$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1FFC18AC34ED11F1B3F8D4F794833773.roa File: 1FFC18AC34ED11F1B3F8D4F794833773.roa (raw, json) Hash identifier: DprVbdSlK6AE+WHK3J1hEBE2QlapEHkVAmTqFSXVgn0= Subject key identifier: 3E:76:98:AB:05:CB:A1:6C:10:8C:45:E0:36:A5:19:F3:79:5C:02:B2 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 1033 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1FFC18AC34ED11F1B3F8D4F794833773.roa Signing time: Thu 16 Apr 2026 17:28:37 +0000 ROA not before: Thu 16 Apr 2026 17:28:37 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 133933 IP address blocks: 14.192.128.0/19 maxlen: 19 14.192.128.0/24 maxlen: 24 14.192.129.0/24 maxlen: 24 14.192.130.0/24 maxlen: 24 14.192.132.0/24 maxlen: 24 14.192.136.0/24 maxlen: 24 14.192.139.0/24 maxlen: 24 14.192.140.0/24 maxlen: 24 14.192.141.0/24 maxlen: 24 14.192.142.0/24 maxlen: 24 14.192.146.0/24 maxlen: 24 14.192.147.0/24 maxlen: 24 14.192.148.0/24 maxlen: 24 14.192.152.0/24 maxlen: 24 14.192.153.0/24 maxlen: 24 14.192.157.0/24 maxlen: 24 14.192.159.0/24 maxlen: 24 43.247.120.0/24 maxlen: 24 43.247.122.0/24 maxlen: 24 43.247.123.0/24 maxlen: 24 103.20.132.0/24 maxlen: 24 103.20.134.0/24 maxlen: 24 103.20.135.0/24 maxlen: 24 111.92.149.0/24 maxlen: 24 111.92.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 19:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4147 (0x1033) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Apr 16 17:28:37 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69e11c45-12de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:e2:03:e7:db:6b:7c:2b:48:6c:c1:b5:6b: 40:f0:99:16:5d:bf:46:9c:ac:2c:5c:a5:c8:47:54: 5d:05:b8:33:4b:7a:46:d0:52:2e:ef:24:3a:14:9c: a9:c1:d3:e2:03:56:1b:87:ab:30:38:1d:ba:9d:40: a7:cc:5a:63:a2:d2:33:75:6e:73:02:33:b0:bc:c8: 3c:2c:8c:fa:5a:d8:d9:17:3a:90:20:7f:2d:15:69: 5e:a8:40:a4:de:2d:5f:f0:ed:c1:34:c0:10:d3:46: 79:bb:16:96:48:65:0a:4d:1c:5b:3a:e9:ca:ce:e0: ba:dd:21:15:9a:ca:b5:d8:ac:fb:6d:68:57:e5:0c: b3:1e:f3:51:a2:92:c8:ac:d5:fc:fb:ec:46:f4:e5: 16:fb:23:04:2d:b3:20:d2:18:35:a7:75:0a:d6:3d: 20:01:1e:a9:9a:13:17:cf:d6:1b:d4:d0:05:05:e4: 76:e8:a9:8d:8e:e2:be:4f:3f:6d:b8:33:3c:af:70: 3a:09:af:73:f1:fa:f0:8a:07:cb:8c:b7:63:ae:38: cf:be:70:0a:03:d2:c6:c4:d8:a4:d7:9b:89:34:29: c3:37:59:15:71:cc:1b:09:47:4d:8f:76:49:b4:f2: 31:05:1c:a4:aa:cf:68:37:99:27:87:82:ab:bb:2a: 25:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:76:98:AB:05:CB:A1:6C:10:8C:45:E0:36:A5:19:F3:79:5C:02:B2 