$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/7E12F8DC4C0A11ECACB7F96AC4F9AE02.roa File: 7E12F8DC4C0A11ECACB7F96AC4F9AE02.roa (raw, json) Hash identifier: tmeOPnJkhVaYRJZ57w5iTiK0MG+9N87IhpYtgD8uDCU= Subject key identifier: AA:25:31:5D:81:53:33:B8:E6:36:19:9D:A8:95:E3:F8:6D:92:03:5A Certificate issuer: /CN=A917E0A8/serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Certificate serial: 0B36 Authority key identifier: 7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/7E12F8DC4C0A11ECACB7F96AC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:30:52 +0000 ROA not before: Wed 30 Apr 2025 19:29:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 23959 IP address blocks: 43.239.249.0/24 maxlen: 24 103.150.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2870 (0xb36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Validity Not Before: Apr 30 19:29:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a469bc-895b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:89:49:50:74:e5:9f:cf:12:3a:a4:96:e0:1b: 78:ae:44:e6:1f:ea:c9:ae:8e:9d:a5:87:6a:8a:16: 74:ec:a3:8a:79:7c:6c:06:9f:82:94:05:d9:d1:3e: ad:9f:3d:36:f5:dc:12:f5:54:bb:88:dc:09:42:f8: d7:35:8e:bc:2a:9c:13:5b:7f:81:21:ad:65:df:48: af:d7:91:e1:2b:6d:8b:8a:1f:b9:ad:8a:ad:62:bc: 40:32:5b:49:86:4d:ca:27:4f:39:61:be:46:64:8c: cc:3f:9c:4e:79:1e:35:29:8c:a1:c6:ff:97:54:6f: bb:6d:94:b4:89:83:31:ee:7c:93:d7:80:4e:00:e7: 69:2b:0d:b8:1d:12:f5:55:2e:6c:b8:e8:b6:ff:10: 3a:57:9a:a0:e7:ea:cd:7a:bc:ef:c4:c0:ed:eb:ad: 4a:5e:09:65:74:be:08:76:0b:53:0e:d2:f1:61:68: aa:be:74:4d:90:42:3e:a6:30:59:cc:a8:4b:56:7f: be:17:a1:cd:84:b5:ff:94:3b:18:ed:d9:b5:f2:5d: 84:e8:e7:7c:13:8e:3d:a0:b7:78:2e:e8:ae:5e:6f: d7:c5:4b:dd:50:3d:7f:6d:cd:46:ee:e7:7a:89:9e: b5:c9:8e:0e:9a:45:4a:6d:9d:a2:18:cc:26:b6:bf: 96:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:25:31:5D:81:53:33:B8:E6:36:19:9D:A8:95:E3:F8:6D:92:03:5A X509v3 Authority Key Identifier: keyid:7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/7E12F8DC4C0A11ECACB7F96AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.249.0/24 103.150.8.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:0f:18:83:87:15:b2:97:25:a4:91:44:c7:38:d8:7c:e1:43: 1d:5b:97:55:aa:44:1d:74:9b:6f:c0:ae:1a:88:b9:9e:18:f2: b1:52:00:d5:c8:48:3e:ef:b6:16:d1:db:9f:fc:a1:66:db:bd: 68:a9:a2:03:43:c0:1a:29:b9:a2:ef:f3:df:28:42:e1:a9:d4: 73:30:c2:63:06:a5:ef:79:8d:01:aa:5d:8f:4f:63:5a:96:4c: 2c:52:cf:62:8b:5f:57:fa:be:94:22:ae:27:d0:db:d1:1d:a7: 54:1a:cc:45:c3:22:5f:23:46:30:17:df:2c:c7:17:29:f8:1e: 70:62:04:d3:0c:58:67:22:8e:bb:99:d0:1c:22:67:08:6a:4c: 0f:75:dc:ab:fd:2c:89:e2:f1:a1:85:e4:47:f8:de:c9:a0:d8: b2:55:ad:e3:8a:59:d7:b1:d0:14:3e:d2:3f:34:6e:a5:ac:20: 47:78:5b:a0:77:4d:a3:7e:bd:01:cc:19:06:00:30:28:bd:1f: b0:cc:cd:4a:6e:b7:69:6e:94:cc:11:e9:6b:02:0f:e7:2e:ba: 35:7a:54:97:38:fd:6d:2d:88:0f:ee:73:a0:e8:01:d4:6b:81: ef:38:f3:62:84:c1:91:8a:a0:fa:17:38:41:08:a0:a0:20:67: 15:9f:d7:7d -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDdBQ0U2REEzNUZCNkE0QTlGNkY5OTcwQzE4QkNBRjVC Mjc0ODExOUYwHhcNMjUwNDMwMTkyOTM3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjliYy04OTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4lJUHTln88SOqSW4Bt4rkTmH+rJro6dpYdqihZ07KOKeXxsBp+ClAXZ0T6t nz029dwS9VS7iNwJQvjXNY68KpwTW3+BIa1l30iv15HhK22Lih+5rYqtYrxAMltJ hk3KJ085Yb5GZIzMP5xOeR41KYyhxv+XVG+7bZS0iYMx7nyT14BOAOdpKw24HRL1 VS5suOi2/xA6V5qg5+rNerzvxMDt661KXglldL4IdgtTDtLxYWiqvnRNkEI+pjBZ zKhLVn++F6HNhLX/lDsY7dm18l2E6Od8E449oLd4LuiuXm/XxUvdUD1/bc1G7ud6 iZ61yY4OmkVKbZ2iGMwmtr+WsQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKolMV2B UzO45jYZnaiV4/htkgNaMB8GA1UdIwQYMBaAFHrObaNftqSp9vmXDBi8r1snSBGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC9BMDU5QUY4QTY0 MEQxMUVBQjYzOTU1NzFDNEY5QUUwMi9lczV0bzEtMnBLbjItWmNNR0x5dld5ZElF WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzNXRvMS0ycEtuMi1aY01HTHl2V3lkSUVaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UwQTgvQTA1OUFGOEE2NDBEMTFFQUI2Mzk1NTcxQzRGOUFFMDIvN0UxMkY4REM0 QzBBMTFFQ0FDQjdGOTZBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAK+/5AwQAZ5YIMA0GCSqGSIb3DQEBCwUAA4IBAQAODxiDhxWylyWk kUTHONh84UMdW5dVqkQddJtvwK4aiLmeGPKxUgDVyEg+77YW0duf/KFm271oqaID Q8AaKbmi7/PfKELhqdRzMMJjBqXveY0Bql2PT2NalkwsUs9ii19X+r6UIq4n0NvR HadUGsxFwyJfI0YwF98sxxcp+B5wYgTTDFhnIo67mdAcImcIakwPddyr/SyJ4vGh heRH+N7JoNiyVa3jilnXsdAUPtI/NG6lrCBHeFugd02jfr0BzBkGADAovR+wzM1K brdpbpTMEelrAg/nLro1elSXOP1tLYgP7nOg6AHUa4HvOPNihMGRiqD6FzhBCKCg IGcVn9d9 -----END CERTIFICATE-----Generated at Mon Mar 2 05:58:59 2026 by rpki-client