$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/3558D5DC1F1711EC924DB151C4F9AE02.roa File: 3558D5DC1F1711EC924DB151C4F9AE02.roa (raw, json) Hash identifier: XapL9s7D1JMjKJu7MjHBtQo0wYwagcUoAvKKZmIDLWE= Subject key identifier: CB:49:F6:7F:86:C8:87:C1:7A:83:96:FE:E9:F7:69:4E:5C:F6:DD:7A Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Certificate serial: 0877 Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/3558D5DC1F1711EC924DB151C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:44:26 +0000 ROA not before: Wed 08 Oct 2025 22:24:34 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 38793 IP address blocks: 118.148.0.0/15 maxlen: 16 118.148.0.0/24 maxlen: 24 118.148.1.0/24 maxlen: 24 118.148.2.0/24 maxlen: 24 118.148.3.0/24 maxlen: 24 118.148.5.0/24 maxlen: 24 118.148.128.0/18 maxlen: 18 118.148.128.0/19 maxlen: 19 118.148.192.0/18 maxlen: 18 118.148.192.0/19 maxlen: 19 118.149.1.0/24 maxlen: 24 118.149.2.0/24 maxlen: 24 118.149.3.0/24 maxlen: 24 118.149.5.0/24 maxlen: 24 118.149.25.0/24 maxlen: 24 118.149.128.0/17 maxlen: 18 118.149.128.0/19 maxlen: 19 118.149.192.0/19 maxlen: 19 2405:a400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2167 (0x877) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA, serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Validity Not Before: Oct 8 22:24:34 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a4890a-6bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ab:d4:54:d8:f9:8b:ef:3f:b0:22:69:ed:a7: 9e:32:eb:3c:ae:de:95:2b:a3:c0:e0:7c:16:6a:72: ae:62:be:a4:71:44:f1:15:22:ea:4d:d3:65:92:de: 14:f9:52:55:ee:55:c3:da:4c:07:47:ab:03:17:db: 27:2b:fa:0e:05:95:fb:71:2b:38:9a:05:5e:e4:e1: af:9d:5e:2b:00:81:1b:d5:dd:f1:75:71:90:e1:ed: dd:c9:3c:fc:90:41:eb:d8:b7:ef:c0:04:9d:a5:d0: de:c5:20:b2:b3:b3:3c:8f:08:c6:8e:00:8f:48:95: ea:d2:40:e0:4a:56:23:6e:be:d4:e5:c8:2c:4b:89: ab:f8:43:6e:2c:17:73:73:67:cf:4a:26:a9:32:75: d7:f4:dc:dc:39:23:8e:e6:c5:4d:76:93:e8:fc:97: 5b:fa:75:6a:8d:9d:36:57:97:f7:9a:ea:39:b9:ba: c9:c2:f6:a9:71:cf:8e:2a:13:21:af:bc:39:a1:46: c0:4a:01:ea:85:4d:b6:5c:30:d8:4e:6b:8b:11:d8: 3e:ab:eb:d9:c7:3a:d9:0f:d6:0a:24:a3:bb:3b:33: 01:32:0f:3f:93:84:e3:d9:ff:86:ab:b0:e6:7a:1a: 06:69:ac:fc:79:95:17:df:bd:a1:b9:de:b1:a4:c8: 6a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:49:F6:7F:86:C8:87:C1:7A:83:96:FE:E9:F7:69:4E:5C:F6:DD:7A X509v3 Authority Key Identifier: keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/3558D5DC1F1711EC924DB151C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 118.148.0.0/15 IPv6: 