$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/AD35E5023B2F11F1A4C73024AD833773.roa File: AD35E5023B2F11F1A4C73024AD833773.roa (raw, json) Hash identifier: SkG/0e0Z6DeqwN1A28xtGf4uCoUnG6HVmpF9mr3PoOU= Subject key identifier: FF:9A:73:C3:DB:1E:CB:83:7B:0B:DD:6E:C9:8E:9C:37:AE:B1:89:BD Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 1039 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/AD35E5023B2F11F1A4C73024AD833773.roa Signing time: Sat 18 Apr 2026 14:05:38 +0000 ROA not before: Sat 18 Apr 2026 14:05:38 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 132165 IP address blocks: 14.192.129.0/24 maxlen: 24 14.192.154.0/24 maxlen: 24 14.192.155.0/24 maxlen: 24 111.92.129.0/24 maxlen: 24 111.92.130.0/24 maxlen: 24 111.92.131.0/24 maxlen: 24 111.92.132.0/24 maxlen: 24 111.92.133.0/24 maxlen: 24 111.92.134.0/24 maxlen: 24 111.92.135.0/24 maxlen: 24 111.92.136.0/24 maxlen: 24 111.92.137.0/24 maxlen: 24 111.92.138.0/24 maxlen: 24 111.92.139.0/24 maxlen: 24 111.92.140.0/24 maxlen: 24 111.92.141.0/24 maxlen: 24 111.92.142.0/24 maxlen: 24 111.92.143.0/24 maxlen: 24 111.92.144.0/24 maxlen: 24 111.92.145.0/24 maxlen: 24 111.92.149.0/24 maxlen: 24 111.92.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 19:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4153 (0x1039) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Apr 18 14:05:38 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69e38fb2-a66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fb:de:50:79:8d:59:af:2c:5a:d5:96:89:8b: de:35:db:4d:51:ce:e6:3a:64:3a:9f:d9:68:60:9f: 4b:fe:06:8e:45:1d:98:7f:08:d5:2c:74:63:87:4e: ba:4b:d5:9e:3a:c8:fc:6a:65:9e:4b:f9:7d:18:96: 79:77:8e:fa:f4:dd:34:41:d1:a9:8e:9a:10:d6:d4: bc:c7:ae:fa:47:6a:77:ac:f5:51:f2:a4:76:9b:4d: cf:40:71:c6:1c:99:af:ca:ea:99:03:5d:4b:d6:4c: 05:e8:1a:94:92:4f:aa:c1:4a:9c:0b:39:ee:09:2a: c1:53:db:e2:b0:a7:60:ca:92:7b:dd:96:5d:63:d8: 75:8d:ca:e5:bb:5f:64:bb:96:ee:29:35:1b:22:37: a7:dd:3d:f0:2f:b4:6c:c3:18:1b:e1:f1:98:d4:be: 44:61:45:69:6a:1d:a8:fc:00:6c:bb:6a:38:3b:64: 24:b2:c5:3e:67:6e:7f:55:86:1b:44:74:eb:d1:9a: b1:de:24:77:73:1e:f5:54:a6:82:0e:c3:aa:7b:cc: e1:15:a8:80:78:f5:3a:90:ac:2e:93:9d:37:1f:d2: 64:27:d2:85:7f:6b:f7:48:03:50:f6:05:85:57:1e: 40:20:73:2b:3a:27:8c:53:53:56:d5:ad:aa:80:17: 03:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9A:73:C3:DB:1E:CB:83:7B:0B:DD:6E:C9:8E:9C:37:AE:B1:89:BD