$ rpki-client -vvf rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/35672430030A11F19BB01507153D8C67.roa File: 35672430030A11F19BB01507153D8C67.roa (raw, json) Hash identifier: ZqkwJDczIP3SqWXgDmi1JIlpUn8khhS031ocDNHD7iI= Subject key identifier: 9C:B9:9D:1E:86:81:FB:54:82:5E:F1:0F:3A:55:36:97:1D:CE:69:0D Certificate issuer: /CN=A91811D8/serialNumber=5804D9320267ADE3EFAD5695511585F6C325E704 Certificate serial: 10 Authority key identifier: 58:04:D9:32:02:67:AD:E3:EF:AD:56:95:51:15:85:F6:C3:25:E7:04 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WATZMgJnrePvrVaVURWF9sMl5wQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/35672430030A11F19BB01507153D8C67.roa Signing time: Sun 01 Mar 2026 05:36:49 +0000 ROA not before: Fri 06 Feb 2026 03:16:21 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 154438 IP address blocks: 144.79.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.crl rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WATZMgJnrePvrVaVURWF9sMl5wQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91811D8, serialNumber=5804D9320267ADE3EFAD5695511585F6C325E704 Validity Not Before: Feb 6 03:16:21 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a3d071-36c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:79:c8:fe:df:4e:14:1c:24:bf:46:db:24:b5: 72:d1:79:e6:c7:cf:68:da:a7:ef:4b:f6:b6:b8:26: 3c:d3:e2:8b:9e:4b:3e:e6:84:79:5c:e7:39:0d:d2: 00:fd:c8:24:e9:00:b6:03:bc:c4:fb:49:57:f5:2d: f2:92:09:1b:eb:62:1a:28:2c:a2:4e:e1:7f:96:ff: 40:54:f9:01:37:24:d5:61:fb:6b:b8:08:ab:da:0e: 12:d1:eb:8f:36:03:b8:5c:83:06:31:d5:d7:e7:97: ec:99:d7:ea:f8:db:04:94:29:cd:1f:4a:4c:af:52: b3:1d:6f:08:3d:54:bc:0d:cd:b3:4a:e1:cc:1a:fe: 65:9c:b8:52:9a:b5:0b:f0:9d:a9:d4:fd:61:c9:1f: 8a:dd:f8:23:b0:9d:63:e7:4d:24:b9:66:99:23:d5: a5:68:0d:35:da:8a:5a:7e:0b:81:72:3d:06:6b:6f: 17:d5:a9:35:51:02:c2:fb:30:9c:92:f7:57:79:a6: b3:5b:ed:7b:8d:54:4f:20:1a:62:55:76:60:c7:5b: a5:8b:55:3c:50:ca:7f:d4:0d:47:b8:a4:b1:4b:fa: 99:19:ba:5e:dd:20:25:d7:fa:76:7b:22:5b:36:d8: 87:ab:33:19:6b:7d:80:d4:85:17:67:0c:fd:c6:bc: 7c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B9:9D:1E:86:81:FB:54:82:5E:F1:0F:3A:55:36:97:1D:CE:69:0D X509v3 Authority Key Identifier: keyid:58:04:D9:32:02:67:AD:E3:EF:AD:56:95:51:15:85:F6:C3:25:E7:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WATZMgJnrePvrVaVURWF9sMl5wQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/35672430030A11F19BB01507153D8C67.roa sbgp-ipAddrBlock: critical IPv4: 