$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/BA917E94D65F11F090E652930BB43E13.roa File: BA917E94D65F11F090E652930BB43E13.roa (raw, json) Hash identifier: 4wRkQ2HciJJaW6c/wbWf1lLtY3RIHkE/fK+1Eii/r6E= Subject key identifier: B2:B6:CD:03:66:4C:E0:1C:18:8D:50:02:3C:53:80:D5:0C:51:9A:7D Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Certificate serial: 027A Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/BA917E94D65F11F090E652930BB43E13.roa Signing time: Sun 01 Mar 2026 18:30:27 +0000 ROA not before: Thu 11 Dec 2025 07:05:09 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 136393 IP address blocks: 96.30.64.0/21 maxlen: 23 96.30.64.0/24 maxlen: 24 96.30.72.0/23 maxlen: 23 96.30.79.0/24 maxlen: 24 96.30.84.0/22 maxlen: 23 96.30.100.0/22 maxlen: 23 96.30.107.0/24 maxlen: 24 96.30.108.0/23 maxlen: 23 96.30.111.0/24 maxlen: 24 146.88.36.0/22 maxlen: 22 146.88.36.0/24 maxlen: 24 146.88.37.0/24 maxlen: 24 146.88.38.0/23 maxlen: 23 146.88.42.0/23 maxlen: 23 146.88.44.0/22 maxlen: 23 146.88.52.0/22 maxlen: 24 161.82.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 634 (0x27a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Validity Not Before: Dec 11 07:05:09 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a485c3-4299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d9:43:51:83:11:b0:7e:05:b2:be:43:85:3f: 10:ea:5e:9b:12:d0:0a:8d:13:d2:36:8b:fa:74:0f: 52:d1:aa:bd:e7:7c:f6:5c:7b:32:b8:b5:58:4a:d9: 87:80:18:bf:7d:10:c2:6d:cc:3f:f6:05:44:14:10: e7:bf:62:87:28:e0:d2:c9:a4:37:c8:c0:54:f0:f5: e6:1a:b0:e0:c2:80:5e:83:f8:e6:87:a9:e6:b7:14: 08:9c:c4:82:15:c6:35:cc:c4:d9:f0:b2:2f:2c:d9: a9:a3:5a:04:ed:34:6e:c1:a9:be:9b:57:49:5d:d6: 44:e4:c0:57:d7:87:e3:14:05:06:78:c8:5e:09:d8: c0:26:2e:47:f4:f9:b8:6a:1c:b3:59:dc:7d:5d:0f: e5:12:e3:55:fc:d9:f7:0a:19:13:17:26:df:83:ed: 7c:ed:a0:2f:dd:69:a1:e2:b4:71:34:f4:b5:68:a6: 0e:d5:73:81:18:93:6b:81:c6:cf:8b:bb:00:60:73: 1d:18:a4:12:f9:9b:43:81:dc:03:63:ec:61:f8:b1: 5e:77:73:c8:af:ea:80:e3:77:93:3b:9f:33:2d:ba: bd:4f:7f:48:56:85:e8:b6:29:e3:9a:e6:48:1b:33: 1b:c3:28:7e:ee:1b:52:85:77:a2:ea:2b:0a:b7:e6: 09:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B6:CD:03:66:4C:E0:1C:18:8D:50:02:3C:53:80:D5:0C:51:9A:7D X509v3 Authority Key Identifier: keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/BA917E94D65F11F090E652930BB43E13.roa sbgp-ipAddrBlock: critical IPv4: 96.30.64.0-96.30.73.255 96.30.79.0/24 96.30.84.0/22 96.30.100.0/22 96.30.107.0-96.30.109.255 96.30.111.0/24 146.88.36.0/22 146.88.42.0-146.88.47.255 146.88.52.0/22 161.82.186.