$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/A295F860E71011E8899C3917C4F9AE02.roa File: A295F860E71011E8899C3917C4F9AE02.roa (raw, json) Hash identifier: 0mtH92tidj+S9C8pEF1gtwl/Ps40TYHu37CLwgbwKxc= Subject key identifier: 1E:08:2F:4D:1B:95:BC:E7:83:82:3F:D2:66:61:19:9E:1C:DB:61:6D Certificate issuer: /CN=A919DD2D/serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676 Certificate serial: 128D Authority key identifier: 8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/A295F860E71011E8899C3917C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:46:19 +0000 ROA not before: Fri 28 Nov 2025 16:49:14 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 9661 IP address blocks: 202.41.194.0/23 maxlen: 23 202.41.194.0/24 maxlen: 24 202.41.195.0/24 maxlen: 24 203.29.0.0/24 maxlen: 24 2001:df5:cc00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4749 (0x128d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD2D, serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676 Validity Not Before: Nov 28 16:49:14 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4432b-0f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:eb:e2:30:d0:11:3e:b1:43:3b:18:56:56: 1c:49:b1:3b:10:34:5d:52:b6:38:2b:1d:2a:76:ee: 70:fb:7a:cb:d1:96:3d:96:8f:c7:6b:41:06:e7:a7: d0:96:0c:f3:a7:58:c6:f8:c1:bb:19:86:5b:cd:ed: f5:82:e3:b4:8b:ef:84:fd:79:73:0e:d0:84:37:e2: fc:6e:ae:22:6e:49:ea:a0:03:f2:f9:2b:bc:b5:35: 0a:d9:c7:a8:52:52:95:bb:f7:6d:5d:ce:62:91:b2: 6b:41:54:01:3a:f7:27:e1:5d:2e:20:14:3a:a6:3d: b4:5c:0e:52:5c:8c:8e:1d:2f:72:e0:0c:11:59:0b: 8d:6e:65:43:f1:cd:1f:1f:55:51:b7:75:4c:f8:9b: 93:a3:64:e1:96:a0:63:19:a1:ce:e4:dc:38:61:77: c5:fa:31:37:9f:d7:86:63:22:90:3c:25:14:bd:d6: 1e:6a:33:87:96:a5:8b:63:16:03:4f:3e:82:88:4b: b0:89:28:f3:37:95:67:48:99:6f:22:8c:8b:dc:15: b4:30:d6:41:2a:8c:82:5e:41:14:0a:58:a5:ed:03: e5:62:e8:eb:55:e7:4f:d7:44:ef:5e:7b:a9:6d:c1: fe:e9:c3:71:85:87:02:10:d8:cf:e2:84:2e:78:95: e9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:08:2F:4D:1B:95:BC:E7:83:82:3F:D2:66:61:19:9E:1C:DB:61:6D X509v3 Authority Key Identifier: keyid:8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/A295F860E71011E8899C3917C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.41.194.0/23 203.29.0.0/24 IPv6: 2001:df5:cc00::/48 Signature Algorithm: sha256WithRSAEncryption 10:0d:19:0f:e9:6e:be:89:7a:d4:5b:29:57:82:98:03:dd:f1: e6:21:18:1e:70:70:0d:c3:19:ce:28:0d:72:6e:40:36:a0:c7: e6:9f:23:34:95:e6:66:53:06:44:8a:39:87:b6:21:bb:c6:3d: 4f:70:90:ac:78:1d:19:3c:11:d5:17:a1:5b:48:3c:59:b5:2e: ff:0d:31:67:48:30:c5:34:e6:39:7c:d4:3d:1f:bc:9c:1f:a4: 95:20:17:21:af:ab:3e:41:c7:75:cb:6e:e6:a6:f4:db:7c:31: 1e:d4:22:60:d9:c3:b4:f3:e6:25:e5:f7:9b:0f:d0:39:90:ac: fb:32:4b:e6:41:93:b3:8c:7b:3d:04:d8:9c:19:31:0c:89:80: 02:3f:8b:d4:28:de:e1:da:e6:48:2f:28:37:2e:47:31:ce:46: f1:43:ef:0b:ab:97:da:5e:43:d1:ce:44:4a:02:82:f2:49:37: ad:8d:92:cf:4e:04:bc:d3:97:e7:2b:c1:79:64:c8:28:f9:1f: 95:a8:2b:6e:23:9e:55:fe:a2:f5:46:95:75:e0:56:7a:12:59: ea:65:b7:38:24:75:38:a3:b1:8b:e9:ad:33:d8:51:8c:d1:6e: 5d:a9:45:cc:4a:67:4d:72:ab:e8:a9:22:d2:f6:92:a3:63:a3: b6:7a:d8:ff -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICEo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUREMkQxMTAvBgNVBAUTKDhDRjQyMzk4MEZEM0E3RjY3RUM1RjRBNTQzQTIwM0E1 M0UzQ0U2NzYwHhcNMjUxMTI4MTY0OTE0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDMyYi0wZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhPr4jDQET6xQzsYVlYcSbE7EDRdUrY4Kx0qdu5w+3rL0ZY9lo/Ha0EG56fQ lgzzp1jG+MG7GYZbze31guO0i++E/XlzDtCEN+L8bq4ibknqoAPy+Su8tTUK2ceo UlKVu/dtXc5ikbJrQVQBOvcn4V0uIBQ6pj20XA5SXIyOHS9y4AwRWQuNbmVD8c0f H1VRt3VM+JuTo2ThlqBjGaHO5Nw4YXfF+jE3n9eGYyKQPCUUvdYeajOHlqWLYxYD Tz6CiEuwiSjzN5VnSJlvIoyL3BW0MNZBKoyCXkEUClil7QPlYujrVedP10TvXnup bcH+6cNxhYcCENjP4oQueJXpjQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFB4IL00b lbzng4I/0mZhGZ4c22FtMB8GA1UdIwQYMBaAFIz0I5gP06f2fsX0pUOiA6U+POZ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyRC85RDEyNjk1Q0U3 MEUxMUU4OUE5NjNEMTFDNEY5QUUwMi9qUFFqbUFfVHBfWi14ZlNsUTZJRHBUNDg1 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pQUWptQV9UcF9aLXhmU2xRNklEcFQ0ODVuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUREMkQvOUQxMjY5NUNFNzBFMTFFODlBOTYzRDExQzRGOUFFMDIvQTI5NUY4NjBF NzEwMTFFODg5OUMzOTE3QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQByinCAwQAyx0AMA8EAgACMAkDBwAgAQ31zAAwDQYJKoZIhvcNAQEL BQADggEBABANGQ/pbr6JetRbKVeCmAPd8eYhGB5wcA3DGc4oDXJuQDagx+afIzSV 5mZTBkSKOYe2IbvGPU9wkKx4HRk8EdUXoVtIPFm1Lv8NMWdIMMU05jl81D0fvJwf pJUgFyGvqz5Bx3XLbuam9Nt8MR7UImDZw7Tz5iXl95sP0DmQrPsyS+ZBk7OMez0E 2JwZMQyJgAI/i9Qo3uHa5kgvKDcuRzHORvFD7wurl9peQ9HOREoCgvJJN62Nks9O BLzTl+crwXlkyCj5H5WoK24jnlX+ovVGlXXgVnoSWepltzgkdTijsYvprTPYUYzR bl2pRcxKZ01yq+ipItL2kqNjo7Z62P8= -----END CERTIFICATE-----Generated at Mon Mar 2 10:14:12 2026 by rpki-client