$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/1229795E652C11EB9B039023C4F9AE02.roa File: 1229795E652C11EB9B039023C4F9AE02.roa (raw, json) Hash identifier: GJUGEPZQBd+of4IF8rrVMeNhftE2HSnPOO2CkzhhVYM= Subject key identifier: 73:0E:6A:BE:F7:65:8F:77:8C:0C:4D:35:59:78:3F:CA:EB:EE:A3:57 Certificate issuer: /CN=A91D298D/serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA Certificate serial: 0888 Authority key identifier: 83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/1229795E652C11EB9B039023C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:23:29 +0000 ROA not before: Thu 12 Feb 2026 20:17:43 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138423 IP address blocks: 209.150.144.0/23 maxlen: 24 209.150.146.0/23 maxlen: 24 209.150.148.0/22 maxlen: 24 209.150.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2184 (0x888) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298D, serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA Validity Not Before: Feb 12 20:17:43 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a47611-30c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c2:78:df:8f:e0:9f:ba:db:e0:c3:1f:79:1e: 66:9d:8d:61:e7:bb:f6:45:a2:c9:95:87:c2:4c:71: 3c:b9:2e:14:22:dd:2a:8d:3c:9d:19:38:3d:e1:aa: 04:04:d9:c6:29:3f:f2:b0:4e:50:9c:d8:bc:66:91: 1f:73:0f:b2:d3:fd:5a:78:fb:77:fd:8c:3c:82:01: fa:04:75:a3:4c:4d:8f:f2:b1:3a:88:c5:a1:cd:fb: 8d:14:50:5f:66:78:73:95:af:2a:f8:f2:45:87:c8: 3b:d2:79:96:3d:0f:20:c3:72:cb:50:11:43:67:d2: a7:a3:80:ab:87:48:e7:52:cb:ad:a7:21:a6:bb:e4: f7:37:72:a6:e4:87:0a:37:be:85:61:92:02:5b:89: b9:06:25:3e:97:10:11:90:ab:5b:e8:a8:35:2f:99: 33:6b:34:30:bb:eb:2c:1d:1c:90:ae:f6:74:f9:18: ba:80:10:4c:0b:6b:e5:37:27:89:9d:72:f9:bf:2d: bb:4c:74:b1:70:d2:fa:48:d2:0a:4b:c3:c6:db:47: 35:2a:8a:b3:62:c8:b1:7b:3a:46:44:f6:e3:83:16: 03:14:4a:f3:da:a5:d1:5d:bf:ad:bf:b1:4d:93:9b: bc:4a:bb:5f:7d:dc:b0:19:e8:b3:de:44:f5:74:14: e6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0E:6A:BE:F7:65:8F:77:8C:0C:4D:35:59:78:3F:CA:EB:EE:A3:57 X509v3 Authority Key Identifier: keyid:83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/1229795E652C11EB9B039023C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 209.150.144.0/21 209.150.159.0/24 Signature Algorithm: sha256WithRSAEncryption af:b8:4b:a1:20:48:13:e5:d7:20:f2:8d:8c:9d:32:ef:98:bb: 4d:db:8c:c6:96:82:43:0b:ec:41:38:df:ac:6c:e1:6c:77:d7: 30:51:34:0e:8b:80:44:06:c2:52:62:f5:63:f8:bc:48:40:30: b0:5e:e4:0c:cf:b5:05:c5:ff:09:90:52:ba:29:8e:75:6c:22: 6b:f7:69:09:9a:55:f7:b9:02:ac:96:b7:8b:ab:f1:b5:64:ca: 4a:0c:ce:39:37:f6:61:ad:ea:4b:cd:4b:81:89:60:21:03:3a: 59:a2:6a:58:bd:fd:f4:87:ae:67:12:46:14:cc:45:0d:ef:42: bb:65:c0:6e:cd:9d:f2:ea:39:4b:3d:22:4d:23:bc:11:10:6a: b1:58:a2:27:49:af:85:96:f5:31:ec:35:a1:4d:9d:8b:88:15: 48:43:66:61:3a:fc:1c:07:9f:cd:7e:f0:5c:ba:d6:03:a0:26: d7:e2:ec:10:8d:a0:50:dd:49:1d:65:2b:b0:62:54:01:51:06: ef:09:25:a3:90:85:49:61:29:19:30:26:30:51:66:c5:69:bd: 95:74:d3:67:6c:c2:59:6f:0d:2c:b1:f7:9d:a0:3d:4d:d5:2e: c6:7d:7d:b1:43:d0:77:3f:ca:d4:35:92:22:b3:30:f6:5f:39: 90:ec:74:eb -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI5OEQxMTAvBgNVBAUTKDgzQUVGOTMxNTJCMjUwOENCQzgwQTM2MjdFM0EyN0U4 N0JDRkRFQ0EwHhcNMjYwMjEyMjAxNzQzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzYxMS0zMGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8J434/gn7rb4MMfeR5mnY1h57v2RaLJlYfCTHE8uS4UIt0qjTydGTg94aoE BNnGKT/ysE5QnNi8ZpEfcw+y0/1aePt3/Yw8ggH6BHWjTE2P8rE6iMWhzfuNFFBf Znhzla8q+PJFh8g70nmWPQ8gw3LLUBFDZ9Kno4Crh0jnUsutpyGmu+T3N3Km5IcK N76FYZICW4m5BiU+lxARkKtb6Kg1L5kzazQwu+ssHRyQrvZ0+Ri6gBBMC2vlNyeJ nXL5vy27THSxcNL6SNIKS8PG20c1KoqzYsixezpGRPbjgxYDFErz2qXRXb+tv7FN k5u8SrtffdywGeiz3kT1dBTmgQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFHMOar73 ZY93jAxNNVl4P8rr7qNXMB8GA1UdIwQYMBaAFIOu+TFSslCMvICjYn46J+h7z97K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4RC8yQ0IxMUZDRUYx QTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9nNjc1TVZLeVVJeThnS05pZmpvbjZIdlAz c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2c2NzVNVkt5VUl5OGdLTmlmam9uNkh2UDNzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDI5OEQvMkNCMTFGQ0VGMUE2MTFFQUI5NUMwRTJGQzRGOUFFMDIvMTIyOTc5NUU2 NTJDMTFFQjlCMDM5MDIzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQD0ZaQAwQA0ZafMA0GCSqGSIb3DQEBCwUAA4IBAQCvuEuhIEgT5dcg 8o2MnTLvmLtN24zGloJDC+xBON+sbOFsd9cwUTQOi4BEBsJSYvVj+LxIQDCwXuQM z7UFxf8JkFK6KY51bCJr92kJmlX3uQKslreLq/G1ZMpKDM45N/ZhrepLzUuBiWAh AzpZompYvf30h65nEkYUzEUN70K7ZcBuzZ3y6jlLPSJNI7wREGqxWKInSa+FlvUx 7DWhTZ2LiBVIQ2ZhOvwcB5/NfvBcutYDoCbX4uwQjaBQ3UkdZSuwYlQBUQbvCSWj kIVJYSkZMCYwUWbFab2VdNNnbMJZbw0ssfedoD1N1S7GfX2xQ9B3P8rUNZIiszD2 XzmQ7HTr -----END CERTIFICATE-----Generated at Mon Mar 2 05:38:16 2026 by rpki-client