$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/23331070F9FB11EB8CFF5E7DC4F9AE02.roa File: 23331070F9FB11EB8CFF5E7DC4F9AE02.roa (raw, json) Hash identifier: AlgGoM9sIjiQUz9UwRMiodVAB50JCeuMhHUBhqMXfSw= Subject key identifier: 88:74:54:F8:17:C1:CD:8F:95:2F:2A:1E:DB:DD:36:99:B1:82:BB:7B Certificate issuer: /CN=A9185D6E/serialNumber=1EDD79D56581635F7F3297C6D270C73749789E3D Certificate serial: 0616 Authority key identifier: 1E:DD:79:D5:65:81:63:5F:7F:32:97:C6:D2:70:C7:37:49:78:9E:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/23331070F9FB11EB8CFF5E7DC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:38:27 +0000 ROA not before: Thu 02 Oct 2025 23:24:36 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 14340 IP address blocks: 101.53.160.0/19 maxlen: 24 182.50.76.0/22 maxlen: 24 202.129.242.0/23 maxlen: 24 2401:ce80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.crl rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:27:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1558 (0x616) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D6E, serialNumber=1EDD79D56581635F7F3297C6D270C73749789E3D Validity Not Before: Oct 2 23:24:36 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a43343-fa44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:18:dc:f1:2b:09:74:dd:42:26:ca:cf:e0:bb: 68:ba:20:ab:bd:ac:66:13:d2:16:c6:c1:e0:4a:76: c4:6f:66:a8:7f:3c:c1:18:fa:47:90:9c:87:80:64: 7c:2d:c8:4c:bc:22:ee:27:0f:a8:40:03:10:97:75: d9:a7:67:a9:eb:0e:a5:97:47:e2:b4:2f:cc:ba:7e: b6:91:79:89:3a:81:f9:0d:02:6b:4d:14:5e:cf:66: 35:84:e3:00:9a:0c:ed:37:90:f8:8f:a0:72:ba:92: 44:42:a3:3b:39:d9:45:e0:12:5a:db:39:e1:1c:a2: dd:8c:74:22:15:f1:3d:b0:df:6e:c3:1a:32:28:2f: 70:54:82:85:a2:9e:5e:fc:5f:cb:c1:ec:47:b1:a0: cc:0d:59:15:9c:df:b3:80:a5:ca:8b:e9:85:e8:19: 8b:51:43:db:c2:7f:d1:93:44:38:a1:b7:67:a3:1d: a7:77:ce:1d:68:aa:2f:4e:4e:ae:b9:88:1c:82:d9: f9:5c:42:bc:61:e5:1e:40:16:fd:a6:f8:7d:08:bb: 02:db:e1:a2:7d:46:15:1e:d0:3c:6f:03:86:19:9c: 13:3a:ba:9b:b3:32:7b:d3:66:2d:1f:4f:9b:88:88: 67:94:e2:3e:a4:33:c1:4f:99:e4:9f:2a:b9:fb:c8: d3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:74:54:F8:17:C1:CD:8F:95:2F:2A:1E:DB:DD:36:99:B1:82:BB:7B X509v3 Authority Key Identifier: keyid:1E:DD:79:D5:65:81:63:5F:7F:32:97:C6:D2:70:C7:37:49:78:9E:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/23331070F9FB11EB8CFF5E7DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 101.53.160.0/19 182.50.76.0/22 202.129.242.0/23 IPv6: 2401:ce80::/32 Signature