$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/65DCB430F25A11E9937D9D73C4F9AE02.roa File: 65DCB430F25A11E9937D9D73C4F9AE02.roa (raw, json) Hash identifier: QPmbfdGsqWZkIC2TmmDA+d/UeO6FqSYc32flQMZ3H+k= Subject key identifier: 4B:4B:2E:B8:57:86:61:45:81:97:9C:CE:44:63:4E:01:33:4C:F2:0A Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0DA9 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/65DCB430F25A11E9937D9D73C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:17:22 +0000 ROA not before: Sat 04 Oct 2025 18:17:45 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 63969 IP address blocks: 59.152.96.0/20 maxlen: 24 103.85.156.0/22 maxlen: 24 144.48.116.0/22 maxlen: 24 182.48.64.0/19 maxlen: 24 2404:4f80:29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3497 (0xda9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Oct 4 18:17:45 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a482b2-3b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d4:99:d9:53:c7:1e:e5:82:ec:3b:4c:72:2c: 38:80:0c:83:6b:39:ff:48:0c:db:ca:72:6f:8a:c8: b8:46:9f:27:c3:f7:d5:63:d9:3e:b9:2b:8b:3c:fb: 2a:26:c7:5b:5c:e4:5c:45:c1:6e:6c:b9:a5:f4:db: 14:c5:62:01:f6:1e:d9:c4:9e:b5:71:39:bc:7c:ea: ec:0d:66:ae:89:04:8d:ee:0f:b1:a6:0c:c6:49:e8: b7:49:d3:d2:06:4e:b7:8f:65:13:5a:b0:ce:5a:2c: 3e:f3:bc:6b:e4:31:8b:1b:5c:13:a7:2f:b7:5f:1c: 83:7c:d5:d4:fa:11:5f:73:1e:e7:3a:69:54:b9:e3: 05:6e:0f:5d:5e:44:79:a7:3c:40:75:af:2d:d9:8b: 24:a8:f3:bc:c6:74:f4:03:7c:bd:10:d2:40:89:ee: 24:92:07:6f:30:30:41:9f:12:bc:0a:a8:07:c4:1d: 58:4e:6a:3d:09:82:1b:01:ac:66:71:84:bf:e1:1c: 59:e7:26:82:b9:90:cc:c5:3d:b9:13:f2:b1:4f:6a: c3:d7:45:87:25:fb:7d:15:ea:08:67:56:96:6c:b5: c1:c8:6f:13:5c:3d:0d:76:cf:41:e0:c4:2f:39:4d: da:f0:d9:ec:fb:b4:a4:36:32:78:73:65:e6:c4:62: 15:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4B:2E:B8:57:86:61:45:81:97:9C:CE:44:63:4E:01:33:4C:F2:0A X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/65DCB430F25A11E9937D9D73C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 59.152.96.0/20 103.85.156.0/22 144.48.116.0/22 182.48.64.0/19 IPv6: 2404:4f80:29::/48 Signature Algorithm: sha256WithRSAEncryption 4c:6e:de:e2:76:3e:34:2d:a1:71:48:ba:5d:ce:2a:f9:7c:d8: 69:53:54:db:02:3b:29:94:78:a8:94:02:c3:47:c9:8a:84:c3: 00:cf:e7:ec:d8:2e:4c:fe:7a:46:ba:15:ed:aa:c7:6f:28:56: f1:6e:85:e3:a6:aa:e2:c3:35:d5:be:5d:db:5d:23:ba:4f:9b: 9f:38:90:64:20:0a:1a:99:3d:65:bb:05:de:6f:d2:98:10:77: 66:4d:a1:bf:07:2c:a1:d9:07:95:05:65:fe:7b:87:86:d2:64: c5:b7:47:4c:30:c8:00:ab:c4:27:2b:ee:e6:5c:8c:99:42:79: 28:ad:3b:9e:cd:9b:e8:8a:31:39:69:09:7c:a7:76:21:64:8c: de:f8:c5:bc:3e:46:f1:c2:81:cc:6d:60:b5:a8:70:ba:f6:99: 89:a0:be:e9:a1:08:3e:ed:c1:2b:96:75:12:6b:b4:e6:66:63: 35:38:41:fb:d7:de:9c:54:46:44:81:28:e9:6e:9d:78:e4:6d: 9b:2d:d1:b7:a8:22:27:80:d4:19:3d:41:cb:55:22:ff:85:03: f3:d3:f5:77:18:28:49:d1:b3:6c:5d:da:8a:16:bc:e8:a4:a6: 30:6d:61:7c:2f:7e:e7:55:fe:d4:dc:80:26:b9:9d:68:81:41: b2:2e:89:91 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgICDakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjUxMDA0MTgxNzQ1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODJiMi0zYjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm9SZ2VPHHuWC7DtMciw4gAyDazn/SAzbynJvisi4Rp8nw/fVY9k+uSuLPPsq JsdbXORcRcFubLml9NsUxWIB9h7ZxJ61cTm8fOrsDWauiQSN7g+xpgzGSei3SdPS Bk63j2UTWrDOWiw+87xr5DGLG1wTpy+3XxyDfNXU+hFfcx7nOmlUueMFbg9dXkR5 pzxAda8t2YskqPO8xnT0A3y9ENJAie4kkgdvMDBBnxK8CqgHxB1YTmo9CYIbAaxm cYS/4RxZ5yaCuZDMxT25E/KxT2rD10WHJft9FeoIZ1aWbLXByG8TXD0Nds9B4MQv OU3a8Nns+7SkNjJ4c2XmxGIVjwIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFEtLLrhX hmFFgZeczkRjTgEzTPIKMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE5OTgvQUIzNEZCRDRGMjU4MTFFOUI3NUUzQzcwQzRGOUFFMDIvNjVEQ0I0MzBG MjVBMTFFOTkzN0Q5RDczQzRGOUFFMDIucm9hMEIGCCsGAQUFBwEHAQH/BDMwMTAe BAIAATAYAwQEO5hgAwQCZ1WcAwQCkDB0AwQFtjBAMA8EAgACMAkDBwAkBE+AACkw DQYJKoZIhvcNAQELBQADggEBAExu3uJ2PjQtoXFIul3OKvl82GlTVNsCOymUeKiU AsNHyYqEwwDP5+zYLkz+eka6Fe2qx28oVvFuheOmquLDNdW+XdtdI7pPm584kGQg ChqZPWW7Bd5v0pgQd2ZNob8HLKHZB5UFZf57h4bSZMW3R0wwyACrxCcr7uZcjJlC eSitO57Nm+iKMTlpCXyndiFkjN74xbw+RvHCgcxtYLWocLr2mYmgvumhCD7twSuW dRJrtOZmYzU4QfvX3pxURkSBKOlunXjkbZst0beoIieA1Bk9QctVIv+FA/PT9XcY KEnRs2xd2ooWvOikpjBtYXwvfudV/tTcgCa5nWiBQbIuiZE= -----END CERTIFICATE-----Generated at Mon Mar 2 07:13:58 2026 by rpki-client