$ rpki-client -vvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/2152B7B06C0411EEBC1AA814C4F9AE02.roa File: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (raw, json) Hash identifier: hDaWJ1MPMK/kTcYrElHYKR5D6BKNhIGyYI8+GpXOoQk= Subject key identifier: 35:DD:4F:BE:1A:D1:16:97:81:42:C4:97:32:21:58:FF:37:7C:38:E1 Certificate issuer: /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Certificate serial: 01C5 Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/2152B7B06C0411EEBC1AA814C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:23:10 +0000 ROA not before: Sat 25 Oct 2025 07:18:32 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 134032 IP address blocks: 202.137.254.0/23 maxlen: 23 202.137.254.0/24 maxlen: 24 202.137.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Validity Not Before: Oct 25 07:18:32 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a4138e-7c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c2:29:a8:43:e8:a1:0b:29:99:8c:83:28:71: ad:14:2d:d5:fd:44:9b:c1:9b:3f:52:a6:dd:f5:c8: a2:91:6d:5c:81:bf:0a:1d:23:84:18:cd:21:98:18: 8f:27:62:30:b1:26:22:45:2c:67:92:47:4a:23:d6: 83:b7:35:21:4c:29:7a:a6:90:08:4d:93:1d:4f:90: e9:06:d9:08:b8:2d:e5:cb:95:2a:b8:40:2f:fe:fa: 53:da:59:97:19:e8:0a:16:7b:ba:bd:c4:78:4d:3a: 46:78:f9:c6:e3:33:27:0d:3d:1a:ae:47:b9:15:78: f2:a2:01:1b:99:f5:3f:0a:04:7e:ac:f7:3a:9e:58: 5b:34:98:04:21:fd:67:e2:0a:30:9c:31:a1:f1:78: a0:9c:9f:f1:c7:17:aa:6c:94:95:eb:ba:a6:c7:02: 89:63:32:e5:13:40:10:8c:46:b7:b9:a0:20:a0:19: a7:d0:cc:55:77:f7:1b:7a:f6:3f:db:b0:8c:c7:dc: 29:6d:f1:bd:d6:e6:10:fc:dc:1d:1d:53:36:c4:e7: 74:4b:32:ac:1a:4b:3c:55:dd:f9:bf:bd:bf:14:a6: 5d:ae:94:99:41:12:c6:ff:3e:f7:67:c3:52:7a:0f: 1a:e2:7f:e6:a7:fc:6a:e1:8a:85:fe:b9:e8:e5:e4: 49:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DD:4F:BE:1A:D1:16:97:81:42:C4:97:32:21:58:FF:37:7C:38:E1 X509v3 Authority Key Identifier: keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/2152B7B06C0411EEBC1AA814C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.137.254.0/23 Signature Algorithm: sha256WithRSAEncryption 95:22:58:63:cc:93:6c:26:8e:48:e5:c1:ef:7f:7e:5d:cf:d0: 5c:e7:95:1c:ee:72:74:14:09:16:01:5c:2d:6e:e0:46:90:84: ff:aa:19:76:6f:bb:38:17:e1:90:d6:2d:50:d4:dd:2c:85:2e: 7d:40:de:f9:0c:82:89:c6:b3:02:bc:da:5b:a3:02:da:ee:31: 97:48:1d:31:ea:26:7e:35:f7:86:b7:67:70:6f:5e:dd:16:ac: 8f:43:2c:51:b6:02:82:70:f2:cb:5f:4f:fb:30:d1:af:44:fc: 16:5f:a4:b7:32:51:6f:9d:28:00:97:05:fd:6b:d5:fd:bf:00: c5:24:7d:0e:33:d7:2b:60:f5:8f:e0:36:be:5f:45:e6:df:f0: 20:d4:40:28:23:ed:cc:0d:a7:d0:0f:31:c7:b5:78:48:84:eb: d8:0f:b6:7f:e8:e4:f5:f6:3c:86:99:91:23:cd:07:4f:6e:7a: 41:4e:b0:f9:e5:85:7a:46:4a:a9:82:90:07:9c:e1:18:b7:09: 0d:51:6c:df:db:7a:8f:35:4e:01:d1:dc:0a:fd:8d:67:f0:0c: 4b:65:06:f3:86:1f:36:2d:1f:f0:a1:89:59:e3:74:1d:16:86: ed:32:a1:de:1c:de:7f:b4:13:3a:84:fc:9a:ab:84:b8:7d:bc: 67:a6:7a:ff -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUExMDgxMTAvBgNVBAUTKDZBOEQzRDZCRjZEQjBGNURFMzI0RTQyMEM1NzNCMEE5 MTg0M0M3OTQwHhcNMjUxMDI1MDcxODMyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTM4ZS03YzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMIpqEPooQspmYyDKHGtFC3V/USbwZs/Uqbd9ciikW1cgb8KHSOEGM0hmBiP J2IwsSYiRSxnkkdKI9aDtzUhTCl6ppAITZMdT5DpBtkIuC3ly5UquEAv/vpT2lmX GegKFnu6vcR4TTpGePnG4zMnDT0arke5FXjyogEbmfU/CgR+rPc6nlhbNJgEIf1n 4gownDGh8XignJ/xxxeqbJSV67qmxwKJYzLlE0AQjEa3uaAgoBmn0MxVd/cbevY/ 27CMx9wpbfG91uYQ/NwdHVM2xOd0SzKsGks8Vd35v72/FKZdrpSZQRLG/z73Z8NS eg8a4n/mp/xq4YqF/rno5eRJZwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDXdT74a 0RaXgULElzIhWP83fDjhMB8GA1UdIwQYMBaAFGqNPWv22w9d4yTkIMVzsKkYQ8eU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTEwOC9GOTU4RkM0QTZD MDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQxM2pKT1FneFhPd3FSaER4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FvMDlhX2JiRDEzakpPUWd4WE93cVJoRHg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUExMDgvRjk1OEZDNEE2QzAwMTFFRUI5OEI0MzBFQzRGOUFFMDIvMjE1MkI3QjA2 QzA0MTFFRUJDMUFBODE0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQByon+MA0GCSqGSIb3DQEBCwUAA4IBAQCVIlhjzJNsJo5I5cHvf35d z9Bc55Uc7nJ0FAkWAVwtbuBGkIT/qhl2b7s4F+GQ1i1Q1N0shS59QN75DIKJxrMC vNpbowLa7jGXSB0x6iZ+NfeGt2dwb17dFqyPQyxRtgKCcPLLX0/7MNGvRPwWX6S3 MlFvnSgAlwX9a9X9vwDFJH0OM9crYPWP4Da+X0Xm3/Ag1EAoI+3MDafQDzHHtXhI hOvYD7Z/6OT19jyGmZEjzQdPbnpBTrD55YV6RkqpgpAHnOEYtwkNUWzf23qPNU4B 0dwK/Y1n8AxLZQbzhh82LR/woYlZ43QdFobtMqHeHN5/tBM6hPyaq4S4fbxnpnr/ -----END CERTIFICATE-----Generated at Mon Mar 2 06:48:55 2026 by rpki-client