Algorithm: sha256WithRSAEncryption 6e:46:ae:dd:83:94:2c:fd:17:82:ae:d4:b6:06:8b:02:59:5f: 67:10:f2:e5:b3:99:03:65:ce:74:1d:92:ad:d4:81:72:db:0f: 16:16:7a:ba:0d:bd:a3:51:00:59:06:49:74:1c:f7:bf:7b:d6: 7f:a3:bb:b4:ef:f6:43:27:b9:9a:36:67:0e:6c:56:c4:83:72: 6a:f6:56:8e:6e:aa:8c:f2:cf:76:0e:ac:04:74:70:68:22:bc: be:48:e0:8f:f5:5a:cf:43:87:4d:18:b4:e7:93:68:8a:0b:ed: 7f:bc:fe:2d:86:dd:c8:19:12:55:6c:92:47:c5:33:3f:65:c2: 96:b6:66:f4:f9:94:e2:0a:32:08:c4:11:fb:2a:04:eb:df:d0: d7:44:05:3a:10:2d:d3:c6:d0:7f:54:34:e8:3e:bd:f1:ab:7a: 60:10:fe:2e:61:26:ab:55:38:22:53:49:36:d3:d6:16:4e:02: 2a:af:bc:47:3c:af:94:da:2f:a2:7e:2e:d7:07:52:94:99:50: 53:48:d9:e2:4c:71:51:3d:3b:6d:c4:d3:96:8d:96:94:0e:07: 32:27:8f:9a:df:47:dd:44:ba:2f:6d:6f:4b:27:41:cd:45:95: 61:9b:53:96:5b:4b:d5:20:70:c2:6c:16:e1:b1:3a:ee:41:f7: 79:76:93:db -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICBhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENkUxMTAvBgNVBAUTKDFFREQ3OUQ1NjU4MTYzNUY3RjMyOTdDNkQyNzBDNzM3 NDk3ODlFM0QwHhcNMjUxMDAyMjMyNDM2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzM0My1mYTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRjc8SsJdN1CJsrP4LtouiCrvaxmE9IWxsHgSnbEb2aofzzBGPpHkJyHgGR8 LchMvCLuJw+oQAMQl3XZp2ep6w6ll0fitC/Mun62kXmJOoH5DQJrTRRez2Y1hOMA mgztN5D4j6ByupJEQqM7OdlF4BJa2znhHKLdjHQiFfE9sN9uwxoyKC9wVIKFop5e /F/LwexHsaDMDVkVnN+zgKXKi+mF6BmLUUPbwn/Rk0Q4obdnox2nd84daKovTk6u uYgcgtn5XEK8YeUeQBb9pvh9CLsC2+GifUYVHtA8bwOGGZwTOrqbszJ702YtH0+b iIhnlOI+pDPBT5nknyq5+8jTowIDAQABo4ICezCCAncwHQYDVR0OBBYEFIh0VPgX wc2PlS8qHtvdNpmxgrt7MB8GA1UdIwQYMBaAFB7dedVlgWNffzKXxtJwxzdJeJ49 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS81NkU5QTdBNERG RjExMUVCODk0RjMwNjdDNEY5QUUwMi9IdDE1MVdXQlkxOV9NcGZHMG5ESE4wbDRu ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0MTUxV1dCWTE5X01wZkcwbkRITjBsNG5qMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODVENkUvNTZFOUE3QTRERkYxMTFFQjg5NEYzMDY3QzRGOUFFMDIvMjMzMzEwNzBG OUZCMTFFQjhDRkY1RTdEQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQFZTWgAwQCtjJMAwQByoHyMA0EAgACMAcDBQAkAc6AMA0GCSqGSIb3 DQEBCwUAA4IBAQBuRq7dg5Qs/ReCrtS2BosCWV9nEPLls5kDZc50HZKt1IFy2w8W Fnq6Db2jUQBZBkl0HPe/e9Z/o7u07/ZDJ7maNmcObFbEg3Jq9laObqqM8s92DqwE dHBoIry+SOCP9VrPQ4dNGLTnk2iKC+1/vP4tht3IGRJVbJJHxTM/ZcKWtmb0+ZTi CjIIxBH7KgTr39DXRAU6EC3TxtB/VDToPr3xq3pgEP4uYSarVTgiU0k209YWTgIq r7xHPK+U2i+ifi7XB1KUmVBTSNniTHFRPTttxNOWjZaUDgcyJ4+a30fdRLovbW9L J0HNRZVhm1OWW0vVIHDCbBbhsTruQfd5dpPb -----END CERTIFICATE-----Generated at Mon Mar 2 10:55:20 2026 by rpki-client