$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/1EA5984A0BE111ED9E3AA135C4F9AE02.roa File: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (raw, json) Hash identifier: UNxrnTL2FmFMqfTx/jpbHTzVSiNAq7+cipG/Kkdxbl4= Subject key identifier: 24:15:AC:04:58:22:04:F5:6D:B2:88:FB:84:28:74:0B:1D:6D:D2:2A Certificate issuer: /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0 Certificate serial: 034D Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/1EA5984A0BE111ED9E3AA135C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:27:18 +0000 ROA not before: Thu 19 Jun 2025 01:57:42 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 137831 IP address blocks: 143.92.64.0/19 maxlen: 19 143.92.71.0/24 maxlen: 24 143.92.92.0/24 maxlen: 24 143.92.93.0/24 maxlen: 24 143.92.96.0/24 maxlen: 24 143.92.97.0/24 maxlen: 24 143.92.98.0/24 maxlen: 24 143.92.100.0/23 maxlen: 23 143.92.108.0/23 maxlen: 23 143.92.108.0/24 maxlen: 24 147.136.132.0/24 maxlen: 24 147.136.134.0/24 maxlen: 24 147.136.135.0/24 maxlen: 24 147.136.184.0/22 maxlen: 22 147.136.184.0/24 maxlen: 24 147.136.185.0/24 maxlen: 24 147.136.186.0/24 maxlen: 24 147.136.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 845 (0x34d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163998, serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0 Validity Not Before: Jun 19 01:57:42 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a44cc6-7aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:da:17:57:76:e4:98:a9:64:1d:89:f0:8c:07: b9:1c:a0:da:94:08:e2:6b:a7:e0:b8:be:f8:e3:64: d2:6d:86:a8:72:2d:80:f4:bc:7a:96:cd:8c:a1:ec: a5:c2:ed:94:9a:bf:9a:d0:0d:d2:34:77:77:3d:20: 33:f2:27:9b:12:06:71:0b:90:ff:ac:72:60:05:99: 8c:8e:cb:73:2d:bc:ef:c0:b2:1d:2d:1d:15:8b:e0: db:28:48:1d:fe:6e:8a:6f:ac:d1:08:6a:b5:aa:52: 7b:59:b4:6e:54:70:e0:46:be:63:c6:e1:79:a4:ec: 41:64:9e:7b:10:85:44:62:0e:d5:52:89:76:8e:c3: b7:68:00:a3:11:20:c5:d2:7b:7e:45:dc:00:cd:2f: d0:66:de:ef:22:05:80:51:bc:dc:9e:da:18:72:95: e0:cf:4b:7c:5a:77:df:34:bc:d8:66:b9:85:60:bf: ef:91:7f:90:07:d3:f3:69:4b:46:a7:39:b0:18:1a: 6b:6c:25:19:de:08:fe:55:d9:46:99:27:58:0e:a9: 4c:ff:4f:8a:bb:69:9d:89:b5:01:82:0f:20:bf:b1: a5:79:ee:8f:de:17:41:5b:0d:00:9e:ba:b2:0d:de: 4b:22:26:dc:45:b2:07:d6:34:cb:36:66:18:84:00: 85:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:15:AC:04:58:22:04:F5:6D:B2:88:FB:84:28:74:0B:1D:6D:D2:2A X509v3 Authority Key Identifier: keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/1EA5984A0BE111ED9E3AA135C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 143.92.64.0-143.92.98.255 143.92.100.0/23 143.92.108.0/23 147.136.132.0/24 147.136.134.0/23 147.136.184.