$ rpki-client -vvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/86850E56021D11F18B736F00496F56BC.roa File: 86850E56021D11F18B736F00496F56BC.roa (raw, json) Hash identifier: oMFFRDy0M4+41cSaLb20l6WkGe5OER2BWoKYT5sQvmU= Subject key identifier: 23:FF:27:7B:53:E2:21:7A:DE:1F:07:48:5B:08:ED:50:97:04:3B:91 Certificate issuer: /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A Certificate serial: 0BE1 Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/86850E56021D11F18B736F00496F56BC.roa Signing time: Sun 01 Mar 2026 15:37:49 +0000 ROA not before: Wed 04 Feb 2026 23:02:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 17918 IP address blocks: 117.53.160.0/20 maxlen: 24 202.44.98.0/23 maxlen: 24 202.129.128.0/19 maxlen: 24 203.22.104.0/23 maxlen: 24 2404:8600::/32 maxlen: 37 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3041 (0xbe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918919A, serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A Validity Not Before: Feb 4 23:02:06 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a45d4c-b41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f5:f0:30:c9:c9:99:c4:99:ab:49:b4:a2:37: db:78:c7:e8:06:2f:24:ab:97:41:01:4d:a8:7d:20: 01:38:c1:5f:5d:ca:19:bf:09:1e:c8:70:80:45:01: 19:ba:0a:2a:ea:11:08:0e:68:d2:00:68:ea:ba:26: 68:58:e2:51:4b:3f:c4:d4:f5:b4:e4:1e:2d:2f:5a: a4:ee:92:1d:32:3c:ea:5e:f2:02:62:b2:c4:d5:04: 55:9f:56:4e:ae:02:c0:52:87:43:5d:ba:0b:b9:c5: fa:07:8c:9b:7f:41:87:19:ed:fd:11:f8:cc:eb:bf: 05:f9:8e:ee:a0:2d:02:9d:00:cf:12:03:c4:c4:6f: a8:22:be:9f:1e:89:a6:39:37:b7:41:bf:bb:ff:8b: ec:7f:2b:54:91:59:bc:0f:d3:5f:92:ac:73:36:78: 73:ae:7d:ef:91:c3:f3:63:02:6f:b1:bc:7d:6d:97: 0d:42:f1:c8:36:2c:84:67:84:0d:f8:f7:c8:78:55: 5c:9c:fa:89:28:f1:72:55:28:b7:57:76:b7:d4:ef: 11:27:6f:5c:e1:79:f5:00:0c:35:de:83:93:ee:3c: fc:f9:4f:38:a0:41:60:36:e2:09:47:59:b3:b3:71: 27:29:0a:78:51:42:94:bf:5f:ed:9c:36:ca:4c:36: 8e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FF:27:7B:53:E2:21:7A:DE:1F:07:48:5B:08:ED:50:97:04:3B:91 X509v3 Authority Key Identifier: keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/86850E56021D11F18B736F00496F56BC.roa sbgp-ipAddrBlock: critical IPv4: 117.53.160.0/20 202.44.98.0/23 202.129.128.0/19 203.22.104.0/23 IPv6: 2404:8600::/32 Signature Algorithm: sha256WithRSAEncryption 6c:b6:fd:4f:11:fc:8f:9c:76:4b:b1:7c:c0:03:91:14:38:85: 1e:57:7d:2d:bf:7e:97:fb:14:28:48:58:da:dd:6b:5f:58:dd: