$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa File: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (raw, json) Hash identifier: Zqbu2gM/p3JYhF6RtHC7pKoD7WRxqkmXieIo4G2MPsk= Subject key identifier: 8C:C8:12:A4:01:6F:3F:2B:A0:6A:9F:42:5E:CF:69:AD:7E:36:95:5E Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Certificate serial: 03C3 Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:14:04 +0000 ROA not before: Tue 13 Jan 2026 00:20:24 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 23477 IP address blocks: 168.153.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 963 (0x3c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Validity Not Before: Jan 13 00:20:24 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a473dc-66ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:80:3b:9b:be:e3:f1:24:cd:c0:12:36:0b: 30:f6:57:74:bb:a4:05:e1:11:86:51:71:d5:cb:54: ef:3f:6f:64:57:e3:b7:6f:d6:f0:f0:22:69:a0:e7: 42:40:0b:a6:5d:15:ff:22:a3:d3:82:b6:94:77:16: d0:41:ac:32:03:f9:58:41:56:47:bc:0f:ff:dd:4a: 7f:6e:76:9c:20:38:4f:be:e9:42:36:64:c9:53:47: ff:32:04:c1:64:fe:1a:7c:82:18:0d:19:cb:48:b7: 5d:b2:6e:42:b5:e5:98:38:d5:87:eb:48:f2:72:04: 8a:e6:be:56:2b:46:0b:c8:53:04:03:14:32:08:82: ca:c8:53:bd:5f:67:51:87:0b:96:80:86:d6:b0:9e: 4c:5a:8e:92:18:6c:17:25:1a:4c:99:6e:3b:a9:06: e3:6b:2d:fa:6d:64:ae:d4:f4:da:2b:31:df:b5:73: 08:fb:70:e4:4a:f7:62:d5:d8:0a:3a:56:de:d7:32: 8f:39:ea:4b:8f:f6:93:86:e5:49:91:44:42:74:11: 16:1b:64:3a:64:08:3c:e3:ad:4b:ec:43:d8:99:fc: 8a:75:c3:a6:b4:f6:77:86:e8:7e:8e:ea:79:e9:08: 4e:68:3f:b5:80:08:26:56:45:16:02:aa:63:03:bb: 58:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C8:12:A4:01:6F:3F:2B:A0:6A:9F:42:5E:CF:69:AD:7E:36:95:5E X509v3 Authority Key Identifier: keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 168.153.100.0/24 Signature Algorithm: sha256WithRSAEncryption 69:e7:3f:a9:1e:01:05:b0:ab:25:5e:04:28:1a:a9:5b:d7:39: 3a:6a:ec:a1:c8:77:5b:35:60:1f:d3:bd:61:65:b6:30:38:07: 88:3f:c2:58:b6:15:a9:8d:22:ec:a9:e0:5a:5c:ac:a3:27:bc: 2a:73:b1:27:b7:bd:97:d7:fe:1a:91:6b:2c:6b:c5:8e:82:c2: df:de:aa:bf:fc:12:04:36:16:59:ab:5a:d5:aa:b5:c2:82:7d: 96:dd:08:b8:10:2f:75:39:fb:1d:f9:59:ab:4d:10:69:9c:8b: f9:5b:09:74:a6:9c:53:ab:ff:76:56:27:dc:58:b7:fe:b0:d9: 6d:9d:5f:5b:28:09:4d:62:0c:bd:57:a2:cd:a4:57:34:f9:90: c0:35:72:f7:5d:a9:e3:a4:69:1e:4c:a6:17:a1:cb:1e:5c:bc: b4:78:f3:5f:78:4a:a7:c8:16:32:3d:df:ee:f0:93:be:f3:1c: e3:47:38:f1:cd:e9:d4:c4:fc:b0:7f:ab:c8:48:ac:7a:4a:2a: 31:46:c0:09:8a:d5:46:01:10:25:64:68:6c:10:8b:52:6e:54: 5e:15:d7:96:f6:3a:64:9a:d2:47:5e:21:ed:6f:bd:75:37:b3: b7:bd:0f:a4:4b:30:6e:f4:dc:d9:f9:3c:d1:10:28:97:8c:55: db:6f:1f:41 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC MUNENzlGNkIwHhcNMjYwMTEzMDAyMDI0WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzNkYy02NmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4CAO5u+4/EkzcASNgsw9ld0u6QF4RGGUXHVy1TvP29kV+O3b9bw8CJpoOdC QAumXRX/IqPTgraUdxbQQawyA/lYQVZHvA//3Up/bnacIDhPvulCNmTJU0f/MgTB ZP4afIIYDRnLSLddsm5CteWYONWH60jycgSK5r5WK0YLyFMEAxQyCILKyFO9X2dR hwuWgIbWsJ5MWo6SGGwXJRpMmW47qQbjay36bWSu1PTaKzHftXMI+3DkSvdi1dgK Olbe1zKPOepLj/aThuVJkURCdBEWG2Q6ZAg8461L7EPYmfyKdcOmtPZ3huh+jup5 6QhOaD+1gAgmVkUWAqpjA7tYwwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIzIEqQB bz8roGqfQl7Paa1+NpVeMB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE3MTMvMzQ5OTRDQjRFMERBMTFFQzk0QzdFMDYyQzRGOUFFMDIvRDBCRTFEMkFF MEUxMTFFQ0JGRjI3QjQ0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAqJlkMA0GCSqGSIb3DQEBCwUAA4IBAQBp5z+pHgEFsKslXgQoGqlb 1zk6auyhyHdbNWAf071hZbYwOAeIP8JYthWpjSLsqeBaXKyjJ7wqc7Ent72X1/4a kWssa8WOgsLf3qq//BIENhZZq1rVqrXCgn2W3Qi4EC91Ofsd+VmrTRBpnIv5Wwl0 ppxTq/92VifcWLf+sNltnV9bKAlNYgy9V6LNpFc0+ZDANXL3XanjpGkeTKYXocse XLy0ePNfeEqnyBYyPd/u8JO+8xzjRzjxzenUxPywf6vISKx6SioxRsAJitVGARAl ZGhsEItSblReFdeW9jpkmtJHXiHtb711N7O3vQ+kSzBu9NzZ+TzRECiXjFXbbx9B -----END CERTIFICATE-----Generated at Mon Mar 2 14:14:06 2026 by rpki-client