$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/BD3FF814A49811EEAD789D2AC4F9AE02.roa File: BD3FF814A49811EEAD789D2AC4F9AE02.roa (raw, json) Hash identifier: Q8fywLVcYI72bpER/jVkoIMpEUoDOPdG+CfgHKA2VuQ= Subject key identifier: 5A:2E:14:B8:19:8A:ED:1F:B2:C1:82:DB:B2:BE:01:37:4D:BE:21:BC Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Certificate serial: 29A7 Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/BD3FF814A49811EEAD789D2AC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:36:33 +0000 ROA not before: Sat 24 May 2025 15:43:35 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 38193 IP address blocks: 218.100.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10663 (0x29a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Validity Not Before: May 24 15:43:35 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a48731-1f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:68:86:f5:d6:86:52:9f:ba:19:8d:a8:d0:80: fb:07:8e:9c:5a:49:74:bd:22:10:5d:c8:94:e9:e2: 03:cc:c1:95:6a:8d:8b:29:dc:fd:4c:70:6e:da:a7: 17:14:a8:79:9c:4d:9e:07:ea:07:5e:d3:33:42:95: 7f:2a:8f:f6:4c:d7:c0:60:e6:04:8f:bf:38:3c:2f: 45:43:77:6b:f9:0e:81:48:88:df:ba:09:3d:2a:9a: 0f:a2:49:6a:59:98:ef:29:f5:6b:b2:6b:40:87:09: 4c:7a:6b:48:f9:c9:cd:9d:20:01:22:82:4f:96:39: b7:e8:42:4f:70:b4:a9:71:f4:11:21:6c:71:35:d3: 17:7c:37:13:25:e6:22:72:93:cc:61:b2:8d:b7:e4: 28:87:d0:73:b6:c9:6d:95:33:b8:b4:d1:23:c3:f8: 79:dc:7d:72:88:44:7c:36:81:f3:1e:40:b5:ad:f1: c5:3f:5b:fa:93:3e:08:41:e3:1f:b5:46:38:b9:be: 3d:4a:64:91:bb:cc:1d:f5:30:c8:9b:28:8a:ec:a5: f6:36:88:da:98:bd:53:fb:40:30:fd:41:06:19:62: 48:17:d3:fb:20:98:d5:12:d6:7f:ad:8b:a8:2e:85: 97:04:f5:43:db:8a:66:27:cd:5e:3b:a6:0a:b9:2c: 68:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2E:14:B8:19:8A:ED:1F:B2:C1:82:DB:B2:BE:01:37:4D:BE:21:BC X509v3 Authority Key Identifier: keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/BD3FF814A49811EEAD789D2AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 218.100.85.0/24 Signature Algorithm: sha256WithRSAEncryption 00:16:74:08:9c:22:96:19:78:85:f5:93:f6:1d:9b:b3:fe:58: 5e:0a:be:47:2c:84:94:8d:02:b2:6d:7c:20:d3:f5:9b:5a:a3: e2:a2:1c:f6:60:00:d8:13:27:98:84:08:c4:da:02:14:de:f6: e2:c3:2d:de:d4:f6:77:9c:2b:38:58:b9:f8:2c:f9:d2:84:3c: f2:91:51:ff:c2:17:f2:80:b4:45:6f:be:1e:f5:8c:3c:87:9a: ae:da:d4:7a:a0:21:e2:f3:7f:e1:49:c0:70:92:7d:d9:76:51: 86:68:ba:8c:2c:c9:96:45:8c:c7:88:58:f0:f6:71:40:90:6c: 69:22:3b:1f:38:6f:be:7e:3b:72:e4:3c:1b:9d:7f:18:26:a6: 74:19:3f:62:fd:2f:ca:8a:5d:f2:07:66:b6:8e:f5:d7:ee:23: 03:eb:1b:b1:80:4c:13:95:bc:bf:ba:14:bd:bd:08:73:14:b9: a1:df:47:2b:97:61:ca:ae:c8:a7:cd:ca:35:ab:06:4d:98:a8: 3a:7e:f8:54:00:6c:d4:96:fe:e0:5f:97:e4:84:ba:41:26:1b: 46:de:9b:1f:8e:e1:e8:18:a0:cf:6b:0e:e4:49:31:19:99:45: ef:2a:4f:25:83:0e:a8:d7:06:bd:23:77:23:a2:65:e0:b0:47: e6:e9:83:0f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICKacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKDkwMDlFNzQxOTZENDhCMDM5NjRGMUZDNTZDRkU0NDZF QzUwNDhDRjcwHhcNMjUwNTI0MTU0MzM1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODczMS0xZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2iG9daGUp+6GY2o0ID7B46cWkl0vSIQXciU6eIDzMGVao2LKdz9THBu2qcX FKh5nE2eB+oHXtMzQpV/Ko/2TNfAYOYEj784PC9FQ3dr+Q6BSIjfugk9KpoPoklq WZjvKfVrsmtAhwlMemtI+cnNnSABIoJPljm36EJPcLSpcfQRIWxxNdMXfDcTJeYi cpPMYbKNt+Qoh9BztsltlTO4tNEjw/h53H1yiER8NoHzHkC1rfHFP1v6kz4IQeMf tUY4ub49SmSRu8wd9TDImyiK7KX2NojamL1T+0Aw/UEGGWJIF9P7IJjVEtZ/rYuo LoWXBPVD24pmJ81eO6YKuSxoDQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFouFLgZ iu0fssGC27K+ATdNviG8MB8GA1UdIwQYMBaAFJAJ50GW1IsDlk8fxWz+RG7FBIz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni9CQzFEQzFGNkMx NzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3T1dUeF9GYlA1RWJzVUVq UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBbm5RWmJVaXdPV1R4X0ZiUDVFYnNVRWpQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTBGNjYvQkMxREMxRjZDMTc1MTFFNEEyQzdCNzRDQzRGOUFFMDIvQkQzRkY4MTRB NDk4MTFFRUFENzg5RDJBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQA2mRVMA0GCSqGSIb3DQEBCwUAA4IBAQAAFnQInCKWGXiF9ZP2HZuz /lheCr5HLISUjQKybXwg0/WbWqPiohz2YADYEyeYhAjE2gIU3vbiwy3e1PZ3nCs4 WLn4LPnShDzykVH/whfygLRFb74e9Yw8h5qu2tR6oCHi83/hScBwkn3ZdlGGaLqM LMmWRYzHiFjw9nFAkGxpIjsfOG++fjty5DwbnX8YJqZ0GT9i/S/Kil3yB2a2jvXX 7iMD6xuxgEwTlby/uhS9vQhzFLmh30crl2HKrsinzco1qwZNmKg6fvhUAGzUlv7g X5fkhLpBJhtG3psfjuHoGKDPaw7kSTEZmUXvKk8lgw6o1wa9I3cjomXgsEfm6YMP -----END CERTIFICATE-----Generated at Mon Mar 2 03:52:20 2026 by rpki-client