$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/11BD8780E8AD11F0B4C8CA81576F56BC.roa File: 11BD8780E8AD11F0B4C8CA81576F56BC.roa (raw, json) Hash identifier: z09c3pfBnLaBhRaO5NZ8zDgzevr5k6+alsOTlNNxpcY= Subject key identifier: 1B:90:E4:AA:28:99:24:C8:37:D3:88:FF:33:4F:63:AF:9F:36:84:1A Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Certificate serial: 04C2 Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/11BD8780E8AD11F0B4C8CA81576F56BC.roa Signing time: Sun 01 Mar 2026 18:29:36 +0000 ROA not before: Sat 03 Jan 2026 14:04:07 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 139594 IP address blocks: 150.129.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1218 (0x4c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Validity Not Before: Jan 3 14:04:07 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a48590-0fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3e:fa:b5:35:c1:43:c0:e6:a8:8b:47:19:a6: ab:1b:44:05:c6:ea:ae:73:3c:24:30:dd:21:b9:16: 89:50:76:09:ab:7b:69:89:46:84:54:70:47:33:b6: d1:31:32:de:7f:ec:86:d3:20:5a:0b:f9:96:53:b2: 56:2b:4a:69:99:29:14:01:d7:a3:4b:c3:45:67:7c: 08:06:d2:e9:de:52:21:31:e1:a0:ae:d7:ce:7f:77: ed:34:f4:8e:e9:dd:53:b2:36:b0:a8:7d:31:a1:24: 51:4c:f1:a0:e1:73:b8:55:29:ce:1c:e1:18:bb:90: 51:a3:a8:f0:d2:ac:e8:95:50:87:68:a0:3e:1a:98: eb:77:61:6e:25:50:2d:d6:10:f0:fd:85:1d:3f:65: f7:60:6f:a4:31:cf:73:18:d9:68:95:91:26:ce:ab: b5:28:34:b6:ef:94:a5:84:ef:7b:2b:e5:ae:a8:bc: 4d:b0:55:f0:5e:20:60:f2:36:a5:6f:3f:e8:2d:a9: cb:bf:1c:ed:1d:f7:c9:6b:54:fd:05:2d:00:4d:f2: 31:95:43:e5:8e:16:80:8c:96:b0:88:e5:6e:86:0e: 56:f7:6e:e5:f0:2e:3b:68:84:03:41:32:d0:34:48: 00:01:e6:aa:b7:4f:a9:e8:b4:ba:46:c7:3e:3b:ac: 02:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:90:E4:AA:28:99:24:C8:37:D3:88:FF:33:4F:63:AF:9F:36:84:1A X509v3 Authority Key Identifier: keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/11BD8780E8AD11F0B4C8CA81576F56BC.roa sbgp-ipAddrBlock: critical IPv4: 150.129.217.0/24 Signature Algorithm: sha256WithRSAEncryption a0:a7:41:ef:8b:3b:f7:49:a2:89:0d:60:bf:79:2b:ac:64:18: 25:3b:ae:9a:c0:cf:4b:2d:df:c1:a6:75:aa:ba:4d:0e:c6:13: b6:9b:f5:9f:e1:2d:96:d6:21:9f:96:04:35:66:df:23:31:c4: 36:d4:b2:ae:a3:1c:03:3a:76:c0:47:bf:a8:21:34:4f:10:d2: 75:d3:5c:6d:e6:71:d0:d2:e3:ae:f5:01:1d:83:2b:b7:7e:48: a3:f2:ba:9e:eb:c2:06:ab:a8:cf:08:4e:5f:c6:bb:5f:32:14: 0e:c7:ce:76:41:52:9a:21:f7:cc:c6:fe:10:42:40:b4:a1:97: 79:c5:a3:83:19:c2:96:75:6a:72:e0:c5:b9:b6:a1:1d:34:ec: e0:14:44:76:72:27:50:6d:bc:4c:09:57:19:ef:da:25:11:44: 26:ce:53:e1:5f:5b:ad:ea:a0:90:28:42:24:a6:26:00:90:a1: 68:0f:c4:9d:95:c1:01:21:d8:a5:5f:0e:df:25:1d:0e:ee:da: 66:db:99:44:25:8c:2a:fc:c6:59:67:19:6c:c9:06:fa:e8:c8: 5c:7f:f0:29:59:dc:c3:8e:99:c9:7a:57:a9:e5:ee:86:4b:df: 20:45:6b:48:8f:6e:23:8b:0e:8e:06:2b:2c:91:d8:88:3b:6e: da:f0:a4:8b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1MzEwRTY5QkZE MjYwQUE5NzgwHhcNMjYwMTAzMTQwNDA3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODU5MC0wZmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwD76tTXBQ8DmqItHGaarG0QFxuquczwkMN0huRaJUHYJq3tpiUaEVHBHM7bR MTLef+yG0yBaC/mWU7JWK0ppmSkUAdejS8NFZ3wIBtLp3lIhMeGgrtfOf3ftNPSO 6d1TsjawqH0xoSRRTPGg4XO4VSnOHOEYu5BRo6jw0qzolVCHaKA+Gpjrd2FuJVAt 1hDw/YUdP2X3YG+kMc9zGNlolZEmzqu1KDS275SlhO97K+WuqLxNsFXwXiBg8jal bz/oLanLvxztHffJa1T9BS0ATfIxlUPljhaAjJawiOVuhg5W927l8C47aIQDQTLQ NEgAAeaqt0+p6LS6Rsc+O6wCjwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBuQ5Koo mSTIN9OI/zNPY6+fNoQaMB8GA1UdIwQYMBaAFChTvaFjjFmahMMJUxDmm/0mCql4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU3Qi84REE3MjY0MEMx RkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVdacUV3d2xURU9hYl9TWUtx WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tGTzlvV09NV1pxRXd3bFRFT2FiX1NZS3FYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1N0IvOERBNzI2NDBDMUZBMTFFQ0IzMEVFMjFBQzRGOUFFMDIvMTFCRDg3ODBF OEFEMTFGMEI0QzhDQTgxNTc2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAloHZMA0GCSqGSIb3DQEBCwUAA4IBAQCgp0Hvizv3SaKJDWC/eSus ZBglO66awM9LLd/BpnWquk0OxhO2m/Wf4S2W1iGflgQ1Zt8jMcQ21LKuoxwDOnbA R7+oITRPENJ101xt5nHQ0uOu9QEdgyu3fkij8rqe68IGq6jPCE5fxrtfMhQOx852 QVKaIffMxv4QQkC0oZd5xaODGcKWdWpy4MW5tqEdNOzgFER2cidQbbxMCVcZ79ol EUQmzlPhX1ut6qCQKEIkpiYAkKFoD8SdlcEBIdilXw7fJR0O7tpm25lEJYwq/MZZ ZxlsyQb66Mhcf/ApWdzDjpnJelep5e6GS98gRWtIj24jiw6OBisskdiIO27a8KSL -----END CERTIFICATE-----Generated at Mon Mar 2 08:42:24 2026 by rpki-client