$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/CB1C9052127611F1A98F9398343D8C67.roa File: CB1C9052127611F1A98F9398343D8C67.roa (raw, json) Hash identifier: S7ABZJUx+P6tHVs60+ta8zguoVa/9/cwSl1M2y/NVaA= Subject key identifier: 3D:EC:5B:BF:7C:8C:5C:65:E3:73:90:A7:45:CA:D6:BA:8B:A0:D0:E1 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0F87 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/CB1C9052127611F1A98F9398343D8C67.roa Signing time: Sun 01 Mar 2026 19:18:39 +0000 ROA not before: Wed 25 Feb 2026 18:21:25 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 132165 IP address blocks: 14.192.152.0/24 maxlen: 24 14.192.153.0/24 maxlen: 24 14.192.154.0/24 maxlen: 24 14.192.155.0/24 maxlen: 24 111.92.137.0/24 maxlen: 24 111.92.138.0/24 maxlen: 24 111.92.139.0/24 maxlen: 24 111.92.141.0/24 maxlen: 24 111.92.145.0/24 maxlen: 24 111.92.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3975 (0xf87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Feb 25 18:21:25 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4910f-83b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:59:c7:11:56:8d:d9:05:97:05:dc:f1:a4:a4: 58:10:60:f5:6b:2b:83:c8:43:ed:fa:1c:1f:3a:a5: 31:55:67:b7:3c:03:c2:1e:a2:61:1a:4c:02:23:c3: 87:ba:ca:ef:f6:da:e9:44:00:5e:0f:45:0c:0b:6b: 83:dd:c9:ff:04:d4:8f:30:ec:db:48:74:c1:5f:f9: cf:c6:9a:fa:3c:a8:9e:53:42:01:60:ff:57:cd:60: 6a:f9:73:6d:a2:90:4b:ef:1e:fc:70:f9:da:3f:e2: c4:e0:9a:99:7e:76:2d:a4:db:27:4f:6d:cc:05:93: ec:f8:4d:d7:a8:6d:df:c2:13:bc:84:6e:a1:15:a9: 1c:c8:0e:0e:17:c0:9e:96:9a:33:3e:19:2f:ea:70: f2:55:3c:f6:c9:71:de:36:a1:80:4d:7b:ba:93:ee: 1d:db:95:f1:f7:7e:08:c8:e5:f9:db:90:ac:ba:62: 3b:02:78:88:eb:d0:0c:c1:e8:87:f2:4f:27:9f:67: 8e:ac:d9:b4:51:cb:7d:9e:82:97:27:aa:c9:50:5a: d8:da:f0:c8:97:a8:fe:23:04:eb:2f:2f:7c:ab:55: 93:dc:58:4b:01:79:08:80:1b:9e:85:aa:cd:11:3c: b2:50:42:19:41:96:89:e6:22:76:3c:d2:9c:7e:ff: 7f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EC:5B:BF:7C:8C:5C:65:E3:73:90:A7:45:CA:D6:BA:8B:A0:D0:E1 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/CB1C9052127611F1A98F9398343D8C67.roa sbgp-ipAddrBlock: critical IPv4: 14.192.152.0/22 111.92.137.0-111.92.139.255 111.92.141.0/24 111.92.145.0-111.92.146.255 Signature Algorithm: sha256WithRSAEncryption 3f:88:6e:b1:1e:98:a2:33:84:9f:fb:b5:00:e1:f9:83:3c:f1: 20:49:61:51:cc:41:96:03:5b:4d:b5:33:5d:09:12:bd:5a:af: 62:d7:2b:5b:4c:39:5d:ab:da:6d:b4:d4:06:19:16:36:29:b1: 77:9e:b3:ef:93:cd:8e:43:2a:79:d5:58:92:e9:5f:bf:46:b5: d7:98:94:ac:9f:10:68:ed:d1:e2:c4:a4:16:47:2f:99:05:25: a7:d7:30:5d:b3:bc:c2:ac:25:6e:d7:c1:7b:ef:73:b4:d4:69: 92:4a:80:3c:27:8e:29:c6:a7:dd:f5:14:bb:fe:80:26:af:57: d9:dc:58:21:29:9c:91:5d:e7:c6:67:2b:30:f2:90:88:79:13: 80:0b:d3:a0:3f:3b:f8:33:9c:49:93:13:c8:3e:2d:04:5b:e9: 82:7a:40:f1:d8:38:aa:e1:8a:95:14:d0:f0:b4:49:19:84:6c: a3:67:9a:3b:8d:3e:0f:6f:f6:e7:af:e5:a1:67:f1:6e:ee:58: 39:bf:9c:1d:fe:1a:01:4a:6b:8b:13:d6:47:ec:06:d0:f1:f1: 90:21:e1:a3:e9:49:a5:a2:a1:73:01:86:49:39:71:78:68:9e: 7c:c3:ee:14:72:fd:5a:f0:87:ea:cb:37:ba:93:ad:cd:47:50: c1:7a:0e:b2 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICD4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjYwMjI1MTgyMTI1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTEwZi04M2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFnHEVaN2QWXBdzxpKRYEGD1ayuDyEPt+hwfOqUxVWe3PAPCHqJhGkwCI8OH usrv9trpRABeD0UMC2uD3cn/BNSPMOzbSHTBX/nPxpr6PKieU0IBYP9XzWBq+XNt opBL7x78cPnaP+LE4JqZfnYtpNsnT23MBZPs+E3XqG3fwhO8hG6hFakcyA4OF8Ce lpozPhkv6nDyVTz2yXHeNqGATXu6k+4d25Xx934IyOX525CsumI7AniI69AMweiH 8k8nn2eOrNm0Uct9noKXJ6rJUFrY2vDIl6j+IwTrLy98q1WT3FhLAXkIgBueharN ETyyUEIZQZaJ5iJ2PNKcfv9/0wIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFD3sW798 jFxl43OQp0XK1rqLoNDhMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvQ0IxQzkwNTIx Mjc2MTFGMUE5OEY5Mzk4MzQzRDhDNjcucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAu BAIAATAoAwQCDsCYMAwDBABvXIkDBAJvXIgDBABvXI0wDAMEAG9ckQMEAG9ckjAN BgkqhkiG9w0BAQsFAAOCAQEAP4husR6YojOEn/u1AOH5gzzxIElhUcxBlgNbTbUz XQkSvVqvYtcrW0w5XavabbTUBhkWNimxd56z75PNjkMqedVYkulfv0a115iUrJ8Q aO3R4sSkFkcvmQUlp9cwXbO8wqwlbtfBe+9ztNRpkkqAPCeOKcan3fUUu/6AJq9X 2dxYISmckV3nxmcrMPKQiHkTgAvToD87+DOcSZMTyD4tBFvpgnpA8dg4quGKlRTQ 8LRJGYRso2eaO40+D2/256/loWfxbu5YOb+cHf4aAUprixPWR+wG0PHxkCHho+lJ paKhcwGGSTlxeGiefMPuFHL9WvCH6ss3upOtzUdQwXoOsg== -----END CERTIFICATE-----Generated at Mon Mar 2 17:50:14 2026 by rpki-client