$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/3BC4C576426D11EFAD9E7D10C4F9AE02.roa File: 3BC4C576426D11EFAD9E7D10C4F9AE02.roa (raw, json) Hash identifier: lSWyLiWx5JQuG+eztxmoGvsgjDFaH0ydZKTaI2SA5oE= Subject key identifier: 8E:CE:8F:C9:FB:9B:57:2A:7B:BD:2A:52:D4:17:AF:88:77:18:6D:C6 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0DA6 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/3BC4C576426D11EFAD9E7D10C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:17:20 +0000 ROA not before: Sat 04 Oct 2025 18:17:41 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 137531 IP address blocks: 59.152.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3494 (0xda6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Oct 4 18:17:41 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a482b0-ddc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ba:6e:77:5e:7b:4b:80:99:7e:eb:39:be:46: 50:be:92:55:f3:e9:66:2b:a7:14:a3:6c:bf:78:27: 13:d8:af:3e:3e:ea:a5:19:f9:d7:bf:f8:5e:61:6f: 4a:86:cd:b9:49:97:62:8d:5b:6d:78:38:cc:5d:06: 52:10:94:75:c4:5a:04:33:60:39:a2:8d:60:b2:99: 84:db:d9:f4:82:53:56:21:e8:1e:dc:99:1b:06:3d: c7:c5:8e:5c:0d:81:fd:d7:48:10:28:55:7e:4e:0e: 08:7a:78:56:b0:e9:73:32:27:d1:95:74:f6:8b:77: 52:ec:6f:a9:2c:f6:75:2c:b7:f2:67:e6:25:f6:10: 06:d4:1a:6e:4a:12:33:53:63:8b:1d:14:ae:7f:eb: 3a:a3:0a:8a:31:62:0e:1f:77:4e:7f:d0:e0:ee:8e: 33:9a:64:6d:08:ef:b9:50:95:72:ad:a2:30:65:42: 13:fa:db:ac:c4:15:95:c3:43:f7:93:0c:13:95:6b: 82:2e:1c:de:d9:0e:25:bd:d3:2f:ca:97:90:15:dc: b0:8d:d6:da:60:61:83:c2:ad:07:8d:11:75:2a:a9: 37:e7:a5:64:89:0e:2b:26:e9:8b:fd:f7:ec:49:b0: 7d:f9:d9:aa:53:e2:01:6c:99:4a:58:a7:3f:a3:e5: 2e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CE:8F:C9:FB:9B:57:2A:7B:BD:2A:52:D4:17:AF:88:77:18:6D:C6 X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/3BC4C576426D11EFAD9E7D10C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 59.152.108.0/24 Signature Algorithm: sha256WithRSAEncryption b4:60:9a:01:4d:1c:9d:64:e6:db:a6:08:ce:b1:4b:95:c9:6f: 8a:bf:16:a7:db:82:fc:3e:b2:06:ef:12:cc:ee:35:f2:43:57: a0:eb:56:e1:42:47:7a:2e:a9:c7:27:3d:42:ee:fd:22:c3:9f: 95:2d:99:05:66:8b:b0:13:f7:fa:82:c2:c1:1d:a7:8d:5d:96: 18:d6:9b:cc:3b:03:da:6a:91:b3:1a:a4:d7:9c:17:e9:6e:1a: 4e:f2:5f:db:4e:95:43:0b:05:f5:a5:55:4b:ab:65:0f:1a:22: 35:f1:ae:39:71:ac:98:68:dd:ae:ec:e8:7d:f5:e0:55:b0:9d: 9d:fe:2f:ea:8e:1d:39:1e:c8:88:89:ec:e1:ca:e8:13:ca:c1: fe:fa:33:f7:da:d3:9b:fb:16:36:5c:96:0c:e9:35:c2:4d:8f: 3c:61:2e:c3:50:60:9e:b8:c4:d5:04:c7:e8:27:dc:56:4b:09: 6e:51:66:fa:6a:c7:47:3c:1a:a3:9b:60:cd:dc:8a:95:75:e6: c9:d7:d6:72:78:bc:ca:98:d9:7c:5f:b3:4c:be:f2:82:2b:6b: 63:ff:4b:eb:4f:a7:31:4b:a2:0d:1d:47:3e:14:a5:96:5e:cd: e3:28:23:64:f6:e8:a7:e1:6b:b4:04:62:27:4f:90:8e:59:7c: 65:9d:d5:55 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjUxMDA0MTgxNzQxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODJiMC1kZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjbpud157S4CZfus5vkZQvpJV8+lmK6cUo2y/eCcT2K8+PuqlGfnXv/heYW9K hs25SZdijVtteDjMXQZSEJR1xFoEM2A5oo1gspmE29n0glNWIege3JkbBj3HxY5c DYH910gQKFV+Tg4IenhWsOlzMifRlXT2i3dS7G+pLPZ1LLfyZ+Yl9hAG1BpuShIz U2OLHRSuf+s6owqKMWIOH3dOf9Dg7o4zmmRtCO+5UJVyraIwZUIT+tusxBWVw0P3 kwwTlWuCLhze2Q4lvdMvypeQFdywjdbaYGGDwq0HjRF1Kqk356VkiQ4rJumL/ffs SbB9+dmqU+IBbJlKWKc/o+UuOQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFI7Oj8n7 m1cqe70qUtQXr4h3GG3GMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE5OTgvQUIzNEZCRDRGMjU4MTFFOUI3NUUzQzcwQzRGOUFFMDIvM0JDNEM1NzY0 MjZEMTFFRkFEOUU3RDEwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAO5hsMA0GCSqGSIb3DQEBCwUAA4IBAQC0YJoBTRydZObbpgjOsUuV yW+Kvxan24L8PrIG7xLM7jXyQ1eg61bhQkd6LqnHJz1C7v0iw5+VLZkFZouwE/f6 gsLBHaeNXZYY1pvMOwPaapGzGqTXnBfpbhpO8l/bTpVDCwX1pVVLq2UPGiI18a45 cayYaN2u7Oh99eBVsJ2d/i/qjh05HsiIiezhyugTysH++jP32tOb+xY2XJYM6TXC TY88YS7DUGCeuMTVBMfoJ9xWSwluUWb6asdHPBqjm2DN3IqVdebJ19ZyeLzKmNl8 X7NMvvKCK2tj/0vrT6cxS6INHUc+FKWWXs3jKCNk9uin4Wu0BGInT5COWXxlndVV -----END CERTIFICATE-----Generated at Mon Mar 2 18:12:42 2026 by rpki-client