$ rpki-client -vvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/155309DAFF3B11EF87CAB56EC4F9AE02.roa File: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (raw, json) Hash identifier: wZ5j7R6Xpr/TxoGuBCCPY8JtPL1WN3VWT4i7dA3yVHM= Subject key identifier: 72:4F:21:59:59:67:48:BB:4C:C0:F9:DC:AD:05:17:9A:91:E7:45:86 Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Certificate serial: 046C Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/155309DAFF3B11EF87CAB56EC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:49:50 +0000 ROA not before: Wed 26 Nov 2025 23:15:57 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 135409 IP address blocks: 14.137.32.0/19 maxlen: 24 103.70.64.0/22 maxlen: 24 103.103.60.0/22 maxlen: 24 182.54.144.0/22 maxlen: 24 182.255.28.0/22 maxlen: 24 202.5.112.0/20 maxlen: 24 203.2.130.0/23 maxlen: 24 203.8.206.0/23 maxlen: 24 203.21.140.0/22 maxlen: 24 203.24.104.0/22 maxlen: 24 203.27.96.0/23 maxlen: 24 2001:df2:2600::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1132 (0x46c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Validity Not Before: Nov 26 23:15:57 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a435ee-dc11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9a:89:85:98:6d:12:b4:1c:b7:4e:02:9d:38: fe:7a:fd:f8:d6:47:2c:b4:54:73:15:da:ba:3c:4b: 1f:bf:17:c0:cd:d8:2a:f7:ae:ce:53:dd:f7:9c:94: 10:04:df:21:82:d1:bc:c0:2a:12:c2:ab:d1:cb:90: 51:1c:d5:7b:1e:39:e1:d7:6c:2e:b3:35:e6:71:ff: fc:c0:6f:07:70:bf:69:b2:50:30:d3:45:ff:27:74: 6e:f8:f0:88:e6:11:0d:52:24:bf:79:5d:51:73:a6: ac:bf:06:2d:63:fd:51:01:c6:9e:0c:5a:1f:b5:5a: 31:bd:c3:a8:d1:ae:7b:95:30:74:cb:2e:91:4b:16: 3c:5c:f6:e7:f6:db:77:43:9e:ca:2d:18:ac:a4:ee: ae:be:39:ae:81:2f:42:ce:2d:70:4d:53:50:a2:e0: 29:c0:13:e3:9b:47:35:4a:90:1c:e5:e3:9b:0a:c2: 5e:80:e5:79:7d:d3:9a:e6:ef:ce:fb:2b:35:a9:8c: 9a:7a:ab:c1:fd:29:af:da:9f:b4:50:7f:7c:ee:5d: e7:eb:84:fb:2e:aa:19:43:ad:9f:9a:57:fc:c9:c4: e6:fa:10:55:47:d9:7f:24:d7:4a:92:b4:7c:f4:52: fd:01:46:ac:ef:b8:b6:db:77:f4:d9:40:31:1d:d1: 35:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4F:21:59:59:67:48:BB:4C:C0:F9:DC:AD:05:17:9A:91:E7:45:86 X509v3 Authority Key Identifier: keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/155309DAFF3B11EF87CAB56EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 14.137.32.0/19 103.70.64.0/22 103.103.60.0/22 182.54.144.0/22 182.255.28.0/22 202.5.112.0/20 203.2.130.0/23 203.8.206.0/23 203.21.140.0/22 203.24.104.0/22 203.27.96.0/23 IPv6: 2001:df2:2600::/48 Signature Algorithm: sha256WithRSAEncryption 