$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/09106CCCAD3E11ED8B645C39C4F9AE02.roa File: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (raw, json) Hash identifier: N3nsvmOWllg7YY9UOijNOBu82tIVELALhxtWtgqubMg= Subject key identifier: 00:4D:26:63:5C:8C:07:4C:C5:60:94:A9:B8:18:54:62:E1:FF:54:26 Certificate issuer: /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Certificate serial: 024F Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/09106CCCAD3E11ED8B645C39C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:06:30 +0000 ROA not before: Sat 07 Feb 2026 02:21:55 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 45577 IP address blocks: 203.20.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Validity Not Before: Feb 7 02:21:55 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a455f6-844e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:f8:91:7d:a1:1d:38:52:c2:5a:80:a7:d6: 49:b2:02:a1:94:cb:94:1b:17:13:50:20:55:56:64: 10:e4:92:2a:1b:bb:4d:ca:25:a6:6b:52:fc:af:1f: 56:da:1a:5b:41:96:a1:30:77:27:10:72:1c:c5:06: d9:e8:40:16:e1:4d:d1:9c:ea:02:df:26:ac:22:1c: 17:a2:d7:1c:47:4b:03:ed:72:52:aa:32:05:d5:72: e7:29:ae:29:c7:2e:23:97:f1:84:6b:bc:b0:cf:51: 67:36:05:e0:62:fc:2b:90:42:b0:91:5f:b8:ef:31: 59:c2:6a:de:c3:53:5a:65:e1:3f:94:6b:79:b0:7c: d3:b6:c6:b0:26:5d:f8:37:4c:92:1b:f4:74:b3:13: 9a:97:15:fb:62:c7:d1:12:4b:34:19:72:40:a1:59: 55:51:5b:f1:82:3a:8d:a8:04:72:d1:62:5a:05:20: 6d:8c:15:2a:69:c7:02:b6:08:b7:a1:20:46:1a:c1: bf:b2:60:a9:f6:8b:57:02:92:51:ae:2a:54:cf:60: 32:03:d3:85:44:20:99:f4:e2:1b:ec:85:97:8a:39: 65:b8:e8:fd:4f:bd:d3:54:12:b0:87:37:f6:27:57: 4a:54:72:50:46:c4:05:06:26:ec:67:c4:bb:9b:ea: 82:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4D:26:63:5C:8C:07:4C:C5:60:94:A9:B8:18:54:62:E1:FF:54:26 X509v3 Authority Key Identifier: keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/09106CCCAD3E11ED8B645C39C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.20.68.0/24 Signature Algorithm: sha256WithRSAEncryption 91:64:2c:76:ec:9c:0d:9d:83:ad:b9:b3:4a:dd:2b:d4:96:ba: 36:d9:07:a4:81:6c:13:1d:7c:95:8f:23:ec:c2:28:b4:4d:08: 93:3e:c6:d9:1a:60:5c:2d:0c:a9:0e:57:02:a9:17:93:6a:f4: 8e:04:ed:92:55:01:08:9c:6e:f8:ae:c9:64:b1:6b:d4:f6:09: af:67:33:17:2f:36:a6:60:fb:cb:4a:25:17:32:67:f3:f6:41: 64:31:59:bd:f7:59:fa:e5:01:81:fe:c3:c2:dc:69:32:d4:a8: da:72:99:7d:09:01:4e:de:97:34:ff:96:0e:cb:4a:d0:38:f8: 19:50:ba:c2:bd:26:05:cc:1b:33:c2:66:2b:12:36:6d:95:12: 97:04:69:62:4c:eb:7d:82:57:6b:3f:8d:0e:6d:06:41:18:18: 13:1e:7f:36:57:30:da:d5:51:c5:ab:5c:98:92:ca:1c:83:b7: 71:13:78:75:ff:a2:58:32:43:29:fc:64:c2:df:23:43:0f:5a: 51:de:e1:b7:e7:57:80:02:9b:39:af:06:20:5a:05:95:6a:4a: 7f:e4:9e:1d:0a:85:7c:82:99:da:9e:88:c3:26:af:37:ed:6a: 8c:10:c4:5c:92:e0:16:2c:27:e8:e1:58:5f:ad:70:bd:66:47: d5:55:5b:c8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYwMEUxMTAvBgNVBAUTKDE4RTFGNzMyRUZBNTNDMzk3M0ExQUNEMjJDMTM2OEE1 RTFGMkNBNTIwHhcNMjYwMjA3MDIyMTU1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTVmNi04NDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/D4kX2hHThSwlqAp9ZJsgKhlMuUGxcTUCBVVmQQ5JIqG7tNyiWma1L8rx9W 2hpbQZahMHcnEHIcxQbZ6EAW4U3RnOoC3yasIhwXotccR0sD7XJSqjIF1XLnKa4p xy4jl/GEa7ywz1FnNgXgYvwrkEKwkV+47zFZwmrew1NaZeE/lGt5sHzTtsawJl34 N0ySG/R0sxOalxX7YsfREks0GXJAoVlVUVvxgjqNqARy0WJaBSBtjBUqaccCtgi3 oSBGGsG/smCp9otXApJRripUz2AyA9OFRCCZ9OIb7IWXijlluOj9T73TVBKwhzf2 J1dKVHJQRsQFBibsZ8S7m+qCwwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFABNJmNc jAdMxWCUqbgYVGLh/1QmMB8GA1UdIwQYMBaAFBjh9zLvpTw5c6Gs0iwTaKXh8spS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjAwRS81QUExODIyRUFE MzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBEbHpvYXpTTEJOb3BlSHl5 bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dPSDNNdS1sUERsem9helNMQk5vcGVIeXlsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEYwMEUvNUFBMTgyMkVBRDM5MTFFREEwQjlCODNDQzRGOUFFMDIvMDkxMDZDQ0NB RDNFMTFFRDhCNjQ1QzM5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyxREMA0GCSqGSIb3DQEBCwUAA4IBAQCRZCx27JwNnYOtubNK3SvU lro22QekgWwTHXyVjyPswii0TQiTPsbZGmBcLQypDlcCqReTavSOBO2SVQEInG74 rslksWvU9gmvZzMXLzamYPvLSiUXMmfz9kFkMVm991n65QGB/sPC3Gky1Kjacpl9 CQFO3pc0/5YOy0rQOPgZULrCvSYFzBszwmYrEjZtlRKXBGliTOt9gldrP40ObQZB GBgTHn82VzDa1VHFq1yYksocg7dxE3h1/6JYMkMp/GTC3yNDD1pR3uG351eAAps5 rwYgWgWVakp/5J4dCoV8gpnanojDJq837WqMEMRckuAWLCfo4VhfrXC9ZkfVVVvI -----END CERTIFICATE-----Generated at Mon Mar 2 16:46:45 2026 by rpki-client