$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2DDA16845B7C11EDAAFAB831C4F9AE02.roa File: 2DDA16845B7C11EDAAFAB831C4F9AE02.roa (raw, json) Hash identifier: 3wJUwv1JOANB7KtEkQSECl632Z0R2h+/KA/vlRDClPg= Subject key identifier: BF:8F:5C:37:CC:04:AD:9C:26:11:56:03:37:31:54:7E:52:20:D7:58 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 0328 Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2DDA16845B7C11EDAAFAB831C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:28:03 +0000 ROA not before: Sat 31 Jan 2026 01:21:20 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 132621 IP address blocks: 140.168.226.0/23 maxlen: 23 140.168.228.0/23 maxlen: 23 140.168.244.0/22 maxlen: 22 140.168.244.0/24 maxlen: 24 140.168.245.0/24 maxlen: 24 140.168.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 14:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 808 (0x328) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Jan 31 01:21:20 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a48533-43e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c2:13:ba:fa:1d:9c:cb:04:61:19:e2:89:9a: 17:a7:1e:2b:2c:fc:a1:3e:2c:d1:0c:70:c9:76:79: d3:c4:0c:4c:35:38:e5:6a:01:99:eb:7e:c3:c4:57: f2:14:a5:f7:b6:5b:aa:f5:90:87:0b:d8:b1:48:64: 93:9e:73:67:3a:d2:25:7a:26:36:85:40:fb:9b:3d: ee:91:42:4b:3b:9b:07:74:97:16:e8:2a:57:b1:60: 14:1e:8e:5e:51:96:7e:f3:33:67:23:09:d7:35:3a: ef:78:23:9d:d4:db:d9:47:1a:1c:b7:35:e9:fa:48: 6b:cc:63:41:b6:a3:a2:16:fd:26:99:f3:0b:fb:29: ba:6a:56:62:0a:de:f1:14:9e:9a:f2:b1:19:a9:82: f9:8a:a4:5d:60:c1:c0:7a:f9:0e:89:52:1c:82:10: a3:3d:d6:3c:10:0d:f7:17:57:cd:2e:ad:2a:a4:86: 4d:10:d9:c1:ae:c8:ef:c7:8a:22:1b:81:0f:f4:bf: cb:3a:7d:98:81:2f:ad:dc:bd:d5:dc:e6:e3:90:1b: 86:d6:10:61:d4:45:7b:b9:ab:c8:6b:27:c9:58:17: 16:38:09:e3:d0:cb:1c:f2:f4:40:52:8a:cd:74:35: 2a:bb:a6:72:5b:23:1b:69:c3:2a:6d:ed:43:38:4b: 25:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8F:5C:37:CC:04:AD:9C:26:11:56:03:37:31:54:7E:52:20:D7:58 X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2DDA16845B7C11EDAAFAB831C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 140.168.226.0-140.168.229.255 140.168.244.0/22 Signature Algorithm: sha256WithRSAEncryption 82:0c:00:58:18:bc:3a:2f:96:6f:a7:55:b8:dd:ce:c4:54:f1: 07:4c:f2:a5:82:75:1d:52:76:39:6e:b1:67:85:45:f4:b8:28: d3:b7:94:4e:95:ad:70:c2:87:46:c8:ae:91:57:a9:4e:62:8f: 1d:96:42:69:f5:1f:26:64:ce:98:f3:26:2d:50:cc:de:b0:a8: 25:ea:31:07:6b:36:c5:4b:1c:86:44:2c:b1:02:d1:cf:f8:25: 34:24:97:d7:37:60:2c:1f:4b:0a:26:0c:22:e5:45:2b:5e:fc: 0b:7f:c6:c0:1b:a4:a9:28:29:12:d2:36:4a:2f:cd:42:db:a8: 3e:0f:d9:77:30:d4:01:a8:48:f1:11:79:ca:ba:9e:d3:db:4d: 55:70:99:ca:70:5f:7b:62:47:43:9c:5e:fa:3f:b9:c9:fc:ac: f5:29:c6:b0:66:e6:c0:84:2f:b4:3d:2a:96:55:85:83:c3:38: 10:0b:21:cb:ac:78:db:58:2b:3f:92:4f:ea:f6:f0:ba:b3:87: 79:83:d6:fc:0f:bf:ce:4c:24:e7:8e:a1:6d:a2:67:e3:94:c5: 14:b6:8a:62:a8:35:a4:8d:05:06:cb:47:5c:29:73:28:61:e9: c7:ee:af:57:34:18:d2:6e:6a:0e:36:6c:f2:58:e5:b6:d4:84: a7:8b:bf:cf -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICAygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjYwMTMxMDEyMTIwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODUzMy00M2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscITuvodnMsEYRniiZoXpx4rLPyhPizRDHDJdnnTxAxMNTjlagGZ637DxFfy FKX3tluq9ZCHC9ixSGSTnnNnOtIleiY2hUD7mz3ukUJLO5sHdJcW6CpXsWAUHo5e UZZ+8zNnIwnXNTrveCOd1NvZRxoctzXp+khrzGNBtqOiFv0mmfML+ym6alZiCt7x FJ6a8rEZqYL5iqRdYMHAevkOiVIcghCjPdY8EA33F1fNLq0qpIZNENnBrsjvx4oi G4EP9L/LOn2YgS+t3L3V3ObjkBuG1hBh1EV7uavIayfJWBcWOAnj0Msc8vRAUorN dDUqu6ZyWyMbacMqbe1DOEsl0QIDAQABo4ICbjCCAmowHQYDVR0OBBYEFL+PXDfM BK2cJhFWAzcxVH5SINdYMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURCOTgvRDkzRTkzREM0OTIxMTFFREFCRDU5QzUzQzRGOUFFMDIvMkREQTE2ODQ1 QjdDMTFFREFBRkFCODMxQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBAGMqOIDBAGMqOQDBAKMqPQwDQYJKoZIhvcNAQELBQADggEBAIIM AFgYvDovlm+nVbjdzsRU8QdM8qWCdR1SdjlusWeFRfS4KNO3lE6VrXDCh0bIrpFX qU5ijx2WQmn1HyZkzpjzJi1QzN6wqCXqMQdrNsVLHIZELLEC0c/4JTQkl9c3YCwf SwomDCLlRSte/At/xsAbpKkoKRLSNkovzULbqD4P2Xcw1AGoSPERecq6ntPbTVVw mcpwX3tiR0OcXvo/ucn8rPUpxrBm5sCEL7Q9KpZVhYPDOBALIcuseNtYKz+ST+r2 8Lqzh3mD1vwPv85MJOeOoW2iZ+OUxRS2imKoNaSNBQbLR1wpcyhh6cfur1c0GNJu ag42bPJY5bbUhKeLv88= -----END CERTIFICATE-----Generated at Mon Mar 2 02:11:59 2026 by rpki-client