$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/357B8ABEC67F11F08B0CE042C4F9AE02.roa File: 357B8ABEC67F11F08B0CE042C4F9AE02.roa (raw, json) Hash identifier: fz0PyQO3dpe/zq5PphDn6te7WEMaib2lqFLapkHh2Ws= Subject key identifier: 7F:78:17:0E:3C:0D:12:C2:D8:C3:D9:A1:B0:46:B1:ED:EE:BA:40:1D Certificate issuer: /CN=A9110C2F/serialNumber=63F359A69EDC3863486F46D6141F9B5C014323FB Certificate serial: 3A Authority key identifier: 63:F3:59:A6:9E:DC:38:63:48:6F:46:D6:14:1F:9B:5C:01:43:23:FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/357B8ABEC67F11F08B0CE042C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:03:51 +0000 ROA not before: Fri 21 Nov 2025 02:10:11 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 38229 IP address blocks: 192.248.0.0/17 maxlen: 17 192.248.0.0/22 maxlen: 22 192.248.4.0/22 maxlen: 22 192.248.8.0/21 maxlen: 21 192.248.16.0/20 maxlen: 21 192.248.32.0/19 maxlen: 19 192.248.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F, serialNumber=63F359A69EDC3863486F46D6141F9B5C014323FB Validity Not Before: Nov 21 02:10:11 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a3d6c7-47e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:40:67:ae:0d:cb:2d:95:a7:2b:fd:df:96:91: e3:06:97:eb:50:04:a7:2b:df:d2:1f:af:3f:c1:88: 4d:b1:07:b0:03:50:94:29:74:19:12:6f:46:13:46: 62:3d:b6:9f:14:6c:c0:fd:ca:a2:81:6a:c0:31:41: 44:dc:fb:fd:33:99:88:db:10:22:ef:6d:df:b1:57: 46:07:bc:05:ef:a1:df:d7:b4:44:78:dd:20:56:d5: 27:6c:dc:77:16:c2:83:41:24:84:c7:3e:3f:2a:88: 0d:d4:dc:c6:d2:73:46:bd:09:21:25:96:16:b5:c7: aa:d9:2d:f8:fb:af:0e:f7:91:33:50:16:62:58:91: c8:9b:7e:40:f8:af:3a:8e:23:b8:27:a9:3e:42:c4: 26:a4:a8:8f:a0:c4:93:d2:be:a3:68:47:8a:0a:1e: cf:b6:99:79:3e:39:3c:d8:ab:41:d3:25:25:d4:5a: 4e:04:93:95:53:c7:b4:2d:7c:d3:48:ed:0a:91:f1: 7f:fb:8e:35:e2:64:fa:01:26:6e:9f:ae:a8:2e:40: 14:a1:95:08:f5:9e:9f:42:63:d5:44:6d:60:d5:9c: bb:57:a8:eb:30:c7:d3:f4:66:6a:63:a8:9d:d9:f8: e8:7c:fb:1d:cb:d3:27:2f:62:54:d8:13:73:6a:ec: b3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:78:17:0E:3C:0D:12:C2:D8:C3:D9:A1:B0:46:B1:ED:EE:BA:40:1D X509v3 Authority Key Identifier: keyid:63:F3:59:A6:9E:DC:38:63:48:6F:46:D6:14:1F:9B:5C:01:43:23:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/357B8ABEC67F11F08B0CE042C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 192.248.0.0/17 Signature Algorithm: sha256WithRSAEncryption