$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/9CD333C6B92B11F09402D810C4F9AE02.roa File: 9CD333C6B92B11F09402D810C4F9AE02.roa (raw, json) Hash identifier: g/iViSJomlNp1cYO1eJotO/CO79RIUjeoIEUf9uvmn8= Subject key identifier: A2:A5:53:D5:6D:17:54:C0:8E:59:56:0A:BD:7D:A0:10:F0:A2:67:DB Certificate issuer: /CN=A91EA623/serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72 Certificate serial: 05AB Authority key identifier: D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/9CD333C6B92B11F09402D810C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:36:53 +0000 ROA not before: Wed 28 Jan 2026 23:19:30 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 9918 IP address blocks: 152.101.5.0/24 maxlen: 24 152.101.25.0/24 maxlen: 24 152.101.26.0/24 maxlen: 24 152.101.27.0/24 maxlen: 24 152.101.32.0/24 maxlen: 24 152.101.50.0/24 maxlen: 24 152.101.174.0/24 maxlen: 24 152.101.185.0/24 maxlen: 24 152.101.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.crl rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1451 (0x5ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA623, serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72 Validity Not Before: Jan 28 23:19:30 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a46b25-4d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:28:5f:34:f1:20:8c:cf:b3:42:77:ea:c2:49: a6:83:95:52:49:51:24:c3:fe:91:00:d9:ea:3f:f3: 09:55:40:04:4c:35:5a:19:2a:77:b5:a1:4e:ae:20: a4:00:a8:67:5f:2a:a4:ec:51:4f:a3:27:7e:88:d9: 3f:12:94:23:c7:76:d5:42:8c:7b:64:5b:94:f5:05: 01:37:f7:02:db:7f:d8:78:1e:ab:ba:3a:c5:4b:04: 3e:5f:dc:1b:49:90:1e:ca:c8:57:80:a1:34:b1:eb: a0:9a:f3:7f:c3:b8:d6:b8:c1:ef:d1:25:df:16:29: 9a:c2:8d:2a:14:4f:c1:41:79:40:11:78:c5:24:ea: f9:c0:6f:1d:5a:94:94:5f:c5:2a:80:e6:a2:67:0b: 75:0b:83:9b:bf:b1:19:8c:79:4b:89:77:39:0c:00: a4:5d:e7:64:89:bb:12:1d:8b:82:10:8c:a6:79:48: 58:b5:7c:ff:32:c6:8c:40:61:da:ed:7c:e3:9d:59: db:28:e6:72:c6:ae:f5:f2:ee:59:4d:18:03:e5:bb: 88:ff:7b:32:ae:50:2f:6f:25:c8:89:53:c9:4e:30: eb:aa:6c:c9:36:fc:0e:f0:ba:30:59:1f:77:77:f7: 28:35:eb:eb:7f:d7:98:9a:34:b7:76:04:00:c9:c2: 44:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A5:53:D5:6D:17:54:C0:8E:59:56:0A:BD:7D:A0:10:F0:A2:67:DB X509v3 Authority Key Identifier: keyid:D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/9CD333C6B92B11F09402D810C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 152.101.5.0/24 152.101.25.0-152.101.27.255 152.101.32.0/24 152.101.50.0/24 152.101.174.0/24 152.101.185.0-152.101.186.255 Signature Algorithm: