$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/3130A9B4681011EEB552C65BC4F9AE02.roa File: 3130A9B4681011EEB552C65BC4F9AE02.roa (raw, json) Hash identifier: OsgY/uwTYM6NeEyONnxq3HN9YIKdpTvZdliw/rwuT+4= Subject key identifier: 23:44:93:07:0A:96:62:9C:8A:9D:07:E4:26:6C:78:BE:94:11:C2:C5 Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Certificate serial: 0AD0 Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/3130A9B4681011EEB552C65BC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:51:07 +0000 ROA not before: Sat 08 Nov 2025 19:09:58 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 64050 IP address blocks: 134.122.128.0/17 maxlen: 24 137.220.128.0/17 maxlen: 24 143.92.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2768 (0xad0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Validity Not Before: Nov 8 19:09:58 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a47c8b-aa9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:83:1e:5d:c2:64:83:c5:4e:be:c0:a8:a8:c4: 79:af:42:1b:aa:02:2c:2a:b5:c3:c2:fa:18:81:ae: b4:a6:57:68:8b:c9:7c:07:b1:e5:81:77:9c:bd:6c: d1:42:48:ce:6e:d7:91:46:84:c6:cc:45:90:a3:90: 08:92:f9:6e:b5:c2:91:0e:30:41:7c:c5:ac:1c:14: 42:2b:c5:82:5b:42:71:b6:86:af:a3:bb:49:62:70: 5e:9d:20:e8:c7:8e:45:52:59:1d:09:5d:6c:8a:b7: 72:92:31:db:36:0a:dc:33:74:cd:93:56:4d:3a:e5: 6c:36:21:b4:38:bb:9e:b7:6a:21:e2:10:91:07:d7: 07:df:f9:95:85:94:6d:57:9a:d2:2d:28:d2:83:ab: ce:e5:c4:07:ed:23:ea:f6:2c:61:cb:88:56:8a:7b: 8b:a8:0b:1f:9e:53:ea:25:6f:fc:7f:03:78:6a:99: eb:98:66:2b:b0:ed:d1:06:a2:26:e3:46:22:fa:8f: 33:06:09:ff:c1:2c:5c:1b:ff:da:58:fb:76:1c:08: 82:3b:a5:f0:81:75:56:e9:db:58:48:35:93:4a:c2: b9:3c:b8:7b:2a:bd:3d:cf:c3:83:a8:d1:71:e0:25: 3a:1f:66:e9:c3:dc:b6:2a:c1:f0:00:0d:89:86:9c: e5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:44:93:07:0A:96:62:9C:8A:9D:07:E4:26:6C:78:BE:94:11:C2:C5 X509v3 Authority Key Identifier: keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/3130A9B4681011EEB552C65BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 134.122.128.0/17 137.220.128.0/17 143.92.32.0/19 Signature Algorithm: sha256WithRSAEncryption 7b:b2:a6:55:14:1d:ec:3a:ec:71:be:52:7f:80:50:c2:33:b9: 76:b1:95:e6:71:0e:d4:1a:d1:66:14:d9:62:1e:ff:de:13:23: b6:1d:e5:eb:47:a2:ee:34:a1:39:49:07:6d:b9:de:f0:6b:c9: 54:49:1c:a8:bc:89:d7:a1:1c:2d:bf:4f:e6:19:8b:e0:d6:71: 96:7b:0b:0a:11:5b:f2:67:84:6a:e3:ff:0d:15:cc:ac:08:7d: 94:2d:05:f2:a0:9c:17:c3:7c:64:22:c8:b1:33:17:7b:f0:0b: a3:60:ef:3f:20:d5:7b:d5:6c:99:61:bc:1f:b7:e3:5b:5c:d6: ed:6a:be:97:fc:0d:f2:e1:e8:2e:38:50:94:ad:be:86:aa:9f: d7:19:92:4b:93:df:5c:dc:3c:a7:ec:ad:33:50:08:0e:b6:9a: f5:08:8b:d8:47:c2:44:3b:20:2a:9e:e0:2a:ac:dd:b9:bd:76: d9:c5:a2:40:f4:b8:5d:99:5b:a3:ca:5f:e7:99:17:31:12:0b: 10:47:0d:21:ca:28:af:9e:b5:3e:04:66:5a:55:f3:87:93:70: 1a:06:0f:da:1b:2b:a6:88:d7:4f:19:22:e6:f2:df:d3:b3:35: 26:47:97:a2:f6:58:59:a6:1e:03:95:8f:52:66:14:b2:18:5e: 7e:37:38:23 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw MEJBOTNCMzIwHhcNMjUxMTA4MTkwOTU4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2M4Yi1hYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YMeXcJkg8VOvsCoqMR5r0IbqgIsKrXDwvoYga60pldoi8l8B7HlgXecvWzR QkjObteRRoTGzEWQo5AIkvlutcKRDjBBfMWsHBRCK8WCW0Jxtoavo7tJYnBenSDo x45FUlkdCV1sirdykjHbNgrcM3TNk1ZNOuVsNiG0OLuet2oh4hCRB9cH3/mVhZRt V5rSLSjSg6vO5cQH7SPq9ixhy4hWinuLqAsfnlPqJW/8fwN4apnrmGYrsO3RBqIm 40Yi+o8zBgn/wSxcG//aWPt2HAiCO6XwgXVW6dtYSDWTSsK5PLh7Kr09z8ODqNFx 4CU6H2bpw9y2KsHwAA2JhpzlCwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFCNEkwcK lmKcip0H5CZseL6UEcLFMB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEM2NjEvMDRBQUIyOUU4MzZEMTFFQUI0QTJENzZEQzRGOUFFMDIvMzEzMEE5QjQ2 ODEwMTFFRUI1NTJDNjVCQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQHhnqAAwQHidyAAwQFj1wgMA0GCSqGSIb3DQEBCwUAA4IBAQB7sqZV FB3sOuxxvlJ/gFDCM7l2sZXmcQ7UGtFmFNliHv/eEyO2HeXrR6LuNKE5SQdtud7w a8lUSRyovInXoRwtv0/mGYvg1nGWewsKEVvyZ4Rq4/8NFcysCH2ULQXyoJwXw3xk IsixMxd78AujYO8/INV71WyZYbwft+NbXNbtar6X/A3y4eguOFCUrb6Gqp/XGZJL k99c3Dyn7K0zUAgOtpr1CIvYR8JEOyAqnuAqrN25vXbZxaJA9LhdmVujyl/nmRcx EgsQRw0hyiivnrU+BGZaVfOHk3AaBg/aGyumiNdPGSLm8t/TszUmR5ei9lhZph4D lY9SZhSyGF5+Nzgj -----END CERTIFICATE-----Generated at Mon Mar 2 18:33:22 2026 by rpki-client