$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4B1D585250EA11EC8FF55B24C4F9AE02.roa File: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (raw, json) Hash identifier: 4xgHsmFBzpOEDFWrTsnY/UVdPSnGuyQ3aHzpdWQKEDE= Subject key identifier: 0E:FE:5C:21:1D:6D:FA:B0:57:E8:78:4C:96:D9:CF:30:FD:71:F6:AA Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Certificate serial: 04FD Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4B1D585250EA11EC8FF55B24C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:42:34 +0000 ROA not before: Tue 18 Nov 2025 20:11:22 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 9744 IP address blocks: 52.128.224.0/19 maxlen: 24 148.66.0.0/19 maxlen: 24 216.118.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1277 (0x4fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Validity Not Before: Nov 18 20:11:22 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a45e6a-291c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3c:61:b1:90:18:e5:3f:2c:8b:ba:fc:5d:db: 67:60:65:aa:6a:85:98:d9:79:46:77:e9:9b:96:cd: 68:b7:d5:c3:d0:90:3e:34:37:f7:a3:96:e5:22:23: 11:25:a7:82:c0:83:9c:4f:aa:c3:84:f8:cc:20:7c: ab:30:e2:20:1c:66:6d:d1:8c:14:d5:5d:82:84:23: 8d:76:ff:27:7f:a9:5b:b1:e3:af:15:0b:27:d3:56: 6c:80:5b:16:70:75:8c:18:29:92:e5:ed:0b:85:7d: be:75:09:43:37:51:2e:9c:6c:e4:db:9c:39:2e:12: e4:73:36:a0:47:e4:bd:36:fd:41:10:57:44:dd:96: a3:c8:ee:a5:40:ce:bb:d5:a3:34:5f:67:80:ff:7b: b5:22:2c:7d:e5:36:96:63:39:91:45:4f:a7:6b:b3: ec:40:a8:6e:e8:6b:d3:7c:be:90:eb:48:2e:e9:95: 48:7c:43:4e:73:89:0c:55:fd:02:76:2f:b4:31:5c: e8:14:91:b3:e5:e9:4b:cb:ec:53:6b:78:cb:7b:09: dc:2e:f3:d0:46:05:f3:8c:3c:2e:f4:54:a2:f4:11: 49:b2:e7:8c:25:1d:be:48:7b:b5:98:62:2e:29:2c: 10:49:17:c9:8b:66:48:33:71:65:49:dd:69:44:b7: 73:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FE:5C:21:1D:6D:FA:B0:57:E8:78:4C:96:D9:CF:30:FD:71:F6:AA X509v3 Authority Key Identifier: keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4B1D585250EA11EC8FF55B24C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 52.128.224.0/19 148.66.0.0/19 216.118.224.0/19 Signature Algorithm: sha256WithRSAEncryption 18:e3:a1:c3:ee:dc:45:22:35:b7:aa:a7:dc:f0:2d:28:0e:1a: 2f:8d:81:b7:40:e2:01:d1:d5:97:60:14:d1:41:4b:be:b6:e2: 25:dd:62:12:cf:2b:4d:de:ce:64:29:7d:2a:f7:7f:ee:6b:01: 3b:94:46:21:17:97:60:0e:2d:55:28:e0:7f:b2:06:e3:56:b4: a4:17:06:b0:95:76:fb:9a:f0:e7:d4:c2:29:51:0e:c6:2f:c3: 1f:34:07:88:27:21:66:31:8e:8f:fb:ae:0b:6d:7d:4a:2a:7c: 61:d6:09:75:af:8e:40:4c:42:f2:78:34:5c:31:8b:28:14:dd: 42:3b:b2:a7:b3:a5:bf:3f:ac:68:40:19:8a:1b:81:fb:b2:a1: e5:98:17:26:6a:28:91:99:56:8b:79:9b:bc:35:32:97:14:c7: 45:5e:ed:a5:14:f5:e7:4a:cc:d7:7a:40:f5:7f:f7:6c:de:e3: 73:2e:b1:bc:86:9f:40:ad:02:e1:85:f0:b3:0d:21:bf:11:5f: 3f:64:96:fa:a2:79:c3:80:6f:20:71:4b:6f:ef:a2:a0:f5:b8: cb:96:33:a6:8c:5f:6f:6d:a4:ae:0c:a4:9f:3c:1d:be:1d:a7: 08:47:b0:2d:5c:34:cd:5c:5c:38:7d:00:5a:85:1e:e8:61:39: 6d:32:1a:b3 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQjAxMTAvBgNVBAUTKEUxQjkxMEI5QzczMTBDOUY2NTU5NEZDNkU4OTg5RkM5 NTNCMzZFNTEwHhcNMjUxMTE4MjAxMTIyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWU2YS0yOTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jxhsZAY5T8si7r8XdtnYGWqaoWY2XlGd+mbls1ot9XD0JA+NDf3o5blIiMR JaeCwIOcT6rDhPjMIHyrMOIgHGZt0YwU1V2ChCONdv8nf6lbseOvFQsn01ZsgFsW cHWMGCmS5e0LhX2+dQlDN1EunGzk25w5LhLkczagR+S9Nv1BEFdE3ZajyO6lQM67 1aM0X2eA/3u1Iix95TaWYzmRRU+na7PsQKhu6GvTfL6Q60gu6ZVIfENOc4kMVf0C di+0MVzoFJGz5elLy+xTa3jLewncLvPQRgXzjDwu9FSi9BFJsueMJR2+SHu1mGIu KSwQSRfJi2ZIM3FlSd1pRLdzRwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFA7+XCEd bfqwV+h4TJbZzzD9cfaqMB8GA1UdIwQYMBaAFOG5ELnHMQyfZVlPxuiYn8lTs25R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC9FMzJDODdDQzUw RDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERKOWxXVV9HNkppZnlWT3pi bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRia1F1Y2N4REo5bFdVX0c2SmlmeVZPemJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhFQjAvRTMyQzg3Q0M1MEQ1MTFFQ0IzRjhENTI5QzRGOUFFMDIvNEIxRDU4NTI1 MEVBMTFFQzhGRjU1QjI0QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQFNIDgAwQFlEIAAwQF2HbgMA0GCSqGSIb3DQEBCwUAA4IBAQAY46HD 7txFIjW3qqfc8C0oDhovjYG3QOIB0dWXYBTRQUu+tuIl3WISzytN3s5kKX0q93/u awE7lEYhF5dgDi1VKOB/sgbjVrSkFwawlXb7mvDn1MIpUQ7GL8MfNAeIJyFmMY6P +64LbX1KKnxh1gl1r45ATELyeDRcMYsoFN1CO7Kns6W/P6xoQBmKG4H7sqHlmBcm aiiRmVaLeZu8NTKXFMdFXu2lFPXnSszXekD1f/ds3uNzLrG8hp9ArQLhhfCzDSG/ EV8/ZJb6onnDgG8gcUtv76Kg9bjLljOmjF9vbaSuDKSfPB2+HacIR7AtXDTNXFw4 fQBahR7oYTltMhqz -----END CERTIFICATE-----Generated at Mon Mar 2 09:05:09 2026 by rpki-client