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1FFC18AC34ED11F1B3F8D4F794833773.roa sbgp-ipAddrBlock: critical IPv4: 14.192.128.0/19 43.247.120.0/24 43.247.122.0/23 103.20.132.0/24 103.20.134.0/23 111.92.149.0-111.92.150.255 Signature Algorithm: sha256WithRSAEncryption 27:24:76:63:9d:02:77:18:6a:aa:d6:96:02:0d:40:f9:03:17: 1e:d0:69:a7:f9:06:11:d3:02:66:c5:61:2d:07:ad:42:52:c9: dd:22:8a:24:be:65:40:75:6a:85:a3:23:10:d3:92:5c:00:ad: 5c:f2:74:e9:fa:54:46:7f:5a:a6:1f:61:a8:96:0b:84:ab:15: cd:05:f4:5a:93:e0:d3:d5:6b:6c:da:1a:2e:fd:6b:f8:6a:d0: 28:b0:a3:9e:33:81:64:fe:3d:79:27:20:cb:e9:3e:d6:32:e3: f7:98:ed:83:44:7c:6c:c1:3e:55:ca:48:f2:31:0e:52:d3:4a: 82:c7:1e:5f:d7:ca:9c:86:d1:7b:b2:61:10:99:ee:01:b0:fc: 5e:9c:57:2c:d6:b4:53:f7:2a:f2:f2:9a:62:d3:2b:45:26:12: 16:df:db:3b:cd:be:4d:a0:68:50:ee:17:da:88:16:63:b9:e7: 7e:e5:85:80:e6:6a:40:ba:7d:2a:83:b8:6a:b6:05:c8:8b:06: 7b:4d:4e:d8:70:b7:a2:a1:4f:b4:63:45:e6:66:98:91:64:b7: 1b:52:9a:8c:da:f0:1a:79:63:9c:86:c6:f1:1b:f5:84:d9:b5: f2:0f:ef:79:ec:90:62:48:b8:9d:fa:f0:25:fd:42:90:c2:53: fe:5e:e2:ff -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgICEDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjYwNDE2MTcyODM3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWUxMWM0NS0xMmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqfiA+fba3wrSGzBtWtA8JkWXb9GnKwsXKXIR1RdBbgzS3pG0FIu7yQ6FJyp wdPiA1Ybh6swOB26nUCnzFpjotIzdW5zAjOwvMg8LIz6WtjZFzqQIH8tFWleqECk 3i1f8O3BNMAQ00Z5uxaWSGUKTRxbOunKzuC63SEVmsq12Kz7bWhX5QyzHvNRopLI rNX8++xG9OUW+yMELbMg0hg1p3UK1j0gAR6pmhMXz9Yb1NAFBeR26KmNjuK+Tz9t uDM8r3A6Ca9z8frwigfLjLdjrjjPvnAKA9LGxNik15uJNCnDN1kVccwbCUdNj3ZJ tPIxBRykqs9oN5knh4KruyoliQIDAQABo4IChjCCAoIwHQYDVR0OBBYEFD52mKsF y6FsEIxF4DalGfN5XAKyMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvMUZGQzE4QUMz NEVEMTFGMUIzRjhENEY3OTQ4MzM3NzMucm9hMEUGCCsGAQUFBwEHAQH/BDYwNDAy BAIAATAsAwQFDsCAAwQAK/d4AwQBK/d6AwQAZxSEAwQBZxSGMAwDBABvXJUDBABv XJYwDQYJKoZIhvcNAQELBQADggEBACckdmOdAncYaqrWlgINQPkDFx7Qaaf5BhHT AmbFYS0HrUJSyd0iiiS+ZUB1aoWjIxDTklwArVzydOn6VEZ/WqYfYaiWC4SrFc0F 9FqT4NPVa2zaGi79a/hq0Ciwo54zgWT+PXknIMvpPtYy4/eY7YNEfGzBPlXKSPIx DlLTSoLHHl/XypyG0XuyYRCZ7gGw/F6cVyzWtFP3KvLymmLTK0UmEhbf2zvNvk2g aFDuF9qIFmO5537lhYDmakC6fSqDuGq2BciLBntNTthwt6KhT7RjReZmmJFktxtS moza8Bp5Y5yGxvEb9YTZtfIP73nskGJIuJ368CX9QpDCU/5e4v8= -----END CERTIFICATE-----Generated at Sun Apr 19 08:28:08 2026 by rpki-client