$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/CB2A1A3AFCD011F0995D3DA86B6F56BC.roa File: CB2A1A3AFCD011F0995D3DA86B6F56BC.roa (raw, json) Hash identifier: GGQqfvLx7zM2VjLtrQhpcfOMC/ugg1QcYqduayPT2Bc= Subject key identifier: C0:FE:81:65:82:CC:D1:F2:F6:AE:9D:64:60:29:43:5B:7C:74:C6:F8 Certificate issuer: /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Certificate serial: 0552 Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/CB2A1A3AFCD011F0995D3DA86B6F56BC.roa Signing time: Sun 01 Mar 2026 16:37:46 +0000 ROA not before: Thu 29 Jan 2026 05:10:14 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 963 IP address blocks: 175.41.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1362 (0x552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Validity Not Before: Jan 29 05:10:14 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a46b5a-d419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:47:99:dc:37:c5:3d:7a:e0:f7:b6:b2:1c:cc: d9:34:25:03:d4:f0:6d:a9:77:c9:f5:4d:43:47:03: 98:b1:d1:7c:f0:22:e4:f6:5d:a8:38:da:cc:88:42: 2b:ed:57:01:d3:dc:49:16:8c:a9:35:52:26:31:77: ff:9a:03:79:b5:e7:76:f6:a7:9d:07:d1:08:93:2a: 01:d2:3a:cb:a7:59:7b:ed:bf:d7:cc:a6:96:b3:69: e6:38:3c:67:cc:9a:59:02:ad:53:c1:78:60:9c:16: c0:57:89:40:a8:92:58:a6:78:b0:d2:cc:f2:2f:a9: 54:f1:a1:d2:7e:9b:48:23:ab:ff:fc:b7:a9:ee:d2: 54:b3:38:b4:95:58:aa:da:3f:cc:c3:30:72:32:d9: 16:a8:5f:f9:dd:ec:cb:1a:d3:57:be:ec:0d:03:e9: 59:16:17:dd:4b:20:27:08:da:b7:26:9e:52:43:c5: f3:3d:c7:b7:41:f7:7a:fe:72:08:f0:46:c4:93:59: 4c:ca:a6:a6:a5:67:86:c4:28:94:7d:e1:ee:6a:a4: 8e:ba:b2:7a:50:93:43:f6:02:78:b0:0a:b2:4c:53: 0f:b4:36:7f:49:bc:7d:ac:3d:61:d5:7c:a5:35:da: 14:3b:2f:b3:b5:c0:a0:e5:fd:49:b0:cf:2e:f6:dc: 9a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FE:81:65:82:CC:D1:F2:F6:AE:9D:64:60:29:43:5B:7C:74:C6:F8 X509v3 Authority Key Identifier: keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/CB2A1A3AFCD011F0995D3DA86B6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 175.41.16.0/20 Signature Algorithm: sha256WithRSAEncryption 92:64:28:6a:f4:1f:fc:c8:db:a6:20:d9:d5:6c:3e:f2:42:80: bb:f6:af:b1:fb:6d:d9:67:95:a2:bd:17:bc:a6:17:3b:ce:83: bb:02:4d:74:8d:5d:9e:e2:05:e5:bc:cb:1b:58:f6:86:66:ac: a2:c2:e6:ce:4d:c4:69:15:b6:29:3a:aa:37:55:a9:28:f2:bd: b9:a5:68:bf:d2:f8:55:71:5d:79:eb:8c:d8:5b:8d:0d:0b:81: 30:89:cc:62:22:ce:e4:04:dc:2c:1b:de:c4:f9:a8:d8:75:4b: 46:65:89:17:81:49:3f:f4:85:5f:86:a0:21:cf:53:28:2c:48: d6:3d:0e:b2:92:4b:82:ea:6f:12:8e:a2:8d:4f:b6:f6:6e:a4: 98:db:d5:c2:71:13:86:8c:b5:b5:6d:c8:56:ab:98:03:74:53: 00:69:ab:30:fc:a8:c2:04:a7:c6:e6:da:15:3c:9d:15:62:26: 46:47:62:ae:fa:cd:24:dc:e3:94:66:14:0e:5f:08:32:05:3d: 22:9b:88:f4:6d:c1:1d:f8:6c:40:72:ee:b3:f8:a7:a0:e7:46: 87:55:3b:70:f9:67:26:7a:14:fb:13:b4:e5:eb:e4:98:75:0d: 20:d4:8a:d1:2c:43:6c:6c:7e:9f:97:43:c7:c5:f2:9b:0e:1d: 11:30:66:c6 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFRkYxMTAvBgNVBAUTKDhFOEMyNjhGMTA0NzA5QTY2QzhENkY2MjBBNUI5RDkz QzE5QUYwNTAwHhcNMjYwMTI5MDUxMDE0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmI1YS1kNDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUeZ3DfFPXrg97ayHMzZNCUD1PBtqXfJ9U1DRwOYsdF88CLk9l2oONrMiEIr 7VcB09xJFoypNVImMXf/mgN5ted29qedB9EIkyoB0jrLp1l77b/XzKaWs2nmODxn zJpZAq1TwXhgnBbAV4lAqJJYpniw0szyL6lU8aHSfptII6v//Lep7tJUszi0lViq 2j/MwzByMtkWqF/53ezLGtNXvuwNA+lZFhfdSyAnCNq3Jp5SQ8XzPce3Qfd6/nII 8EbEk1lMyqampWeGxCiUfeHuaqSOurJ6UJND9gJ4sAqyTFMPtDZ/Sbx9rD1h1Xyl NdoUOy+ztcCg5f1JsM8u9tyaJwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMD+gWWC zNHy9q6dZGApQ1t8dMb4MB8GA1UdIwQYMBaAFI6MJo8QRwmmbI1vYgpbnZPBmvBQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUVGRi80NTE3RUNFODMw QUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENhWnNqVzlpQ2x1ZGs4R2E4 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvd21qeEJIQ2Fac2pXOWlDbHVkazhHYThGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDVFRkYvNDUxN0VDRTgzMEFBMTFFQzg0NURERDUwQzRGOUFFMDIvQ0IyQTFBM0FG Q0QwMTFGMDk5NUQzREE4NkI2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQErykQMA0GCSqGSIb3DQEBCwUAA4IBAQCSZChq9B/8yNumINnVbD7y QoC79q+x+23ZZ5WivRe8phc7zoO7Ak10jV2e4gXlvMsbWPaGZqyiwubOTcRpFbYp Oqo3Vako8r25pWi/0vhVcV1564zYW40NC4EwicxiIs7kBNwsG97E+ajYdUtGZYkX gUk/9IVfhqAhz1MoLEjWPQ6ykkuC6m8SjqKNT7b2bqSY29XCcROGjLW1bchWq5gD dFMAaasw/KjCBKfG5toVPJ0VYiZGR2Ku+s0k3OOUZhQOXwgyBT0im4j0bcEd+GxA cu6z+Keg50aHVTtw+WcmehT7E7Tl6+SYdQ0g1IrRLENsbH6fl0PHxfKbDh0RMGbG -----END CERTIFICATE-----Generated at Mon Mar 2 06:42:09 2026 by rpki-client