$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/76FA132A8B0511EC993E2B20C4F9AE02.roa File: 76FA132A8B0511EC993E2B20C4F9AE02.roa (raw, json) Hash identifier: Z/HnKOMR+L1d/8ETfiphGtyseB5hBpT32vRbO5pG40M= Subject key identifier: 6C:FC:23:18:45:28:6A:42:46:0E:4D:BB:48:E0:0B:10:51:00:47:8E Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3C26 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/76FA132A8B0511EC993E2B20C4F9AE02.roa Signing time: Sun 01 Mar 2026 21:26:38 +0000 ROA not before: Fri 04 Jul 2025 14:50:51 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 9976 IP address blocks: 103.11.44.0/22 maxlen: 22 115.126.192.0/18 maxlen: 18 118.103.192.0/19 maxlen: 19 150.107.80.0/22 maxlen: 22 183.91.192.0/18 maxlen: 18 203.128.160.0/19 maxlen: 19 203.212.96.0/19 maxlen: 19 210.111.160.0/19 maxlen: 19 211.112.64.0/19 maxlen: 19 211.235.32.0/19 maxlen: 19 211.238.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15398 (0x3c26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Jul 4 14:50:51 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4af0d-9c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:bc:0e:7e:cf:97:65:0c:a3:f1:40:12:ea: 36:a2:91:3c:0b:b4:0a:0d:41:ae:15:9e:5c:80:85: 9a:4b:a6:ba:29:a7:dd:95:a8:5f:bf:68:31:7b:2b: b0:48:b6:7c:c1:fd:ed:65:a4:7a:f4:7e:18:3d:93: 2a:45:e5:28:fc:95:b2:7b:64:4a:84:be:dc:3d:06: 3e:2b:86:ab:8e:f1:75:a0:d4:1e:93:15:4f:9c:ea: 72:84:a1:a3:96:a7:cd:91:5e:f0:cb:f6:cc:24:35: 46:de:c6:77:56:67:28:c0:02:e4:c7:c2:8e:43:4c: 94:7e:f2:7c:60:ce:12:44:b9:c9:5e:59:f8:01:83: a2:14:fc:ca:5a:03:03:20:3b:26:4b:7e:eb:0a:9f: eb:04:cc:85:07:7d:1a:82:c6:3b:f4:d3:75:4f:d0: d5:ba:6b:23:9a:fe:65:61:30:ce:74:32:f9:96:0f: 9e:ee:c1:aa:c3:94:83:cd:89:61:f8:80:7e:08:de: f4:41:e1:61:49:4c:93:d1:99:6b:54:fd:9e:f9:c2: 7f:e8:99:fe:8d:e1:a9:d1:3f:d7:2a:95:df:48:78: cc:7a:62:47:a5:96:11:cf:63:e3:dc:4f:95:e7:98: ec:0e:4b:22:2d:45:27:e8:b8:5f:e6:2c:01:ed:d5: 41:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FC:23:18:45:28:6A:42:46:0E:4D:BB:48:E0:0B:10:51:00:47:8E X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/76FA132A8B0511EC993E2B20C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.11.44.0/22 115.126.192.0/18 118.103.192.0/19 150.107.80.0/22 183.91.192.0/18 203.128.160.0/19 203.212.96.0/19 210.111.160.0/19 211.112.64.0/19 211.235.32.0/19 211.238.64.0/19 Signature Algorithm: sha256WithRSAEncryption dd:50:6d:1b:c2:50:4a:88:ea:27:b2:80:3f:50:df:c3:f1:78: 0f:64:4c:5f:93:44:6e:01:dd:ad:34:4f:8e:7b:52:e6:63:f0: 18:bc:76:f4:21:cb:fc:bd:6d:0e:ab:3c:5d:5a:ef:62:90:ea: cd:b7:23:c3:f4:fa:3f:f6:90:77:ba:27:5b:71:f7:d3:65:29: 48:65:36:4f:4b:28:40:1a:0d:db:4e:b4:3b:26:01:68:66:30: 12:e6:de:96:ca:39:5f:03:1e:a9:ec:8a:f2:7b:20:07:c5:d5: 52:12:ce:6e:c4:38:27:26:20:ce:8e:28:2f:ba:99:ad:cd:1c: b3:ef:30:61:bf:19:ba:38:f2:c1:13:b3:68:54:7b:c9:4b:58: 90:43:0e:62:94:12:57:17:71:c5:78:17:29:e4:7d:9f:7e:51: 3d:6d:4c:03:48:a3:ba:36:86:45:15:76:9b:5d:b6:9e:52:f3: ac:4b:30:f8:34:a6:7b:5a:76:ef:e0:41:d9:c8:e5:fd:a7:10: 27:71:00:5a:64:7a:6b:9b:59:41:9d:95:61:5c:ed:2c:f3:22: 44:28:8f:d9:47:33:b1:84:da:0d:20:0f:0f:10:54:7f:d0:ff: 89:e5:b2:10:db:b7:15:38:b1:5b:78:47:ab:09:88:dc:8b:24: 43:cf:bb:bc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgICPCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjUwNzA0MTQ1MDUxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWYwZC05YzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArga8Dn7Pl2UMo/FAEuo2opE8C7QKDUGuFZ5cgIWaS6a6Kafdlahfv2gxeyuw SLZ8wf3tZaR69H4YPZMqReUo/JWye2RKhL7cPQY+K4arjvF1oNQekxVPnOpyhKGj lqfNkV7wy/bMJDVG3sZ3VmcowALkx8KOQ0yUfvJ8YM4SRLnJXln4AYOiFPzKWgMD IDsmS37rCp/rBMyFB30agsY79NN1T9DVumsjmv5lYTDOdDL5lg+e7sGqw5SDzYlh +IB+CN70QeFhSUyT0ZlrVP2e+cJ/6Jn+jeGp0T/XKpXfSHjMemJHpZYRz2Pj3E+V 55jsDksiLUUn6Lhf5iwB7dVB6wIDAQABo4ICnDCCApgwHQYDVR0OBBYEFGz8IxhF KGpCRg5Nu0jgCxBRAEeOMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNzZGQTEzMkE4 QjA1MTFFQzk5M0UyQjIwQzRGOUFFMDIucm9hMFsGCCsGAQUFBwEHAQH/BEwwSjBI BAIAATBCAwQCZwssAwQGc37AAwQFdmfAAwQClmtQAwQGt1vAAwQFy4CgAwQFy9Rg AwQF0m+gAwQF03BAAwQF0+sgAwQF0+5AMA0GCSqGSIb3DQEBCwUAA4IBAQDdUG0b wlBKiOonsoA/UN/D8XgPZExfk0RuAd2tNE+Oe1LmY/AYvHb0Icv8vW0OqzxdWu9i kOrNtyPD9Po/9pB3uidbcffTZSlIZTZPSyhAGg3bTrQ7JgFoZjAS5t6WyjlfAx6p 7IryeyAHxdVSEs5uxDgnJiDOjigvupmtzRyz7zBhvxm6OPLBE7NoVHvJS1iQQw5i lBJXF3HFeBcp5H2fflE9bUwDSKO6NoZFFXabXbaeUvOsSzD4NKZ7Wnbv4EHZyOX9 pxAncQBaZHprm1lBnZVhXO0s8yJEKI/ZRzOxhNoNIA8PEFR/0P+J5bIQ27cVOLFb eEerCYjciyRDz7u8 -----END CERTIFICATE-----Generated at Mon Mar 2 18:25:21 2026 by rpki-client