$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/07EE827ADFEE11E7B0E71D1CC4F9AE02.roa File: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (raw, json) Hash identifier: yYFIGBneEQXcRJvNNN1W9kEQ69UHSaUHBezF58BxRJY= Subject key identifier: 5E:5C:1B:23:89:92:C1:1F:EF:15:69:2D:B6:BA:60:43:29:EB:B2:85 Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD Certificate serial: 1879 Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/07EE827ADFEE11E7B0E71D1CC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:19:40 +0000 ROA not before: Thu 08 May 2025 17:17:46 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 20940 IP address blocks: 203.198.20.0/24 maxlen: 24 219.76.11.0/24 maxlen: 24 2404:c800:8203::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6265 (0x1879) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD Validity Not Before: May 8 17:17:46 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a4752c-a64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:de:6b:5b:75:e8:3a:8b:a3:8e:2a:76:4b:6f: 79:33:26:84:3e:78:d0:d3:57:6f:b6:34:eb:ab:73: 6e:70:3a:77:e5:38:01:9a:88:52:4a:90:fe:be:e8: 52:c2:45:38:74:6a:be:e9:e4:5b:28:87:a7:be:0c: 72:fd:12:50:99:f6:e1:48:53:ab:9c:d4:67:6d:15: 55:5e:8c:e6:f5:8f:19:23:cd:f8:77:e2:da:a6:ac: 6c:70:d9:35:e9:b8:36:a9:3c:af:c1:5b:1c:20:ad: c9:38:3d:02:cf:ef:b7:35:81:9c:69:b4:70:f2:ee: 0c:f9:70:53:48:c4:25:21:74:38:d0:26:0d:36:2a: d8:24:24:5b:ee:48:4f:a8:2f:57:3c:fa:de:8f:58: 06:7a:49:90:24:7b:cc:e6:de:e2:41:7b:b1:05:d6: f5:a3:72:06:f8:7a:4e:3a:f4:ed:dc:57:42:4f:b8: 55:3b:f4:90:4b:a6:1d:3c:36:10:81:82:1a:bc:59: 77:ec:19:cf:a5:6b:04:56:0d:62:15:0b:14:b9:5d: 9a:00:b5:6c:82:a0:31:09:37:53:5d:42:6e:f5:31: c7:66:a4:f2:ca:87:e8:72:36:6f:15:3f:a9:96:c6: a2:46:37:e4:9a:bf:31:34:1a:f2:3f:86:53:3f:ec: 3f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5C:1B:23:89:92:C1:1F:EF:15:69:2D:B6:BA:60:43:29:EB:B2:85 X509v3 Authority Key Identifier: keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/07EE827ADFEE11E7B0E71D1CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.198.20.0/24 219.76.11.0/24 IPv6: 2404:c800:8203::/48 Signature Algorithm: sha256WithRSAEncryption cb:20:8d:3a:09:b8:38:35:f8:c5:58:06:22:44:29:88:b9:05: 36:47:c6:0e:3d:d4:19:84:48:26:5f:ac:17:6f:21:90:f7:76: de:93:80:39:b8:e9:6c:a2:9d:f2:f0:1f:6f:c0:2d:8e:fa:6d: 50:ec:a8:98:63:ea:98:ae:f2:20:f0:22:74:5b:05:df:f8:6b: c4:d4:07:47:b8:a6:a3:66:44:e6:61:03:bb:6a:ae:14:9a:a5: 60:dd:ae:a5:c4:36:23:9c:20:68:12:9b:6f:1c:22:68:6c:a9: 01:94:3d:df:4a:2c:96:b7:7a:a7:45:9f:13:21:ea:df:85:fb: 31:d0:57:c6:68:b9:f5:4c:3f:34:93:b5:ec:3b:66:72:32:af: 4c:3c:53:36:2a:f1:28:56:39:f5:c4:65:a1:28:1b:cf:e8:e5: 02:fa:72:30:5b:e0:39:7d:18:d5:1f:c2:df:f4:e5:98:fc:78: 1f:dd:d9:19:8e:2a:5a:fa:21:a1:0d:23:a3:69:64:55:bc:23: 2d:5d:d8:9c:a5:25:de:e4:3e:a7:41:9e:6c:34:78:bb:d9:3b: c4:50:1b:52:13:ff:7a:84:89:47:2a:df:39:48:1a:81:49:75: 2f:ad:29:80:3d:9d:21:af:ab:4a:f7:5b:01:3c:46:fd:a4:a7: 04:a9:71:5a -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICGHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDkwQzIyRjczOTM4NTBFOEVDRjZCNUYxRTMyMEQwN0Iy RDFBQ0Q4RkQwHhcNMjUwNTA4MTcxNzQ2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzUyYy1hNjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmt5rW3XoOoujjip2S295MyaEPnjQ01dvtjTrq3NucDp35TgBmohSSpD+vuhS wkU4dGq+6eRbKIenvgxy/RJQmfbhSFOrnNRnbRVVXozm9Y8ZI834d+LapqxscNk1 6bg2qTyvwVscIK3JOD0Cz++3NYGcabRw8u4M+XBTSMQlIXQ40CYNNirYJCRb7khP qC9XPPrej1gGekmQJHvM5t7iQXuxBdb1o3IG+HpOOvTt3FdCT7hVO/SQS6YdPDYQ gYIavFl37BnPpWsEVg1iFQsUuV2aALVsgqAxCTdTXUJu9THHZqTyyofocjZvFT+p lsaiRjfkmr8xNBryP4ZTP+w/GQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFF5cGyOJ ksEf7xVpLba6YEMp67KFMB8GA1UdIwQYMBaAFJDCL3OThQ6Oz2tfHjINB7LRrNj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri84NDhDODU3Q0RG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRvN1BhMThlTWcwSHN0R3My UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNSXZjNU9GRG83UGExOGVNZzBIc3RHczJQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODQ5NUYvODQ4Qzg1N0NERkVDMTFFN0EyN0EyMjEzQzRGOUFFMDIvMDdFRTgyN0FE RkVFMTFFN0IwRTcxRDFDQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAy8YUAwQA20wLMA8EAgACMAkDBwAkBMgAggMwDQYJKoZIhvcNAQEL BQADggEBAMsgjToJuDg1+MVYBiJEKYi5BTZHxg491BmESCZfrBdvIZD3dt6TgDm4 6WyinfLwH2/ALY76bVDsqJhj6piu8iDwInRbBd/4a8TUB0e4pqNmROZhA7tqrhSa pWDdrqXENiOcIGgSm28cImhsqQGUPd9KLJa3eqdFnxMh6t+F+zHQV8ZoufVMPzST tew7ZnIyr0w8UzYq8ShWOfXEZaEoG8/o5QL6cjBb4Dl9GNUfwt/05Zj8eB/d2RmO Klr6IaENI6NpZFW8Iy1d2JylJd7kPqdBnmw0eLvZO8RQG1IT/3qEiUcq3zlIGoFJ dS+tKYA9nSGvq0r3WwE8Rv2kpwSpcVo= -----END CERTIFICATE-----Generated at Mon Mar 2 03:58:02 2026 by rpki-client