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:c7:08:e0:f2:99:92:d8:88:ca:32:4e:aa:ff:bd:3b:db:68: 76:f5:0c:dd:0e:1c:ff:43:bd:c9:16:bc:35:a2:fb:af:50:ba: 0a:2d:b9:57:16:80:15:94:e1:59:8a:5e:a2:85:54:d4:e6:7e: 48:19:7e:e4:ed:b9:b6:81:51:ea:90:ad:20:58:e8:2c:9d:94: 54:a5:ef:ec:62:e0:f8:e8:b1:ea:ef:bd:29:48:cb:52:bb:5f: 62:2a:77:fc:53:de:1c:01:c0:1a:aa:03:6e:9b:1a:0b:78:74: 83:06:6f:0f:be:bd:b8:83:74:bc:17:69:a3:7b:bc:79:9e:fa: 90:19:70:bf:61:fa:a6:d1:7d:db:91:57:b5:71:41:ae:4b:55: b4:91:e8:71:86:c6:8a:72:71:1e:19:98:0d:ff:6e:69:70:7d: 97:16:40:a1:12:80:55:fb:08:16:53:13:8d:0d:81:d6:0f:5f: 78:bf:76:e3:e5:44:e9:27:33:2d:9a:0a:1c:a6:88:74:8f:1d: 02:aa:35:11:9a:45:42:db:90:90:00:39:2e:95:7c:c3:d6:66: 8f:b9:d0:8e:5f:19:9b:1d:04:88:c5:de:e6:be:3c:47:52:b8: 15:fc:92:58:a7:a3:eb:1d:1c:8c:e0:8e:a9:d3:d8:fd:23:4a: 48:5b:0b:5e -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgICA00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM5OTgxMTAvBgNVBAUTKDc0MjVBQUUxNkREQjQ2NEEzRTJCNDc5QzdBNDBDOTkw MjM4MzZCQTAwHhcNMjUwNjE5MDE1NzQyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGNjNi03YWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkNoXV3bkmKlkHYnwjAe5HKDalAjia6fguL7442TSbYaoci2A9Lx6ls2Moeyl wu2Umr+a0A3SNHd3PSAz8iebEgZxC5D/rHJgBZmMjstzLbzvwLIdLR0Vi+DbKEgd /m6Kb6zRCGq1qlJ7WbRuVHDgRr5jxuF5pOxBZJ57EIVEYg7VUol2jsO3aACjESDF 0nt+RdwAzS/QZt7vIgWAUbzcntoYcpXgz0t8WnffNLzYZrmFYL/vkX+QB9PzaUtG pzmwGBprbCUZ3gj+VdlGmSdYDqlM/0+Ku2mdibUBgg8gv7Glee6P3hdBWw0Anrqy Dd5LIibcRbIH1jTLNmYYhACFPQIDAQABo4IChjCCAoIwHQYDVR0OBBYEFCQVrARY IgT1bbKI+4QodAsdbdIqMB8GA1UdIwQYMBaAFHQlquFt20ZKPitHnHpAyZAjg2ug MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zMENDMDg0QTA4 REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJrby1LMGVjZWtESmtDT0Rh NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RDV3E0VzNiUmtvLUswZWNla0RKa0NPRGE2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjM5OTgvMzBDQzA4NEEwOERDMTFFREJFREU2MTJCQzRGOUFFMDIvMUVBNTk4NEEw QkUxMTFFRDlFM0FBMTM1QzRGOUFFMDIucm9hMEUGCCsGAQUFBwEHAQH/BDYwNDAy BAIAATAsMAwDBAaPXEADBACPXGIDBAGPXGQDBAGPXGwDBACTiIQDBAGTiIYDBAKT iLgwDQYJKoZIhvcNAQELBQADggEBAI7HCODymZLYiMoyTqr/vTvbaHb1DN0OHP9D vckWvDWi+69QugotuVcWgBWU4VmKXqKFVNTmfkgZfuTtubaBUeqQrSBY6CydlFSl 7+xi4PjoservvSlIy1K7X2Iqd/xT3hwBwBqqA26bGgt4dIMGbw++vbiDdLwXaaN7 vHme+pAZcL9h+qbRfduRV7VxQa5LVbSR6HGGxopycR4ZmA3/bmlwfZcWQKESgFX7 CBZTE40NgdYPX3i/duPlROknMy2aChymiHSPHQKqNRGaRULbkJAAOS6VfMPWZo+5 0I5fGZsdBIjF3ua+PEdSuBX8klino+sdHIzgjqnT2P0jSkhbC14= -----END CERTIFICATE-----Generated at Mon Mar 2 10:50:01 2026 by rpki-client