$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/0136F4540FE611EC8DD2020EC4F9AE02.roa File: 0136F4540FE611EC8DD2020EC4F9AE02.roa (raw, json) Hash identifier: fMENTcZ0GQy6ED0QgbodBkhlN7SDhU0juAn/4d2i+Jc= Subject key identifier: 41:2A:FE:DA:0F:16:31:F8:4B:14:2E:A5:F9:FC:84:2E:04:DA:2B:E4 Certificate issuer: /CN=A911CE77/serialNumber=58B6AE85C6E10730CF7567D722A346C49B522AA9 Certificate serial: 0854 Authority key identifier: 58:B6:AE:85:C6:E1:07:30:CF:75:67:D7:22:A3:46:C4:9B:52:2A:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLauhcbhBzDPdWfXIqNGxJtSKqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/0136F4540FE611EC8DD2020EC4F9AE02.roa Signing time: Mon 02 Mar 2026 05:22:55 +0000 ROA not before: Sat 28 Jun 2025 21:18:05 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 38298 IP address blocks: 202.144.176.0/21 maxlen: 21 202.144.176.0/24 maxlen: 24 202.144.177.0/24 maxlen: 24 202.144.178.0/24 maxlen: 24 202.144.179.0/24 maxlen: 24 202.144.180.0/24 maxlen: 24 202.144.181.0/24 maxlen: 24 202.144.182.0/24 maxlen: 24 202.144.183.0/24 maxlen: 24 2407:6c80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.crl rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLauhcbhBzDPdWfXIqNGxJtSKqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2132 (0x854) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CE77, serialNumber=58B6AE85C6E10730CF7567D722A346C49B522AA9 Validity Not Before: Jun 28 21:18:05 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a51eaf-85cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7c:97:23:1e:d0:15:30:81:ba:d6:e5:76:2d: d1:6d:9b:21:96:58:da:57:99:65:a6:a8:80:df:43: 1e:3a:9f:ee:2a:a1:2e:be:a2:7d:f1:67:88:73:f1: 87:95:5b:5c:5e:ef:73:8a:1b:c6:6a:e5:b7:f1:3a: 9a:34:b5:e4:ce:46:e2:64:b7:eb:d6:9b:ff:c2:c0: 44:90:a2:77:22:26:a3:a2:aa:aa:25:77:77:ad:a6: 65:23:1e:4b:93:c7:3f:02:c5:b3:69:a3:64:c9:ac: 54:35:10:16:74:cd:7c:81:ef:8e:de:83:72:0e:7e: be:e3:ed:6b:95:61:75:1a:e3:cd:a9:9c:98:3f:1d: 40:0d:0e:1c:8e:12:97:e7:75:83:dd:97:db:33:7f: 11:4c:6c:7f:34:b2:d4:58:10:d0:bf:21:73:6c:e3: b2:2f:9b:19:58:f8:45:1f:b1:43:c6:7a:32:bb:e7: 82:d5:29:be:69:c9:cf:61:a8:55:43:be:40:43:2b: 90:aa:78:3b:6b:18:3f:83:70:61:e8:5a:18:73:6d: 6a:bd:be:a8:8e:6b:87:68:c1:32:aa:a6:43:b6:c3: b9:ea:cb:b2:4d:89:5c:59:71:0f:46:3a:d6:8e:ac: 29:18:eb:9e:9d:98:1a:05:f3:82:7f:a0:3d:d0:34: b9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2A:FE:DA:0F:16:31:F8:4B:14:2E:A5:F9:FC:84:2E:04:DA:2B:E4 X509v3 Authority Key Identifier: keyid:58:B6:AE:85:C6:E1:07:30:CF:75:67:D7:22:A3:46:C4:9B:52:2A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLauhcbhBzDPdWfXIqNGxJtSKqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/0136F4540FE611EC8DD2020EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.144.176.0/21 