$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/150612CA903711EEB0B65F74C4F9AE02.roa File: 150612CA903711EEB0B65F74C4F9AE02.roa (raw, json) Hash identifier: g1chng8Zroh0xuqUUgiR9KsHEJpzRGDKOC2H2UuXyfM= Subject key identifier: D6:F2:4A:99:56:F5:4B:00:34:9B:6B:32:4E:A4:24:56:6C:60:37:A8 Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Certificate serial: 365F Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/150612CA903711EEB0B65F74C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:18:37 +0000 ROA not before: Wed 04 Jun 2025 15:10:51 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 17806 IP address blocks: 114.130.0.0/17 maxlen: 24 114.130.6.0/25 maxlen: 26 114.130.6.128/25 maxlen: 26 114.130.11.0/26 maxlen: 26 114.130.125.0/25 maxlen: 27 114.130.192.0/19 maxlen: 19 114.130.223.0/24 maxlen: 24 2403:ec00::/32 maxlen: 40 2403:ec00::/44 maxlen: 48 2403:ec00:8::/64 maxlen: 64 2403:ec00:8:1::/64 maxlen: 64 2403:ec00:25::/48 maxlen: 48 2403:ec00:34::/48 maxlen: 48 2403:ec00:35::/48 maxlen: 48 2403:ec00:36::/48 maxlen: 48 2403:ec00:37::/48 maxlen: 48 2403:ec00:38::/48 maxlen: 48 2403:ec00:39::/48 maxlen: 48 2403:ec00:50::/48 maxlen: 48 2403:ec00:51::/48 maxlen: 48 2403:ec00:100::/41 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13919 (0x365f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Validity Not Before: Jun 4 15:10:51 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a474ed-018f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c1:91:34:c9:66:04:a4:bf:c7:e8:42:d3:7b: f7:ce:e0:a8:53:20:ea:be:1a:98:06:c5:33:78:96: 1e:eb:41:9a:c9:da:b8:a2:b3:48:ca:02:19:22:9b: 5f:26:98:6e:cd:e6:e3:0d:c6:b9:72:70:93:b6:b2: ae:be:54:e3:ef:fb:4e:cb:0f:8e:a3:b6:f5:5e:79: cd:a7:e4:4c:85:92:92:a9:e8:be:96:b9:84:ce:27: e1:b0:09:bd:fd:03:02:ae:f4:20:14:bd:b2:43:b7: ea:9c:2c:63:87:d5:d8:f3:75:53:c3:d5:62:2f:1d: 1b:3b:2e:bd:6e:07:15:57:20:e4:3f:dd:bc:17:06: 74:02:56:93:7f:8e:2d:4c:e6:ee:2f:c0:a3:ac:3b: 3a:7d:9b:2e:21:1f:bf:74:fc:6c:9e:d5:38:6d:a6: ac:7c:52:0a:14:88:05:d1:ad:00:76:6d:73:fd:5d: 66:37:e6:2d:0b:6a:9a:c4:3f:ab:35:84:a1:a2:38: 34:6c:ee:3d:44:eb:24:3e:28:15:70:43:41:e1:1f: fa:9d:85:81:94:50:c1:07:be:8b:76:be:c1:9b:20: fa:ce:4b:cf:0b:88:36:cc:ec:74:90:12:23:a8:9d: 8a:4a:5c:c5:0e:58:fa:4f:04:2d:86:ea:d4:b3:5a: 70:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F2:4A:99:56:F5:4B:00:34:9B:6B:32:4E:A4:24:56:6C:60:37:A8 X509v3 Authority Key Identifier: keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/150612CA903711EEB0B65F74C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 114.130.0.0/17 114.130.192.0/19 IPv6: 2403:ec00::/32 Signature Algorithm: sha256WithRSAEncryption 9f:9b:4d:44:4a:7a:c7:f7:6d:f5:82:01:dd:0b:3b:de:ac:11: aa:61:e3:bd:da:ee:d3:00:4a:6b:12:a0:aa:11:9c:16:a3:ed: ed:68:2c:23:b5:54:e6:4f:a7:10:0f:4a:73:bc:b7:be:6a:9c: c6:91:13:9b:ba:9c:fe:bd:25:f5:13:8a:46:9d:a7:23:07:c6: 5a:a5:ad:eb:5b:7c:65:72:83:ee:9a:08:5b:4a:8d:b5:77:76: 78:e3:89:fb:a9:44:d1:44:cf:14:6d:01:66:46:1d:6e:21:df: de:b7:c1:74:85:27:9c:ec:c1:6c:fc:05:47:66:f7:0a:92:08: 58:d9:c7:9d:c0:e9:89:d2:14:c1:8e:7e:04:c5:44:28:d0:ff: 9f:61:00:3b:71:ff:ca:b9:59:56:14:7f:d7:89:12:86:cc:2a: d3:dc:34:d8:94:05:72:68:92:56:77:f2:e7:bd:c0:9d:34:d7: 11:3a:92:27:1c:bf:2a:c5:64:43:f7:b5:11:2c:b7:90:50:40: 31:2e:f6:95:51:9f:0e:32:e3:b7:06:75:07:2d:34:0b:ab:05: e8:84:9c:20:10:a8:ef:12:63:8c:74:30:1d:8a:fe:02:45:36: 1c:98:e5:d6:41:f4:43:85:57:c2:8f:a0:c6:7c:f5:d9:cf:c1: cb:fe:ae:f8 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICNl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB RUE2RkY4MDYwHhcNMjUwNjA0MTUxMDUxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzRlZC0wMThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMGRNMlmBKS/x+hC03v3zuCoUyDqvhqYBsUzeJYe60Gaydq4orNIygIZIptf JphuzebjDca5cnCTtrKuvlTj7/tOyw+Oo7b1XnnNp+RMhZKSqei+lrmEzifhsAm9 /QMCrvQgFL2yQ7fqnCxjh9XY83VTw9ViLx0bOy69bgcVVyDkP928FwZ0AlaTf44t TObuL8CjrDs6fZsuIR+/dPxsntU4baasfFIKFIgF0a0Adm1z/V1mN+YtC2qaxD+r NYShojg0bO49ROskPigVcENB4R/6nYWBlFDBB76Ldr7BmyD6zkvPC4g2zOx0kBIj qJ2KSlzFDlj6TwQthurUs1pwNwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFNbySplW 9UsANJtrMk6kJFZsYDeoMB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFCQjEvODg3NEU5RTgxRDk4MTFFMjk3ODhBOTgyMDhCMDJDRDIvMTUwNjEyQ0E5 MDM3MTFFRUIwQjY1Rjc0QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQHcoIAAwQFcoLAMA0EAgACMAcDBQAkA+wAMA0GCSqGSIb3DQEBCwUA A4IBAQCfm01ESnrH9231ggHdCzverBGqYeO92u7TAEprEqCqEZwWo+3taCwjtVTm T6cQD0pzvLe+apzGkRObupz+vSX1E4pGnacjB8Zapa3rW3xlcoPumghbSo21d3Z4 44n7qUTRRM8UbQFmRh1uId/et8F0hSec7MFs/AVHZvcKkghY2cedwOmJ0hTBjn4E xUQo0P+fYQA7cf/KuVlWFH/XiRKGzCrT3DTYlAVyaJJWd/LnvcCdNNcROpInHL8q xWRD97URLLeQUEAxLvaVUZ8OMuO3BnUHLTQLqwXohJwgEKjvEmOMdDAdiv4CRTYc mOXWQfRDhVfCj6DGfPXZz8HL/q74 -----END CERTIFICATE-----Generated at Mon Mar 2 17:42:10 2026 by rpki-client