d0:8c:75:1f:de:37:24:d4:d6:8e:aa:05:1b:d5:d0:1a:07:1a: 04:68:f1:d3:4d:7d:04:82:21:05:88:8e:82:25:9d:58:59:00: c0:16:55:91:74:7d:ca:36:66:b9:8a:26:1b:9e:d1:f3:52:f1: 62:dd:b4:fc:e6:2c:74:32:b5:42:e3:54:0f:e0:59:55:e3:f6: 90:68:69:c2:8d:3d:0f:23:2c:44:02:ef:e5:ae:fa:be:90:fd: ea:97:72:a8:b4:95:76:33:90:95:60:09:45:97:e9:03:a3:44: 1e:4b:d4:c4:fb:d7:9a:81:d9:ec:3c:09:64:e9:e1:0e:9d:b0: b6:52:f6:6f:fd:1f:c2:f8:7f:c9:e0:89:b5:6c:00:35:49:bf: ed:b0:f1:f0:c0:07:de:3c:ba:30:96:2c:6c:36:d9:70:3e:8f: 44:f3:74:35:ce:61:ff:91:37:b7:12:7f:10:8c:c4:5c:e5:99: 59:a2:f9:a1:9c:40:2a:41:9e:29:f7:64:c7:f3:b7:03:36:0e: 9f:1a:aa:70:80:62:f2:00:8a:68:f0:a9:ef:81:b3:c7:10:89: 9b:e2:c4:4c -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICC+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxOUExMTAvBgNVBAUTKDJFNUJDQkM2NjFBRkYxRkVENThCMEZGNEI1ODNEQ0Y1 RUMxQTM3NEEwHhcNMjYwMjA0MjMwMjA2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWQ0Yy1iNDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/XwMMnJmcSZq0m0ojfbeMfoBi8kq5dBAU2ofSABOMFfXcoZvwkeyHCARQEZ ugoq6hEIDmjSAGjquiZoWOJRSz/E1PW05B4tL1qk7pIdMjzqXvICYrLE1QRVn1ZO rgLAUodDXboLucX6B4ybf0GHGe39EfjM678F+Y7uoC0CnQDPEgPExG+oIr6fHomm OTe3Qb+7/4vsfytUkVm8D9NfkqxzNnhzrn3vkcPzYwJvsbx9bZcNQvHINiyEZ4QN +PfIeFVcnPqJKPFyVSi3V3a31O8RJ29c4Xn1AAw13oOT7jz8+U84oEFgNuIJR1mz s3EnKQp4UUKUv1/tnDbKTDaOCwIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFCP/J3tT 4iF63h8HSFsI7VCXBDuRMB8GA1UdIwQYMBaAFC5by8Zhr/H+1YsP9LWD3PXsGjdK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTE5QS8wNDkwOTA5QTQz MUIxMUVBQjAxOTc3MkNDNEY5QUUwMi9MbHZMeG1HdjhmN1Zpd18wdFlQYzlld2FO MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsdkx4bUd2OGY3Vml3XzB0WVBjOWV3YU4wby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODkxOUEvMDQ5MDkwOUE0MzFCMTFFQUIwMTk3NzJDQzRGOUFFMDIvODY4NTBFNTYw MjFEMTFGMThCNzM2RjAwNDk2RjU2QkMucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQEdTWgAwQByixiAwQFyoGAAwQByxZoMA0EAgACMAcDBQAkBIYAMA0G CSqGSIb3DQEBCwUAA4IBAQBstv1PEfyPnHZLsXzAA5EUOIUeV30tv36X+xQoSFja 3WtfWN3QjHUf3jck1NaOqgUb1dAaBxoEaPHTTX0EgiEFiI6CJZ1YWQDAFlWRdH3K Nma5iiYbntHzUvFi3bT85ix0MrVC41QP4FlV4/aQaGnCjT0PIyxEAu/lrvq+kP3q l3KotJV2M5CVYAlFl+kDo0QeS9TE+9eagdnsPAlk6eEOnbC2UvZv/R/C+H/J4Im1 bAA1Sb/tsPHwwAfePLowlixsNtlwPo9E83Q1zmH/kTe3En8QjMRc5ZlZovmhnEAq QZ4p92TH87cDNg6fGqpwgGLyAIpo8KnvgbPHEImb4sRM -----END CERTIFICATE-----Generated at Mon Mar 2 19:23:08 2026 by rpki-client