$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/11C0D5DA9B4011EB9C1BFC4EC4F9AE02.roa File: 11C0D5DA9B4011EB9C1BFC4EC4F9AE02.roa (raw, json) Hash identifier: UhjZCQXMTH4EcImSo4POBU6QddKCD4qTUt+kDu3goss= Subject key identifier: FB:3C:97:F8:6D:0A:CB:6C:5A:51:7E:BD:A1:C5:E8:A2:63:0A:EA:48 Certificate issuer: /CN=A917E0A8/serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA Certificate serial: 06DE Authority key identifier: 74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/11C0D5DA9B4011EB9C1BFC4EC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:47:03 +0000 ROA not before: Wed 30 Apr 2025 19:29:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59253 IP address blocks: 69.161.221.0/24 maxlen: 24 209.17.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 14:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1758 (0x6de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA Validity Not Before: Apr 30 19:29:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a42737-09af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c6:98:61:50:d1:1d:08:12:97:6e:9f:63:0e: e7:c0:29:f9:f8:ed:a8:5e:d9:cf:09:32:28:1c:2f: 93:1c:44:c1:8e:7b:42:d2:64:af:60:5b:6c:f5:46: 65:32:40:de:4c:19:57:11:12:91:b0:3e:3c:dc:1a: d4:07:4f:d2:3e:f1:62:a0:4c:ea:6e:5c:de:91:21: 14:c6:7c:ea:7e:0c:a5:6d:7a:18:0a:eb:71:6c:a4: 6a:c0:9a:d0:e1:15:2b:9f:2a:1c:ac:9b:dc:de:88: 42:ed:8f:40:57:6b:2b:a1:31:3d:cb:d4:e8:f0:2e: a4:67:4e:4f:4c:ef:c0:1f:7c:75:1a:a6:cc:17:8a: 9b:f4:24:9f:39:5d:00:b2:b4:e2:4b:e7:4f:58:19: cd:b1:25:fd:a7:5f:6f:d9:7b:9e:53:9f:5e:6f:f9: 98:89:a4:ae:3a:08:11:24:64:47:33:f2:22:be:d9: 5e:b2:a8:4e:c0:1c:ae:87:b7:cd:f8:f9:35:04:31: 73:4c:62:58:e0:a9:b6:27:d9:7d:f7:84:f2:72:ef: 25:38:a8:b9:30:23:d0:5e:d0:dc:df:63:91:ae:d0: 10:02:bf:20:fc:aa:55:bc:26:52:a3:d5:d5:b2:fd: 52:4f:40:43:b3:c7:cb:b5:6a:b4:19:fe:b0:10:40: 42:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3C:97:F8:6D:0A:CB:6C:5A:51:7E:BD:A1:C5:E8:A2:63:0A:EA:48 X509v3 Authority Key Identifier: keyid:74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/11C0D5DA9B4011EB9C1BFC4EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 69.161.221.0/24 209.17.118.0/24 Signature Algorithm: sha256WithRSAEncryption 24:db:50:cd:13:9a:7f:61:64:ef:60:55:fc:ba:06:ab:4c:cf: 6d:af:3b:b5:46:dd:06:1b:d1:61:af:76:0d:3a:49:75:6c:cf: fe:42:1e:11:e5:03:c8:98:46:c1:9f:0b:e8:e3:15:2a:fd:f8: 6d:ef:c5:62:5d:ab:75:88:1e:aa:fa:a7:13:d4:9c:19:10:32: 1b:7c:0c:29:b8:90:cd:80:70:b4:0e:4a:62:d8:40:87:59:d8: ce:c9:5e:49:13:dd:53:d1:9a:e0:bc:a5:11:72:f1:94:6f:6e: 9a:b9:fc:12:35:4f:b5:bd:41:af:4e:ea:f3:9b:d1:c0:f3:6f: e8:de:a2:d4:84:91:f5:41:73:34:c9:49:f7:4c:36:34:57:92: ec:2d:f1:d6:12:a7:c0:3e:84:eb:c9:41:fc:35:ed:89:f2:d9: 04:61:8a:4c:c2:a3:97:08:7a:b1:cc:b9:9e:67:8e:6d:8a:56: 2f:a4:57:83:f2:a8:f3:06:64:89:b2:fb:12:ea:b5:e0:56:b5: 29:10:7b:a6:4d:26:68:74:6d:b2:99:43:52:37:13:27:8a:f5: be:88:0e:53:97:25:b5:15:5c:ea:77:dd:ff:81:09:cb:5b:4c: 11:4b:1a:ea:a4:f7:2a:e9:62:23:29:8a:17:71:5f:b6:51:97: 42:8c:75:f5 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDc0RDQ0RDk2OEFGNDYzRUZCMTdDMDgwRDVGQUQwMTBD NEFDMDk3QUEwHhcNMjUwNDMwMTkyOTQzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjczNy0wOWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA98aYYVDRHQgSl26fYw7nwCn5+O2oXtnPCTIoHC+THETBjntC0mSvYFts9UZl MkDeTBlXERKRsD483BrUB0/SPvFioEzqblzekSEUxnzqfgylbXoYCutxbKRqwJrQ 4RUrnyocrJvc3ohC7Y9AV2sroTE9y9To8C6kZ05PTO/AH3x1GqbMF4qb9CSfOV0A srTiS+dPWBnNsSX9p19v2XueU59eb/mYiaSuOggRJGRHM/IivtlesqhOwByuh7fN +Pk1BDFzTGJY4Km2J9l994Tycu8lOKi5MCPQXtDc32ORrtAQAr8g/KpVvCZSo9XV sv1ST0BDs8fLtWq0Gf6wEEBCFwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFPs8l/ht CstsWlF+vaHF6KJjCupIMB8GA1UdIwQYMBaAFHTUTZaK9GPvsXwIDV+tAQxKwJeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC82RUZDMEJFRTk4 NEMxMUVCOEE0MUZBMjBDNEY5QUUwMi9kTlJObG9yMFktLXhmQWdOWDYwQkRFckFs Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ROUk5sb3IwWS0teGZBZ05YNjBCREVyQWw2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UwQTgvNkVGQzBCRUU5ODRDMTFFQjhBNDFGQTIwQzRGOUFFMDIvMTFDMEQ1REE5 QjQwMTFFQjlDMUJGQzRFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQARaHdAwQA0RF2MA0GCSqGSIb3DQEBCwUAA4IBAQAk21DNE5p/YWTv YFX8ugarTM9trzu1Rt0GG9Fhr3YNOkl1bM/+Qh4R5QPImEbBnwvo4xUq/fht78Vi Xat1iB6q+qcT1JwZEDIbfAwpuJDNgHC0Dkpi2ECHWdjOyV5JE91T0ZrgvKURcvGU b26aufwSNU+1vUGvTurzm9HA82/o3qLUhJH1QXM0yUn3TDY0V5LsLfHWEqfAPoTr yUH8Ne2J8tkEYYpMwqOXCHqxzLmeZ45tilYvpFeD8qjzBmSJsvsS6rXgVrUpEHum TSZodG2ymUNSNxMnivW+iA5TlyW1FVzqd93/gQnLW0wRSxrqpPcq6WIjKYoXcV+2 UZdCjHX1 -----END CERTIFICATE-----Generated at Mon Mar 2 04:30:44 2026 by rpki-client