$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/D1424FC8E0E111ECBFF27B44C4F9AE02.roa File: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (raw, json) Hash identifier: VpW/GGNQZtOaPEiTSAjONhHFcZtykmd+bhy/dKuCDgU= Subject key identifier: 1B:2A:C1:44:AD:3B:2E:3A:63:49:60:47:2A:DC:C8:C6:4B:2E:1B:A1 Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Certificate serial: 03C4 Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/D1424FC8E0E111ECBFF27B44C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:14:05 +0000 ROA not before: Tue 13 Jan 2026 00:20:25 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 2764 IP address blocks: 168.153.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 964 (0x3c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Validity Not Before: Jan 13 00:20:25 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a473dd-5ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e6:01:17:c5:d5:04:8e:33:2d:d0:98:8b:bc: ed:d0:93:ce:1d:76:e7:3b:8e:72:89:1e:c2:1d:b3: 7f:bb:2c:ff:0c:83:35:1f:47:25:60:13:d0:1e:5f: 3e:93:13:7f:42:0b:0b:70:a2:e3:39:44:0e:44:9c: 52:33:bb:a2:15:5d:f0:99:73:0c:91:b5:6f:2a:ae: 60:b8:aa:d6:06:f5:2a:44:b4:b5:0f:f3:f5:18:9c: d4:94:78:47:93:61:bc:82:35:46:88:b5:9e:ff:f8: 0b:f2:ce:da:d2:7b:2f:15:82:9b:54:1d:d7:d3:74: dd:a1:82:43:d5:9e:aa:62:c8:45:57:a3:54:b1:82: e5:18:eb:b5:ee:4b:fd:8b:84:c5:f9:a2:88:26:34: cd:4f:f5:f7:69:e5:77:c3:b6:3a:e3:dc:91:f9:a8: 46:78:5b:65:4e:bc:cb:5c:be:d5:55:37:b4:12:a6: 1d:65:65:73:eb:1f:69:7e:75:69:0e:61:7b:52:61: ae:f2:77:2a:04:4a:34:ca:73:9c:bc:ae:1a:a0:cb: b2:8b:b8:a3:d3:a5:84:3a:5a:08:1a:4e:b1:55:91: 25:cd:59:be:6d:e1:88:f1:a9:46:1a:95:46:f3:52: db:91:9e:86:78:67:1c:80:af:83:51:ce:99:10:75: 55:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2A:C1:44:AD:3B:2E:3A:63:49:60:47:2A:DC:C8:C6:4B:2E:1B:A1 X509v3 Authority Key Identifier: keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/D1424FC8E0E111ECBFF27B44C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 168.153.0.0/24 Signature Algorithm: sha256WithRSAEncryption 42:0e:e3:5d:aa:7a:10:0b:66:1c:34:28:66:79:8e:6f:d1:57: 5b:93:33:3e:2d:ce:ce:c0:f1:78:2b:15:4d:d0:57:eb:53:46: 99:28:d8:1a:bb:7f:d0:16:fe:56:b6:69:12:a0:7f:c6:e7:8a: 70:c0:6d:2b:d0:57:af:6c:0c:95:db:16:75:02:69:43:c4:56: 28:fc:43:5a:67:a7:60:3f:2d:ef:06:57:99:18:06:8a:ac:5c: de:c4:f5:2c:11:18:e6:2e:de:3b:94:ec:35:29:03:4f:24:95: c3:35:89:56:3c:17:8d:a8:a4:e8:d0:97:ec:27:f2:55:d1:d4: 11:38:2a:11:eb:be:69:0d:d6:6c:c3:ab:87:ac:a9:fd:93:b6: a3:b5:c0:29:9f:bb:18:0f:9c:27:7b:dc:4d:ac:e3:02:52:b2: 6d:21:27:a9:a9:f8:74:ea:b4:bb:4d:67:98:6c:ba:30:1b:75: db:0d:a9:a7:c5:0a:ab:77:86:b8:27:95:57:aa:c6:19:53:df: 63:59:56:be:30:0d:d9:96:c0:98:8e:e9:86:4e:8b:68:33:27: 80:73:75:e2:91:69:e7:77:f6:ce:e9:3d:fe:2e:54:70:9f:f7: 35:db:d8:0b:f9:69:48:bb:96:fb:9d:da:62:cb:5e:99:52:fd: 17:17:bf:24 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC MUNENzlGNkIwHhcNMjYwMTEzMDAyMDI1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzNkZC01YWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuYBF8XVBI4zLdCYi7zt0JPOHXbnO45yiR7CHbN/uyz/DIM1H0clYBPQHl8+ kxN/QgsLcKLjOUQORJxSM7uiFV3wmXMMkbVvKq5guKrWBvUqRLS1D/P1GJzUlHhH k2G8gjVGiLWe//gL8s7a0nsvFYKbVB3X03TdoYJD1Z6qYshFV6NUsYLlGOu17kv9 i4TF+aKIJjTNT/X3aeV3w7Y649yR+ahGeFtlTrzLXL7VVTe0EqYdZWVz6x9pfnVp DmF7UmGu8ncqBEo0ynOcvK4aoMuyi7ij06WEOloIGk6xVZElzVm+beGI8alGGpVG 81LbkZ6GeGccgK+DUc6ZEHVVkQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBsqwUSt Oy46Y0lgRyrcyMZLLhuhMB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE3MTMvMzQ5OTRDQjRFMERBMTFFQzk0QzdFMDYyQzRGOUFFMDIvRDE0MjRGQzhF MEUxMTFFQ0JGRjI3QjQ0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAqJkAMA0GCSqGSIb3DQEBCwUAA4IBAQBCDuNdqnoQC2YcNChmeY5v 0VdbkzM+Lc7OwPF4KxVN0FfrU0aZKNgau3/QFv5WtmkSoH/G54pwwG0r0FevbAyV 2xZ1AmlDxFYo/ENaZ6dgPy3vBleZGAaKrFzexPUsERjmLt47lOw1KQNPJJXDNYlW PBeNqKTo0JfsJ/JV0dQROCoR675pDdZsw6uHrKn9k7ajtcApn7sYD5wne9xNrOMC UrJtISepqfh06rS7TWeYbLowG3XbDamnxQqrd4a4J5VXqsYZU99jWVa+MA3ZlsCY jumGTotoMyeAc3XikWnnd/bO6T3+LlRwn/c129gL+WlIu5b7ndpiy16ZUv0XF78k -----END CERTIFICATE-----Generated at Mon Mar 2 16:51:38 2026 by rpki-client