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:84:b5:d8:35:3e:be:44:c4:f9:79:98:0b:19:c7:ee:7c:f7: 60:9b:92:fa:49:ac:08:ce:46:c4:f2:81:3e:d8:be:15:a5:cf: c1:3b:89:9b:37:77:a9:32:27:ce:c9:47:01:45:4d:9a:34:70: 3d:e2:de:71:c9:48:4b:3e:42:4a:66:fc:5b:d7:37:c8:fb:d6: bd:0c:24:d3:b1:bd:c9:86:45:01:b0:8f:35:06:23:4c:9c:5c: 01:20:58:4e:54:f1:de:74:2e:01:af:a2:ff:89:b3:91:60:1a: cc:56:ee:44:d5:3b:01:7e:f1:fb:43:f2:a7:10:ae:59:b4:58: 22:d0:60:a5:c4:48:65:e9:d8:dd:ec:13:f6:26:27:17:b7:c4: 68:a2:51:08:06:0c:54:6c:b8:29:48:4b:8d:40:9c:b3:be:c6: aa:8b:0c:23:36:c2:6f:4e:cb:3c:bf:c2:ae:34:a9:ac:15:0d: f7:b4:28:b1:84:81:e7:e3:6c:26:45:05:a1:82:c4:a3:6c:3c: e9:00:cd:4e:ff:16:78:9c:3a:06:fa:4f:8f:72:f6:a7:b0:9b: 66:d6:db:e2:c9:c5:f7:1b:b2:ec:6a:b8:d8:51:b6:20:2c:8c: 38:2d:44:81:06:2a:60:8e:33:74:bd:59:81:7a:65:6a:6f:86: 1b:4f:18:e2 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzNkMxMTAvBgNVBAUTKEEwOTBFNTIwQkY5RDUxRjJGRENFRUQ0MTNBRjI3QUM3 NThGNkFFMUQwHhcNMjUxMjExMDcwNTA5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODVjMy00Mjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dlDUYMRsH4Fsr5DhT8Q6l6bEtAKjRPSNov6dA9S0aq953z2XHsyuLVYStmH gBi/fRDCbcw/9gVEFBDnv2KHKODSyaQ3yMBU8PXmGrDgwoBeg/jmh6nmtxQInMSC FcY1zMTZ8LIvLNmpo1oE7TRuwam+m1dJXdZE5MBX14fjFAUGeMheCdjAJi5H9Pm4 ahyzWdx9XQ/lEuNV/Nn3ChkTFybfg+187aAv3Wmh4rRxNPS1aKYO1XOBGJNrgcbP i7sAYHMdGKQS+ZtDgdwDY+xh+LFed3PIr+qA43eTO58zLbq9T39IVoXotinjmuZI GzMbwyh+7htShXei6isKt+YJ4wIDAQABo4ICrjCCAqowHQYDVR0OBBYEFLK2zQNm TOAcGI1QAjxTgNUMUZp9MB8GA1UdIwQYMBaAFKCQ5SC/nVHy/c7tQTryesdY9q4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83NUI5OEJGMDM2 NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVmTDl6dTFCT3ZKNngxajJy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29KRGxJTC1kVWZMOXp1MUJPdko2eDFqMnJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTUzNkMvNzVCOThCRjAzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvQkE5MTdFOTRE NjVGMTFGMDkwRTY1MjkzMEJCNDNFMTMucm9hMG0GCCsGAQUFBwEHAQH/BF4wXDBa BAIAATBUMAwDBAZgHkADBAFgHkgDBABgHk8DBAJgHlQDBAJgHmQwDAMEAGAeawME AWAebAMEAGAebwMEApJYJDAMAwQBklgqAwQEklggAwQCklg0AwQBoVK6MA0GCSqG SIb3DQEBCwUAA4IBAQAthLXYNT6+RMT5eZgLGcfufPdgm5L6SawIzkbE8oE+2L4V pc/BO4mbN3epMifOyUcBRU2aNHA94t5xyUhLPkJKZvxb1zfI+9a9DCTTsb3JhkUB sI81BiNMnFwBIFhOVPHedC4Br6L/ibORYBrMVu5E1TsBfvH7Q/KnEK5ZtFgi0GCl xEhl6djd7BP2JicXt8RoolEIBgxUbLgpSEuNQJyzvsaqiwwjNsJvTss8v8KuNKms FQ33tCixhIHn42wmRQWhgsSjbDzpAM1O/xZ4nDoG+k+PcvansJtm1tviycX3G7Ls arjYUbYgLIw4LUSBBipgjjN0vVmBemVqb4YbTxji -----END CERTIFICATE-----Generated at Mon Mar 2 19:09:42 2026 by rpki-client