$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/CF829C38C92211F0B48DBA21C4F9AE02.roa File: CF829C38C92211F0B48DBA21C4F9AE02.roa (raw, json) Hash identifier: a1ueVHwOYSGifEK3t0tcO96IXICyi2pDqaW2KPvd5wM= Subject key identifier: FC:FD:5E:E5:16:09:24:0F:DF:5C:F8:4C:53:AF:3B:44:E3:CF:B2:C0 Certificate issuer: /CN=A912598D/serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220 Certificate serial: 3E Authority key identifier: 1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/CF829C38C92211F0B48DBA21C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:06:52 +0000 ROA not before: Mon 24 Nov 2025 10:46:20 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 135566 IP address blocks: 209.15.96.0/24 maxlen: 24 209.15.97.0/24 maxlen: 24 209.15.98.0/24 maxlen: 24 209.15.99.0/24 maxlen: 24 209.15.100.0/24 maxlen: 24 209.15.101.0/24 maxlen: 24 209.15.102.0/24 maxlen: 24 209.15.103.0/24 maxlen: 24 209.15.104.0/24 maxlen: 24 209.15.105.0/24 maxlen: 24 209.15.106.0/24 maxlen: 24 209.15.107.0/24 maxlen: 24 209.15.108.0/24 maxlen: 24 209.15.109.0/24 maxlen: 24 209.15.110.0/24 maxlen: 24 209.15.111.0/24 maxlen: 24 209.15.112.0/24 maxlen: 24 209.15.113.0/24 maxlen: 24 209.15.114.0/24 maxlen: 24 209.15.115.0/24 maxlen: 24 209.15.116.0/24 maxlen: 24 209.15.117.0/24 maxlen: 24 209.15.118.0/24 maxlen: 24 209.15.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220 Validity Not Before: Nov 24 10:46:20 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a3d77c-ad85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e6:56:41:7c:25:2b:23:6a:80:c2:4a:6d:47: 2e:d7:82:d7:cf:90:d8:6e:c9:08:d3:ff:fa:9e:03: 82:b9:29:54:11:af:5e:17:f6:1c:b3:49:d1:dd:42: 9d:5c:c7:e5:06:7b:f8:cf:cc:db:34:09:02:11:9b: f4:4b:77:26:81:de:cf:6d:49:0d:92:d4:d5:d5:7f: 51:01:46:cb:06:6f:15:73:7d:84:45:b7:13:d4:07: ab:25:e4:ed:96:4c:37:63:6e:a9:88:f7:3e:bc:f7: 55:38:c3:36:03:36:05:51:27:d2:55:1c:87:10:31: 3e:3b:07:84:1e:8b:45:d1:ac:b6:b0:d2:fb:b6:9a: 35:1f:c5:e0:59:9e:0d:37:d9:68:1f:06:51:50:98: ca:67:fe:9b:ea:e4:08:f6:b4:43:56:d5:b3:6c:dc: 0a:0a:c7:24:c1:fe:00:02:09:91:f2:b3:ff:32:08: 38:f2:49:46:8f:b4:1c:e7:1e:6d:ea:d6:cd:0c:5e: cb:c6:f3:68:6f:94:03:ad:ef:f6:ae:b4:6d:68:90: 97:11:e4:4b:c5:b5:70:a6:27:07:bf:67:5c:ad:db: e7:71:6d:8e:23:9b:e8:99:2e:83:95:41:73:18:7d: de:78:aa:36:97:c8:d0:15:4d:b9:dd:a6:2a:6d:19: 21:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FD:5E:E5:16:09:24:0F:DF:5C:F8:4C:53:AF:3B:44:E3:CF:B2:C0 X509v3 Authority Key Identifier: