$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/F10E46E6F07C11EBB9AF1B63C4F9AE02.roa File: F10E46E6F07C11EBB9AF1B63C4F9AE02.roa (raw, json) Hash identifier: BlKhGG0JgDgeMunFnt+JOtTeCrACML/7Bv6i3I2TnD4= Subject key identifier: E3:75:AE:1C:4C:EC:8C:C2:6D:AB:F5:DB:83:EB:F5:77:49:49:C7:AF Certificate issuer: /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B Certificate serial: 10BC Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/F10E46E6F07C11EBB9AF1B63C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:37:19 +0000 ROA not before: Thu 24 Apr 2025 17:46:12 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 137856 IP address blocks: 203.159.76.0/22 maxlen: 24 2405:3340::/32 maxlen: 32 2405:3340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4284 (0x10bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183798, serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B Validity Not Before: Apr 24 17:46:12 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a44f1f-b0ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f9:17:5b:32:3b:d7:93:ab:a2:f0:32:fb:4c: f6:7f:26:3a:d7:a4:45:4b:6a:be:9a:33:01:b5:f4: a7:3c:42:4e:24:57:df:3d:fe:45:1d:50:21:e5:43: 97:a5:e1:2d:04:a5:30:5b:03:81:3c:2a:9e:a0:08: 8b:3a:62:a0:a2:60:53:7e:1a:cc:f2:5c:c5:7f:8e: c9:0c:21:86:01:10:6e:25:2d:af:39:e6:68:c4:f6: 1b:32:80:80:8c:28:b1:3a:a4:82:61:5d:87:0c:dd: 6a:7f:64:60:b6:bb:46:3e:92:c4:12:66:a9:06:de: 02:bb:0f:31:42:5f:5d:f5:cf:83:df:bc:10:6e:c5: be:a0:0b:37:bc:82:d9:17:07:9e:7f:bd:eb:d8:7e: c7:d3:05:3d:d6:b3:7d:59:94:95:07:7d:00:f9:67: 25:04:4c:26:17:91:ce:20:ee:46:73:10:46:eb:32: c0:fc:72:61:77:5f:71:21:8f:2f:fb:23:46:c2:21: fe:4b:2a:c6:de:f1:be:76:98:82:98:35:f4:03:0a: 7c:f1:73:c1:f9:86:c8:d7:93:e7:38:a3:95:c5:40: 60:f0:c8:ea:ec:e6:aa:03:c9:68:bd:a1:81:f3:56: ac:80:28:f8:69:98:ea:f3:27:0e:c4:05:48:6a:9a: 0c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:75:AE:1C:4C:EC:8C:C2:6D:AB:F5:DB:83:EB:F5:77:49:49:C7:AF X509v3 Authority Key Identifier: keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/F10E46E6F07C11EBB9AF1B63C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.159.76.0/22 IPv6: 2405:3340::/32 Signature Algorithm: sha256WithRSAEncryption b3:3c:67:e2:0d:18:99:bf:5c:90:b5:e6:4f:70:77:d6:d9:4f: 8d:f1:4d:d4:31:9e:5f:00:50:45:91:74:c4:e2:b4:01:18:b2: ae:73:73:48:f1:0b:58:e8:55:06:01:dc:b7:d2:11:df:5a:85: bb:0f:02:5a:4b:71:ef:e1:70:ee:6a:23:cd:90:49:3e:c2:11: 90:7e:b4:a5:70:b6:d4:61:0b:ce:83:bb:31:e4:32:c9:ea:37: 8c:35:42:51:10:55:8d:86:af:a2:81:0e:f3:a1:cf:47:73:c5: 40:e9:95:20:a9:d8:04:de:db:35:e7:96:fa:21:6d:40:cf:d2: 8d:1d:72:27:9d:a4:96:9d:23:a7:fb:ec:26:30:f8:8d:d3:6c: 87:fd:db:f3:45:3b:34:9b:ab:b3:91:6a:88:9a:53:d6:96:24: 0f:ab:2f:d5:4c:ad:50:15:2c:8d:ae:e1:5c:cb:65:86:dd:b0: 3c:e0:b2:b4:3d:bf:3a:45:26:d5:3c:5e:78:0f:f4:c2:e2:d6: 16:96:0a:52:1c:33:e5:7c:ef:77:1f:78:d7:97:9e:f5:41:c7: 16:42:c1:a2:58:f3:e2:ef:d9:bc:45:8b:fe:e7:4d:e4:93:b9: f5:df:7f:fa:ea:81:2b:a7:fb:f9:a0:77:93:6c:2e:a7:c5:42: dd:64:14:8f -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICELwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM3OTgxMTAvBgNVBAUTKDNBMDJFRkY3Q0M5QzhCQUExMkQ3Qzg1MkI2RkZDNjlG QjA2MDk4OUIwHhcNMjUwNDI0MTc0NjEyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGYxZi1iMGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvkXWzI715OrovAy+0z2fyY616RFS2q+mjMBtfSnPEJOJFffPf5FHVAh5UOX peEtBKUwWwOBPCqeoAiLOmKgomBTfhrM8lzFf47JDCGGARBuJS2vOeZoxPYbMoCA jCixOqSCYV2HDN1qf2RgtrtGPpLEEmapBt4Cuw8xQl9d9c+D37wQbsW+oAs3vILZ Fweef73r2H7H0wU91rN9WZSVB30A+WclBEwmF5HOIO5GcxBG6zLA/HJhd19xIY8v +yNGwiH+SyrG3vG+dpiCmDX0Awp88XPB+YbI15PnOKOVxUBg8Mjq7OaqA8lovaGB 81asgCj4aZjq8ycOxAVIapoM9wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFON1rhxM 7IzCbav124Pr9XdJScevMB8GA1UdIwQYMBaAFDoC7/fMnIuqEtfIUrb/xp+wYJib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzc5OC85MDE3QjUwQTRB MjcxMUU5QUNGMTdDMjZDNEY5QUUwMi9PZ0x2OTh5Y2k2b1MxOGhTdHZfR243Qmdt SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09nTHY5OHljaTZvUzE4aFN0dl9HbjdCZ21Kcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODM3OTgvOTAxN0I1MEE0QTI3MTFFOUFDRjE3QzI2QzRGOUFFMDIvRjEwRTQ2RTZG MDdDMTFFQkI5QUYxQjYzQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCy59MMA0EAgACMAcDBQAkBTNAMA0GCSqGSIb3DQEBCwUAA4IBAQCz PGfiDRiZv1yQteZPcHfW2U+N8U3UMZ5fAFBFkXTE4rQBGLKuc3NI8QtY6FUGAdy3 0hHfWoW7DwJaS3Hv4XDuaiPNkEk+whGQfrSlcLbUYQvOg7sx5DLJ6jeMNUJREFWN hq+igQ7zoc9Hc8VA6ZUgqdgE3ts155b6IW1Az9KNHXInnaSWnSOn++wmMPiN02yH /dvzRTs0m6uzkWqImlPWliQPqy/VTK1QFSyNruFcy2WG3bA84LK0Pb86RSbVPF54 D/TC4tYWlgpSHDPlfO93H3jXl571QccWQsGiWPPi79m8RYv+503kk7n133/66oEr p/v5oHeTbC6nxULdZBSP -----END CERTIFICATE-----Generated at Mon Mar 2 20:38:01 2026 by rpki-client