X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/AD35E5023B2F11F1A4C73024AD833773.roa sbgp-ipAddrBlock: critical IPv4: 14.192.129.0/24 14.192.154.0/23 111.92.129.0-111.92.145.255 111.92.149.0-111.92.150.255 Signature Algorithm: sha256WithRSAEncryption 79:90:53:2d:79:77:a2:48:bc:7d:1a:2a:0c:5b:93:da:d5:71: 04:50:57:9c:1b:64:77:c3:8b:2a:ef:df:95:f0:0f:f6:71:28: 7e:01:94:43:9e:a1:81:60:94:ca:df:5d:98:09:ad:39:8f:7b: 7a:5a:da:b2:ce:44:9c:db:d3:58:23:0a:b6:14:e9:1d:84:e9: ff:b9:7e:33:77:25:80:0b:8f:43:ca:61:5c:40:d2:18:94:fe: 0b:50:97:2c:a7:66:4d:81:26:e0:fd:27:62:cd:f4:d5:18:e3: 31:f4:3e:c8:2b:46:c3:d4:db:21:35:04:65:a3:fc:af:f4:a9: fc:cf:3f:c3:12:40:b4:34:0f:7e:c1:67:64:16:33:52:81:7c: d7:16:6b:7c:b7:f9:50:6e:a6:1a:ad:6e:8d:a7:20:03:fe:74: 67:5d:45:d4:b2:f4:43:c3:f5:c7:03:53:16:02:e4:ff:0c:e9: 1b:22:a1:b6:63:8c:df:7f:a3:88:97:21:fa:87:ef:b9:96:c4: 54:a0:8f:f1:2c:81:50:32:ff:58:9d:a4:ce:0d:20:66:14:99: 95:3f:0f:81:c1:c0:ca:d1:d1:f8:78:87:9b:29:71:ca:e4:99: fe:3a:33:04:4e:ce:ca:5c:97:14:a2:dd:ec:b9:5f:e7:8b:4d: d6:09:a3:de -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICEDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjYwNDE4MTQwNTM4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWUzOGZiMi1hNjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPveUHmNWa8sWtWWiYveNdtNUc7mOmQ6n9loYJ9L/gaORR2YfwjVLHRjh066 S9WeOsj8amWeS/l9GJZ5d4769N00QdGpjpoQ1tS8x676R2p3rPVR8qR2m03PQHHG HJmvyuqZA11L1kwF6BqUkk+qwUqcCznuCSrBU9visKdgypJ73ZZdY9h1jcrlu19k u5buKTUbIjen3T3wL7Rswxgb4fGY1L5EYUVpah2o/ABsu2o4O2QkssU+Z25/VYYb RHTr0Zqx3iR3cx71VKaCDsOqe8zhFaiAePU6kKwuk503H9JkJ9KFf2v3SANQ9gWF Vx5AIHMrOieMU1NW1a2qgBcDawIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFP+ac8Pb HsuDewvdbsmOnDeusYm9MB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvQUQzNUU1MDIz QjJGMTFGMUE0QzczMDI0QUQ4MzM3NzMucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAu BAIAATAoAwQADsCBAwQBDsCaMAwDBABvXIEDBAFvXJAwDAMEAG9clQMEAG9cljAN BgkqhkiG9w0BAQsFAAOCAQEAeZBTLXl3oki8fRoqDFuT2tVxBFBXnBtkd8OLKu/f lfAP9nEofgGUQ56hgWCUyt9dmAmtOY97elrass5EnNvTWCMKthTpHYTp/7l+M3cl gAuPQ8phXEDSGJT+C1CXLKdmTYEm4P0nYs301RjjMfQ+yCtGw9TbITUEZaP8r/Sp /M8/wxJAtDQPfsFnZBYzUoF81xZrfLf5UG6mGq1ujacgA/50Z11F1LL0Q8P1xwNT FgLk/wzpGyKhtmOM33+jiJch+ofvuZbEVKCP8SyBUDL/WJ2kzg0gZhSZlT8PgcHA ytHR+HiHmylxyuSZ/jozBE7OylyXFKLd7Llf54tN1gmj3g== -----END CERTIFICATE-----Generated at Sun Apr 19 13:58:40 2026 by rpki-client