$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/F645F318500C11EBA2295426C4F9AE02.roa File: F645F318500C11EBA2295426C4F9AE02.roa (raw, json) Hash identifier: T/3Qd5JLkUZ8axH+b8NITt79vh28jc8CtqLL9xCu9/o= Subject key identifier: 3F:F5:65:D3:0F:A7:FD:AD:B7:FF:79:CE:55:C7:C6:E8:AF:0D:9E:59 Certificate issuer: /CN=A917C422/serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Certificate serial: 2C02 Authority key identifier: 35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/F645F318500C11EBA2295426C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:25:44 +0000 ROA not before: Fri 12 Sep 2025 14:50:28 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 9244 IP address blocks: 152.104.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11266 (0x2c02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C422, serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Validity Not Before: Sep 12 14:50:28 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a45a78-2ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1b:71:48:11:99:ac:21:1e:f8:0e:82:fb:74: 63:78:a1:df:74:1a:b6:85:c9:db:2e:7c:51:ff:57: 42:45:f6:68:2a:53:90:06:13:0a:df:47:85:63:42: 2d:24:94:31:a4:7a:72:51:89:f8:41:d8:75:ac:41: f9:72:eb:eb:51:f3:f0:8f:39:f5:c7:7e:86:50:e7: 50:26:c3:9c:0a:ab:08:ba:77:8f:89:f5:ab:b1:fc: 10:87:e9:2e:a1:8e:9b:8c:51:63:f9:4f:8b:ac:06: d2:ab:1f:57:23:e5:ff:e5:2d:20:96:b8:59:44:3e: d5:98:b2:b8:18:f3:42:80:53:b1:e4:df:ed:7a:38: ec:f2:c2:09:a0:57:58:69:1a:04:0a:65:a4:71:29: cb:7c:e2:35:e4:83:88:77:cb:f0:24:61:1a:d5:d9: 36:f6:ed:d6:61:38:05:6c:28:12:a4:d0:c1:48:49: 2a:29:ae:b1:00:97:50:20:89:63:e3:c0:cd:1c:fd: db:16:37:11:e3:71:03:e2:ed:9a:39:52:81:de:ee: d3:f3:fb:42:2c:02:2b:53:6b:fd:9d:c3:94:96:79: ed:4c:22:ff:9a:34:12:b5:56:e6:6e:81:7c:1d:40: 0c:0e:75:f4:fe:8e:9a:af:0f:ef:4c:2f:ba:ac:fc: 43:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F5:65:D3:0F:A7:FD:AD:B7:FF:79:CE:55:C7:C6:E8:AF:0D:9E:59 X509v3 Authority Key Identifier: keyid:35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/F645F318500C11EBA2295426C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 152.104.96.0/19 Signature Algorithm: sha256WithRSAEncryption 97:38:18:53:1a:22:09:78:87:7b:f3:c4:80:aa:b6:c2:21:c6: b3:4c:85:85:66:b2:ed:11:42:4b:6d:7c:85:ae:70:55:41:38: 86:c9:af:04:ca:b3:4e:57:bf:d9:c1:8d:6f:70:b3:2f:fe:95: 18:e9:f9:9d:c8:1c:2d:46:3e:5d:fc:d6:36:43:ed:39:5c:6a: 81:51:37:1a:89:a1:f7:b2:bc:f0:b1:de:ca:56:59:72:bd:fe: c4:5d:17:cd:f3:d7:cb:9f:4e:50:64:b8:7d:4b:a5:af:83:5c: d7:14:a1:09:3f:52:80:06:2e:f7:9c:25:63:91:b5:7f:32:81: ce:ae:ba:33:96:e2:7b:18:8d:ac:1f:d2:34:12:9f:b7:52:1b: c1:18:7e:23:a2:f7:07:b2:b5:ca:4d:35:20:3a:64:62:db:70: 91:a4:23:16:ca:8b:45:6f:04:4c:32:7a:a3:4a:e1:f4:c9:52: 13:c1:9b:96:17:c4:90:90:44:c5:e6:b5:81:e0:70:34:30:91: 11:04:a9:3d:8a:8b:3a:d6:d7:85:57:43:a3:55:4f:ff:84:46: 7d:a2:fa:80:a2:9d:69:bb:92:1f:10:c1:aa:a5:d5:ec:cd:b6: d2:e3:65:50:f5:86:89:44:31:86:a4:b0:99:d3:ad:1f:36:1b: d5:3a:7d:1c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0MjIxMTAvBgNVBAUTKDM1NDM5RTBCRjM1Qzg4OEJCODREMUIyNEVDREU3MDYw Q0Y3NDRFOTEwHhcNMjUwOTEyMTQ1MDI4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWE3OC0yZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxtxSBGZrCEe+A6C+3RjeKHfdBq2hcnbLnxR/1dCRfZoKlOQBhMK30eFY0It JJQxpHpyUYn4Qdh1rEH5cuvrUfPwjzn1x36GUOdQJsOcCqsIunePifWrsfwQh+ku oY6bjFFj+U+LrAbSqx9XI+X/5S0glrhZRD7VmLK4GPNCgFOx5N/tejjs8sIJoFdY aRoECmWkcSnLfOI15IOId8vwJGEa1dk29u3WYTgFbCgSpNDBSEkqKa6xAJdQIIlj 48DNHP3bFjcR43ED4u2aOVKB3u7T8/tCLAIrU2v9ncOUlnntTCL/mjQStVbmboF8 HUAMDnX0/o6arw/vTC+6rPxDOQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD/1ZdMP p/2tt/95zlXHxuivDZ5ZMB8GA1UdIwQYMBaAFDVDngvzXIiLuE0bJOzecGDPdE6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQyMi8zRTc0NTM2OEVE NTUxMUUzODA3MkM1N0U1OTExRUEzMi9OVU9lQ19OY2lJdTRUUnNrN041d1lNOTBU cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05VT2VDX05jaUl1NFRSc2s3TjV3WU05MFRwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0M0MjIvM0U3NDUzNjhFRDU1MTFFMzgwNzJDNTdFNTkxMUVBMzIvRjY0NUYzMTg1 MDBDMTFFQkEyMjk1NDI2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFmGhgMA0GCSqGSIb3DQEBCwUAA4IBAQCXOBhTGiIJeId788SAqrbC IcazTIWFZrLtEUJLbXyFrnBVQTiGya8EyrNOV7/ZwY1vcLMv/pUY6fmdyBwtRj5d /NY2Q+05XGqBUTcaiaH3srzwsd7KVllyvf7EXRfN89fLn05QZLh9S6Wvg1zXFKEJ P1KABi73nCVjkbV/MoHOrrozluJ7GI2sH9I0Ep+3UhvBGH4jovcHsrXKTTUgOmRi 23CRpCMWyotFbwRMMnqjSuH0yVITwZuWF8SQkETF5rWB4HA0MJERBKk9ios61teF V0OjVU//hEZ9ovqAop1pu5IfEMGqpdXszbbS42VQ9YaJRDGGpLCZ060fNhvVOn0c -----END CERTIFICATE-----Generated at Mon Mar 2 17:56:35 2026 by rpki-client