9e:77:46:e5:02:80:8d:c5:38:d6:ca:07:8c:30:32:ad:33:ca: de:cf:f1:17:30:a6:fd:73:55:75:27:c4:fb:95:cc:36:3f:7b: e9:5e:ac:2b:f7:19:b3:7e:e9:a2:97:df:a2:e1:5c:a0:38:32: d2:e1:8a:86:81:ce:af:ae:4f:a5:1a:63:37:e3:84:1a:4d:4f: 24:0c:c7:08:17:81:90:fa:ad:9f:0a:ca:1a:75:9a:60:5d:48: 2c:e3:05:0d:11:7d:59:ab:63:c3:65:f4:11:a1:7a:8d:73:ea: 29:77:82:51:1a:c1:0a:75:61:9d:d7:20:f9:37:12:75:99:27: ab:b0:c9:44:2e:78:ee:d0:34:e1:d2:1f:40:3c:d3:0f:aa:95: 10:84:5e:b2:3a:ab:83:cb:e4:46:b4:81:ad:79:11:a4:42:3e: ef:9f:05:42:ce:82:a0:04:4c:b2:3a:d1:30:1c:de:17:c3:92: 3b:6c:de:37:15:12:48:2a:ff:22:03:f0:77:9c:93:da:60:92: 3b:dd:01:8f:17:c9:38:fe:87:46:83:2d:76:e5:e2:89:85:f7: 68:a4:b8:b8:a6:8e:85:7a:b4:cf:1a:e5:5d:3e:1a:64:e3:9d: 7f:02:3a:2d:94:9c:ea:28:2f:14:cd:37:a0:df:b1:19:c3:35: a1:0a:f7:ac -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICBGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFEMjZCOTNGNTFD NDY3NEVCQUEwHhcNMjUxMTI2MjMxNTU3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzVlZS1kYzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6pqJhZhtErQct04CnTj+ev341kcstFRzFdq6PEsfvxfAzdgq967OU933nJQQ BN8hgtG8wCoSwqvRy5BRHNV7Hjnh12wuszXmcf/8wG8HcL9pslAw00X/J3Ru+PCI 5hENUiS/eV1Rc6asvwYtY/1RAcaeDFoftVoxvcOo0a57lTB0yy6RSxY8XPbn9tt3 Q57KLRispO6uvjmugS9Czi1wTVNQouApwBPjm0c1SpAc5eObCsJegOV5fdOa5u/O +ys1qYyaeqvB/Smv2p+0UH987l3n64T7LqoZQ62fmlf8ycTm+hBVR9l/JNdKkrR8 9FL9AUas77i223f02UAxHdE1twIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFHJPIVlZ Z0i7TMD53K0FF5qR50WGMB8GA1UdIwQYMBaAFJBKI1y0dH4IYA/B0muT9RxGdOuq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0Ny82RDIyRUFGMDhG MDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZnaGdEOEhTYTVQMUhFWjA2 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tFb2pYTFIwZmdoZ0Q4SFNhNVAxSEVaMDY2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0YyNDcvNkQyMkVBRjA4RjAzMTFFQ0E1QzlGRTEyQzRGOUFFMDIvMTU1MzA5REFG RjNCMTFFRjg3Q0FCNTZFQzRGOUFFMDIucm9hMGwGCCsGAQUFBwEHAQH/BF0wWzBI BAIAATBCAwQFDokgAwQCZ0ZAAwQCZ2c8AwQCtjaQAwQCtv8cAwQEygVwAwQBywKC AwQBywjOAwQCyxWMAwQCyxhoAwQByxtgMA8EAgACMAkDBwAgAQ3yJgAwDQYJKoZI hvcNAQELBQADggEBAJ53RuUCgI3FONbKB4wwMq0zyt7P8Rcwpv1zVXUnxPuVzDY/ e+lerCv3GbN+6aKX36LhXKA4MtLhioaBzq+uT6UaYzfjhBpNTyQMxwgXgZD6rZ8K yhp1mmBdSCzjBQ0RfVmrY8Nl9BGheo1z6il3glEawQp1YZ3XIPk3EnWZJ6uwyUQu eO7QNOHSH0A80w+qlRCEXrI6q4PL5Ea0ga15EaRCPu+fBULOgqAETLI60TAc3hfD kjts3jcVEkgq/yID8Heck9pgkjvdAY8XyTj+h0aDLXbl4omF92ikuLimjoV6tM8a 5V0+GmTjnX8COi2UnOooLxTNN6DfsRnDNaEK96w= -----END CERTIFICATE-----Generated at Mon Mar 2 20:57:13 2026 by rpki-client