$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/DCC31BA8182F11EE82A0FC48C4F9AE02.roa File: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (raw, json) Hash identifier: IVDzfIyDPy/oXR2LSXewFcluAy9TlGqq3Gn9o6zUm38= Subject key identifier: FC:F5:A6:49:4E:35:B5:F4:E3:55:5A:F4:D8:CB:03:74:75:CB:4D:80 Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: 020B Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/DCC31BA8182F11EE82A0FC48C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:16:42 +0000 ROA not before: Fri 06 Jun 2025 14:05:25 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 17161 IP address blocks: 168.168.150.0/24 maxlen: 24 168.168.200.0/24 maxlen: 24 168.168.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Validity Not Before: Jun 6 14:05:25 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a3f5ea-9732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ee:e8:90:6d:52:ed:e0:0d:bd:31:4d:8f:12: a3:f2:a1:a1:f6:72:fd:ef:e8:50:c3:02:a5:f2:c4: 79:89:05:ae:07:7c:07:b9:87:68:43:22:13:94:71: 1f:a5:0f:6c:c6:13:65:4e:ea:17:19:23:48:1c:84: e4:06:34:7f:b2:73:fb:d8:cc:70:f4:11:c3:a5:87: 54:0f:e9:a0:ea:24:0f:a1:95:b6:36:a0:d4:df:a9: 34:cf:0d:80:5f:bf:aa:9e:69:e9:d9:09:67:ef:82: fa:34:3f:b5:5a:a9:de:35:c0:7c:46:b8:3b:7a:80: 11:0e:91:ad:92:dd:0b:67:14:7c:50:ee:b7:b9:c1: 1d:0e:fd:39:a7:a1:98:f0:46:aa:76:49:fe:bf:8e: 28:d7:07:24:9e:2b:c1:51:2d:ca:a7:f2:36:77:a2: 20:a0:8d:0c:30:bb:43:fd:0c:d4:8d:db:eb:f2:14: ff:1c:fd:33:0f:6b:00:32:69:e9:a3:cc:a9:84:6a: af:8f:a8:c7:dc:06:70:6d:1f:70:1d:7d:2f:6f:fb: c1:57:0d:eb:d3:f1:a8:45:30:de:2e:92:5b:42:35: 0c:da:fa:df:af:7f:e0:cd:36:fd:36:74:db:e9:24: 37:18:51:cf:f0:3e:c2:04:81:15:bc:67:64:2e:0b: 96:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F5:A6:49:4E:35:B5:F4:E3:55:5A:F4:D8:CB:03:74:75:CB:4D:80 X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/DCC31BA8182F11EE82A0FC48C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 168.168.150.0/24 168.168.200.0/24 168.168.254.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:58:d5:e5:a0:63:70:63:bb:f8:fa:95:6e:fb:92:f4:e0:db: f3:74:04:8e:f4:b3:cf:54:2e:2a:ff:32:8b:71:8e:a2:c0:97: 12:b0:b8:87:bb:c4:e2:44:cc:9f:b6:26:10:17:af:7a:75:c9: 4d:df:19:96:0f:a2:67:44:a1:4d:a6:75:88:2e:68:e2:3d:bd: 62:8c:a2:d7:dd:ac:09:ef:96:83:f4:90:a3:d4:95:83:e4:16: db:f8:7b:d5:e7:e1:f0:16:1a:b8:62:15:4d:67:62:b1:f0:53: e2:6e:bc:7d:18:c3:07:c0:6a:43:9a:eb:3e:95:b8:f4:8f:ef: 2e:5d:3b:a2:e1:7d:35:fc:78:69:f9:1f:f6:78:e7:b6:40:22: de:6c:cf:09:50:07:7d:f6:10:2d:d1:49:73:39:99:29:29:1b: 05:56:cf:45:90:db:d4:78:f4:07:2d:1b:f1:c2:83:bf:e0:15: 37:9b:f8:60:97:96:95:b7:b9:5d:8e:c6:19:b2:da:40:08:2b: 1a:63:12:70:19:e5:df:1e:b6:3b:dd:a2:6e:29:35:93:4f:cf: 10:95:75:3f:d0:c2:1a:1a:32:41:b5:92:3e:ed:5c:92:28:f5: 5d:0c:92:cf:d2:a7:d5:32:06:9c:e2:eb:d5:2c:cb:43:83:67: 53:37:bb:18 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjUwNjA2MTQwNTI1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZjVlYS05NzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+7okG1S7eANvTFNjxKj8qGh9nL97+hQwwKl8sR5iQWuB3wHuYdoQyITlHEf pQ9sxhNlTuoXGSNIHITkBjR/snP72Mxw9BHDpYdUD+mg6iQPoZW2NqDU36k0zw2A X7+qnmnp2Qln74L6ND+1WqneNcB8Rrg7eoARDpGtkt0LZxR8UO63ucEdDv05p6GY 8Eaqdkn+v44o1wcknivBUS3Kp/I2d6IgoI0MMLtD/QzUjdvr8hT/HP0zD2sAMmnp o8yphGqvj6jH3AZwbR9wHX0vb/vBVw3r0/GoRTDeLpJbQjUM2vrfr3/gzTb9NnTb 6SQ3GFHP8D7CBIEVvGdkLguWRQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFPz1pklO NbX041Va9NjLA3R1y02AMB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQwQUMvOUE1RjBFMUExNTI0MTFFRTlENzBDOTY4QzRGOUFFMDIvRENDMzFCQTgx ODJGMTFFRTgyQTBGQzQ4QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAqKiWAwQAqKjIAwQBqKj+MA0GCSqGSIb3DQEBCwUAA4IBAQCNWNXl oGNwY7v4+pVu+5L04NvzdASO9LPPVC4q/zKLcY6iwJcSsLiHu8TiRMyftiYQF696 dclN3xmWD6JnRKFNpnWILmjiPb1ijKLX3awJ75aD9JCj1JWD5Bbb+HvV5+HwFhq4 YhVNZ2Kx8FPibrx9GMMHwGpDmus+lbj0j+8uXTui4X01/Hhp+R/2eOe2QCLebM8J UAd99hAt0UlzOZkpKRsFVs9FkNvUePQHLRvxwoO/4BU3m/hgl5aVt7ldjsYZstpA CCsaYxJwGeXfHrY73aJuKTWTT88QlXU/0MIaGjJBtZI+7VySKPVdDJLP0qfVMgac 4uvVLMtDg2dTN7sY -----END CERTIFICATE-----Generated at Mon Mar 2 17:26:40 2026 by rpki-client