$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/D2E6AC6A60F111EFB97DD57AC4F9AE02.roa File: D2E6AC6A60F111EFB97DD57AC4F9AE02.roa (raw, json) Hash identifier: l7WAwvcZVKlat81bCLOlMjC2QBKLBCvz0UaEYCXONlg= Subject key identifier: A6:A2:58:96:D7:8B:CF:D4:D4:D3:18:CE:01:40:F0:9E:69:5F:89:A8 Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Certificate serial: 35CC Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/D2E6AC6A60F111EFB97DD57AC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:21:59 +0000 ROA not before: Mon 18 Aug 2025 14:50:18 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 19905 IP address blocks: 128.106.0.0/18 maxlen: 24 165.21.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13772 (0x35cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Validity Not Before: Aug 18 14:50:18 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a483c7-13d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0f:e6:f8:63:98:91:e3:0e:f7:c4:9d:16:69: 51:34:d1:4a:d7:1f:d2:5c:f2:9a:24:a6:10:04:28: bd:b9:89:05:47:81:66:9a:6d:37:60:35:6a:b4:f9: 80:35:c1:d9:a7:b5:01:a7:c2:39:60:67:4d:04:2f: 33:f3:09:e8:69:50:9d:c5:3e:6a:10:aa:8c:b8:95: a8:b4:80:16:80:2c:3f:77:da:c8:bc:b6:c5:ad:5f: a1:db:ac:66:26:41:00:95:f6:ed:2e:16:1d:d8:7d: 52:7b:84:52:4e:4c:e2:64:55:a3:2a:00:db:a3:eb: fc:65:b0:7f:50:20:c3:f3:9b:81:df:08:9c:6d:39: dd:c7:1e:62:c3:eb:28:c5:70:bf:ad:77:41:86:7c: 5a:59:c9:f2:a3:94:51:ae:07:9e:d3:29:90:0b:fc: ce:d5:30:89:ee:8e:3d:4c:55:2a:b6:5b:3d:f0:3b: 1e:66:11:8f:05:2f:ef:dd:59:a9:15:2f:58:15:b4: e9:7c:49:d4:49:e4:75:a5:84:30:70:23:95:c2:88: 1d:47:57:c3:46:78:1f:bd:39:5d:ce:39:67:dd:79: d2:b1:a4:64:b5:46:62:93:2a:6d:2a:ec:2c:b6:05: 2a:be:c3:39:c4:25:78:93:9b:38:1f:31:12:3a:5e: f2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A2:58:96:D7:8B:CF:D4:D4:D3:18:CE:01:40:F0:9E:69:5F:89:A8 X509v3 Authority Key Identifier: keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/D2E6AC6A60F111EFB97DD57AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 128.106.0.0/18 165.21.0.0/16 Signature Algorithm: sha256WithRSAEncryption 75:55:69:a7:b3:c2:cd:85:4c:dd:f1:23:6a:8e:63:e1:fb:09: b3:72:4b:23:58:17:0b:ca:aa:f3:b2:29:d0:6f:66:91:4a:2f: bd:2c:98:cf:f2:20:8d:7b:a5:b6:d0:03:21:1c:41:f5:d9:81: 15:0e:4b:4b:1d:c9:e6:24:b3:40:6b:be:98:3c:6b:18:60:3e: c6:52:5d:22:00:c2:6f:87:88:99:1c:ab:8e:bc:dc:9a:15:cd: 32:1b:ad:a1:a3:46:60:b7:1a:05:6f:eb:2a:ef:73:da:58:64: 97:d2:fe:3e:36:7f:03:51:81:4a:c9:9f:6c:ab:0c:6f:40:55: 81:1d:80:43:8d:91:e2:8a:95:c4:14:7d:86:60:d0:1f:49:ce: 28:7a:60:aa:be:8e:f8:ac:12:80:b3:54:19:e5:f7:fe:fe:46: 36:15:d9:0d:38:fa:fc:e0:c2:42:c7:b0:cd:aa:e0:98:0e:57: 5c:02:cd:27:18:a9:d3:35:c0:00:22:35:c8:19:0b:91:27:9b: 8b:5c:55:fe:aa:0b:ff:10:85:f2:6d:2f:c6:c1:1e:46:d2:e3: 94:9e:cd:ec:93:bd:51:38:ad:f4:aa:6c:d7:0e:9b:97:b9:5c: 5e:51:4a:fd:04:43:99:15:3d:95:27:5f:95:ab:8b:78:ac:46: 3d:d7:4c:ad -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgICNcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw QUI0MTYyNjAwHhcNMjUwODE4MTQ1MDE4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODNjNy0xM2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3A/m+GOYkeMO98SdFmlRNNFK1x/SXPKaJKYQBCi9uYkFR4Fmmm03YDVqtPmA NcHZp7UBp8I5YGdNBC8z8wnoaVCdxT5qEKqMuJWotIAWgCw/d9rIvLbFrV+h26xm JkEAlfbtLhYd2H1Se4RSTkziZFWjKgDbo+v8ZbB/UCDD85uB3wicbTndxx5iw+so xXC/rXdBhnxaWcnyo5RRrgee0ymQC/zO1TCJ7o49TFUqtls98DseZhGPBS/v3Vmp FS9YFbTpfEnUSeR1pYQwcCOVwogdR1fDRngfvTldzjln3XnSsaRktUZikyptKuws tgUqvsM5xCV4k5s4HzESOl7ywQIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFKaiWJbX i8/U1NMYzgFA8J5pX4moMB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUY4OUMvNUIwN0YzQUMxRDgzMTFFMjlCMzVBNUQ4MDhCMDJDRDIvRDJFNkFDNkE2 MEYxMTFFRkI5N0RENTdBQzRGOUFFMDIucm9hMCQGCCsGAQUFBwEHAQH/BBUwEzAR BAIAATALAwQGgGoAAwMApRUwDQYJKoZIhvcNAQELBQADggEBAHVVaaezws2FTN3x I2qOY+H7CbNySyNYFwvKqvOyKdBvZpFKL70smM/yII17pbbQAyEcQfXZgRUOS0sd yeYks0Brvpg8axhgPsZSXSIAwm+HiJkcq4683JoVzTIbraGjRmC3GgVv6yrvc9pY ZJfS/j42fwNRgUrJn2yrDG9AVYEdgEONkeKKlcQUfYZg0B9Jzih6YKq+jvisEoCz VBnl9/7+RjYV2Q04+vzgwkLHsM2q4JgOV1wCzScYqdM1wAAiNcgZC5Enm4tcVf6q C/8QhfJtL8bBHkbS45SezeyTvVE4rfSqbNcOm5e5XF5RSv0EQ5kVPZUnX5Wri3is Rj3XTK0= -----END CERTIFICATE-----Generated at Mon Mar 2 18:25:26 2026 by rpki-client