$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/23B68638C5DD11EABC58FD24C4F9AE02.roa File: 23B68638C5DD11EABC58FD24C4F9AE02.roa (raw, json) Hash identifier: FcrkIqa4XDgVdyeOamaFQqlLus8d1JT70DNswdpetnU= Subject key identifier: 82:4C:68:64:E2:67:00:24:A0:10:2C:DA:A6:39:75:9A:03:ED:1C:8E Certificate issuer: /CN=A91964B3/serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Certificate serial: 10B8 Authority key identifier: 46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/23B68638C5DD11EABC58FD24C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:41:00 +0000 ROA not before: Tue 30 Dec 2025 15:10:49 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 24560 IP address blocks: 136.185.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 14:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4280 (0x10b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3, serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Validity Not Before: Dec 30 15:10:49 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a46c1c-5566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:1f:54:45:00:16:7b:0c:7a:13:ee:92:f5: e7:2c:b9:d8:1f:a2:91:9e:80:aa:13:a6:fa:63:71: 5d:9d:c4:86:3f:5d:ec:aa:43:f4:e6:16:89:b0:00: 1a:8b:f8:cd:d6:62:d8:39:e3:70:8d:ba:78:2d:24: e1:24:d1:d8:fc:db:7c:fe:b3:d6:c7:59:e9:a2:d4: a7:47:38:b6:a7:28:f9:ca:e8:07:d6:6b:32:a8:80: 69:99:6a:2d:d3:56:d9:3b:b7:0c:44:0a:6f:74:47: cc:cd:47:99:e5:35:da:52:d8:c1:2f:f3:0c:70:bb: b4:f8:77:57:42:fb:d3:25:5a:64:44:42:8f:cc:3f: 2a:3e:5e:55:ce:8e:59:a3:26:d7:95:8c:0e:1f:15: ef:ce:e5:f3:eb:e4:d5:e5:e3:8f:40:26:00:3e:4b: a2:9f:e0:2e:77:e7:36:76:c5:cc:83:c3:b1:98:6a: 74:25:98:1d:97:45:27:bb:c2:04:f8:9c:fd:5f:66: 8c:6b:a1:39:43:d2:44:ba:54:21:8f:5e:9e:4d:39: 73:35:d5:fd:fb:7d:93:e4:3a:78:af:e8:64:72:57: fe:c9:58:d2:05:b1:80:a6:31:e0:90:ce:e3:f9:81: a7:bc:16:dc:3d:d7:24:44:d7:b9:d3:cd:ac:00:b5: 60:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4C:68:64:E2:67:00:24:A0:10:2C:DA:A6:39:75:9A:03:ED:1C:8E X509v3 Authority Key Identifier: keyid:46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/23B68638C5DD11EABC58FD24C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 136.185.0.0/16 Signature Algorithm: sha256WithRSAEncryption bd:a4:86:fb:c1:50:a7:ae:cf:7a:71:96:77:8c:c1:ab:ac:2f: 01:69:67:19:e9:ac:c9:97:cb:b9:6d:93:81:8e:80:5a:2b:c1: 5d:3c:1f:b0:cd:61:fb:e5:ac:65:a7:92:fc:4e:96:3a:e3:10: 47:01:c1:6f:0b:f1:aa:40:38:0e:41:d3:89:be:45:5f:ff:4c: 25:da:ce:81:bf:03:40:d6:02:f4:11:79:d9:d0:bf:ae:53:e8: 20:79:e8:0d:52:b9:62:81:f6:42:cd:6e:53:12:b2:6e:db:29: c8:31:51:d4:5b:a6:4c:1d:eb:9b:39:ad:62:c5:16:b8:76:95: f8:65:38:b2:23:2b:3c:2c:bd:c8:b4:cb:5a:cd:7a:38:1f:c0: c0:ef:13:61:6e:7f:25:7a:af:2f:27:32:1d:59:76:d7:41:76: 6a:ec:be:8c:84:45:a8:cd:ec:aa:77:2f:e0:42:0e:2e:46:1c: 50:f9:43:b3:69:80:55:41:e6:d6:a8:e0:0c:6b:b0:10:45:65: ab:ad:be:fc:20:7f:b7:68:ef:c1:9a:0c:59:5e:9d:1d:29:82: a8:04:78:fb:e5:15:d3:b6:9c:3e:20:1a:17:ad:3e:05:56:57: a9:1d:0d:18:7d:9e:b8:ff:49:f5:85:05:0c:69:55:04:18:93: 13:0b:23:d2 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgICELgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKDQ2NDg1NEZCNTBBOTkwM0M1MjUzNDE4QzU4M0QwRjMx Qjg0MUQ1OTcwHhcNMjUxMjMwMTUxMDQ5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmMxYy01NTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYofVEUAFnsMehPukvXnLLnYH6KRnoCqE6b6Y3FdncSGP13sqkP05haJsAAa i/jN1mLYOeNwjbp4LSThJNHY/Nt8/rPWx1npotSnRzi2pyj5yugH1msyqIBpmWot 01bZO7cMRApvdEfMzUeZ5TXaUtjBL/MMcLu0+HdXQvvTJVpkREKPzD8qPl5Vzo5Z oybXlYwOHxXvzuXz6+TV5eOPQCYAPkuin+Aud+c2dsXMg8OxmGp0JZgdl0Unu8IE +Jz9X2aMa6E5Q9JEulQhj16eTTlzNdX9+32T5Dp4r+hkclf+yVjSBbGApjHgkM7j +YGnvBbcPdckRNe5082sALVgjwIDAQABo4ICXzCCAlswHQYDVR0OBBYEFIJMaGTi ZwAkoBAs2qY5dZoD7RyOMB8GA1UdIwQYMBaAFEZIVPtQqZA8UlNBjFg9DzG4QdWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy8yQTU5NDBGMjRC QjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtEeFNVMEdNV0QwUE1iaEIx WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JraFUtMUNwa0R4U1UwR01XRDBQTWJoQjFaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTY0QjMvMkE1OTQwRjI0QkIzMTFFOUFCMTUxQzE3QzRGOUFFMDIvMjNCNjg2MzhD NUREMTFFQUJDNThGRDI0QzRGOUFFMDIucm9hMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAiLkwDQYJKoZIhvcNAQELBQADggEBAL2khvvBUKeuz3pxlneMwaus LwFpZxnprMmXy7ltk4GOgForwV08H7DNYfvlrGWnkvxOljrjEEcBwW8L8apAOA5B 04m+RV//TCXazoG/A0DWAvQRednQv65T6CB56A1SuWKB9kLNblMSsm7bKcgxUdRb pkwd65s5rWLFFrh2lfhlOLIjKzwsvci0y1rNejgfwMDvE2FufyV6ry8nMh1ZdtdB dmrsvoyERajN7Kp3L+BCDi5GHFD5Q7NpgFVB5tao4AxrsBBFZautvvwgf7do78Ga DFlenR0pgqgEePvlFdO2nD4gGhetPgVWV6kdDRh9nrj/SfWFBQxpVQQYkxMLI9I= -----END CERTIFICATE-----Generated at Mon Mar 2 02:01:25 2026 by rpki-client