$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/03D29A521AD611F0BC67FC1CC4F9AE02.roa File: 03D29A521AD611F0BC67FC1CC4F9AE02.roa (raw, json) Hash identifier: +XTRUVrSV5075aMr9L+PWUwss00Y7Wsa3jtDnMwf+RQ= Subject key identifier: 8D:EA:82:A1:9E:69:01:05:59:E8:D6:6C:97:74:86:00:56:A5:82:8C Certificate issuer: /CN=A919B3BC/serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105 Certificate serial: 1EA3 Authority key identifier: 51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/03D29A521AD611F0BC67FC1CC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:40:36 +0000 ROA not before: Mon 20 Oct 2025 16:24:01 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 58424 IP address blocks: 146.88.202.0/23 maxlen: 24 146.88.206.0/23 maxlen: 24 167.179.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7843 (0x1ea3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B3BC, serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105 Validity Not Before: Oct 20 16:24:01 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a441d4-22e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:75:27:92:fa:34:a5:39:2a:87:86:7b:90:a8: cb:fe:b3:67:a9:5b:57:02:9f:be:57:64:2d:09:3d: 95:8e:b1:3a:2f:c4:f3:4c:5f:26:d2:35:a4:2f:1e: 55:9c:2a:2d:7a:2e:72:3e:6d:22:b5:f4:04:2c:cc: 7e:00:72:21:e0:89:d1:eb:8b:93:05:48:b3:ed:bf: ce:bc:a8:ff:31:62:88:57:73:19:17:20:ca:17:75: e7:61:7c:cf:2c:ac:cd:25:11:50:a1:0f:7f:5c:98: 8e:1f:3a:3a:0c:03:b9:61:3d:33:76:50:8c:15:49: 2c:94:e0:93:c4:7c:7d:93:5f:30:4d:eb:bf:32:cc: dd:52:ed:f8:eb:eb:ee:b3:73:4f:42:63:34:f1:aa: 90:11:05:87:93:9a:db:9f:ea:b8:bd:60:4c:07:d8: 4a:32:87:7c:34:7e:83:09:46:2b:e5:56:8d:74:98: 2b:08:52:e2:26:74:6f:ff:aa:18:73:c1:b3:fa:e6: 82:c2:b2:60:5d:73:1d:9c:b4:e7:23:7d:00:2d:e4: e2:fb:c8:29:77:af:a5:2d:66:22:48:18:a5:9a:6f: 9d:88:9c:34:1c:df:ec:33:df:31:cb:64:4e:1c:a4: a3:08:fa:2a:0d:5a:55:8b:23:d0:d7:ce:9b:02:f9: f1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EA:82:A1:9E:69:01:05:59:E8:D6:6C:97:74:86:00:56:A5:82:8C X509v3 Authority Key Identifier: keyid:51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/03D29A521AD611F0BC67FC1CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 146.88.202.0/23 146.88.206.0/23 167.179.0.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:d0:fe:18:9d:02:5f:0c:57:7a:0e:e3:20:b7:64:ed:4c:d3: f8:c3:9a:0f:57:60:a1:f7:3e:67:c5:b8:a5:26:da:0f:5f:97: b4:37:ba:51:51:e5:80:6b:98:14:9b:ee:54:fb:c9:52:73:0d: fe:df:b6:c0:c9:d5:84:06:4e:7f:05:77:cc:2e:d2:bb:5d:41: 4b:e4:61:52:4e:59:89:89:03:99:f0:61:da:53:c9:0c:d4:88: b0:93:b4:ea:86:a2:54:87:d5:c6:cc:bb:53:7a:a5:3f:7e:06: 69:84:b8:a2:eb:68:9d:2b:a4:86:6e:c2:02:48:4d:d1:7b:70: 2b:1e:46:1b:48:0b:4d:d0:29:3b:a7:30:e0:dc:3e:b9:f0:1d: f6:94:4d:93:63:e1:aa:95:78:97:94:cc:87:e7:8a:07:9a:37: 09:d0:b8:c7:c7:e0:35:d4:9e:25:78:fb:74:d0:7a:fa:8b:3e: f5:72:ed:c1:ab:e9:95:38:5c:10:df:58:f1:8e:66:e3:5f:f4: 69:72:02:b5:fd:42:78:d9:c1:8e:46:48:fc:0d:b6:3a:06:c2: 0c:11:d8:e3:8b:15:03:52:3f:ae:0a:7d:36:99:f1:c7:38:51: 69:31:ae:0a:12:20:1a:d9:ff:a8:fd:d7:86:ce:3f:a0:7f:5b: 58:62:b5:90 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICHqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIzQkMxMTAvBgNVBAUTKDUxMzZFMDBEMDNEMUYzODUwMEFCNjcyOUI3MkVEM0Q3 MkNENkExMDUwHhcNMjUxMDIwMTYyNDAxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDFkNC0yMmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3Unkvo0pTkqh4Z7kKjL/rNnqVtXAp++V2QtCT2VjrE6L8TzTF8m0jWkLx5V nCotei5yPm0itfQELMx+AHIh4InR64uTBUiz7b/OvKj/MWKIV3MZFyDKF3XnYXzP LKzNJRFQoQ9/XJiOHzo6DAO5YT0zdlCMFUkslOCTxHx9k18wTeu/MszdUu346+vu s3NPQmM08aqQEQWHk5rbn+q4vWBMB9hKMod8NH6DCUYr5VaNdJgrCFLiJnRv/6oY c8Gz+uaCwrJgXXMdnLTnI30ALeTi+8gpd6+lLWYiSBilmm+diJw0HN/sM98xy2RO HKSjCPoqDVpViyPQ186bAvnxLQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFI3qgqGe aQEFWejWbJd0hgBWpYKMMB8GA1UdIwQYMBaAFFE24A0D0fOFAKtnKbcu09cs1qEF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjNCQy8zMDQxOTdFODhG OUIxMUU2QkVDNUNCMjVDNEY5QUUwMi9VVGJnRFFQUjg0VUFxMmNwdHk3VDF5eldv UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VUYmdEUVBSODRVQXEyY3B0eTdUMXl6V29RVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUIzQkMvMzA0MTk3RTg4RjlCMTFFNkJFQzVDQjI1QzRGOUFFMDIvMDNEMjlBNTIx QUQ2MTFGMEJDNjdGQzFDQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBkljKAwQBkljOAwQBp7MAMA0GCSqGSIb3DQEBCwUAA4IBAQAv0P4Y nQJfDFd6DuMgt2TtTNP4w5oPV2Ch9z5nxbilJtoPX5e0N7pRUeWAa5gUm+5U+8lS cw3+37bAydWEBk5/BXfMLtK7XUFL5GFSTlmJiQOZ8GHaU8kM1Iiwk7TqhqJUh9XG zLtTeqU/fgZphLii62idK6SGbsICSE3Re3ArHkYbSAtN0Ck7pzDg3D658B32lE2T Y+GqlXiXlMyH54oHmjcJ0LjHx+A11J4lePt00Hr6iz71cu3Bq+mVOFwQ31jxjmbj X/RpcgK1/UJ42cGORkj8DbY6BsIMEdjjixUDUj+uCn02mfHHOFFpMa4KEiAa2f+o /deGzj+gf1tYYrWQ -----END CERTIFICATE-----Generated at Mon Mar 2 09:17:24 2026 by rpki-client