2405:a400::/32 Signature Algorithm: sha256WithRSAEncryption a0:7f:91:a1:d7:a5:bb:ba:ce:48:2b:ad:85:fc:c5:61:6c:f0: 9e:b8:20:7b:67:3b:c9:9e:eb:bc:1c:5d:4d:51:a4:c7:f0:dd: 55:a8:1c:a2:da:98:dc:69:c1:ae:87:99:38:52:ee:de:92:56: 76:f0:4a:17:dc:df:3f:1b:c0:68:63:c4:1a:09:6c:0d:ec:49: 4e:30:85:ac:78:13:58:2c:85:62:4b:0e:ad:65:ea:7f:22:7b: ea:a3:4d:45:33:5e:72:02:18:4f:5a:fa:05:f3:66:4f:59:e2: 17:b6:34:88:44:b1:0c:27:97:90:b9:8b:5a:85:cb:0c:d3:fc: 9a:59:52:b4:e2:0c:2c:b0:15:2b:e6:61:ae:3e:1f:15:73:ac: 0c:26:f9:70:88:46:8e:7b:91:d9:89:f8:8f:4e:5a:9f:f3:05: e5:4b:2f:28:4c:e8:ec:c3:d8:d1:4f:8f:dc:86:e3:db:c5:c5: d5:13:71:5b:2a:04:40:79:6c:b2:2c:1e:71:c7:2a:f4:ac:9a: 93:30:f0:b6:51:f0:18:89:d2:d9:85:f3:88:dc:d8:0c:68:6f: 6b:0c:5c:f4:e7:5e:4f:de:20:bd:bd:1b:dd:5d:44:74:87:fe: b0:13:fb:c8:d2:8c:ba:bc:b7:b2:a3:37:a8:0b:c8:f2:e2:67: 83:7c:fb:b6 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICCHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDMxNTUxM0U1NEFCMEM5OUI4QkNBODQwNDJFMzgzNThC NjBEQjFCMkMwHhcNMjUxMDA4MjIyNDM0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODkwYS02YmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKvUVNj5i+8/sCJp7aeeMus8rt6VK6PA4HwWanKuYr6kcUTxFSLqTdNlkt4U +VJV7lXD2kwHR6sDF9snK/oOBZX7cSs4mgVe5OGvnV4rAIEb1d3xdXGQ4e3dyTz8 kEHr2LfvwASdpdDexSCys7M8jwjGjgCPSJXq0kDgSlYjbr7U5cgsS4mr+ENuLBdz c2fPSiapMnXX9NzcOSOO5sVNdpPo/Jdb+nVqjZ02V5f3muo5ubrJwvapcc+OKhMh r7w5oUbASgHqhU22XDDYTmuLEdg+q+vZxzrZD9YKJKO7OzMBMg8/k4Tj2f+Gq7Dm ehoGaaz8eZUX372hud6xpMhq1wIDAQABo4ICbjCCAmowHQYDVR0OBBYEFMtJ9n+G yIfBeoOW/un3aU5c9t16MB8GA1UdIwQYMBaAFDFVE+VKsMmbi8qEBC44NYtg2xss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84RjVCQjRGODg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9NVlVUNVVxd3ladUx5b1FFTGpnMWkyRGJH eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01WVVQ1VXF3eVp1THlvUUVMamcxaTJEYkd5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvOEY1QkI0Rjg4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvMzU1OEQ1REMx RjE3MTFFQzkyNERCMTUxQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAL BAIAATAFAwMBdpQwDQQCAAIwBwMFACQFpAAwDQYJKoZIhvcNAQELBQADggEBAKB/ kaHXpbu6zkgrrYX8xWFs8J64IHtnO8me67wcXU1RpMfw3VWoHKLamNxpwa6HmThS 7t6SVnbwShfc3z8bwGhjxBoJbA3sSU4whax4E1gshWJLDq1l6n8ie+qjTUUzXnIC GE9a+gXzZk9Z4he2NIhEsQwnl5C5i1qFywzT/JpZUrTiDCywFSvmYa4+HxVzrAwm +XCIRo57kdmJ+I9OWp/zBeVLLyhM6OzD2NFPj9yG49vFxdUTcVsqBEB5bLIsHnHH KvSsmpMw8LZR8BiJ0tmF84jc2Axob2sMXPTnXk/eIL29G91dRHSH/rAT+8jSjLq8 t7KjN6gLyPLiZ4N8+7Y= -----END CERTIFICATE-----Generated at Mon Mar 2 09:13:50 2026 by rpki-client