$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/D69F6688CD8511EBB5252063C4F9AE02.roa File: D69F6688CD8511EBB5252063C4F9AE02.roa (raw, json) Hash identifier: TYTool8z77Qm0uVA+1XtSBmD4W/ew0FLlQD2j6h3SPU= Subject key identifier: 7E:00:32:80:17:71:AA:34:FC:F1:FB:3D:8C:7D:35:CC:CF:EB:55:08 Certificate issuer: /CN=A917C422/serialNumber=3E0CA33D76A75BA64F0DD6B06A442BE69586441A Certificate serial: 3530 Authority key identifier: 3E:0C:A3:3D:76:A7:5B:A6:4F:0D:D6:B0:6A:44:2B:E6:95:86:44:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/D69F6688CD8511EBB5252063C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:33:55 +0000 ROA not before: Fri 12 Sep 2025 14:50:29 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 9584 IP address blocks: 114.142.144.0/20 maxlen: 24 202.65.192.0/19 maxlen: 24 202.66.128.0/19 maxlen: 24 202.134.64.0/18 maxlen: 24 219.90.112.0/20 maxlen: 24 2001:eb0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.crl rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13616 (0x3530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C422, serialNumber=3E0CA33D76A75BA64F0DD6B06A442BE69586441A Validity Not Before: Sep 12 14:50:29 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a44043-cedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c8:85:8c:db:85:d0:d3:74:55:f8:e8:58:8f: 9b:dd:73:31:60:83:e5:d0:32:6c:e3:77:7f:d6:b3: 74:87:5a:07:a7:83:61:10:40:0d:67:0d:47:b0:da: fb:ce:d2:aa:50:aa:dc:40:62:d5:41:81:65:13:44: 65:1c:56:39:2a:3a:43:24:63:8c:ef:b9:bb:99:bd: db:d6:57:e8:f5:1a:cf:f4:65:3b:16:23:9d:28:2c: aa:8c:a4:cb:a8:4a:45:ab:29:54:59:66:a7:46:61: d5:dd:4d:df:f2:d0:2c:e4:bd:08:bb:6c:4a:3f:f1: b3:f8:ad:ed:1c:67:0b:e8:0e:ac:98:07:8e:89:6c: 31:d6:ba:9f:e7:b7:1d:f0:a5:51:50:c7:19:7c:03: 4b:81:ac:c4:df:a0:7a:5e:bb:54:13:00:89:24:ab: 7f:61:a9:43:96:2e:d7:ef:24:88:2b:20:f6:1e:9e: 34:71:91:5d:e0:fa:32:d0:67:f6:63:70:5f:a7:e8: b9:4f:00:85:fa:81:b5:76:71:de:25:cb:57:a1:76: b7:86:6b:25:9c:7f:e7:a9:ea:13:13:e9:83:61:0c: 62:5a:6e:14:69:6f:a7:57:78:46:78:31:5e:1a:a7: c9:c3:c1:8b:27:45:d6:6d:8e:d6:31:9a:44:a4:d4: 79:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:00:32:80:17:71:AA:34:FC:F1:FB:3D:8C:7D:35:CC:CF:EB:55:08 X509v3 Authority Key Identifier: keyid:3E:0C:A3:3D:76:A7:5B:A6:4F:0D:D6:B0:6A:44:2B:E6:95:86:44:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/PgyjPXanW6ZPDdawakQr5pWGRBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgyjPXanW6ZPDdawakQr5pWGRBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/A2C738681D8511E287036ADC08B02CD2/D69F6688CD8511EBB5252063C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 114.142.144.0/20 