$ rpki-client -vvf rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/FF59EC70144911EFA2053B27C4F9AE02.roa File: FF59EC70144911EFA2053B27C4F9AE02.roa (raw, json) Hash identifier: DqIZqq9ohYmJN2chmHjrncLYA4I+9XGMf3QKJ3iTURU= Subject key identifier: 22:B1:66:1A:77:D2:56:CF:DE:C2:D0:3E:82:AE:E3:4B:7A:F4:A9:22 Certificate issuer: /CN=A919DAF2/serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A Certificate serial: 229A Authority key identifier: 13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/FF59EC70144911EFA2053B27C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:39:39 +0000 ROA not before: Tue 06 May 2025 16:23:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151815 IP address blocks: 202.134.176.0/24 maxlen: 24 202.134.177.0/24 maxlen: 24 202.134.178.0/24 maxlen: 24 202.134.179.0/24 maxlen: 24 202.134.180.0/24 maxlen: 24 202.134.181.0/24 maxlen: 24 202.134.182.0/24 maxlen: 24 202.134.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8858 (0x229a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DAF2, serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A Validity Not Before: May 6 16:23:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4419b-2296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f3:1b:3c:fb:4b:7c:59:34:2d:3d:c2:6e:b5: d4:c1:57:67:66:82:5b:ff:1f:07:d5:e1:02:ea:b8: 3d:e0:2b:d4:74:dc:79:29:2e:dc:1e:ff:8d:2d:d3: fb:dd:37:41:70:98:54:87:a0:a2:fe:2f:eb:1b:80: 98:73:84:78:85:52:4c:fb:9c:68:3d:76:f0:9c:42: 59:69:58:d1:6a:b7:13:b7:7d:e8:5f:64:8b:69:d8: b7:78:20:af:6b:1a:40:d2:c1:de:9f:ce:3a:53:bf: 6a:84:30:b0:1f:a8:6a:7b:09:06:4e:b6:59:af:61: b7:a8:82:16:42:e0:8b:72:ca:7e:79:4d:40:cc:0f: 78:f0:53:a5:91:b2:0f:79:de:a6:97:0d:d3:da:64: af:64:d5:30:72:19:4b:74:7a:13:f0:f4:aa:c3:2a: 6c:5d:0f:41:2b:3f:d2:ec:26:eb:a7:a8:d7:ed:7f: 7c:b3:07:bb:1b:26:7a:eb:90:83:97:99:b4:94:52: 46:9e:df:7c:57:e0:b0:e8:da:cb:ff:c7:6d:06:4d: c8:c9:19:db:60:30:90:73:bc:8c:d5:1b:83:ec:52: 5b:fb:94:84:f3:63:18:7a:2e:0c:f2:38:84:b7:f6: 1f:fd:f4:f7:1b:16:6c:58:6b:a3:7d:ed:cb:fc:52: 2a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B1:66:1A:77:D2:56:CF:DE:C2:D0:3E:82:AE:E3:4B:7A:F4:A9:22 X509v3 Authority Key Identifier: keyid:13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/FF59EC70144911EFA2053B27C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.134.176.0/21 Signature Algorithm: sha256WithRSAEncryption a8:5b:c2:3a:71:95:3a:86:3a:06:48:1a:8e:3d:f2:ed:17:5e: 22:e2:25:d4:75:c1:ed:0e:89:05:01:6f:88:7d:91:df:51:5f: 79:19:67:a4:40:56:c5:f6:cf:68:14:63:cc:cc:77:4d:ac:61: 22:8c:7b:82:7e:1f:39:c1:aa:ba:e2:dd:e8:ad:9d:0f:28:2d: ac:58:9b:3a:cf:d0:3c:aa:63:68:f8:b4:24:eb:f0:6c:46:18: 85:f4:8c:f9:81:cd:60:65:47:b2:b3:be:47:e7:65:fc:cd:ff: 96:b0:84:b9:60:b9:df:25:a8:32:32:49:c9:44:78:ea:d8:96: 05:5c:84:bf:4b:f8:74:bc:8e:c4:31:21:75:fc:1c:4a:f6:ad: 3f:f9:16:b2:81:99:f1:6f:9a:ca:80:d1:90:e7:60:e1:5d:2f: 3f:2e:36:e0:a9:87:93:79:d9:73:3b:31:bf:19:6f:6e:8c:dc: ba:b3:8c:12:03:a1:13:e0:71:8c:cf:f1:5d:dc:4d:f9:00:f3: 7a:2d:d8:0c:a9:91:c4:6a:68:bb:c1:9f:08:e6:b2:de:a6:3b: 39:f7:85:3e:c3:32:b0:b1:43:27:80:94:6e:11:cd:9e:ca:3d: cc:6c:a4:98:3c:28:d9:b9:04:d9:80:cd:c0:5f:93:be:13:30: 20:97:af:a6 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICIpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURBRjIxMTAvBgNVBAUTKDEzOUNDMURCNkI5RDI0QjkzQjE0OTI4QTc1MThEMDRF QjNCMjZBM0EwHhcNMjUwNTA2MTYyMzM2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDE5Yi0yMjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfMbPPtLfFk0LT3CbrXUwVdnZoJb/x8H1eEC6rg94CvUdNx5KS7cHv+NLdP7 3TdBcJhUh6Ci/i/rG4CYc4R4hVJM+5xoPXbwnEJZaVjRarcTt33oX2SLadi3eCCv axpA0sHen846U79qhDCwH6hqewkGTrZZr2G3qIIWQuCLcsp+eU1AzA948FOlkbIP ed6mlw3T2mSvZNUwchlLdHoT8PSqwypsXQ9BKz/S7Cbrp6jX7X98swe7GyZ665CD l5m0lFJGnt98V+Cw6NrL/8dtBk3IyRnbYDCQc7yM1RuD7FJb+5SE82MYei4M8jiE t/Yf/fT3GxZsWGujfe3L/FIqTwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCKxZhp3 0lbP3sLQPoKu40t69KkiMB8GA1UdIwQYMBaAFBOcwdtrnSS5OxSSinUY0E6zsmo6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REFGMi8yNkVDNkREQUQz REExMUU1OEM1Q0Q0MEZDNEY5QUUwMi9FNXpCMjJ1ZEpMazdGSktLZFJqUVRyT3lh am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U1ekIyMnVkSkxrN0ZKS0tkUmpRVHJPeWFqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OURBRjIvMjZFQzZEREFEM0RBMTFFNThDNUNENDBGQzRGOUFFMDIvRkY1OUVDNzAx NDQ5MTFFRkEyMDUzQjI3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDyoawMA0GCSqGSIb3DQEBCwUAA4IBAQCoW8I6cZU6hjoGSBqOPfLt F14i4iXUdcHtDokFAW+IfZHfUV95GWekQFbF9s9oFGPMzHdNrGEijHuCfh85waq6 4t3orZ0PKC2sWJs6z9A8qmNo+LQk6/BsRhiF9Iz5gc1gZUeys75H52X8zf+WsIS5 YLnfJagyMknJRHjq2JYFXIS/S/h0vI7EMSF1/BxK9q0/+RaygZnxb5rKgNGQ52Dh XS8/LjbgqYeTedlzOzG/GW9ujNy6s4wSA6ET4HGMz/Fd3E35APN6LdgMqZHEami7 wZ8I5rLepjs594U+wzKwsUMngJRuEc2eyj3MbKSYPCjZuQTZgM3AX5O+EzAgl6+m -----END CERTIFICATE-----Generated at Mon Mar 2 07:20:54 2026 by rpki-client