$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/9156042083EB11ECB7EC3B76C4F9AE02.roa File: 9156042083EB11ECB7EC3B76C4F9AE02.roa (raw, json) Hash identifier: EP70FT9vYILp9XYrmWiAL3jLqbW9+S8BdvaaLqMxnTg= Subject key identifier: FE:21:50:B2:02:52:F7:1E:0D:2B:6A:D5:0E:43:81:51:E1:A3:BE:7D Certificate issuer: /CN=A914247C/serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Certificate serial: 0BAF Authority key identifier: D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/9156042083EB11ECB7EC3B76C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:44:45 +0000 ROA not before: Tue 17 Feb 2026 00:47:40 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 24014 IP address blocks: 131.244.0.0/15 maxlen: 15 131.244.0.0/16 maxlen: 16 192.48.109.0/24 maxlen: 24 192.48.110.0/24 maxlen: 24 192.88.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2991 (0xbaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C, serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Validity Not Before: Feb 17 00:47:40 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a450dd-a44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:b8:1e:c4:23:27:1d:9b:dd:53:1a:82:59: 1c:60:a8:6b:2e:e2:2b:8e:83:ab:07:49:e6:44:09: a2:03:96:ff:59:a5:35:dc:7b:76:8a:99:f3:b6:56: 38:60:47:f4:51:22:3f:2e:c5:d8:7d:19:e1:4d:0b: 70:d3:7b:fc:db:24:7b:0d:b2:75:da:ad:a7:92:f7: 12:cb:63:ab:ec:23:eb:5c:c8:bb:a0:6a:7a:4d:72: df:f4:4d:27:ab:23:fd:84:64:5a:48:1b:98:b3:0f: 11:63:24:e2:53:8c:7a:43:b6:df:06:c5:ff:63:48: 2f:4d:30:03:64:4d:5f:ad:48:dd:e2:be:c1:6e:20: 5b:4a:64:ac:7a:d5:ea:1f:81:6b:a1:60:3d:ab:fe: 99:e6:c3:b1:e6:c6:bb:ec:49:b8:e1:a3:a3:72:28: 8b:68:11:61:6a:bd:14:33:72:8d:0d:e2:45:bb:0e: 02:c8:ab:68:fd:8c:33:e3:f5:4b:b9:dc:62:56:24: eb:ad:bb:ab:2d:5f:48:32:c2:c9:25:d5:8c:43:b8: dc:4a:fa:c7:26:d8:7e:6c:ad:94:d8:3b:e1:d6:36: 07:31:db:eb:1b:b4:c2:87:5c:97:38:4a:b3:c2:5d: 9d:a8:b8:68:c1:d1:55:51:d9:43:2f:21:0c:4f:9b: fd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:21:50:B2:02:52:F7:1E:0D:2B:6A:D5:0E:43:81:51:E1:A3:BE:7D X509v3 Authority Key Identifier: keyid:D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/9156042083EB11ECB7EC3B76C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 131.244.0.0/15 192.48.109.0-192.48.110.255 192.88.187.0/24 Signature Algorithm: sha256WithRSAEncryption bd:33:eb:db:23:9c:0d:af:ed:97:a8:9c:6b:ef:d8:8c:75:03: af:8d:35:67:dc:31:e3:df:99:9d:e1:5a:58:e0:69:9f:f0:98: 53:a3:97:53:db:d0:c5:7e:bc:c2:ab:ef:6e:b0:d6:1f:94:d5: ba:04:b9:6e:e0:ef:3a:d8:8e:b5:a7:91:02:2a:77:65:bf:c3: 56:4f:61:9e:82:ed:66:21:8e:82:dc:e1:e2:94:2c:10:fc:53: d5:70:b7:1d:84:db:d7:42:77:40:aa:e6:7b:35:87:a6:b5:96: e1:a3:60:60:09:c0:50:af:8e:e3:5e:f6:ea:6f:86:55:52:b4: ed:7f:40:63:cc:e7:82:42:34:97:ad:6e:14:75:ff:5d:cb:be: b4:d3:12:52:15:8a:63:3e:ed:33:18:30:c3:aa:85:dc:e4:d0: 7b:55:54:c7:0c:03:0d:9f:8d:ca:7e:48:68:14:6f:20:40:cc: 82:04:f7:62:4a:79:47:ab:ed:bd:e5:e6:f9:1f:bb:2c:8d:de: dd:8f:3f:e8:36:97:1c:05:69:5f:2b:8b:f8:b7:87:e4:99:87: 9b:83:63:cd:d5:d6:a5:6f:29:1f:88:9f:47:8b:3c:3d:28:25: 3d:c3:71:a3:1c:df:e7:ac:e2:d4:97:58:64:d7:b5:3e:8f:d7: e7:a1:c8:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKEQ1QTAyNTA2MzRERkMwM0RDOUNGQ0FCQTk3OTUxODBG RjA1MTU4RkMwHhcNMjYwMjE3MDA0NzQwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTBkZC1hNDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNe4HsQjJx2b3VMaglkcYKhrLuIrjoOrB0nmRAmiA5b/WaU13Ht2ipnztlY4 YEf0USI/LsXYfRnhTQtw03v82yR7DbJ12q2nkvcSy2Or7CPrXMi7oGp6TXLf9E0n qyP9hGRaSBuYsw8RYyTiU4x6Q7bfBsX/Y0gvTTADZE1frUjd4r7BbiBbSmSsetXq H4FroWA9q/6Z5sOx5sa77Em44aOjciiLaBFhar0UM3KNDeJFuw4CyKto/Ywz4/VL udxiViTrrburLV9IMsLJJdWMQ7jcSvrHJth+bK2U2Dvh1jYHMdvrG7TCh1yXOEqz wl2dqLhowdFVUdlDLyEMT5v9AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP4hULIC UvceDStq1Q5DgVHho759MB8GA1UdIwQYMBaAFNWgJQY038A9yc/KupeVGA/wUVj8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy84QTFDNDYxNjQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi8xYUFsQmpUZndEM0p6OHE2bDVVWURfQlJX UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFhQWxCalRmd0QzSno4cTZsNVVZRF9CUldQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDI0N0MvOEExQzQ2MTY0MzBBMTFFQTg1OENEQzc2QzRGOUFFMDIvOTE1NjA0MjA4 M0VCMTFFQ0I3RUMzQjc2QzRGOUFFMDIucm9hMDIGCCsGAQUFBwEHAQH/BCMwITAf BAIAATAZAwMBg/QwDAMEAMAwbQMEAMAwbgMEAMBYuzANBgkqhkiG9w0BAQsFAAOC AQEAvTPr2yOcDa/tl6ica+/YjHUDr401Z9wx49+ZneFaWOBpn/CYU6OXU9vQxX68 wqvvbrDWH5TVugS5buDvOtiOtaeRAip3Zb/DVk9hnoLtZiGOgtzh4pQsEPxT1XC3 HYTb10J3QKrmezWHprWW4aNgYAnAUK+O41726m+GVVK07X9AY8zngkI0l61uFHX/ Xcu+tNMSUhWKYz7tMxgww6qF3OTQe1VUxwwDDZ+Nyn5IaBRvIEDMggT3Ykp5R6vt veXm+R+7LI3e3Y8/6DaXHAVpXyuL+LeH5JmHm4NjzdXWpW8pH4ifR4s8PSglPcNx oxzf56zi1JdYZNe1Po/X56HI8Q== -----END CERTIFICATE-----Generated at Mon Mar 2 14:26:04 2026 by rpki-client