$ rpki-client -vvf rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/15B99EFC016111F0B1B6A34EC4F9AE02.roa File: 15B99EFC016111F0B1B6A34EC4F9AE02.roa (raw, json) Hash identifier: Ym98AGZEM1BksP4Y3kvzDkvtm38BxUohqAh//gTG7x8= Subject key identifier: 28:92:2A:97:E8:62:13:3B:A9:A8:36:0F:C2:8F:80:FD:C0:78:61:25 Certificate issuer: /CN=A9172FC5/serialNumber=AD545D2504FE1DE92AE1766DF4657637DB7A7E75 Certificate serial: FA Authority key identifier: AD:54:5D:25:04:FE:1D:E9:2A:E1:76:6D:F4:65:76:37:DB:7A:7E:75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/15B99EFC016111F0B1B6A34EC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:08:47 +0000 ROA not before: Wed 03 Dec 2025 04:34:17 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132233 IP address blocks: 160.250.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172FC5, serialNumber=AD545D2504FE1DE92AE1766DF4657637DB7A7E75 Validity Not Before: Dec 3 04:34:17 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a58bdf-5a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4a:2c:31:90:0a:41:07:87:4f:22:1e:d0:77: 28:a0:5c:dc:3c:14:e1:a4:11:81:7a:3c:38:ed:54: bc:bc:b2:71:6d:5d:2c:d3:02:1d:9f:8a:34:0f:77: e9:f6:fa:15:2f:5e:70:65:09:c5:e7:eb:6f:d6:f4: 6f:2f:16:53:1b:af:58:13:98:b4:ae:6a:13:e7:ea: 56:b5:83:7c:bc:14:d4:66:20:dc:a1:37:52:bf:d2: 77:6d:1b:2f:45:8c:8e:43:e8:94:59:b4:71:b6:a0: 92:4c:a7:cc:a2:7a:6f:c6:3a:54:be:cf:99:e4:d5: 22:df:2c:16:a4:1f:f0:26:39:32:ff:4e:51:d1:4e: 69:6c:53:ad:e4:f4:14:5a:e1:a8:f4:d5:f4:fe:13: 3f:03:4e:bb:7d:00:bc:cb:2e:d9:6d:e3:64:56:c1: fa:9c:84:da:ef:fe:09:39:27:65:f7:c2:63:92:23: 7e:2a:aa:39:cf:62:75:24:85:29:1d:82:e9:1e:9e: 30:75:33:05:8f:cc:8d:15:27:68:25:d2:41:70:ae: a2:a2:46:05:83:c3:e7:78:c1:3e:ca:b1:32:45:c4: cc:d0:28:59:a6:ed:76:aa:6a:02:84:ba:d1:8a:7a: ad:72:73:c8:9c:88:43:f9:f8:86:6b:03:3d:c3:42: 85:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:92:2A:97:E8:62:13:3B:A9:A8:36:0F:C2:8F:80:FD:C0:78:61:25 X509v3 Authority Key Identifier: keyid:AD:54:5D:25:04:FE:1D:E9:2A:E1:76:6D:F4:65:76:37:DB:7A:7E:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/15B99EFC016111F0B1B6A34EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.250.20.0/23 Signature Algorithm: sha256WithRSAEncryption c1:1f:9a:bd:fe:7f:6c:6d:d8:ba:52:52:8c:a4:8e:68:77:38: 45:f2:44:f7:db:1a:e4:2f:a2:94:3b:bc:ec:ab:3b:fe:a2:4d: 4e:3a:92:44:8f:4f:7a:ef:e1:c6:58:bd:1f:83:fb:30:73:0e: 1c:41:34:a5:e5:66:cf:fd:db:fa:79:55:0c:cd:0b:f1:f3:cb: 5a:dc:12:5c:6e:6f:b0:ef:ad:85:88:3f:4c:42:b6:31:ee:11: 8f:ed:9f:f1:5b:4b:2a:59:45:19:52:79:ec:10:d1:a0:9c:bc: 90:df:eb:0b:ae:cd:30:a4:41:b7:c6:89:fb:2c:48:f5:ac:ae: bb:4d:90:80:b4:6d:9d:83:6c:ed:11:12:91:39:e6:e6:ab:11: 1e:82:db:b5:ee:67:f9:a7:76:b5:60:01:37:14:18:1b:38:71: c6:2b:e9:48:d8:09:1b:4b:c1:53:20:76:98:3f:e4:be:36:03: 91:82:a0:55:b4:9e:2b:c9:09:a3:c0:03:49:59:3c:6a:cc:78: 9b:10:70:26:82:65:c5:5b:f8:3e:0c:ee:44:1b:b0:62:57:e6: 79:34:53:e5:ff:3f:c4:e8:d5:7a:50:48:1d:90:b4:ba:e0:0e: 57:2f:e7:10:c5:a5:55:a9:d1:15:e6:ab:0d:65:c6:59:75:06: 75:1f:68:89 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJGQzUxMTAvBgNVBAUTKEFENTQ1RDI1MDRGRTFERTkyQUUxNzY2REY0NjU3NjM3 REI3QTdFNzUwHhcNMjUxMjAzMDQzNDE3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGJkZi01YTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlUosMZAKQQeHTyIe0HcooFzcPBThpBGBejw47VS8vLJxbV0s0wIdn4o0D3fp 9voVL15wZQnF5+tv1vRvLxZTG69YE5i0rmoT5+pWtYN8vBTUZiDcoTdSv9J3bRsv RYyOQ+iUWbRxtqCSTKfMonpvxjpUvs+Z5NUi3ywWpB/wJjky/05R0U5pbFOt5PQU WuGo9NX0/hM/A067fQC8yy7ZbeNkVsH6nITa7/4JOSdl98JjkiN+Kqo5z2J1JIUp HYLpHp4wdTMFj8yNFSdoJdJBcK6iokYFg8PneME+yrEyRcTM0ChZpu12qmoChLrR inqtcnPInIhD+fiGawM9w0KFAQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCiSKpfo YhM7qag2D8KPgP3AeGElMB8GA1UdIwQYMBaAFK1UXSUE/h3pKuF2bfRldjfben51 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkZDNS9FNTM5Q0RBMEFC M0YxMUVGQkUwMkNGMTRDNEY5QUUwMi9yVlJkSlFULUhla3E0WFp0OUdWMk45dDZm blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JWUmRKUVQtSGVrcTRYWnQ5R1YyTjl0NmZuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJGQzUvRTUzOUNEQTBBQjNGMTFFRkJFMDJDRjE0QzRGOUFFMDIvMTVCOTlFRkMw MTYxMTFGMEIxQjZBMzRFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoPoUMA0GCSqGSIb3DQEBCwUAA4IBAQDBH5q9/n9sbdi6UlKMpI5o dzhF8kT32xrkL6KUO7zsqzv+ok1OOpJEj0967+HGWL0fg/swcw4cQTSl5WbP/dv6 eVUMzQvx88ta3BJcbm+w762FiD9MQrYx7hGP7Z/xW0sqWUUZUnnsENGgnLyQ3+sL rs0wpEG3xon7LEj1rK67TZCAtG2dg2ztERKROebmqxEegtu17mf5p3a1YAE3FBgb OHHGK+lI2AkbS8FTIHaYP+S+NgORgqBVtJ4ryQmjwANJWTxqzHibEHAmgmXFW/g+ DO5EG7BiV+Z5NFPl/z/E6NV6UEgdkLS64A5XL+cQxaVVqdEV5qsNZcZZdQZ1H2iJ -----END CERTIFICATE-----Generated at Mon Mar 2 20:56:50 2026 by rpki-client