IPv6: 2407:6c80::/32 Signature Algorithm: sha256WithRSAEncryption 76:82:16:06:7f:18:70:91:90:4c:40:d2:5e:5d:65:fc:92:03: 09:d8:ce:a5:d9:da:d3:ca:05:d0:52:34:b2:6d:c3:f5:fb:1b: 40:d9:bb:ee:91:f9:69:b2:33:66:66:da:5e:35:0a:55:8d:19: 0f:fe:cf:5d:d8:db:d7:d0:eb:9f:e4:60:d9:02:61:ea:b7:7a: f3:69:23:b4:12:75:76:52:a7:cf:aa:9f:90:aa:89:a4:db:78: 8d:25:60:31:ee:24:7f:08:eb:e1:72:50:28:06:b9:85:9e:ed: 3e:33:16:85:2d:f8:fa:21:ce:6d:54:b7:69:6b:8b:0e:c0:71: 5d:83:1f:f9:9b:5f:eb:0c:07:1d:68:38:91:82:23:2b:4b:18: f9:57:a4:2b:98:31:c2:2c:dc:ac:c5:ff:d7:c8:d9:8f:af:61: ba:7f:93:8c:e8:84:91:7d:e0:52:af:f6:71:25:24:24:dd:1a: d6:ec:a6:16:bc:ee:5a:b9:7c:ae:8e:8d:b1:16:63:d2:d9:6a: 8f:4c:82:fe:cd:69:6f:dd:84:40:66:14:79:18:3d:d5:27:cd: 6e:f1:99:98:18:54:45:79:00:0e:61:8e:be:1f:50:db:9b:ea: 38:d1:0d:e3:43:e2:ef:08:87:79:aa:94:a5:fd:6d:bc:75:08: d6:27:73:f2 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNFNzcxMTAvBgNVBAUTKDU4QjZBRTg1QzZFMTA3MzBDRjc1NjdENzIyQTM0NkM0 OUI1MjJBQTkwHhcNMjUwNjI4MjExODA1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MWVhZi04NWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkHyXIx7QFTCButbldi3RbZshlljaV5llpqiA30MeOp/uKqEuvqJ98WeIc/GH lVtcXu9zihvGauW38TqaNLXkzkbiZLfr1pv/wsBEkKJ3IiajoqqqJXd3raZlIx5L k8c/AsWzaaNkyaxUNRAWdM18ge+O3oNyDn6+4+1rlWF1GuPNqZyYPx1ADQ4cjhKX 53WD3ZfbM38RTGx/NLLUWBDQvyFzbOOyL5sZWPhFH7FDxnoyu+eC1Sm+acnPYahV Q75AQyuQqng7axg/g3Bh6FoYc21qvb6ojmuHaMEyqqZDtsO56suyTYlcWXEPRjrW jqwpGOuenZgaBfOCf6A90DS5zQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFEEq/toP FjH4SxQupfn8hC4E2ivkMB8GA1UdIwQYMBaAFFi2roXG4Qcwz3Vn1yKjRsSbUiqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0U3Ny9FRTUxMEMxQTAx REQxMUVCQTU3REY4NTVDNEY5QUUwMi9XTGF1aGNiaEJ6RFBkV2ZYSXFOR3hKdFNL cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dMYXVoY2JoQnpEUGRXZlhJcU5HeEp0U0txay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNFNzcvRUU1MTBDMUEwMUREMTFFQkE1N0RGODU1QzRGOUFFMDIvMDEzNkY0NTQw RkU2MTFFQzhERDIwMjBFQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQDypCwMA0EAgACMAcDBQAkB2yAMA0GCSqGSIb3DQEBCwUAA4IBAQB2 ghYGfxhwkZBMQNJeXWX8kgMJ2M6l2drTygXQUjSybcP1+xtA2bvukflpsjNmZtpe NQpVjRkP/s9d2NvX0Ouf5GDZAmHqt3rzaSO0EnV2UqfPqp+Qqomk23iNJWAx7iR/ COvhclAoBrmFnu0+MxaFLfj6Ic5tVLdpa4sOwHFdgx/5m1/rDAcdaDiRgiMrSxj5 V6QrmDHCLNysxf/XyNmPr2G6f5OM6ISRfeBSr/ZxJSQk3RrW7KYWvO5auXyujo2x FmPS2WqPTIL+zWlv3YRAZhR5GD3VJ81u8ZmYGFRFeQAOYY6+H1Dbm+o40Q3jQ+Lv CId5qpSl/W28dQjWJ3Py -----END CERTIFICATE-----Generated at Thu Mar 26 07:13:22 2026 by rpki-client