$ rpki-client -vvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/BC36A3E8A67E11F0A35CBF40C4F9AE02.roa File: BC36A3E8A67E11F0A35CBF40C4F9AE02.roa (raw, json) Hash identifier: iXhnwf/klA+xcRwxUiw09zRjj/31dDPcCbC/JYSI9HY= Subject key identifier: 1C:3D:C1:11:A2:AC:BE:75:4A:AD:B6:CA:5F:6B:C6:5C:82:6A:A0:C2 Certificate issuer: /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Certificate serial: 0D3B Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/BC36A3E8A67E11F0A35CBF40C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:02:26 +0000 ROA not before: Wed 18 Feb 2026 18:15:43 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 153523 IP address blocks: 116.212.186.0/24 maxlen: 24 116.212.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3387 (0xd3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F88D, serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Validity Not Before: Feb 18 18:15:43 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a47f32-7351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fb:07:30:ab:f1:3a:2c:15:9e:81:23:83:8a: 7b:b6:fd:e0:68:6b:73:26:9f:04:ba:9b:73:7a:4f: be:32:ba:b6:71:86:9d:83:97:23:4e:94:dc:41:7f: 38:7c:22:fa:8e:86:27:e1:05:9d:ab:60:64:e9:55: 22:6e:af:81:14:81:fa:c8:6a:64:56:b7:5a:29:b4: c9:7c:74:37:93:16:29:7a:6e:49:bf:5f:83:96:08: b9:b2:5a:1b:ae:57:35:49:4a:cb:e8:71:5a:d2:9a: 05:79:5b:82:ba:40:d3:d0:61:e9:08:39:37:30:29: db:5e:9e:c3:c5:89:35:2c:04:d8:fc:75:94:8d:12: 48:ed:33:cf:9e:81:cd:32:ce:a9:0b:13:35:cb:fc: 4b:a3:66:35:c3:e2:2e:6f:09:1e:62:c4:9c:9d:41: a1:58:5c:f0:b9:1e:0a:e1:7a:68:e6:34:47:ea:dd: ba:ae:db:25:6c:07:ce:ba:61:57:19:cf:fe:d2:77: dd:bb:9b:98:e6:c1:38:b3:6f:03:66:80:87:f4:e3: 87:dc:b4:b0:45:16:05:26:5f:44:77:03:ce:bc:bb: 61:bf:78:11:e6:33:99:fb:2a:d5:e0:22:61:64:7c: 05:28:7f:30:53:13:f9:77:aa:5f:d2:ab:7f:49:a0: 04:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3D:C1:11:A2:AC:BE:75:4A:AD:B6:CA:5F:6B:C6:5C:82:6A:A0:C2 X509v3 Authority Key Identifier: keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/BC36A3E8A67E11F0A35CBF40C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.212.186.0/23 Signature Algorithm: sha256WithRSAEncryption c3:c7:68:96:52:0e:6a:00:07:4e:84:c0:ba:6d:f8:48:1d:61: 79:5e:38:a1:d5:d9:06:7f:5e:82:b4:ab:6f:d8:46:69:1c:35: 53:73:9c:92:e4:ff:83:3f:5c:8e:69:22:20:03:9f:c1:c2:98: 07:8f:31:84:d7:a3:47:87:16:85:04:b3:fc:63:86:b5:d0:32: 13:bf:e4:b7:13:5b:12:24:d4:a4:72:35:7c:51:09:5f:97:1b: 4f:6d:ef:59:1c:e5:2a:ba:b5:dd:3d:55:dc:b4:f7:d2:bf:c8: 38:46:6c:8b:44:80:31:ce:55:88:51:dd:1a:93:73:dd:8c:7b: b0:2a:89:83:58:f7:a8:b0:37:6d:b7:dc:69:6a:d1:d8:5b:b6: 93:22:d1:76:0f:f7:67:94:3f:75:4f:32:37:83:e0:7d:47:de: 2d:bb:00:af:f4:a3:8f:5a:08:71:54:76:a5:00:94:e9:ef:55: cc:6a:8f:78:06:00:ad:43:bc:57:a7:38:1d:46:e6:46:7a:94: 57:d1:a6:5c:83:54:08:dc:45:9c:36:59:1e:09:3f:75:f5:7d: 4a:e7:36:10:42:9e:7c:11:78:aa:df:fd:45:9e:88:1d:4c:e6: ec:59:0c:18:30:e8:a3:64:00:58:a3:cd:17:25:97:e1:91:77: e9:d2:e8:3c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4OEQxMTAvBgNVBAUTKERCMUNCODQ4NTQwNjlFNDNDQTFCNzI1RDQyRUE2QkE5 QjUzOTgxNUIwHhcNMjYwMjE4MTgxNTQzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2YzMi03MzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3PsHMKvxOiwVnoEjg4p7tv3gaGtzJp8Euptzek++Mrq2cYadg5cjTpTcQX84 fCL6joYn4QWdq2Bk6VUibq+BFIH6yGpkVrdaKbTJfHQ3kxYpem5Jv1+Dlgi5slob rlc1SUrL6HFa0poFeVuCukDT0GHpCDk3MCnbXp7DxYk1LATY/HWUjRJI7TPPnoHN Ms6pCxM1y/xLo2Y1w+IubwkeYsScnUGhWFzwuR4K4Xpo5jRH6t26rtslbAfOumFX Gc/+0nfdu5uY5sE4s28DZoCH9OOH3LSwRRYFJl9EdwPOvLthv3gR5jOZ+yrV4CJh ZHwFKH8wUxP5d6pf0qt/SaAEewIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBw9wRGi rL51Sq22yl9rxlyCaqDCMB8GA1UdIwQYMBaAFNscuEhUBp5DyhtyXULqa6m1OYFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg4RC8yQTE0QkUwODAw NUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25rUEtHM0pkUXVwcnFiVTVn VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4eTRTRlFHbmtQS0czSmRRdXBycWJVNWdWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY4OEQvMkExNEJFMDgwMDVBMTFFQThGRENBMTMwQzRGOUFFMDIvQkMzNkEzRThB NjdFMTFGMEEzNUNCRjQwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBdNS6MA0GCSqGSIb3DQEBCwUAA4IBAQDDx2iWUg5qAAdOhMC6bfhI HWF5Xjih1dkGf16CtKtv2EZpHDVTc5yS5P+DP1yOaSIgA5/BwpgHjzGE16NHhxaF BLP8Y4a10DITv+S3E1sSJNSkcjV8UQlflxtPbe9ZHOUqurXdPVXctPfSv8g4RmyL RIAxzlWIUd0ak3PdjHuwKomDWPeosDdtt9xpatHYW7aTItF2D/dnlD91TzI3g+B9 R94tuwCv9KOPWghxVHalAJTp71XMao94BgCtQ7xXpzgdRuZGepRX0aZcg1QI3EWc NlkeCT919X1K5zYQQp58EXiq3/1FnogdTObsWQwYMOijZABYo80XJZfhkXfp0ug8 -----END CERTIFICATE-----Generated at Mon Mar 2 16:09:01 2026 by rpki-client