$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/DCC31BA8182F11EE82A0FC48C4F9AE02.roa File: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (raw, json) Hash identifier: Nk6B9oGSm+C8lzJG0kzS3nVaiBodjvcAtEqWj+52CmA= Subject key identifier: 86:E1:28:9B:A3:AB:4E:47:E7:0E:ED:64:5C:BB:EA:5F:FD:C2:42:65 Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: 0226 Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/DCC31BA8182F11EE82A0FC48C4F9AE02.roa Signing time: Thu 09 Apr 2026 03:35:34 +0000 ROA not before: Thu 09 Apr 2026 03:35:33 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 17161 IP address blocks: 168.168.150.0/24 maxlen: 24 168.168.200.0/24 maxlen: 24 168.168.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Validity Not Before: Apr 9 03:35:33 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69d71e85-2afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5a:b0:92:e7:90:c4:db:84:5e:fc:91:c8:30: 65:26:9d:8c:d6:8a:4b:db:2f:50:86:26:88:25:c5: c1:75:41:56:f5:77:31:d4:bf:e6:30:93:1f:ce:52: c4:f0:23:55:87:1b:81:05:67:61:ab:72:6a:e0:b5: 87:04:00:93:33:85:79:4b:0a:19:99:20:8e:67:54: d6:b3:81:d9:19:2b:5c:43:80:57:4c:9a:c0:f6:d4: 17:ae:d8:92:0f:50:2d:c8:bc:ed:b5:21:da:20:d2: 91:1e:d9:62:2d:50:84:55:a8:f7:da:f6:c4:3f:77: 9d:cc:24:95:f8:3f:5f:8f:ef:ff:ba:20:5b:d4:fa: 6e:9f:94:d6:04:88:42:87:76:e7:15:bf:ce:54:41: e6:e6:bb:14:47:70:9c:6f:99:55:95:e9:13:79:89: 73:82:da:d4:f2:6b:c5:81:bc:b7:f7:23:28:d4:ef: 10:86:ba:37:22:f1:25:74:1e:87:e6:9c:74:97:af: 5f:1f:56:55:9e:db:46:e7:fd:a5:64:34:58:f5:01: ea:af:f6:2e:04:eb:20:88:e7:61:14:de:de:eb:f3: 60:2b:a5:0c:9f:78:7f:4a:e2:da:da:c2:9c:f1:e2: 4c:e3:20:60:8a:85:46:a5:2a:91:c6:72:48:f7:e3: 62:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E1:28:9B:A3:AB:4E:47:E7:0E:ED:64:5C:BB:EA:5F:FD:C2:42:65 X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/DCC31BA8182F11EE82A0FC48C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 168.168.150.0/24 168.168.200.0/24 168.168.254.0/23 Signature Algorithm: sha256WithRSAEncryption 07:66:d4:3c:e9:e5:b4:b4:06:fa:38:b8:54:57:ce:93:12:39: 9b:c9:13:e4:2f:35:27:2f:f1:42:c6:70:60:f3:12:b6:5d:ad: b4:6a:3e:19:28:c2:51:06:e9:ca:a6:ff:35:70:8b:ef:98:36: b2:f2:9b:e6:f3:c8:9b:9c:4a:39:24:ff:1c:65:4b:b0:fd:f2: e0:48:1e:0b:c2:8c:3e:63:9a:cf:14:71:09:7b:ea:82:42:1e: df:29:9d:92:9e:05:4b:9b:41:94:e0:1c:eb:e5:ee:72:20:8d: 0d:ed:29:db:2c:6a:66:06:85:d1:99:23:2a:3d:c1:fb:7a:aa: 31:8b:b5:9f:c5:6e:c2:bc:c5:e1:e1:42:95:5a:80:48:32:e5: 1a:15:0a:fa:96:0e:58:a6:6b:2e:d8:f6:95:ad:40:52:37:e8: d6:f5:7b:3d:e6:26:cf:1a:b0:8e:3e:05:c7:8a:68:65:3b:ee: ef:02:a4:93:a8:ad:bc:49:85:9f:61:26:bd:d8:23:83:dc:20: 24:9c:00:4c:57:9e:8b:00:93:c3:5f:76:5b:9c:4d:5c:ad:3e: 32:11:ce:cf:97:15:fc:43:f5:4c:b9:6a:81:a3:75:76:d3:0e: a5:04:29:2f:f8:ec:df:18:44:ce:0c:6f:ca:40:84:42:b1:af: bc:98:dd:5d -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjYwNDA5MDMzNTMzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWQ3MWU4NS0yYWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lqwkueQxNuEXvyRyDBlJp2M1opL2y9QhiaIJcXBdUFW9Xcx1L/mMJMfzlLE 8CNVhxuBBWdhq3Jq4LWHBACTM4V5SwoZmSCOZ1TWs4HZGStcQ4BXTJrA9tQXrtiS D1AtyLzttSHaINKRHtliLVCEVaj32vbEP3edzCSV+D9fj+//uiBb1Ppun5TWBIhC h3bnFb/OVEHm5rsUR3Ccb5lVlekTeYlzgtrU8mvFgby39yMo1O8Qhro3IvEldB6H 5px0l69fH1ZVnttG5/2lZDRY9QHqr/YuBOsgiOdhFN7e6/NgK6UMn3h/SuLa2sKc 8eJM4yBgioVGpSqRxnJI9+NiWwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFIbhKJuj q05H5w7tZFy76l/9wkJlMB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQwQUMvOUE1RjBFMUExNTI0MTFFRTlENzBDOTY4QzRGOUFFMDIvRENDMzFCQTgx ODJGMTFFRTgyQTBGQzQ4QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAqKiWAwQAqKjIAwQBqKj+MA0GCSqGSIb3DQEBCwUAA4IBAQAHZtQ8 6eW0tAb6OLhUV86TEjmbyRPkLzUnL/FCxnBg8xK2Xa20aj4ZKMJRBunKpv81cIvv mDay8pvm88ibnEo5JP8cZUuw/fLgSB4Lwow+Y5rPFHEJe+qCQh7fKZ2SngVLm0GU 4Bzr5e5yII0N7SnbLGpmBoXRmSMqPcH7eqoxi7WfxW7CvMXh4UKVWoBIMuUaFQr6 lg5Ypmsu2PaVrUBSN+jW9Xs95ibPGrCOPgXHimhlO+7vAqSTqK28SYWfYSa92COD 3CAknABMV56LAJPDX3ZbnE1crT4yEc7PlxX8Q/VMuWqBo3V20w6lBCkv+OzfGETO DG/KQIRCsa+8mN1d -----END CERTIFICATE-----Generated at Fri Apr 17 20:13:46 2026 by rpki-client