$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/986FA3843F8F11EBA86B1F11C4F9AE02.roa File: 986FA3843F8F11EBA86B1F11C4F9AE02.roa (raw, json) Hash identifier: mZ5vq8Tj60q8YoaKNQyf2XVsVELSCKKyxOomhTBpzeE= Subject key identifier: E8:E7:86:70:C1:46:B6:2A:69:3B:24:C6:1D:B1:99:83:E4:02:4C:39 Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Certificate serial: 17F4 Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/986FA3843F8F11EBA86B1F11C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:20:35 +0000 ROA not before: Thu 04 Dec 2025 16:16:02 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 18190 IP address blocks: 136.158.132.0/24 maxlen: 24 136.158.133.0/24 maxlen: 24 136.158.134.0/24 maxlen: 24 136.158.135.0/24 maxlen: 24 136.158.136.0/24 maxlen: 24 136.158.137.0/24 maxlen: 24 136.158.138.0/24 maxlen: 24 136.158.161.0/24 maxlen: 24 136.158.169.0/24 maxlen: 24 136.158.170.0/24 maxlen: 24 136.158.171.0/24 maxlen: 24 161.49.148.0/24 maxlen: 24 161.49.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6132 (0x17f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Validity Not Before: Dec 4 16:16:02 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a48373-57c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:74:c1:b9:be:15:b2:b8:e1:8f:cc:4e:7d:61: 16:26:c4:0c:00:d1:80:74:a0:25:c0:71:e3:63:d7: 57:6e:66:4b:08:45:43:59:ca:87:b3:8a:83:ef:33: d2:73:29:5e:14:58:c0:78:14:89:9a:26:09:27:0a: ec:cd:db:b1:fd:bb:6b:cc:5c:a2:ed:5a:21:62:a6: 04:9f:8d:c5:c3:b1:7e:a5:40:aa:b8:63:e5:de:6a: be:76:d5:10:5a:4b:8c:b8:9b:bb:fa:5e:49:00:9b: 84:b4:d3:8e:5e:32:e6:a6:6f:e4:c0:d2:82:3b:8c: 7e:2e:71:ea:7b:33:dc:95:4f:58:4f:bc:d7:eb:a0: 6f:44:29:82:6f:24:df:cb:4e:9b:7b:6b:79:e0:ad: db:c0:1a:08:2c:0a:60:df:b1:31:f0:c8:c9:79:7e: a3:ab:5f:76:22:5f:f1:d4:0d:46:6e:88:29:13:14: 91:46:08:f7:3b:03:cb:53:3e:ba:58:2a:0f:aa:f1: 9f:62:f5:e8:b5:93:bf:61:42:f2:16:1a:dc:72:fc: 5b:2d:f8:05:d9:02:49:3b:39:67:b9:67:9a:d8:b6: fe:b1:9b:76:26:1d:b6:77:8b:cf:56:59:5e:76:ac: 50:ea:2d:7c:f3:f3:ea:6d:63:c4:6a:5b:3b:b0:3c: a2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E7:86:70:C1:46:B6:2A:69:3B:24:C6:1D:B1:99:83:E4:02:4C:39 X509v3 Authority Key Identifier: keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/986FA3843F8F11EBA86B1F11C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 136.158.132.0-136.158.138.255 136.158.161.0/24 136.158.169.0-136.158.171.255 161.49.148.0/24 161.49.178.0/24 Signature Algorithm: sha256WithRSAEncryption