$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/DC11ACCE182F11EE82A0FC48C4F9AE02.roa File: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (raw, json) Hash identifier: RchEf2Cdrpo8Ue1euZo8Nm9UxeCjXvC7k8HhyvYv/zY= Subject key identifier: 04:01:24:41:BC:11:CE:6F:97:97:C8:1E:DF:E5:B3:63:11:BB:19:EE Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: 0225 Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/DC11ACCE182F11EE82A0FC48C4F9AE02.roa Signing time: Thu 09 Apr 2026 03:35:31 +0000 ROA not before: Thu 09 Apr 2026 03:35:31 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 132481 IP address blocks: 168.168.128.0/20 maxlen: 20 168.168.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Validity Not Before: Apr 9 03:35:31 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69d71e83-1a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fd:7b:72:29:82:ff:f0:ba:ea:52:01:a0:7a: 97:88:df:1d:ee:e0:db:0d:d2:6d:e0:f5:f3:49:c5: 04:69:6d:bc:1b:95:2d:2d:64:b7:12:45:63:c6:34: ce:88:38:a4:e4:3c:07:34:6d:6d:e1:50:91:95:17: 6d:1c:22:80:28:bd:2e:b8:4f:e6:5c:74:95:74:e8: 42:3a:dd:6e:26:7b:68:84:d9:87:1b:03:e6:3f:19: 40:4c:9b:35:2e:2a:60:5e:9a:66:aa:71:04:7e:26: 7a:e6:b3:a4:1a:ae:20:16:79:21:b6:0d:ca:14:71: fa:c0:8f:33:27:e7:55:0e:f9:dc:00:d7:8d:1f:ce: 5a:3d:9a:45:01:3d:27:56:92:fd:a3:85:2c:3f:36: 99:1d:72:b2:9b:34:a5:16:f8:57:12:69:c0:a8:ca: bc:32:9c:71:40:4b:2a:85:9b:eb:73:07:bf:2f:30: bf:ff:5f:fe:29:86:a7:95:4c:3e:e7:80:d6:ef:a7: bd:25:e8:02:3c:cb:3e:d9:42:ab:93:2f:75:88:00: da:98:86:17:22:67:a8:b0:70:ec:78:5c:29:66:dd: 96:c0:ab:48:df:9d:50:90:bc:e1:b0:f3:f7:e5:4e: 30:f2:49:39:0c:eb:99:f2:59:31:d6:1a:ff:e0:ec: 2b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:01:24:41:BC:11:CE:6F:97:97:C8:1E:DF:E5:B3:63:11:BB:19:EE X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/DC11ACCE182F11EE82A0FC48C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 168.168.128.0/20 168.168.248.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:28:43:f3:5d:32:3e:95:42:68:70:4c:b1:80:c8:0d:6c:c1: 4a:0e:38:c6:ec:81:4b:db:4c:96:03:43:d3:21:53:19:00:4b: cf:53:46:db:a9:26:68:3a:d9:f6:ab:30:3d:e7:10:4f:9b:1a: f2:47:e3:81:22:3e:b3:c9:6c:03:cd:9c:9d:8a:13:30:c7:37: d0:fb:0d:27:9c:ba:23:ca:5a:cf:a3:39:8f:ac:3a:2f:d1:4a: be:ea:40:da:c8:85:0a:03:67:be:98:58:d4:71:79:40:e3:fa: 85:4f:36:b3:ca:78:b9:dc:38:ef:31:74:53:21:7e:22:5a:34: 25:95:25:04:e2:5a:3a:79:59:46:a1:94:8f:99:d4:0c:8e:6a: f8:e0:31:a7:66:56:81:9f:8d:41:8e:bf:c0:f4:c4:e2:ac:af: 01:79:14:90:25:94:67:a4:57:a8:b5:d1:a1:46:63:ad:33:c7: 8f:52:47:c0:85:1a:62:f7:30:bd:40:45:e8:e1:86:32:17:ce: 79:d6:aa:c6:57:b4:89:e3:47:da:b9:08:81:fc:f3:24:23:5e: d3:1d:64:7b:4f:d6:fc:50:eb:02:e3:df:5d:3a:85:a6:dc:a0: a3:2d:5d:1b:a7:d3:cb:95:88:d3:aa:4e:2c:dc:a4:09:3c:9d: e4:ec:78:cb -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjYwNDA5MDMzNTMxWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWQ3MWU4My0xYTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi/17cimC//C66lIBoHqXiN8d7uDbDdJt4PXzScUEaW28G5UtLWS3EkVjxjTO iDik5DwHNG1t4VCRlRdtHCKAKL0uuE/mXHSVdOhCOt1uJntohNmHGwPmPxlATJs1 LipgXppmqnEEfiZ65rOkGq4gFnkhtg3KFHH6wI8zJ+dVDvncANeNH85aPZpFAT0n VpL9o4UsPzaZHXKymzSlFvhXEmnAqMq8MpxxQEsqhZvrcwe/LzC//1/+KYanlUw+ 54DW76e9JegCPMs+2UKrky91iADamIYXImeosHDseFwpZt2WwKtI351QkLzhsPP3 5U4w8kk5DOuZ8lkx1hr/4Owr9QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFAQBJEG8 Ec5vl5fIHt/ls2MRuxnuMB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQwQUMvOUE1RjBFMUExNTI0MTFFRTlENzBDOTY4QzRGOUFFMDIvREMxMUFDQ0Ux ODJGMTFFRTgyQTBGQzQ4QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQEqKiAAwQBqKj4MA0GCSqGSIb3DQEBCwUAA4IBAQALKEPzXTI+lUJo cEyxgMgNbMFKDjjG7IFL20yWA0PTIVMZAEvPU0bbqSZoOtn2qzA95xBPmxryR+OB Ij6zyWwDzZydihMwxzfQ+w0nnLojylrPozmPrDov0Uq+6kDayIUKA2e+mFjUcXlA 4/qFTzazyni53DjvMXRTIX4iWjQllSUE4lo6eVlGoZSPmdQMjmr44DGnZlaBn41B jr/A9MTirK8BeRSQJZRnpFeotdGhRmOtM8ePUkfAhRpi9zC9QEXo4YYyF8551qrG V7SJ40fauQiB/PMkI17THWR7T9b8UOsC499dOoWm3KCjLV0bp9PLlYjTqk4s3KQJ PJ3k7HjL -----END CERTIFICATE-----Generated at Sat Apr 18 00:00:50 2026 by rpki-client