202.65.192.0/19 202.66.128.0/19 202.134.64.0/18 219.90.112.0/20 IPv6: 2001:eb0::/32 Signature Algorithm: sha256WithRSAEncryption a3:7e:b7:7f:1a:96:e6:6a:7c:9b:45:02:fe:00:0e:f4:d3:50: 30:48:6f:52:fc:37:ba:b5:3d:47:8d:de:72:e1:7b:1d:c6:9f: 00:2a:14:41:c5:6e:e9:a6:c2:0b:81:96:d8:4f:a3:8e:c7:3b: 48:29:54:29:d2:46:f5:76:64:ab:fe:73:a5:4b:b2:54:8e:8a: dc:b7:c6:4b:88:54:ed:e8:2f:cf:60:63:12:9c:f3:7c:6f:71: 6b:8f:cd:b9:f8:58:3f:75:0f:9a:e9:2a:db:e0:1b:ed:69:50: 96:e3:d8:64:31:76:71:43:b9:9d:7c:11:ec:f7:b9:e0:6a:21: f7:20:89:20:4b:4a:b3:20:c3:4c:43:e4:fe:cd:2d:02:1b:30: df:61:2c:53:d9:a3:9c:9c:fe:1c:6e:79:97:22:8f:b3:f1:9e: 1f:1f:1d:e9:6a:4d:0d:61:bb:3a:70:35:ae:d7:af:5c:07:5c: ff:87:3b:81:31:f4:a0:f3:05:68:6f:2c:9c:b4:b0:dd:10:7f: ae:ac:e6:7f:40:57:86:12:f8:a1:80:b4:f4:73:c4:c6:4c:71: 6b:0d:f2:97:63:df:9a:bc:50:81:e9:ed:b9:d3:4f:0c:aa:fc: c7:87:af:20:cc:88:4c:45:18:b8:0b:49:c5:70:4b:72:16:fe: 0d:23:d2:e8 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICNTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0MjIxMTAvBgNVBAUTKDNFMENBMzNENzZBNzVCQTY0RjBERDZCMDZBNDQyQkU2 OTU4NjQ0MUEwHhcNMjUwOTEyMTQ1MDI5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDA0My1jZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MiFjNuF0NN0VfjoWI+b3XMxYIPl0DJs43d/1rN0h1oHp4NhEEANZw1HsNr7 ztKqUKrcQGLVQYFlE0RlHFY5KjpDJGOM77m7mb3b1lfo9RrP9GU7FiOdKCyqjKTL qEpFqylUWWanRmHV3U3f8tAs5L0Iu2xKP/Gz+K3tHGcL6A6smAeOiWwx1rqf57cd 8KVRUMcZfANLgazE36B6XrtUEwCJJKt/YalDli7X7ySIKyD2Hp40cZFd4Poy0Gf2 Y3Bfp+i5TwCF+oG1dnHeJctXoXa3hmslnH/nqeoTE+mDYQxiWm4UaW+nV3hGeDFe GqfJw8GLJ0XWbY7WMZpEpNR5hQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFH4AMoAX cao0/PH7PYx9NczP61UIMB8GA1UdIwQYMBaAFD4Moz12p1umTw3WsGpEK+aVhkQa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQyMi9BMkM3Mzg2ODFE ODUxMUUyODcwMzZBREMwOEIwMkNEMi9QZ3lqUFhhblc2WlBEZGF3YWtRcjVwV0dS Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BneWpQWGFuVzZaUERkYXdha1FyNXBXR1JCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0M0MjIvQTJDNzM4NjgxRDg1MTFFMjg3MDM2QURDMDhCMDJDRDIvRDY5RjY2ODhD RDg1MTFFQkI1MjUyMDYzQzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQEco6QAwQFykHAAwQFykKAAwQGyoZAAwQE21pwMA0EAgACMAcDBQAg AQ6wMA0GCSqGSIb3DQEBCwUAA4IBAQCjfrd/GpbmanybRQL+AA7001AwSG9S/De6 tT1Hjd5y4Xsdxp8AKhRBxW7ppsILgZbYT6OOxztIKVQp0kb1dmSr/nOlS7JUjorc t8ZLiFTt6C/PYGMSnPN8b3Frj825+Fg/dQ+a6Srb4BvtaVCW49hkMXZxQ7mdfBHs 97ngaiH3IIkgS0qzIMNMQ+T+zS0CGzDfYSxT2aOcnP4cbnmXIo+z8Z4fHx3pak0N Ybs6cDWu169cB1z/hzuBMfSg8wVobyyctLDdEH+urOZ/QFeGEvihgLT0c8TGTHFr DfKXY9+avFCB6e25008MqvzHh68gzIhMRRi4C0nFcEtyFv4NI9Lo -----END CERTIFICATE-----Generated at Mon Mar 2 07:39:55 2026 by rpki-client