$ rpki-client -vvf rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/F3B36C48545411EFA3BC6B2BC4F9AE02.roa File: F3B36C48545411EFA3BC6B2BC4F9AE02.roa (raw, json) Hash identifier: l1+ZtMv6puo4GNMLOeWesmnYUJqPnxAR7QGxzptAf1s= Subject key identifier: 38:F9:55:BF:E7:96:0E:49:B3:D9:A3:F9:17:B4:D7:57:AF:57:83:3A Certificate issuer: /CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E Certificate serial: 016C Authority key identifier: 84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/F3B36C48545411EFA3BC6B2BC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:27:48 +0000 ROA not before: Mon 01 Sep 2025 06:24:56 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 24005 IP address blocks: 202.170.160.0/24 maxlen: 24 202.170.161.0/24 maxlen: 24 202.170.162.0/24 maxlen: 24 202.170.163.0/24 maxlen: 24 202.170.164.0/24 maxlen: 24 202.170.165.0/24 maxlen: 24 202.170.166.0/24 maxlen: 24 202.170.167.0/24 maxlen: 24 202.170.168.0/24 maxlen: 24 202.170.169.0/24 maxlen: 24 202.170.170.0/24 maxlen: 24 202.170.171.0/24 maxlen: 24 202.170.172.0/24 maxlen: 24 202.170.173.0/24 maxlen: 24 202.170.174.0/24 maxlen: 24 202.170.175.0/24 maxlen: 24 2407:1000::/32 maxlen: 32 2407:1000:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153134, serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E Validity Not Before: Sep 1 06:24:56 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a59e64-cfa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:03:b5:d9:95:3a:85:42:29:26:00:fe:7e:24: 25:1c:48:3b:5d:6c:e5:69:4e:b2:d8:55:69:c1:a1: bd:15:23:0d:df:e4:41:52:17:f5:11:55:3f:d9:3a: 4c:d0:bc:b7:c8:af:da:12:a0:50:b0:fe:7e:5a:a6: 73:35:f7:4b:7c:c5:15:01:40:b1:f2:33:9b:08:7c: d1:14:a5:64:08:cb:0e:36:92:a8:6c:cf:b7:54:63: ad:38:5b:5d:87:71:84:47:9b:ea:ba:39:e8:bf:6d: eb:40:9c:8e:f5:dd:6b:77:a5:1a:49:1b:c0:82:f6: c5:f7:37:11:3e:6e:00:e0:a0:76:ff:1f:31:06:2d: 29:41:53:6c:72:41:e5:d7:9e:e0:64:22:91:4c:4c: f7:55:d9:07:0a:84:41:b7:39:66:c1:16:1a:38:0e: 7a:fe:09:71:0f:e6:d2:93:27:75:5d:ab:03:e6:6a: 9c:5f:11:61:f0:b8:2f:6a:ed:5b:de:1a:c1:78:e3: e9:17:ed:03:46:b3:d7:2f:32:88:22:82:23:52:f9: ef:1b:0f:9b:3c:e3:07:51:d7:49:14:da:1c:43:94: 90:fb:57:25:dc:4b:74:59:45:e4:88:1c:5a:86:f0: d3:e8:68:a2:c9:12:f6:a5:32:34:96:18:f1:71:51: db:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F9:55:BF:E7:96:0E:49:B3:D9:A3:F9:17:B4:D7:57:AF:57:83:3A X509v3 Authority Key Identifier: keyid:84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/F3B36C48545411EFA3BC6B2BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.170.160.0/20 