144.79.143.0/24 Signature Algorithm: sha256WithRSAEncryption 65:d3:7b:d7:40:42:e7:7b:3d:c2:ff:0c:b2:a1:d1:31:4f:15: 02:16:f9:3a:81:26:4d:c7:b4:e5:df:90:20:b4:ba:3c:d0:29: 50:ff:43:35:bc:77:a6:f3:52:d4:be:68:55:9c:07:30:77:48: 7d:93:c8:d4:df:89:27:a9:e0:6b:0d:42:31:c5:cc:a1:53:2d: 94:91:a9:a6:7d:7a:09:8d:d2:89:9f:3d:cb:44:0c:bb:b7:75: a7:f5:45:d9:2b:5b:b0:0b:24:fe:82:0f:c1:66:87:0b:5a:91: 15:4f:e4:70:de:d0:25:b2:c7:01:2d:df:ca:1d:be:15:cc:46: 0b:b4:64:ac:36:27:0a:94:2c:13:2d:e5:ae:cd:b3:dd:b3:a4: 2f:ea:62:e8:af:b3:d5:de:ff:5b:10:eb:94:cc:97:81:31:80: 68:15:67:bb:e8:b7:69:28:45:b9:7d:a3:d4:27:05:74:9e:5a: c6:2f:65:ca:f2:c7:bc:cc:39:b4:dd:94:72:cd:24:20:7b:01: 74:d2:6e:a0:d8:90:a4:67:dc:d6:3c:b4:9d:8d:74:89:48:2b: a2:de:3b:5d:fb:09:25:44:40:d8:29:c2:87:b2:50:03:98:b5: 90:5b:b8:69:6f:ff:1e:93:70:60:e7:ab:80:d1:9c:cc:f9:0d: c4:5d:59:b2 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MTFEODExMC8GA1UEBRMoNTgwNEQ5MzIwMjY3QURFM0VGQUQ1Njk1NTExNTg1RjZD MzI1RTcwNDAeFw0yNjAyMDYwMzE2MjFaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkMDcxLTM2YzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCKecj+304UHCS/RtsktXLReebHz2jap+9L9ra4JjzT4oueSz7mhHlc5zkN0gD9 yCTpALYDvMT7SVf1LfKSCRvrYhooLKJO4X+W/0BU+QE3JNVh+2u4CKvaDhLR6482 A7hcgwYx1dfnl+yZ1+r42wSUKc0fSkyvUrMdbwg9VLwNzbNK4cwa/mWcuFKatQvw nanU/WHJH4rd+COwnWPnTSS5Zpkj1aVoDTXailp+C4FyPQZrbxfVqTVRAsL7MJyS 91d5prNb7XuNVE8gGmJVdmDHW6WLVTxQyn/UDUe4pLFL+pkZul7dICXX+nZ7Ils2 2IerMxlrfYDUhRdnDP3GvHxlAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUnLmdHoaB +1SCXvEPOlU2lx3OaQ0wHwYDVR0jBBgwFoAUWATZMgJnrePvrVaVURWF9sMl5wQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxMUQ4L0RDRTdCREUyMDMw OTExRjE5Mjg5OTZEMzEzM0Q4QzY3L1dBVFpNZ0pucmVQdnJWYVZVUldGOXNNbDV3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV0FUWk1nSm5yZVB2clZhVlVSV0Y5c01sNXdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTFEOC9EQ0U3QkRFMjAzMDkxMUYxOTI4OTk2RDMxMzNEOEM2Ny8zNTY3MjQzMDAz MEExMUYxOUJCMDE1MDcxNTNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACQT48wDQYJKoZIhvcNAQELBQADggEBAGXTe9dAQud7PcL/DLKh0TFP FQIW+TqBJk3HtOXfkCC0ujzQKVD/QzW8d6bzUtS+aFWcBzB3SH2TyNTfiSep4GsN QjHFzKFTLZSRqaZ9egmN0omfPctEDLu3daf1RdkrW7ALJP6CD8FmhwtakRVP5HDe 0CWyxwEt38odvhXMRgu0ZKw2JwqULBMt5a7Ns92zpC/qYuivs9Xe/1sQ65TMl4Ex gGgVZ7vot2koRbl9o9QnBXSeWsYvZcryx7zMObTdlHLNJCB7AXTSbqDYkKRn3NY8 tJ2NdIlIK6LeO137CSVEQNgpwoeyUAOYtZBbuGlv/x6TcGDnq4DRnMz5DcRdWbI= -----END CERTIFICATE-----Generated at Mon Mar 2 18:21:58 2026 by rpki-client