$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/CF415DDA520111EEBD942A6FC4F9AE02.roa File: CF415DDA520111EEBD942A6FC4F9AE02.roa (raw, json) Hash identifier: dnF+y2zzWkZBb9zE5OkhyJUIlUqOH1249DrB3ACuXqc= Subject key identifier: 5D:64:D3:44:6E:1E:1B:FA:17:13:95:1D:10:E3:18:F4:04:7B:05:58 Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Certificate serial: 0273 Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/CF415DDA520111EEBD942A6FC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:30:21 +0000 ROA not before: Mon 23 Jun 2025 03:22:19 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151780 IP address blocks: 161.82.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 627 (0x273) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Validity Not Before: Jun 23 03:22:19 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a485bd-9680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6e:40:d1:15:b3:34:91:18:9f:14:31:1c:6c: 34:23:99:02:d1:04:e0:9b:bb:2f:ec:e2:1a:a3:e8: df:6e:6d:5b:cd:b9:7a:a4:96:94:f7:4e:a8:25:47: 05:eb:8a:f0:41:14:bd:df:b1:5a:2b:6f:a4:ac:41: ba:f4:0b:60:e1:07:65:95:f0:84:b5:75:64:22:5b: 1d:58:9d:2d:a6:96:2a:54:72:4d:24:58:20:df:10: 58:94:4b:84:aa:77:68:cb:c5:b8:e1:e6:95:e6:6d: c7:3d:24:a4:74:d4:fe:83:8d:d7:5c:14:0f:6d:c8: e1:72:9c:0b:2e:47:4c:61:0c:35:98:88:54:34:63: fd:66:58:fe:e9:4f:46:e7:57:52:42:58:46:38:e7: fb:86:d1:65:4c:1f:f5:7b:0f:5a:c0:34:8f:21:e8: 10:32:dd:cd:10:1a:b0:ad:6d:aa:86:f3:2f:02:4b: a9:e8:bc:cb:d6:5c:7b:70:0e:88:a4:6b:e3:8c:3b: 3d:35:e2:8a:cf:85:f6:b8:4a:4e:40:d2:e5:51:af: 89:b2:70:54:df:17:18:32:8a:ef:f1:86:0b:fa:17: e3:48:94:cc:ae:e7:3c:7f:dc:db:88:bc:39:26:80: b7:12:ca:67:52:e1:3b:6d:3e:d9:3f:b7:94:f7:ce: 59:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:64:D3:44:6E:1E:1B:FA:17:13:95:1D:10:E3:18:F4:04:7B:05:58 X509v3 Authority Key Identifier: keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/CF415DDA520111EEBD942A6FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.82.229.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:df:ad:9a:c1:fd:af:35:5e:3e:1f:3d:9f:c4:c7:0f:f1:0e: fe:c9:f3:eb:f8:12:60:d7:19:1e:3d:dd:1c:80:04:91:9a:a8: f5:56:2b:e6:03:60:76:49:83:be:85:ec:ca:16:f8:df:14:c5: 55:03:97:e4:b1:d0:e2:fe:16:90:87:37:3a:24:7c:a8:3c:b9: af:c2:fb:c8:40:fa:71:61:fa:9f:89:96:6a:d7:80:eb:de:f7: b3:22:21:f4:ef:e3:73:59:9e:f9:b8:ac:11:b9:15:75:37:7e: c6:7d:23:89:ba:f9:bd:33:7a:e1:53:56:01:33:4e:3f:cd:be: 44:b7:f2:b7:6b:1f:8e:96:2b:7e:6a:e4:77:65:55:92:68:d0: 3e:1c:3c:33:b7:ae:42:d5:63:9a:67:76:e3:30:0a:a4:03:9e: df:ba:59:ef:3f:94:3a:f3:07:22:2b:f3:b0:6a:23:50:f5:69: db:8d:0e:21:fc:0b:d3:79:5d:2f:3d:9c:e9:a3:08:46:4f:c1: 48:f1:fe:5a:5e:3f:4d:01:33:f2:03:49:fc:35:bf:8d:c0:6a: 7e:5c:73:af:9e:ee:92:6e:b4:84:8b:e9:c1:e7:80:7f:b2:e1: 67:74:46:18:88:3e:28:72:76:76:bf:08:1a:31:25:70:b5:29: 20:68:1b:eb -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzNkMxMTAvBgNVBAUTKEEwOTBFNTIwQkY5RDUxRjJGRENFRUQ0MTNBRjI3QUM3 NThGNkFFMUQwHhcNMjUwNjIzMDMyMjE5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODViZC05NjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkG5A0RWzNJEYnxQxHGw0I5kC0QTgm7sv7OIao+jfbm1bzbl6pJaU906oJUcF 64rwQRS937FaK2+krEG69Atg4QdllfCEtXVkIlsdWJ0tppYqVHJNJFgg3xBYlEuE qndoy8W44eaV5m3HPSSkdNT+g43XXBQPbcjhcpwLLkdMYQw1mIhUNGP9Zlj+6U9G 51dSQlhGOOf7htFlTB/1ew9awDSPIegQMt3NEBqwrW2qhvMvAkup6LzL1lx7cA6I pGvjjDs9NeKKz4X2uEpOQNLlUa+JsnBU3xcYMorv8YYL+hfjSJTMruc8f9zbiLw5 JoC3EspnUuE7bT7ZP7eU985ZXwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF1k00Ru Hhv6FxOVHRDjGPQEewVYMB8GA1UdIwQYMBaAFKCQ5SC/nVHy/c7tQTryesdY9q4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83NUI5OEJGMDM2 NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVmTDl6dTFCT3ZKNngxajJy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29KRGxJTC1kVWZMOXp1MUJPdko2eDFqMnJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTUzNkMvNzVCOThCRjAzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvQ0Y0MTVEREE1 MjAxMTFFRUJEOTQyQTZGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAoVLlMA0GCSqGSIb3DQEBCwUAA4IBAQAL362awf2vNV4+Hz2fxMcP 8Q7+yfPr+BJg1xkePd0cgASRmqj1VivmA2B2SYO+hezKFvjfFMVVA5fksdDi/haQ hzc6JHyoPLmvwvvIQPpxYfqfiZZq14Dr3vezIiH07+NzWZ75uKwRuRV1N37GfSOJ uvm9M3rhU1YBM04/zb5Et/K3ax+Olit+auR3ZVWSaNA+HDwzt65C1WOaZ3bjMAqk A57fulnvP5Q68wciK/OwaiNQ9WnbjQ4h/AvTeV0vPZzpowhGT8FI8f5aXj9NATPy A0n8Nb+NwGp+XHOvnu6SbrSEi+nB54B/suFndEYYiD4ocnZ2vwgaMSVwtSkgaBvr -----END CERTIFICATE-----Generated at Mon Mar 2 18:12:49 2026 by rpki-client