sha256WithRSAEncryption 43:8f:26:c0:69:06:8a:b6:a8:64:c5:04:0e:40:1f:ba:09:99: 06:0e:f2:2c:55:51:91:8b:3e:73:bd:13:61:a5:c7:e3:a7:96: ee:dd:af:0c:1a:16:55:4b:6d:65:7a:5f:bc:fb:74:1e:76:3b: 18:84:c2:08:cd:46:56:13:fc:cc:27:bb:96:dc:ee:e1:18:08: af:19:22:8d:78:3d:73:9d:35:47:50:33:cd:34:5b:f9:c5:78: 98:10:e4:87:d7:b2:5d:0f:b2:ea:73:59:cd:6d:16:dd:a8:a2: a0:fc:8b:a4:f4:62:34:f9:ac:d5:3b:91:f8:36:a9:0e:dd:73: 6a:70:e8:b2:ea:74:46:04:b6:2d:96:10:19:0d:aa:1d:0a:90: 21:26:c9:a1:70:2a:23:ef:96:ae:b3:66:bd:d4:f7:ef:44:cc: af:19:21:9a:7b:9b:be:1c:c2:a3:4b:46:38:53:a1:8b:7f:0f: 0d:91:40:33:bc:80:18:ca:50:04:9c:7a:d9:c3:0b:9d:b6:2d: 8a:a9:6b:37:24:df:6a:49:7b:c2:20:22:d7:85:98:da:42:2b: cf:f2:9f:06:82:78:68:c7:c4:55:d6:bd:50:50:98:b9:ac:74: 12:36:58:b1:ae:bb:3b:5b:3f:ca:05:e7:09:34:42:cb:b1:73: 4c:1a:50:08 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgICBaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2MjMxMTAvBgNVBAUTKEQxMkZGNUJERTVENEQyRUE3MTg4Q0IwMDJDN0ZGMDE2 REM5OTRENzIwHhcNMjYwMTI4MjMxOTMwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmIyNS00ZDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwihfNPEgjM+zQnfqwkmmg5VSSVEkw/6RANnqP/MJVUAETDVaGSp3taFOriCk AKhnXyqk7FFPoyd+iNk/EpQjx3bVQox7ZFuU9QUBN/cC23/YeB6rujrFSwQ+X9wb SZAeyshXgKE0seugmvN/w7jWuMHv0SXfFimawo0qFE/BQXlAEXjFJOr5wG8dWpSU X8UqgOaiZwt1C4Obv7EZjHlLiXc5DACkXedkibsSHYuCEIymeUhYtXz/MsaMQGHa 7XzjnVnbKOZyxq718u5ZTRgD5buI/3syrlAvbyXIiVPJTjDrqmzJNvwO8LowWR93 d/coNevrf9eYmjS3dgQAycJExQIDAQABo4ICjjCCAoowHQYDVR0OBBYEFKKlU9Vt F1TAjllWCr19oBDwomfbMB8GA1UdIwQYMBaAFNEv9b3l1NLqcYjLACx/8BbcmU1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTYyMy9EMzE2N0YwQTA2 MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi8wU18xdmVYVTB1cHhpTXNBTEhfd0Z0eVpU WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBTXzF2ZVhVMHVweGlNc0FMSF93RnR5WlRYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE2MjMvRDMxNjdGMEEwNjBDMTFFQ0FGNjc1MDQzQzRGOUFFMDIvOUNEMzMzQzZC OTJCMTFGMDk0MDJEODEwQzRGOUFFMDIucm9hME0GCCsGAQUFBwEHAQH/BD4wPDA6 BAIAATA0AwQAmGUFMAwDBACYZRkDBAKYZRgDBACYZSADBACYZTIDBACYZa4wDAME AJhluQMEAJhlujANBgkqhkiG9w0BAQsFAAOCAQEAQ48mwGkGiraoZMUEDkAfugmZ Bg7yLFVRkYs+c70TYaXH46eW7t2vDBoWVUttZXpfvPt0HnY7GITCCM1GVhP8zCe7 ltzu4RgIrxkijXg9c501R1AzzTRb+cV4mBDkh9eyXQ+y6nNZzW0W3aiioPyLpPRi NPms1TuR+DapDt1zanDosup0RgS2LZYQGQ2qHQqQISbJoXAqI++WrrNmvdT370TM rxkhmnubvhzCo0tGOFOhi38PDZFAM7yAGMpQBJx62cMLnbYtiqlrNyTfakl7wiAi 14WY2kIrz/KfBoJ4aMfEVda9UFCYuax0EjZYsa67O1s/ygXnCTRCy7FzTBpQCA== -----END CERTIFICATE-----Generated at Mon Mar 2 19:42:12 2026 by rpki-client