keyid:1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/CF829C38C92211F0B48DBA21C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 209.15.96.0-209.15.119.255 Signature Algorithm: sha256WithRSAEncryption 06:98:e4:2c:5f:13:45:fc:33:87:51:d5:fb:fb:a6:ac:ad:1f: 7c:35:21:ea:4a:52:7c:46:80:f4:72:49:a6:9d:36:cb:39:86: 7e:47:78:03:27:96:ba:70:04:64:e7:56:f8:8c:54:07:08:92: 6a:fc:47:0c:ea:2e:b4:68:11:9b:a0:e9:83:36:57:ba:90:16: a7:24:0e:65:f4:4a:9a:a7:7a:63:c3:07:df:37:f7:38:d3:8c: 0a:11:52:89:e3:d6:42:56:17:b2:50:3b:72:8e:3f:44:2c:ba: e1:95:03:b4:4a:81:5d:dd:1c:52:fd:37:1e:28:d4:07:59:e3: 1f:8f:d1:ee:e8:53:7c:68:9c:29:cb:31:e9:ae:bf:e2:44:8b: 19:da:db:75:8c:43:92:f6:47:af:24:5e:31:a6:b3:83:37:6e: 2c:0d:1f:91:f8:c4:2c:51:74:eb:a0:45:59:da:09:8d:82:cc: 0c:bd:9e:49:16:cd:f2:ab:7d:f2:a4:87:23:89:1a:fe:92:77: 53:2a:af:dd:31:aa:46:61:f2:14:94:16:14:36:74:36:ee:0c: 55:6a:c8:bf:b2:5f:5d:4b:d3:f5:ac:d3:a7:0e:e8:24:6c:a5: e4:5b:e1:0a:69:b5:fe:b2:56:89:9f:d8:5c:fb:6f:bc:3f:82: c1:7c:ed:21 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoMUE1QjAwNTk3QzhEN0I2MUZCQkVGRUM1Qjk0NEZFNkY5 QzYzRTIyMDAeFw0yNTExMjQxMDQ2MjBaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNzdjLWFkODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ5lZBfCUrI2qAwkptRy7XgtfPkNhuyQjT//qeA4K5KVQRr14X9hyzSdHdQp1c x+UGe/jPzNs0CQIRm/RLdyaB3s9tSQ2S1NXVf1EBRssGbxVzfYRFtxPUB6sl5O2W TDdjbqmI9z6891U4wzYDNgVRJ9JVHIcQMT47B4Qei0XRrLaw0vu2mjUfxeBZng03 2WgfBlFQmMpn/pvq5Aj2tENW1bNs3AoKxyTB/gACCZHys/8yCDjySUaPtBznHm3q 1s0MXsvG82hvlAOt7/autG1okJcR5EvFtXCmJwe/Z1yt2+dxbY4jm+iZLoOVQXMY fd54qjaXyNAVTbndpiptGSHfAgMBAAGjggJoMIICZDAdBgNVHQ4EFgQU/P1e5RYJ JA/fXPhMU687ROPPssAwHwYDVR0jBBgwFoAUGlsAWXyNe2H7vv7FuUT+b5xj4iAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0FFODgzNjY4QzhF QzExRjA5OUQ4QUI0NUM0RjlBRTAyL0dsc0FXWHlOZTJIN3Z2N0Z1VVQtYjV4ajRp QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2xzQVdYeU5lMkg3dnY3RnVVVC1iNXhqNGlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTk4RC9BRTg4MzY2OEM4RUMxMUYwOTlEOEFCNDVDNEY5QUUwMi9DRjgyOUMzOEM5 MjIxMUYwQjQ4REJBMjFDNEY5QUUwMi5yb2EwJwYIKwYBBQUHAQcBAf8EGDAWMBQE AgABMA4wDAMEBdEPYAMEA9EPcDANBgkqhkiG9w0BAQsFAAOCAQEABpjkLF8TRfwz h1HV+/umrK0ffDUh6kpSfEaA9HJJpp02yzmGfkd4AyeWunAEZOdW+IxUBwiSavxH DOoutGgRm6DpgzZXupAWpyQOZfRKmqd6Y8MH3zf3ONOMChFSiePWQlYXslA7co4/ RCy64ZUDtEqBXd0cUv03HijUB1njH4/R7uhTfGicKcsx6a6/4kSLGdrbdYxDkvZH ryReMaazgzduLA0fkfjELFF066BFWdoJjYLMDL2eSRbN8qt98qSHI4ka/pJ3Uyqv 3TGqRmHyFJQWFDZ0Nu4MVWrIv7JfXUvT9azTpw7oJGyl5FvhCmm1/rJWiZ/YXPtv vD+CwXztIQ== -----END CERTIFICATE-----Generated at Mon Mar 2 12:37:09 2026 by rpki-client