$ rpki-client -vvf rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/CEF77C10FB3811EF8D87CD5DC4F9AE02.roa File: CEF77C10FB3811EF8D87CD5DC4F9AE02.roa (raw, json) Hash identifier: GbhVn0VE3FP24YsW08zI1eZuA4bs5ppt8H1p2aPPVzc= Subject key identifier: 52:46:F6:24:A5:DB:60:20:34:B4:2F:FF:B8:4E:0C:1D:8B:32:35:6B Certificate issuer: /CN=A917928F/serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA Certificate serial: 0134 Authority key identifier: 55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/CEF77C10FB3811EF8D87CD5DC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:17:56 +0000 ROA not before: Thu 15 Jan 2026 05:24:06 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 153494 IP address blocks: 59.152.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917928F, serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA Validity Not Before: Jan 15 05:24:06 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a466b4-74de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c9:56:f8:16:e0:33:9f:4b:48:7e:7e:64:87: 0a:ab:dc:95:41:54:78:4b:58:2e:b5:bb:ec:63:e1: a7:73:52:31:48:9f:bb:87:0b:c0:f5:37:67:18:28: 07:78:b0:0f:f0:cf:42:18:bc:4c:03:01:88:f5:c1: c5:bf:7d:49:a5:3b:57:4d:98:2d:d6:87:67:a5:6f: 97:59:6e:3a:25:49:5f:a6:84:7b:bf:9e:d9:2e:3c: 8f:1e:a7:7c:7a:17:6d:c6:87:68:90:1a:f2:36:43: f8:2f:42:3f:08:6e:2c:e4:39:d7:0c:e3:da:32:ea: d4:13:d7:cc:0d:81:22:4c:68:e8:22:38:63:76:e6: 14:c6:af:4f:94:ab:68:8c:2a:e3:f9:4c:d0:e9:cf: 90:41:4c:ae:c8:2c:77:54:a9:3f:af:85:ba:6f:3f: b8:5a:15:0e:11:05:ff:8a:58:69:cd:8b:94:97:bf: cd:b0:7b:01:e8:11:d3:9b:6c:5f:a4:51:d4:16:dc: 52:67:10:68:0e:1e:78:b8:97:98:b5:07:f2:49:3f: a7:4b:96:2e:30:01:3f:ee:00:fe:cd:d9:b7:fa:9b: 66:46:13:22:5d:d2:b5:9b:ef:36:2b:c5:e4:ce:0d: b9:39:6b:a1:43:bc:73:44:99:93:b9:87:21:e2:3f: 96:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:46:F6:24:A5:DB:60:20:34:B4:2F:FF:B8:4E:0C:1D:8B:32:35:6B X509v3 Authority Key Identifier: keyid:55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/CEF77C10FB3811EF8D87CD5DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 59.152.48.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:f9:cd:1d:c4:2f:bb:52:3b:51:6e:76:08:cf:10:74:11:13: 1d:38:db:2f:55:1f:43:cb:d0:98:59:c3:da:c0:fa:4a:b2:b8: 5e:aa:0d:78:68:07:85:48:75:4a:bd:94:a2:ee:e1:dd:c6:4f: 78:b7:0a:a9:f3:8e:e6:e7:b1:93:36:20:bb:d2:26:9c:68:b1: 3d:5e:8b:d8:a0:8b:00:47:1a:a3:9e:35:ce:e0:93:ad:3b:78: 1c:0c:ca:11:22:ab:c5:4d:f4:7e:7e:2e:bc:35:81:87:4d:e1: 02:82:c8:97:f5:fa:d0:fb:7c:01:fc:b5:8a:cf:4c:a9:63:4e: 78:b1:52:70:1a:4e:c7:ee:a5:52:50:2b:22:f1:d8:cb:03:16: 82:05:bf:f7:7c:74:ee:3b:06:b2:74:a8:66:b1:27:99:64:12: ea:f4:af:69:9f:38:5e:34:99:df:5e:8f:cc:fc:32:d7:e8:23: f1:4a:26:99:29:5d:dc:1d:7a:21:17:6f:8a:d9:18:09:b7:ce: 55:a9:4a:74:7a:a9:8e:68:22:ab:20:42:39:c8:9f:fe:97:55: b1:71:21:e3:0e:63:bf:f9:da:d5:96:8e:0f:d0:c0:31:0b:2f: 63:92:e5:bc:75:36:91:a9:8d:bf:ac:ab:a2:40:d5:61:be:74: 74:b0:c6:01 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzkyOEYxMTAvBgNVBAUTKDU1MEIxNjBGRjRGNUREN0Q4NEFDM0U4Qjk1OURENzlB NDJGQjU3REEwHhcNMjYwMTE1MDUyNDA2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjZiNC03NGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwclW+BbgM59LSH5+ZIcKq9yVQVR4S1gutbvsY+Gnc1IxSJ+7hwvA9TdnGCgH eLAP8M9CGLxMAwGI9cHFv31JpTtXTZgt1odnpW+XWW46JUlfpoR7v57ZLjyPHqd8 ehdtxodokBryNkP4L0I/CG4s5DnXDOPaMurUE9fMDYEiTGjoIjhjduYUxq9PlKto jCrj+UzQ6c+QQUyuyCx3VKk/r4W6bz+4WhUOEQX/ilhpzYuUl7/NsHsB6BHTm2xf pFHUFtxSZxBoDh54uJeYtQfyST+nS5YuMAE/7gD+zdm3+ptmRhMiXdK1m+82K8Xk zg25OWuhQ7xzRJmTuYch4j+WVwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFJG9iSl 22AgNLQv/7hODB2LMjVrMB8GA1UdIwQYMBaAFFULFg/09d19hKw+i5Wd15pC+1fa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTI4Ri8xNkZGNUY4MjVC OUQxMUVGQjFENDIxNDZDNEY5QUUwMi9WUXNXRF9UMTNYMkVyRDZMbFozWG1rTDdW OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZRc1dEX1QxM1gyRXJENkxsWjNYbWtMN1Y5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzkyOEYvMTZGRjVGODI1QjlEMTFFRkIxRDQyMTQ2QzRGOUFFMDIvQ0VGNzdDMTBG QjM4MTFFRjhEODdDRDVEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCO5gwMA0GCSqGSIb3DQEBCwUAA4IBAQA6+c0dxC+7UjtRbnYIzxB0 ERMdONsvVR9Dy9CYWcPawPpKsrheqg14aAeFSHVKvZSi7uHdxk94twqp847m57GT NiC70iacaLE9XovYoIsARxqjnjXO4JOtO3gcDMoRIqvFTfR+fi68NYGHTeECgsiX 9frQ+3wB/LWKz0ypY054sVJwGk7H7qVSUCsi8djLAxaCBb/3fHTuOwaydKhmsSeZ ZBLq9K9pnzheNJnfXo/M/DLX6CPxSiaZKV3cHXohF2+K2RgJt85VqUp0eqmOaCKr IEI5yJ/+l1WxcSHjDmO/+drVlo4P0MAxCy9jkuW8dTaRqY2/rKuiQNVhvnR0sMYB -----END CERTIFICATE-----Generated at Mon Mar 2 04:34:08 2026 by rpki-client