c4:7d:43:3e:65:c8:81:ce:c3:cb:73:06:d4:a4:74:b9:e6:29: 1d:d4:13:cc:1c:48:c0:e4:a0:c8:c0:f8:24:1b:25:7c:63:dd: 93:f5:95:6e:f9:9f:14:f3:00:06:fc:8a:d2:3a:48:94:b5:e7: f4:90:c4:78:80:a2:f1:b5:e8:e8:65:12:ee:ed:17:06:53:69: 30:b1:45:69:37:f7:09:b4:45:d8:c1:7c:d4:fc:43:36:20:c4: 22:82:d3:69:97:f6:c5:c2:1d:08:d5:80:6a:e6:81:f4:81:a0: c1:d4:7c:f6:ae:cb:17:c9:5f:a0:22:54:fe:f9:0d:b1:76:02: c1:97:0c:e0:f6:92:81:46:82:ac:69:01:9d:a5:67:a6:c1:c8: 1b:57:23:ca:a3:9b:a0:fe:5b:11:45:fe:da:e7:b0:d0:94:b3: 60:ce:c2:83:96:c4:c8:c7:0a:ac:2e:aa:7f:c9:f4:d3:9e:8c: df:c5:59:2f:67:9f:70:75:14:51:ea:1e:21:42:9e:c8:af:54: ca:6a:99:03:fb:31:cc:b1:b8:3b:84:4c:20:2d:ac:e6:11:8d: 77:63:4e:09:04:b7:0a:65:16:1a:32:10:02:65:4c:29:a9:20: b3:f9:2e:cb:92:3e:f1:7a:57:68:87:7b:3a:fc:e0:4f:ca:b7: 0c:36:9c:4c -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgICF/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKDM2OEYzQzkzOEI2MDE0MTI1MjFBM0E4MTkwMDk5NzhG Q0ZFOTFFN0UwHhcNMjUxMjA0MTYxNjAyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODM3My01N2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33TBub4Vsrjhj8xOfWEWJsQMANGAdKAlwHHjY9dXbmZLCEVDWcqHs4qD7zPS cyleFFjAeBSJmiYJJwrszdux/btrzFyi7VohYqYEn43Fw7F+pUCquGPl3mq+dtUQ WkuMuJu7+l5JAJuEtNOOXjLmpm/kwNKCO4x+LnHqezPclU9YT7zX66BvRCmCbyTf y06be2t54K3bwBoILApg37Ex8MjJeX6jq192Il/x1A1GbogpExSRRgj3OwPLUz66 WCoPqvGfYvXotZO/YULyFhrccvxbLfgF2QJJOzlnuWea2Lb+sZt2Jh22d4vPVlle dqxQ6i188/PqbWPEals7sDyi2QIDAQABo4ICiDCCAoQwHQYDVR0OBBYEFOjnhnDB RrYqaTskxh2xmYPkAkw5MB8GA1UdIwQYMBaAFDaPPJOLYBQSUho6gZAJl4/P6R5+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi9GOThCNUYwQzIx RjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZCSlNHanFCa0FtWGo4X3BI bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05vODhrNHRnRkJKU0dqcUJrQW1YajhfcEhuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkIxOEIvRjk4QjVGMEMyMUY5MTFFODk2QzFERDIzQzRGOUFFMDIvOTg2RkEzODQz RjhGMTFFQkE4NkIxRjExQzRGOUFFMDIucm9hMEcGCCsGAQUFBwEHAQH/BDgwNjA0 BAIAATAuMAwDBAKInoQDBACInooDBACInqEwDAMEAIieqQMEAoieqAMEAKExlAME AKExsjANBgkqhkiG9w0BAQsFAAOCAQEAxH1DPmXIgc7Dy3MG1KR0ueYpHdQTzBxI wOSgyMD4JBslfGPdk/WVbvmfFPMABvyK0jpIlLXn9JDEeICi8bXo6GUS7u0XBlNp MLFFaTf3CbRF2MF81PxDNiDEIoLTaZf2xcIdCNWAauaB9IGgwdR89q7LF8lfoCJU /vkNsXYCwZcM4PaSgUaCrGkBnaVnpsHIG1cjyqOboP5bEUX+2uew0JSzYM7Cg5bE yMcKrC6qf8n0056M38VZL2efcHUUUeoeIUKeyK9UymqZA/sxzLG4O4RMIC2s5hGN d2NOCQS3CmUWGjIQAmVMKakgs/kuy5I+8XpXaId7OvzgT8q3DDacTA== -----END CERTIFICATE-----Generated at Mon Mar 2 05:42:16 2026 by rpki-client