dc:30:bb:73:3c:e2:f5:56:16:27:78:71:67:63:75:d5:f0:14: 4e:7e:93:c5:7f:94:0e:92:12:9f:89:48:e1:e1:3d:aa:a8:e4: ed:f5:b4:55:a9:77:47:fd:e0:8b:58:c4:e0:7d:a3:f6:11:78: f2:70:ae:b7:c0:7c:b8:9b:ed:82:92:4e:5b:55:42:9f:0d:e2: 84:1a:2d:2e:9f:a2:21:ec:30:b0:1a:eb:62:5c:cb:e6:30:2d: 67:d7:f1:ed:54:e7:52:f4:6b:b5:80:0d:43:cf:70:26:9d:6d: a6:a0:d3:36:4a:c3:fa:f4:95:08:ce:95:2d:c5:d3:88:ea:fd: 69:14:6a:fc:b5:96:e7:52:d4:4b:06:62:0a:7f:12:a6:83:0a: 28:b5:c3:35:1a:92:ab:ac:c1:f4:14:c4:cd:4b:b9:85:c3:a5: 9a:67:b8:97:6f:18:04:56:ed:56:87:27:96:f2:37:54:49:ec: d5:0a:82:f1:e4:8d:a9:f3:f4:f2:52:06:2f:8b:a5:e9:99:cd: 37:bf:d1:75:a0:a1:eb:0d:59:a8:7f:00:14:fe:df:92:b8:ef: 28:c4:9f:bf:f0:18:c5:5f:93:3d:96:01:fb:18:87:08:5b:c9: 9b:69:88:27:e2:9b:ee:18:7b:f2:7f:79:04:7c:41:9b:5c:34: 56:d7:2f:c4 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MEMyRjExMC8GA1UEBRMoNjNGMzU5QTY5RURDMzg2MzQ4NkY0NkQ2MTQxRjlCNUMw MTQzMjNGQjAeFw0yNTExMjEwMjEwMTFaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNmM3LTQ3ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6QGeuDcstlacr/d+WkeMGl+tQBKcr39Ifrz/BiE2xB7ADUJQpdBkSb0YTRmI9 tp8UbMD9yqKBasAxQUTc+/0zmYjbECLvbd+xV0YHvAXvod/XtER43SBW1Sds3HcW woNBJITHPj8qiA3U3MbSc0a9CSEllha1x6rZLfj7rw73kTNQFmJYkcibfkD4rzqO I7gnqT5CxCakqI+gxJPSvqNoR4oKHs+2mXk+OTzYq0HTJSXUWk4Ek5VTx7QtfNNI 7QqR8X/7jjXiZPoBJm6frqguQBShlQj1np9CY9VEbWDVnLtXqOswx9P0ZmpjqJ3Z +Oh8+x3L0ycvYlTYE3Nq7LMVAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUf3gXDjwN EsLYw9mhsEax7e66QB0wHwYDVR0jBBgwFoAUY/NZpp7cOGNIb0bWFB+bXAFDI/sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwQzJGLzFBNkFFOTdDQzVB ODExRjA5M0E3RjAyQ0M0RjlBRTAyL1lfTlpwcDdjT0dOSWIwYldGQi1iWEFGRElf cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWV9OWnBwN2NPR05JYjBiV0ZCLWJYQUZESV9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEMyRi8xQTZBRTk3Q0M1QTgxMUYwOTNBN0YwMkNDNEY5QUUwMi8zNTdCOEFCRUM2 N0YxMUYwOEIwQ0UwNDJDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAfA+AAwDQYJKoZIhvcNAQELBQADggEBANwwu3M84vVWFid4cWdjddXw FE5+k8V/lA6SEp+JSOHhPaqo5O31tFWpd0f94ItYxOB9o/YRePJwrrfAfLib7YKS TltVQp8N4oQaLS6foiHsMLAa62Jcy+YwLWfX8e1U51L0a7WADUPPcCadbaag0zZK w/r0lQjOlS3F04jq/WkUavy1ludS1EsGYgp/EqaDCii1wzUakquswfQUxM1LuYXD pZpnuJdvGARW7VaHJ5byN1RJ7NUKgvHkjanz9PJSBi+LpemZzTe/0XWgoesNWah/ ABT+35K47yjEn7/wGMVfkz2WAfsYhwhbyZtpiCfim+4Ye/J/eQR8QZtcNFbXL8Q= -----END CERTIFICATE-----Generated at Mon Mar 2 12:12:27 2026 by rpki-client