$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/F70E4B8EEBC911F0BD3A2F28686F56BC.roa File: F70E4B8EEBC911F0BD3A2F28686F56BC.roa (raw, json) Hash identifier: 8CNnaJx3H61GgnJxhNhOMmVhr6HZscFPEBcc69eMEC4= Subject key identifier: 95:7D:C2:78:ED:96:AE:8D:49:F3:BF:F3:3D:3D:84:03:93:66:E7:E9 Certificate issuer: /CN=A918B909/serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57 Certificate serial: 21 Authority key identifier: CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/F70E4B8EEBC911F0BD3A2F28686F56BC.roa Signing time: Sun 01 Mar 2026 05:47:10 +0000 ROA not before: Wed 07 Jan 2026 13:08:31 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 142175 IP address blocks: 192.232.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B909, serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57 Validity Not Before: Jan 7 13:08:31 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a3d2de-ed11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a6:d7:64:c0:17:42:5c:75:99:f4:dd:f7:f8: c8:38:5f:1f:ab:7d:9a:ed:79:e3:bd:c3:f5:b4:cd: 28:b1:c9:b6:3d:6e:00:89:c7:a5:31:75:c4:a7:92: 68:03:6f:28:47:6d:51:04:18:d1:b4:57:f7:aa:65: 7b:93:66:f0:b1:91:d7:37:4c:9f:67:61:e0:ed:fc: 39:04:e4:8a:8b:88:86:26:27:e9:63:b4:10:74:01: a1:79:3b:88:0f:d4:4f:a1:93:48:ad:40:07:9f:0e: 22:d0:c9:e1:18:f0:f0:ec:67:35:67:cf:41:8d:e5: ee:98:5f:c3:df:0b:11:ce:30:8d:92:a2:25:b8:a5: 88:85:4b:2f:73:04:6b:6a:b0:1d:89:f6:c7:d9:51: d5:2f:4b:b4:ed:1c:62:8f:83:0f:f6:11:c0:6b:ce: 15:b9:c8:33:05:ef:81:a6:7d:9b:67:10:44:ef:ab: 1d:c2:4a:14:99:f3:b0:86:11:40:3a:e4:22:25:3f: cd:fe:e2:1a:8a:89:8e:5b:00:6a:7a:ea:7a:51:b2: ee:16:34:5f:ae:64:ca:b8:2a:ea:56:0a:d1:52:47: ba:bb:98:cc:17:4a:e3:bd:ac:3e:f9:75:17:ad:a0: 13:e3:5e:1c:e2:ad:52:b1:73:a1:2f:d2:e9:6b:db: 42:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7D:C2:78:ED:96:AE:8D:49:F3:BF:F3:3D:3D:84:03:93:66:E7:E9 X509v3 Authority Key Identifier: keyid:CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/F70E4B8EEBC911F0BD3A2F28686F56BC.roa sbgp-ipAddrBlock: critical IPv4: 192.232.42.0/23 Signature Algorithm: sha256WithRSAEncryption bf:73:00:93:16:25:3e:75:79:2c:b6:42:b9:38:c3:ff:91:91: 6c:83:73:02:22:bc:a7:03:62:db:53:3f:ac:1e:e8:c6:89:bb: 0c:54:f1:90:48:f9:e3:44:d7:1d:b4:ea:15:b9:ec:6a:95:cd: 5c:64:f2:53:36:63:65:47:6f:24:5c:5c:02:13:52:55:38:f9: 2f:e9:a8:f5:6f:ba:c5:63:1d:ad:fc:3f:99:a5:1c:c0:a4:a1: ae:d7:83:22:3c:b1:47:7c:23:a1:ac:96:8f:33:a8:e1:8b:f1: b4:66:c8:25:1d:28:11:2e:42:17:81:ae:b3:82:23:65:a4:94: c1:6e:2d:e4:c1:42:fa:d8:43:d1:f7:62:30:13:64:8b:2f:7f: 5d:91:28:51:9f:8e:c1:23:56:51:fc:8b:03:da:7c:9f:80:54: fd:42:f3:47:4e:46:d4:01:2c:f2:bc:cb:8b:41:c9:2c:d0:f0: 62:31:cc:05:0f:a0:81:f9:6b:2b:bf:23:a0:d3:4b:e3:70:b0: c3:54:9d:ae:da:6a:98:cc:22:59:40:e1:3c:ec:84:c2:8e:d0: ca:23:5b:a3:0c:a3:a0:fe:0e:0e:d5:a2:33:8a:c6:2a:03:54: 41:0d:b7:23:42:47:fb:10:95:79:ec:b0:70:b0:c8:26:13:65: 6b:59:85:34 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QjkwOTExMC8GA1UEBRMoQ0VBRUMwRTg3RDk1ODUyQjQ0QzA2MTM5NTU0NkI3RTBD MUQxMUM1NzAeFw0yNjAxMDcxMzA4MzFaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkMmRlLWVkMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGptdkwBdCXHWZ9N33+Mg4Xx+rfZrteeO9w/W0zSixybY9bgCJx6UxdcSnkmgD byhHbVEEGNG0V/eqZXuTZvCxkdc3TJ9nYeDt/DkE5IqLiIYmJ+ljtBB0AaF5O4gP 1E+hk0itQAefDiLQyeEY8PDsZzVnz0GN5e6YX8PfCxHOMI2SoiW4pYiFSy9zBGtq sB2J9sfZUdUvS7TtHGKPgw/2EcBrzhW5yDMF74GmfZtnEETvqx3CShSZ87CGEUA6 5CIlP83+4hqKiY5bAGp66npRsu4WNF+uZMq4KupWCtFSR7q7mMwXSuO9rD75dRet oBPjXhzirVKxc6Ev0ulr20JJAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUlX3CeO2W ro1J87/zPT2EA5Nm5+kwHwYDVR0jBBgwFoAUzq7A6H2VhStEwGE5VUa34MHRHFcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCOTA5LzVDMkQxMDY0RUJD OTExRjA5MzZFREI4MzY3NkY1NkJDL3pxN0E2SDJWaFN0RXdHRTVWVWEzNE1IUkhG Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvenE3QTZIMlZoU3RFd0dFNVZVYTM0TUhSSEZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjkwOS81QzJEMTA2NEVCQzkxMUYwOTM2RURCODM2NzZGNTZCQy9GNzBFNEI4RUVC QzkxMUYwQkQzQTJGMjg2ODZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAHA6CowDQYJKoZIhvcNAQELBQADggEBAL9zAJMWJT51eSy2Qrk4w/+R kWyDcwIivKcDYttTP6we6MaJuwxU8ZBI+eNE1x206hW57GqVzVxk8lM2Y2VHbyRc XAITUlU4+S/pqPVvusVjHa38P5mlHMCkoa7XgyI8sUd8I6Gslo8zqOGL8bRmyCUd KBEuQheBrrOCI2WklMFuLeTBQvrYQ9H3YjATZIsvf12RKFGfjsEjVlH8iwPafJ+A VP1C80dORtQBLPK8y4tBySzQ8GIxzAUPoIH5ayu/I6DTS+NwsMNUna7aapjMIllA 4TzshMKO0MojW6MMo6D+Dg7VojOKxioDVEENtyNCR/sQlXnssHCwyCYTZWtZhTQ= -----END CERTIFICATE-----Generated at Mon Mar 2 16:35:57 2026 by rpki-client