$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/A2C8B57074B711EB8491BC63C4F9AE02.roa File: A2C8B57074B711EB8491BC63C4F9AE02.roa (raw, json) Hash identifier: lvExdvN+lyTanXvVTvJV8T9/V8jM577ymUYa0b51pmw= Subject key identifier: BE:F6:15:5E:72:C5:BA:C5:99:08:48:12:8A:E2:63:45:2A:34:83:66 Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD Certificate serial: 1877 Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/A2C8B57074B711EB8491BC63C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:19:39 +0000 ROA not before: Thu 08 May 2025 17:17:45 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 134963 IP address blocks: 203.198.4.0/24 maxlen: 24 203.198.7.0/24 maxlen: 24 218.102.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6263 (0x1877) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD Validity Not Before: May 8 17:17:45 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a4752a-8e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9c:58:0e:c5:f3:b2:f1:28:70:9c:42:6b:20: 53:ae:af:cc:7b:db:25:71:a8:1f:d3:c9:cb:90:87: b3:57:e7:08:46:7e:f7:39:09:60:0d:f6:66:76:eb: 17:a7:a8:68:6e:a3:d9:f0:73:c5:6e:2e:7f:0f:bc: e9:1f:56:51:82:bc:44:15:8b:b5:c8:54:b0:e7:9e: 0a:27:74:eb:7a:1a:8c:6c:69:46:74:bd:d5:bb:7c: ec:ee:dc:98:24:f5:4f:10:f3:d1:27:d4:a6:ad:f0: a5:02:49:97:68:7b:9a:45:12:b8:8a:53:fb:aa:dd: 25:cd:34:16:1a:5b:e9:9c:5b:b2:f6:76:f3:22:70: ff:79:ba:de:e4:52:37:5a:79:04:97:45:85:db:93: 64:f4:19:eb:7c:34:a6:cb:7d:bc:81:0f:0f:02:85: 57:8a:89:84:44:8c:9e:24:c9:fe:64:26:20:f2:42: 48:2b:5e:31:1a:91:0d:14:76:0d:5e:a2:64:73:e3: ae:e4:cf:87:ae:dc:93:82:d5:26:28:95:0c:8e:1a: 30:6a:fb:8a:6e:9e:f5:d7:8f:f3:2d:cd:9c:c9:f3: ac:f5:6a:9f:e3:64:a6:e1:10:33:da:e0:fc:0c:ab: ef:cf:0e:a1:e8:48:79:9f:af:fd:be:fc:3c:d3:28: 0e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F6:15:5E:72:C5:BA:C5:99:08:48:12:8A:E2:63:45:2A:34:83:66 X509v3 Authority Key Identifier: keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/A2C8B57074B711EB8491BC63C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.198.4.0/24 203.198.7.0/24 218.102.23.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:80:46:62:60:4e:98:49:b1:f7:83:c0:49:92:c2:b6:2e:71: 2c:b1:f4:ca:53:9e:7d:f6:cf:ee:fd:0e:85:53:41:e3:86:9b: 49:13:af:71:59:91:56:bf:a4:2b:08:d1:0f:90:87:45:0a:e8: c5:2f:dd:63:e2:8e:7d:f9:3c:be:bf:09:4c:3d:ae:42:0a:6d: 67:f8:dd:d2:25:96:39:dd:99:08:32:e7:7b:7b:c9:23:cb:d3: 8a:90:05:3d:99:5a:ba:d0:98:3e:36:a4:84:f9:69:f3:36:34: 0a:04:9c:cf:f9:83:31:1e:6b:00:0e:e7:f6:ca:f0:4b:2e:48: dd:68:06:6f:54:12:bc:06:34:97:0f:5d:6e:94:0f:2b:f4:75: e6:c1:a8:83:98:1c:c2:70:0d:6d:6a:d3:0b:f9:56:3c:da:c2: 3f:eb:e2:aa:ff:5e:41:f2:d1:93:eb:b2:41:f0:ec:39:d3:02: 40:cd:d9:9f:45:0f:7d:ed:60:7f:2b:13:30:d6:23:8f:bf:f9: ce:e1:01:b9:08:9d:41:bc:7e:95:a1:f9:47:58:84:d7:20:33: 4b:2c:c5:24:7f:05:11:fd:ab:93:ee:dc:cf:4c:de:f2:83:6b: 5f:c4:ec:e9:d4:5d:37:f4:82:72:0f:de:26:14:d6:01:58:bd: 4f:5f:bc:68 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICGHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDkwQzIyRjczOTM4NTBFOEVDRjZCNUYxRTMyMEQwN0Iy RDFBQ0Q4RkQwHhcNMjUwNTA4MTcxNzQ1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzUyYS04ZTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pxYDsXzsvEocJxCayBTrq/Me9slcagf08nLkIezV+cIRn73OQlgDfZmdusX p6hobqPZ8HPFbi5/D7zpH1ZRgrxEFYu1yFSw554KJ3TrehqMbGlGdL3Vu3zs7tyY JPVPEPPRJ9SmrfClAkmXaHuaRRK4ilP7qt0lzTQWGlvpnFuy9nbzInD/ebre5FI3 WnkEl0WF25Nk9BnrfDSmy328gQ8PAoVXiomERIyeJMn+ZCYg8kJIK14xGpENFHYN XqJkc+Ou5M+HrtyTgtUmKJUMjhowavuKbp7114/zLc2cyfOs9Wqf42Sm4RAz2uD8 DKvvzw6h6Eh5n6/9vvw80ygOlwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFL72FV5y xbrFmQhIEoriY0UqNINmMB8GA1UdIwQYMBaAFJDCL3OThQ6Oz2tfHjINB7LRrNj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri84NDhDODU3Q0RG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRvN1BhMThlTWcwSHN0R3My UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNSXZjNU9GRG83UGExOGVNZzBIc3RHczJQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODQ5NUYvODQ4Qzg1N0NERkVDMTFFN0EyN0EyMjEzQzRGOUFFMDIvQTJDOEI1NzA3 NEI3MTFFQjg0OTFCQzYzQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAy8YEAwQAy8YHAwQA2mYXMA0GCSqGSIb3DQEBCwUAA4IBAQB+gEZi YE6YSbH3g8BJksK2LnEssfTKU5599s/u/Q6FU0HjhptJE69xWZFWv6QrCNEPkIdF CujFL91j4o59+Ty+vwlMPa5CCm1n+N3SJZY53ZkIMud7e8kjy9OKkAU9mVq60Jg+ NqSE+WnzNjQKBJzP+YMxHmsADuf2yvBLLkjdaAZvVBK8BjSXD11ulA8r9HXmwaiD mBzCcA1tatML+VY82sI/6+Kq/15B8tGT67JB8Ow50wJAzdmfRQ997WB/KxMw1iOP v/nO4QG5CJ1BvH6VoflHWITXIDNLLMUkfwUR/auT7tzPTN7yg2tfxOzp1F039IJy D94mFNYBWL1PX7xo -----END CERTIFICATE-----Generated at Mon Mar 2 13:00:17 2026 by rpki-client