$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/28A46886845B11EFA46A8F64C4F9AE02.roa File: 28A46886845B11EFA46A8F64C4F9AE02.roa (raw, json) Hash identifier: to9oWLtUCPR2IV81QwsKxDWKhq1Sm4j3pB/lwtY1Upg= Subject key identifier: 6F:1C:44:CB:D9:45:12:45:33:B4:26:14:46:96:A1:3A:40:30:7C:FD Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Certificate serial: 03C2 Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/28A46886845B11EFA46A8F64C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:14:03 +0000 ROA not before: Tue 13 Jan 2026 00:20:23 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 133602 IP address blocks: 168.153.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 962 (0x3c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Validity Not Before: Jan 13 00:20:23 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a473db-8e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d9:0f:33:62:1d:44:d9:38:12:a7:10:9f:ea: 0a:38:49:06:20:4d:50:66:6f:1b:91:b7:f5:f2:23: be:30:ce:56:55:fe:b9:fb:6b:d0:1b:50:cc:93:67: 7f:70:2c:67:6d:d1:45:bd:d5:bd:76:ac:4c:fe:c2: 16:d9:81:c9:54:6f:f7:d3:96:fd:fc:da:1c:ad:4b: ff:3a:69:71:b5:40:94:37:89:3e:27:b4:85:8c:44: 12:5e:df:26:11:16:75:8a:f0:3a:2a:10:a9:e7:03: 65:34:c9:c7:c0:9f:bd:6c:e8:fe:21:42:8b:f0:5c: 70:99:8a:c2:b0:48:34:04:5f:4b:5a:c9:90:f9:19: d6:fd:88:37:1a:fe:a8:97:a5:e3:a7:ed:3a:6c:cd: 72:78:50:6a:b3:47:4c:90:b6:e7:f3:46:c8:6b:58: 41:c7:2b:82:d2:0f:a1:27:91:2c:47:12:06:02:ae: 38:b0:95:c1:cc:07:26:ed:97:72:9d:be:eb:be:c6: 82:91:25:08:67:22:68:08:4f:37:4c:71:83:14:76: 16:8e:30:1e:ab:da:fa:d4:00:d6:76:b7:8d:cc:e0: 3e:1d:a8:2c:6f:b5:52:4d:75:43:97:b5:39:83:1a: 40:a2:1a:71:34:74:c0:89:c0:29:78:93:80:eb:db: ff:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1C:44:CB:D9:45:12:45:33:B4:26:14:46:96:A1:3A:40:30:7C:FD X509v3 Authority Key Identifier: keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/28A46886845B11EFA46A8F64C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 168.153.2.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:5d:43:17:90:a6:14:ba:38:ff:be:69:d1:f0:19:4b:73:61: 70:76:56:8d:a5:d0:66:e5:20:af:5f:8c:5f:45:9c:c3:24:7b: 8d:c3:4f:8a:34:0a:17:eb:b6:ee:26:f2:80:52:15:58:ba:25: e6:77:f3:46:ad:8e:8c:da:04:f6:08:e9:75:e9:65:3a:29:07: 4c:f0:02:44:db:93:4f:5c:e1:55:c9:58:85:b1:d8:52:e1:f5: 20:df:29:f2:dc:77:dd:02:26:c8:91:ed:9c:16:d8:71:d9:ed: 0a:ad:47:a0:b8:39:40:c9:ba:5d:99:1d:ce:0d:1c:10:19:da: 7a:f6:df:2c:78:6b:da:fc:1e:d5:62:df:ba:2f:a9:b1:f4:5e: 02:dd:72:b3:aa:b5:06:62:82:2e:0f:c6:0e:74:70:b9:ce:cc: 5e:26:33:30:95:68:13:15:5a:6a:5b:9d:36:ba:40:1b:a4:e4: 37:5b:92:08:f3:9e:d9:9a:a0:ca:bb:ca:fb:5b:14:39:03:b5: 30:b8:b7:a3:ba:6c:1d:78:e0:7b:0c:18:7c:2d:a6:a5:e9:76: 35:21:ae:8e:d5:b5:9f:5e:66:53:ff:13:dd:09:69:17:a4:8a: 3a:82:2b:e1:7c:b8:bb:67:9d:27:69:ac:b2:a3:e8:66:13:f0: 8a:fa:06:23 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC MUNENzlGNkIwHhcNMjYwMTEzMDAyMDIzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzNkYi04ZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNkPM2IdRNk4EqcQn+oKOEkGIE1QZm8bkbf18iO+MM5WVf65+2vQG1DMk2d/ cCxnbdFFvdW9dqxM/sIW2YHJVG/305b9/NocrUv/OmlxtUCUN4k+J7SFjEQSXt8m ERZ1ivA6KhCp5wNlNMnHwJ+9bOj+IUKL8FxwmYrCsEg0BF9LWsmQ+RnW/Yg3Gv6o l6Xjp+06bM1yeFBqs0dMkLbn80bIa1hBxyuC0g+hJ5EsRxIGAq44sJXBzAcm7Zdy nb7rvsaCkSUIZyJoCE83THGDFHYWjjAeq9r61ADWdreNzOA+Hagsb7VSTXVDl7U5 gxpAohpxNHTAicApeJOA69v/GwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFG8cRMvZ RRJFM7QmFEaWoTpAMHz9MB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE3MTMvMzQ5OTRDQjRFMERBMTFFQzk0QzdFMDYyQzRGOUFFMDIvMjhBNDY4ODY4 NDVCMTFFRkE0NkE4RjY0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAqJkCMA0GCSqGSIb3DQEBCwUAA4IBAQBeXUMXkKYUujj/vmnR8BlL c2FwdlaNpdBm5SCvX4xfRZzDJHuNw0+KNAoX67buJvKAUhVYuiXmd/NGrY6M2gT2 COl16WU6KQdM8AJE25NPXOFVyViFsdhS4fUg3yny3HfdAibIke2cFthx2e0KrUeg uDlAybpdmR3ODRwQGdp69t8seGva/B7VYt+6L6mx9F4C3XKzqrUGYoIuD8YOdHC5 zsxeJjMwlWgTFVpqW502ukAbpOQ3W5II857ZmqDKu8r7WxQ5A7UwuLejumwdeOB7 DBh8Laal6XY1Ia6O1bWfXmZT/xPdCWkXpIo6givhfLi7Z50naayyo+hmE/CK+gYj -----END CERTIFICATE-----Generated at Mon Mar 2 18:09:03 2026 by rpki-client