IPv6: 2407:1000::/32 Signature Algorithm: sha256WithRSAEncryption 5a:e6:a0:86:53:1b:88:48:d5:a8:8c:a3:c9:5e:08:6b:c7:cd: b5:60:6e:8f:40:12:1c:18:1a:f7:3d:a9:fc:9d:bf:02:d0:c8: 4e:38:23:73:87:87:97:f6:a3:b5:af:28:9c:ca:24:6a:e0:d9: 6e:09:6e:3a:c2:3e:01:1a:33:01:d3:f2:e8:ab:24:d7:65:1b: a7:29:a4:c1:ec:10:ae:6f:c8:57:f2:a3:04:bf:de:cd:19:91: b1:1d:0d:08:4e:c2:06:a9:8c:8e:c2:f8:84:9b:31:81:db:0e: 73:fa:f5:f5:60:57:6e:53:dc:c1:d2:37:ff:ff:ce:e9:70:53: cf:71:c3:8f:13:3c:3a:31:e7:ab:f0:d9:46:99:f2:6e:78:17: b6:38:e6:a0:64:1a:4f:46:04:8f:cb:15:61:07:a1:ee:22:0a: 7e:31:ea:cf:56:dd:49:ee:5a:87:5c:df:3c:b7:c3:76:1a:3b: 4f:a9:9e:c7:71:5c:fe:a3:54:5c:c2:97:21:08:2d:5f:7a:63: b6:24:5f:34:65:a9:af:0f:9b:0f:fb:66:d7:64:18:42:46:34: ad:d1:40:3e:47:6b:e3:52:dd:40:56:c7:db:7e:e5:89:fc:ef: 0c:df:2c:4b:04:91:91:bc:e0:ea:21:52:c1:56:3e:a9:e0:8d: be:59:55:8f -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMxMzQxMTAvBgNVBAUTKDg0NDJEQzQ2MDI0MDA2MDExQUQ1Q0Y0OENEN0U0QzQ4 QkI5N0ExMUUwHhcNMjUwOTAxMDYyNDU2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWU2NC1jZmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAO12ZU6hUIpJgD+fiQlHEg7XWzlaU6y2FVpwaG9FSMN3+RBUhf1EVU/2TpM 0Ly3yK/aEqBQsP5+WqZzNfdLfMUVAUCx8jObCHzRFKVkCMsONpKobM+3VGOtOFtd h3GER5vqujnov23rQJyO9d1rd6UaSRvAgvbF9zcRPm4A4KB2/x8xBi0pQVNsckHl 157gZCKRTEz3VdkHCoRBtzlmwRYaOA56/glxD+bSkyd1XasD5mqcXxFh8Lgvau1b 3hrBeOPpF+0DRrPXLzKIIoIjUvnvGw+bPOMHUddJFNocQ5SQ+1cl3Et0WUXkiBxa hvDT6GiiyRL2pTI0lhjxcVHbQQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFDj5Vb/n lg5Js9mj+Re011evV4M6MB8GA1UdIwQYMBaAFIRC3EYCQAYBGtXPSM1+TEi7l6Ee MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzEzNC9FNjVGQThBMDU0 NTMxMUVGOEFENzc0MDlDNEY5QUUwMi9oRUxjUmdKQUJnRWExYzlJelg1TVNMdVhv UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFTGNSZ0pBQmdFYTFjOUl6WDVNU0x1WG9SNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTMxMzQvRTY1RkE4QTA1NDUzMTFFRjhBRDc3NDA5QzRGOUFFMDIvRjNCMzZDNDg1 NDU0MTFFRkEzQkM2QjJCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQEyqqgMA0EAgACMAcDBQAkBxAAMA0GCSqGSIb3DQEBCwUAA4IBAQBa 5qCGUxuISNWojKPJXghrx821YG6PQBIcGBr3Pan8nb8C0MhOOCNzh4eX9qO1ryic yiRq4NluCW46wj4BGjMB0/LoqyTXZRunKaTB7BCub8hX8qMEv97NGZGxHQ0ITsIG qYyOwviEmzGB2w5z+vX1YFduU9zB0jf//87pcFPPccOPEzw6Meer8NlGmfJueBe2 OOagZBpPRgSPyxVhB6HuIgp+MerPVt1J7lqHXN88t8N2GjtPqZ7HcVz+o1Rcwpch CC1femO2JF80ZamvD5sP+2bXZBhCRjSt0UA+R2vjUt1AVsfbfuWJ/O8M3yxLBJGR vODqIVLBVj6p4I2+WVWP -----END CERTIFICATE-----Generated at Thu Mar 26 04:18:10 2026 by rpki-client