$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/35C008E818C811F0BF9E881FC4F9AE02.roa File: 35C008E818C811F0BF9E881FC4F9AE02.roa (raw, json) Hash identifier: P1yTaYpQKdP44uCNWcm3GSLyQQ9HAPHAkjE1wN6st/k= Subject key identifier: 81:75:AB:B1:F9:56:38:A0:1F:EB:9E:C2:54:E6:7D:0C:8C:67:EC:1D Certificate issuer: /CN=A919D3F9/serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5 Certificate serial: A8 Authority key identifier: 33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/35C008E818C811F0BF9E881FC4F9AE02.roa Signing time: Sun 01 Mar 2026 08:07:15 +0000 ROA not before: Sat 19 Jul 2025 08:14:33 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 149872 IP address blocks: 203.4.164.0/22 maxlen: 22 203.4.164.0/24 maxlen: 24 203.4.165.0/24 maxlen: 24 203.4.166.0/24 maxlen: 24 203.4.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D3F9, serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5 Validity Not Before: Jul 19 08:14:33 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a3f3b3-4afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:52:78:ed:64:6b:90:40:9d:bd:8d:33:42:5e: 29:21:bd:e7:b0:f2:c6:21:fc:df:e6:00:ae:e8:1a: f7:0f:a0:57:19:b0:23:3f:5e:62:7d:8e:6d:86:5d: 03:09:20:c8:9c:06:45:e4:c2:b8:6c:76:e8:03:94: 43:cb:05:de:0d:8b:48:53:09:62:e1:d5:f9:1c:84: 8d:5d:e7:8a:85:72:84:e2:9a:72:be:11:e6:bb:a0: f1:af:ce:2a:02:7a:2e:3c:31:46:ec:b8:e0:90:37: 61:fc:34:9c:03:fb:c7:96:70:6b:22:4b:72:89:ac: 73:99:e7:9f:e5:e0:53:1f:25:a6:94:bb:2c:64:1e: 9c:02:98:0f:b6:dc:47:f4:9f:b6:e3:ed:20:f9:04: f8:d9:e0:1e:ff:8a:c9:4e:aa:62:9b:ac:87:ae:ed: ff:96:15:7e:9c:7d:10:a3:6e:fd:a6:3a:af:a6:5e: 86:38:c1:58:00:c3:01:77:8f:66:9e:2d:2a:2d:48: e9:d5:6a:4d:59:eb:4d:b8:a6:cb:d0:ed:53:19:14: e9:fb:77:ac:9c:40:27:20:da:c5:64:f9:e7:97:a4: 08:7a:f9:00:6a:06:4c:ad:96:46:4d:f8:e4:61:00: 9d:96:7c:d1:d9:01:26:c4:50:6a:42:46:b8:e0:58: df:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:75:AB:B1:F9:56:38:A0:1F:EB:9E:C2:54:E6:7D:0C:8C:67:EC:1D X509v3 Authority Key Identifier: keyid:33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/35C008E818C811F0BF9E881FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.4.164.0/22 Signature Algorithm: sha256WithRSAEncryption a7:89:02:e7:2c:cf:20:e3:50:74:27:b9:73:0e:83:b5:56:e6: 66:cc:48:7a:1b:e1:48:b2:c6:bc:c9:05:b4:5d:ee:15:e4:df: a3:ee:f8:5f:1e:17:03:4c:0e:e2:ce:a4:8d:b2:3c:16:f4:f7: 06:53:9c:cc:d7:06:45:87:65:1b:1e:69:d3:5c:9a:c9:47:35: 9c:d7:69:54:1b:12:be:be:e0:55:b2:33:04:ca:b8:03:2c:1d: 8a:38:aa:ff:dd:74:3c:54:c1:8b:54:66:6d:25:c2:bd:c6:41: 7f:5e:c1:ab:7a:64:51:9e:a3:83:d4:39:28:71:f0:c0:13:20: 22:af:e8:07:1a:15:06:ac:81:8c:94:ef:4b:93:a6:0e:6c:31: c4:2f:68:b6:8b:3a:c1:81:76:02:ea:ec:da:50:cf:5b:78:14: 0f:40:7d:89:75:2f:0c:9b:96:20:35:3a:b7:20:c3:53:4a:d0: 74:4a:33:9f:99:b2:4b:2d:d7:93:f7:1b:0f:10:9c:7a:58:4f: 5c:29:0f:f7:b2:aa:39:21:8a:61:79:5d:70:a8:44:5e:d0:3e: f7:ce:9c:65:d1:42:3a:4a:1d:57:8f:7a:5e:88:53:bd:db:be: 7e:78:78:56:6c:b1:d9:00:c0:b6:06:ef:57:3f:38:29:81:57: 68:f4:03:0d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzRjkxMTAvBgNVBAUTKDMzNjJBQzU4RURCMTg5Q0YyNTc4M0MyN0Q5MEE3RDJG QTMyOTc3QzUwHhcNMjUwNzE5MDgxNDMzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZjNiMy00YWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl1J47WRrkECdvY0zQl4pIb3nsPLGIfzf5gCu6Br3D6BXGbAjP15ifY5thl0D CSDInAZF5MK4bHboA5RDywXeDYtIUwli4dX5HISNXeeKhXKE4ppyvhHmu6Dxr84q AnouPDFG7LjgkDdh/DScA/vHlnBrIktyiaxzmeef5eBTHyWmlLssZB6cApgPttxH 9J+24+0g+QT42eAe/4rJTqpim6yHru3/lhV+nH0Qo279pjqvpl6GOMFYAMMBd49m ni0qLUjp1WpNWetNuKbL0O1TGRTp+3esnEAnINrFZPnnl6QIevkAagZMrZZGTfjk YQCdlnzR2QEmxFBqQka44FjfKwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIF1q7H5 VjigH+uewlTmfQyMZ+wdMB8GA1UdIwQYMBaAFDNirFjtsYnPJXg8J9kKfS+jKXfF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDNGOS8xMjIyMzZFNjE4 QzcxMUYwODA1NDE3N0VDNEY5QUUwMi9NMktzV08yeGljOGxlRHduMlFwOUw2TXBk OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yS3NXTzJ4aWM4bGVEd24yUXA5TDZNcGQ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQzRjkvMTIyMjM2RTYxOEM3MTFGMDgwNTQxNzdFQzRGOUFFMDIvMzVDMDA4RTgx OEM4MTFGMEJGOUU4ODFGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCywSkMA0GCSqGSIb3DQEBCwUAA4IBAQCniQLnLM8g41B0J7lzDoO1 VuZmzEh6G+FIssa8yQW0Xe4V5N+j7vhfHhcDTA7izqSNsjwW9PcGU5zM1wZFh2Ub HmnTXJrJRzWc12lUGxK+vuBVsjMEyrgDLB2KOKr/3XQ8VMGLVGZtJcK9xkF/XsGr emRRnqOD1DkocfDAEyAir+gHGhUGrIGMlO9Lk6YObDHEL2i2izrBgXYC6uzaUM9b eBQPQH2JdS8Mm5YgNTq3IMNTStB0SjOfmbJLLdeT9xsPEJx6WE9cKQ/3sqo5IYph eV1wqERe0D73zpxl0UI6Sh1Xj3peiFO9275+eHhWbLHZAMC2Bu9XPzgpgVdo9AMN -----END CERTIFICATE-----Generated at Mon Mar 2 00:28:19 2026 by rpki-client