$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/C186DD80331A11EC8F33C209C4F9AE02.roa File: C186DD80331A11EC8F33C209C4F9AE02.roa (raw, json) Hash identifier: kyKxV3VQw07XD8uKTIJt+ZdfuJMUmQwq1AHH7KKutYc= Subject key identifier: 0A:88:53:C4:85:43:87:6D:52:C8:47:0C:31:4F:EA:92:87:9C:02:B6 Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 0865 Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/C186DD80331A11EC8F33C209C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:54:54 +0000 ROA not before: Wed 14 May 2025 23:12:20 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 134540 IP address blocks: 27.107.128.0/20 maxlen: 24 182.156.128.0/21 maxlen: 24 182.156.136.0/21 maxlen: 24 182.156.144.0/21 maxlen: 24 182.156.152.0/21 maxlen: 24 182.156.160.0/21 maxlen: 24 182.156.168.0/21 maxlen: 24 182.156.176.0/21 maxlen: 24 182.156.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2149 (0x865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: May 14 23:12:20 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a48b7e-bcdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:aa:06:df:fc:e0:a1:ce:ca:0d:cc:4c:76:2d: 2a:20:44:76:90:b1:bd:3f:57:99:cd:ba:2a:0f:b7: c2:0b:24:b1:68:37:c5:32:e1:7c:1f:55:3f:79:0f: 0f:51:10:9d:7d:36:5a:bd:8d:16:af:9c:19:18:74: 77:ff:0a:27:a0:e4:82:34:95:0a:fa:db:ce:d6:f4: 50:39:82:3b:e8:a0:03:98:03:e7:73:79:49:d5:50: d5:22:7c:a0:d5:84:b1:fc:33:f0:d5:75:af:a0:76: 9c:62:82:d0:0c:41:6b:68:ba:54:aa:3a:eb:3e:06: a7:94:82:8f:1c:09:62:68:ec:1d:b8:df:fc:e3:4a: d4:57:a7:96:88:05:ad:f5:15:61:1a:aa:ba:2f:65: 2d:38:9a:bd:52:55:4c:47:16:d1:6b:e4:a9:cc:1a: 14:20:c8:5a:5f:68:1b:eb:9b:84:42:f5:31:8e:1f: 6a:89:cb:ce:bf:d9:9b:42:f9:17:7b:3c:a6:2b:b8: b5:cd:f9:e0:f2:f3:5a:79:ea:f9:97:97:c2:02:d6: bb:c1:db:07:30:5b:3c:94:fa:73:59:32:c0:94:7a: d7:93:cc:d9:6c:81:40:78:cc:21:50:cd:a5:04:5a: b6:d6:0b:dd:f1:ee:b8:40:0f:ce:77:b5:bc:46:65: 2a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:88:53:C4:85:43:87:6D:52:C8:47:0C:31:4F:EA:92:87:9C:02:B6 X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/C186DD80331A11EC8F33C209C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.107.128.0/20 182.156.128.0/18 Signature Algorithm: sha256WithRSAEncryption 63:b7:de:41:3e:81:1e:54:fa:2b:db:74:55:c5:89:ac:ce:f5: d4:55:6d:21:63:e9:9a:ea:89:b5:fb:12:ba:d3:b8:ff:a2:49: ef:82:12:5b:81:d8:c4:72:6e:29:63:bc:01:b0:e9:40:b5:e4: d6:1e:d7:2f:a1:4d:d4:7d:c4:a8:5a:6c:cc:89:f1:d2:1c:8f: c7:30:cb:97:4b:7b:8f:27:12:fc:b5:1e:86:86:67:b2:b1:08: b7:be:8f:71:18:d0:e6:c8:76:26:21:4c:1c:a8:47:9c:46:4b: 90:6e:8f:be:22:e3:fa:9b:e8:68:bd:e0:3d:3e:5f:86:eb:8a: e2:13:31:52:53:3a:fd:0e:59:d2:f1:06:62:90:4a:57:09:fd: 4f:54:d8:6e:e3:a8:ee:ab:23:e6:db:3a:79:ee:dc:52:01:90: c0:08:ab:9f:3f:24:e6:07:16:22:fb:c1:e8:54:d1:d6:3b:73: e0:8d:64:fd:c1:f7:70:cf:25:a4:04:78:ac:8d:91:05:2f:9b: 1a:56:02:28:72:4e:34:0e:ef:a2:91:2a:a3:b7:1f:23:cb:6f: c7:4a:a1:26:9a:93:2f:39:74:8e:0d:1c:5a:2c:47:4a:ec:fe: 1e:91:a8:b1:15:59:4b:94:35:a5:b6:9c:8e:47:53:b6:77:8c: 10:7b:ab:83 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjUwNTE0MjMxMjIwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGI3ZS1iY2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6oG3/zgoc7KDcxMdi0qIER2kLG9P1eZzboqD7fCCySxaDfFMuF8H1U/eQ8P URCdfTZavY0Wr5wZGHR3/wonoOSCNJUK+tvO1vRQOYI76KADmAPnc3lJ1VDVInyg 1YSx/DPw1XWvoHacYoLQDEFraLpUqjrrPganlIKPHAliaOwduN/840rUV6eWiAWt 9RVhGqq6L2UtOJq9UlVMRxbRa+SpzBoUIMhaX2gb65uEQvUxjh9qicvOv9mbQvkX ezymK7i1zfng8vNaeer5l5fCAta7wdsHMFs8lPpzWTLAlHrXk8zZbIFAeMwhUM2l BFq21gvd8e64QA/Od7W8RmUqewIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFAqIU8SF Q4dtUshHDDFP6pKHnAK2MB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEN0EvNUREQ0NDQzY5OTE1MTFFQjk2NzI3MjQzQzRGOUFFMDIvQzE4NkREODAz MzFBMTFFQzhGMzNDMjA5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQEG2uAAwQGtpyAMA0GCSqGSIb3DQEBCwUAA4IBAQBjt95BPoEeVPor 23RVxYmszvXUVW0hY+ma6om1+xK607j/oknvghJbgdjEcm4pY7wBsOlAteTWHtcv oU3UfcSoWmzMifHSHI/HMMuXS3uPJxL8tR6GhmeysQi3vo9xGNDmyHYmIUwcqEec RkuQbo++IuP6m+hoveA9Pl+G64riEzFSUzr9DlnS8QZikEpXCf1PVNhu46juqyPm 2zp57txSAZDACKufPyTmBxYi+8HoVNHWO3PgjWT9wfdwzyWkBHisjZEFL5saVgIo ck40Du+ikSqjtx8jy2/HSqEmmpMvOXSODRxaLEdK7P4ekaixFVlLlDWltpyOR1O2 d4wQe6uD -----END CERTIFICATE-----Generated at Mon Mar 2 10:54:16 2026 by rpki-client