$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/1BC96D8C1BA111EA8BDD6114C4F9AE02.roa File: 1BC96D8C1BA111EA8BDD6114C4F9AE02.roa (raw, json) Hash identifier: IBdF/b7AGqrLWFihxnUVhbaT/f9Dju/d5m8UNf3vwk0= Subject key identifier: FF:A7:51:CA:2A:8F:02:27:3E:22:9E:CD:91:B5:AC:96:64:72:FA:5C Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Certificate serial: 13D5 Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/1BC96D8C1BA111EA8BDD6114C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:00:20 +0000 ROA not before: Wed 06 Aug 2025 17:26:28 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 135887 IP address blocks: 144.138.0.0/16 maxlen: 24 147.10.0.0/16 maxlen: 24 149.167.0.0/16 maxlen: 24 155.143.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5077 (0x13d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Validity Not Before: Aug 6 17:26:28 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a470a4-ae4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b5:88:b7:25:47:5e:95:52:73:87:54:7c:0e: 7a:d9:d3:d3:80:0e:0d:33:ef:f8:ab:bd:f0:cb:56: d6:a7:dd:a7:64:91:00:87:00:48:cb:15:13:f7:a8: 0a:21:d2:a0:db:e2:aa:c7:c6:bd:e0:9c:e9:21:80: 41:8d:23:4c:ca:18:c2:34:eb:2e:e8:12:f7:5e:79: ec:51:e1:35:d8:2d:b0:76:7b:73:3c:9b:ab:c4:62: 0b:e2:d0:4d:b8:73:22:12:3f:1f:fc:80:7a:22:b0: a3:98:a8:62:b5:a5:b5:96:3a:bb:32:2d:17:8c:29: f5:f8:0c:82:21:92:b0:4c:16:72:0b:b6:ee:0a:7d: 00:3c:54:d7:7e:fa:08:0a:70:e7:67:d7:01:f0:f3: 6b:6d:dc:86:50:dc:f6:77:17:5d:7a:83:7e:94:3f: 8f:5f:09:d7:00:26:e0:e7:47:bd:f0:3a:7d:bc:50: 0b:8b:22:0f:98:31:20:63:48:d4:4f:9c:94:77:12: 69:69:97:a1:78:e1:8f:72:bb:60:4a:de:5c:84:d2: c5:54:45:7b:d4:98:f7:d7:ea:35:7c:e8:2d:4e:dd: 77:b4:fd:4e:fa:f2:df:ff:60:24:b8:56:d9:75:83: 23:74:8b:ba:2b:18:2b:0c:17:6c:54:4f:28:e9:75: 73:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A7:51:CA:2A:8F:02:27:3E:22:9E:CD:91:B5:AC:96:64:72:FA:5C X509v3 Authority Key Identifier: keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/1BC96D8C1BA111EA8BDD6114C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 144.138.0.0/16 147.10.0.0/16 149.167.0.0/16 155.143.0.0/16 Signature Algorithm: sha256WithRSAEncryption 43:99:62:c3:e4:85:a6:9a:46:53:69:8c:bc:6a:f1:b7:17:4b: ea:49:db:83:33:50:7b:44:a4:18:f4:00:32:c5:56:bf:10:6f: ce:55:66:1c:d1:b5:52:da:53:b8:68:08:5e:37:59:ea:a9:ca: d3:9d:9d:8a:43:f7:87:18:7d:06:c6:53:ea:62:9d:35:e3:8f: 4f:af:2c:76:18:97:7c:7e:22:68:8b:74:5b:69:1d:aa:5b:ee: 8f:47:df:5e:0f:7b:e8:59:f4:38:0e:5b:83:20:e5:d8:67:17: d2:44:ed:e1:1e:70:1e:39:b4:87:73:65:f1:80:a1:0c:77:4d: 1e:7e:3c:cf:2f:ed:e0:db:eb:c2:4d:92:cc:ec:da:df:ac:f0: 6f:6c:2b:6b:21:8c:2d:ee:65:ba:a1:5a:f7:18:f3:5e:cf:91: 42:31:8b:8f:e7:49:e7:11:ec:42:74:81:57:c9:bb:6f:47:7e: 20:31:94:b0:4f:c0:b0:1e:b2:c6:42:94:d4:a7:c3:93:42:5f: 07:9b:b4:60:c4:89:04:bf:d5:bf:46:ba:11:3c:d9:20:f3:8f: 71:61:1e:78:ba:ed:94:9c:3f:f2:0a:4b:05:95:79:26:9b:0f: 25:a5:74:c3:45:77:eb:d6:a0:86:57:00:79:10:aa:bf:85:43: f0:b3:93:73 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICE9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDg4RDg3QjEwMkY1QzI3NzFDMzY3MDY0RTIwNDlCNjhB OTAzQzcxQjUwHhcNMjUwODA2MTcyNjI4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzBhNC1hZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrWItyVHXpVSc4dUfA562dPTgA4NM+/4q73wy1bWp92nZJEAhwBIyxUT96gK IdKg2+Kqx8a94JzpIYBBjSNMyhjCNOsu6BL3XnnsUeE12C2wdntzPJurxGIL4tBN uHMiEj8f/IB6IrCjmKhitaW1ljq7Mi0XjCn1+AyCIZKwTBZyC7buCn0APFTXfvoI CnDnZ9cB8PNrbdyGUNz2dxddeoN+lD+PXwnXACbg50e98Dp9vFALiyIPmDEgY0jU T5yUdxJpaZeheOGPcrtgSt5chNLFVEV71Jj31+o1fOgtTt13tP1O+vLf/2AkuFbZ dYMjdIu6KxgrDBdsVE8o6XVzsQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFP+nUcoq jwInPiKezZG1rJZkcvpcMB8GA1UdIwQYMBaAFIjYexAvXCdxw2cGTiBJtoqQPHG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8wRTA4MkU3MkNE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0ozSERad1pPSUVtMmlwQThj YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lOaDdFQzljSjNIRFp3Wk9JRW0yaXBBOGNiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkE5ODMvMEUwODJFNzJDRDBGMTFFODlEOUZGMTY1QzRGOUFFMDIvMUJDOTZEOEMx QkExMTFFQThCREQ2MTE0QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwMAkIoDAwCTCgMDAJWnAwMAm48wDQYJKoZIhvcNAQELBQADggEBAEOZ YsPkhaaaRlNpjLxq8bcXS+pJ24MzUHtEpBj0ADLFVr8Qb85VZhzRtVLaU7hoCF43 WeqpytOdnYpD94cYfQbGU+pinTXjj0+vLHYYl3x+ImiLdFtpHapb7o9H314Pe+hZ 9DgOW4Mg5dhnF9JE7eEecB45tIdzZfGAoQx3TR5+PM8v7eDb68JNkszs2t+s8G9s K2shjC3uZbqhWvcY817PkUIxi4/nSecR7EJ0gVfJu29HfiAxlLBPwLAessZClNSn w5NCXwebtGDEiQS/1b9GuhE82SDzj3FhHni67ZScP/IKSwWVeSabDyWldMNFd+vW oIZXAHkQqr+FQ/Czk3M= -----END CERTIFICATE-----Generated at Mon Mar 2 17:05:52 2026 by rpki-client