:de:9b:0c:45:d4:4b: 18:0c:43:fc:9e:3a:4e:3a:8b:5d:ba:54:a5:30:4d: 52:c5:46:f5:6c:8a:0c:09:d8:b7:ca:dc:6d:07:24: 90:4c:e2:81:97:48:46:96:33:52:9b:8c:6b:71:9b: bb:3a:29:d5:6a:02:11:00:d5:c0:72:39:71:4d:3c: ff:a7:0e:3d:9a:48:e3:16:ec:eb:d8:9a:7e:d1:be: 4c:03:56:89:2e:16:30:6c:a5:6d:59:49:96:67:09: 9f:09:d9:f3:35:a1:e8:0a:ba:50:a2:7a:3b:bf:a7: d4:4f:29:e7:03:3d:08:d6:d2:f3:06:fc:7e:d8:00: 1e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D7:3E:6D:01:82:E9:79:41:38:C6:FA:F3:BF:3E:07:27:CC:7D:D3 X509v3 Authority Key Identifier: keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/3352C1BAECFC11EFA398671BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 101.47.188.0/24 Signature Algorithm: sha256WithRSAEncryption 53:5d:f9:c4:d4:53:23:53:f5:4b:6b:2d:d3:e6:17:e5:9f:6b: 8c:28:72:10:9f:f9:30:26:08:9b:8b:6f:38:e6:92:cb:f6:5d: 7c:5e:04:c0:f3:be:ab:fd:58:e2:4b:99:cc:eb:29:b0:ca:c2: e5:aa:8c:22:6d:15:95:53:92:fd:93:a7:c6:63:6e:8a:6f:8f: 57:84:0d:15:5d:a3:fa:4f:49:e9:20:60:02:ef:20:80:bf:86: 97:be:77:2f:99:a4:fb:1e:fc:d9:65:fd:f7:05:dd:d9:2c:15: c5:5f:96:f6:42:85:0b:8e:5f:5e:9e:f9:8d:d0:4f:2d:a8:3b: 5a:35:16:ec:56:3c:f8:83:ff:6b:82:4b:40:24:3a:fd:ce:8c: ee:88:b9:5d:a1:b2:bf:5d:1c:b4:6d:03:21:f6:0f:d5:99:f6: bf:b0:e8:49:cf:c5:1e:9c:56:7b:d0:b4:51:fa:0f:05:cb:0c: 7b:a0:98:6b:c2:55:fc:2a:01:4e:14:ee:67:3d:95:bd:00:62: 62:10:5d:ea:5a:34:b7:91:cf:19:e9:43:43:64:47:d6:d3:6b: 12:1e:6d:4b:3a:18:2d:e4:f1:15:89:45:8e:a5:72:f1:c5:27: 52:c7:ac:ac:c6:bb:50:b7:84:1d:60:97:61:df:50:5c:e3:8e: 8a:ba:91:3a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDU0MkI5NEQ4NjI1Q0Y3MTE5NjRGRDEzNzQxMjk1RDI3 QUQ3QTkwMDQwHhcNMjUwNTMxMDM1MDU3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2ZiMC0yNTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHwOiYevM9j3UwkAc2nLhvbTHg4IFFyWYnVqZjbBDVI1ySXvwTRXKT4B3p3I pZDlKxOzipigaxynLgpSRMFs9STIDT4d5s6RkGfHCRwC7euygpaLvNa6gTjSPVNQ j9vi8laKmHaIzu7dL3JWh+2W1eEassgfbncG8Ba09swvQyTemwxF1EsYDEP8njpO OotdulSlME1SxUb1bIoMCdi3ytxtBySQTOKBl0hGljNSm4xrcZu7OinVagIRANXA cjlxTTz/pw49mkjjFuzr2Jp+0b5MA1aJLhYwbKVtWUmWZwmfCdnzNaHoCrpQono7 v6fUTynnAz0I1tLzBvx+2AAe/QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCDXPm0B gul5QTjG+vO/PgcnzH3TMB8GA1UdIwQYMBaAFFQrlNhiXPcRlk/RN0EpXSetepAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC8xNjFENEMwQUU0 Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4R1dUOUUzUVNsZEo2MTZr QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDdVUyR0pjOXhHV1Q5RTNRU2xkSjYxNmtBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0I1MjAvMTYxRDRDMEFFNENBMTFFREE0MTRFMjU5QzRGOUFFMDIvMzM1MkMxQkFF Q0ZDMTFFRkEzOTg2NzFCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZS+8MA0GCSqGSIb3DQEBCwUAA4IBAQBTXfnE1FMjU/VLay3T5hfl n2uMKHIQn/kwJgibi2845pLL9l18XgTA876r/VjiS5nM6ymwysLlqowibRWVU5L9 k6fGY26Kb49XhA0VXaP6T0npIGAC7yCAv4aXvncvmaT7HvzZZf33Bd3ZLBXFX5b2 QoULjl9envmN0E8tqDtaNRbsVjz4g/9rgktAJDr9zozuiLldobK/XRy0bQMh9g/V mfa/sOhJz8UenFZ70LRR+g8Fywx7oJhrwlX8KgFOFO5nPZW9AGJiEF3qWjS3kc8Z 6UNDZEfW02sSHm1LOhgt5PEViUWOpXLxxSdSx6ysxrtQt4QdYJdh31Bc446KupE6 -----END CERTIFICATE-----Generated at Mon Mar 2 09:09:57 2026 by rpki-client