$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/0322BF5A6D3411F0A208C05DC4F9AE02.roa File: 0322BF5A6D3411F0A208C05DC4F9AE02.roa (raw, json) Hash identifier: uhQqMpiNXl9wZzktHIlfZ4N3ckT6gZ7yXsNLkz5TVAs= Subject key identifier: BA:3A:F5:C0:AC:98:07:21:DE:B5:A8:E5:01:BD:26:F2:B5:6F:E3:38 Certificate issuer: /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B Certificate serial: 92 Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/0322BF5A6D3411F0A208C05DC4F9AE02.roa Signing time: Sun 01 Mar 2026 08:09:35 +0000 ROA not before: Wed 30 Jul 2025 10:57:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135341 IP address blocks: 165.99.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B Validity Not Before: Jul 30 10:57:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3f43f-f98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ba:99:af:01:db:f4:6a:ac:60:69:fc:f4:8a: dd:9f:dd:ae:75:d1:00:c9:55:90:63:b3:4b:ea:3d: d9:6e:df:87:df:cd:35:83:74:f9:9a:2a:8f:ff:4d: fc:1b:c0:fa:7d:89:80:a9:02:e7:48:c8:00:d6:82: ec:1a:11:6e:17:fe:c6:63:6a:b7:05:ae:84:f5:e4: 20:4d:23:d3:1e:63:49:da:f0:60:02:a1:c8:61:bd: ce:cc:c1:f4:a7:07:2c:f9:12:37:36:50:e9:8e:eb: e8:98:cf:ca:2d:9c:c3:20:3b:02:30:f6:78:e2:5f: 55:4c:10:d1:30:31:01:b8:33:9a:70:56:3b:73:c3: 7e:be:a7:e9:21:0d:fc:c4:03:ee:9b:31:3f:4b:ea: 86:53:ea:ec:4c:06:98:e4:d9:5c:80:3e:d1:b6:86: 94:4a:72:8b:9f:63:45:30:fe:e4:7c:51:11:fe:6a: 70:10:3a:92:f6:27:cf:16:5a:35:2a:fe:5f:a5:72: 6f:3a:28:bb:11:15:5a:f9:6e:16:6f:a5:7a:67:02: b7:d0:e3:16:79:41:c7:2d:38:85:d4:6e:fd:e5:68: 75:83:f1:19:ab:a7:f2:31:20:bc:10:d7:71:4f:c1: 8d:7e:a6:2e:02:5d:ab:1a:60:66:47:2c:3f:e7:50: 07:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3A:F5:C0:AC:98:07:21:DE:B5:A8:E5:01:BD:26:F2:B5:6F:E3:38 X509v3 Authority Key Identifier: keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/0322BF5A6D3411F0A208C05DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.99.34.0/24 Signature Algorithm: sha256WithRSAEncryption 63:95:63:54:5c:c6:d7:9e:e3:fc:bf:7a:a5:c1:75:5f:a2:bb: ad:9c:ec:7d:29:11:36:63:a4:e3:c7:d8:dc:3c:db:37:ad:73: 88:fe:07:98:a4:97:c8:06:01:f4:95:93:02:0d:fa:07:f6:3c: 46:d2:e1:d1:a1:e1:fc:62:49:b8:d0:d1:9b:ea:2e:4c:1f:7f: ca:ee:dc:d2:9f:c3:e1:35:fa:ea:8c:6e:2d:f7:06:74:99:84: 46:94:80:f4:0c:93:60:2c:8f:b2:6b:2d:e2:b3:b8:3e:b0:bf: c2:08:23:ff:91:24:99:f3:5c:fc:f6:14:90:11:dc:2a:67:17: 7a:28:aa:1b:cc:b7:16:b9:51:32:c5:8e:cf:bd:20:67:4d:fc: 45:d7:cf:0c:fb:ed:8c:9b:73:dc:00:21:be:96:72:99:31:68: 25:8f:36:a7:4a:ec:dc:d5:3b:47:2e:03:c6:bb:01:c5:db:f1: f5:47:95:bf:b9:46:dd:28:0c:a5:85:a3:9f:cf:f2:50:4a:3d: c9:21:10:40:80:c1:1f:e5:17:0b:03:09:ed:65:f6:10:fb:db: c8:3c:57:13:3e:12:50:8a:62:c6:41:b3:ce:f0:1e:36:14:36: 17:a0:5a:f4:a7:6b:19:21:3a:86:4b:91:34:19:11:9b:a0:4f: fd:6b:e8:53 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQzMDkxMTAvBgNVBAUTKDA3N0JDRDY2M0IwRTYzQkRGNUU5QjgwOUFGNzFBRUYx RTVBREY2M0IwHhcNMjUwNzMwMTA1NzQxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZjQzZi1mOThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbqZrwHb9GqsYGn89Irdn92uddEAyVWQY7NL6j3Zbt+H3801g3T5miqP/038 G8D6fYmAqQLnSMgA1oLsGhFuF/7GY2q3Ba6E9eQgTSPTHmNJ2vBgAqHIYb3OzMH0 pwcs+RI3NlDpjuvomM/KLZzDIDsCMPZ44l9VTBDRMDEBuDOacFY7c8N+vqfpIQ38 xAPumzE/S+qGU+rsTAaY5NlcgD7RtoaUSnKLn2NFMP7kfFER/mpwEDqS9ifPFlo1 Kv5fpXJvOii7ERVa+W4Wb6V6ZwK30OMWeUHHLTiF1G795Wh1g/EZq6fyMSC8ENdx T8GNfqYuAl2rGmBmRyw/51AH4QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLo69cCs mAch3rWo5QG9JvK1b+M4MB8GA1UdIwQYMBaAFAd7zWY7DmO99em4Ca9xrvHlrfY7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDMwOS9ENDFGQTMyQzNF RTMxMUYwQjkzOTg0NDJDNEY5QUUwMi9CM3ZOWmpzT1k3MzE2YmdKcjNHdThlV3Q5 anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Izdk5aanNPWTczMTZiZ0pyM0d1OGVXdDlqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQzMDkvRDQxRkEzMkMzRUUzMTFGMEI5Mzk4NDQyQzRGOUFFMDIvMDMyMkJGNUE2 RDM0MTFGMEEyMDhDMDVEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQApWMiMA0GCSqGSIb3DQEBCwUAA4IBAQBjlWNUXMbXnuP8v3qlwXVf orutnOx9KRE2Y6Tjx9jcPNs3rXOI/geYpJfIBgH0lZMCDfoH9jxG0uHRoeH8Ykm4 0NGb6i5MH3/K7tzSn8PhNfrqjG4t9wZ0mYRGlID0DJNgLI+yay3is7g+sL/CCCP/ kSSZ81z89hSQEdwqZxd6KKobzLcWuVEyxY7PvSBnTfxF188M++2Mm3PcACG+lnKZ MWgljzanSuzc1TtHLgPGuwHF2/H1R5W/uUbdKAylhaOfz/JQSj3JIRBAgMEf5RcL AwntZfYQ+9vIPFcTPhJQimLGQbPO8B42FDYXoFr0p2sZITqGS5E0GRGboE/9a+hT -----END CERTIFICATE-----Generated at Mon Mar 2 07:14:26 2026 by rpki-client