$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/A1369C781C3B11F1A9F167973A3D8C67.roa File: A1369C781C3B11F1A9F167973A3D8C67.roa (raw, json) Hash identifier: SY4VqkxyGoejCFuLzZISWSny3WC42+Mi6EDjqr/Szpg= Subject key identifier: 77:29:07:20:86:5B:46:54:97:8F:8A:37:34:74:B1:50:11:5F:7F:59 Certificate issuer: /CN=A9153F90/serialNumber=7F4935895C2D6CB62C4175C48E6ED95DC168197E Certificate serial: 03 Authority key identifier: 7F:49:35:89:5C:2D:6C:B6:2C:41:75:C4:8E:6E:D9:5D:C1:68:19:7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/A1369C781C3B11F1A9F167973A3D8C67.roa Signing time: Tue 10 Mar 2026 04:43:06 +0000 ROA not before: Tue 10 Mar 2026 04:43:06 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 152884 IP address blocks: 160.20.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153F90, serialNumber=7F4935895C2D6CB62C4175C48E6ED95DC168197E Validity Not Before: Mar 10 04:43:06 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69afa15a-e268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:48:95:2b:59:f8:88:c8:4c:9b:3e:41:cb:2c: 8f:cf:65:68:e6:af:a5:af:7d:5c:3e:91:8e:4a:2d: f2:25:79:0d:48:b0:18:9d:0d:81:53:6d:26:a2:0a: 3e:db:cd:08:bd:ae:56:38:28:25:98:13:3d:22:c9: ed:ce:5e:14:d1:cf:30:f4:e5:e2:99:44:8c:5d:5a: a2:43:76:d9:df:da:cb:43:de:6c:b3:fd:e6:32:c1: ea:61:b8:84:32:4d:31:0a:00:ce:8a:5c:d2:ce:1d: 93:e9:a5:69:3e:13:76:be:cf:4b:89:c7:11:75:6f: 78:43:4b:22:59:94:b9:cd:1b:62:44:1a:cf:5e:0d: fa:66:d9:77:99:b6:42:bd:90:93:bc:9b:c2:1b:c0: 5a:6a:7d:f5:ac:e3:9b:76:ac:a9:a5:ed:dd:62:16: c6:c5:36:ae:21:43:92:73:10:34:93:07:fb:9e:fa: b6:6e:8e:0f:e0:dc:ed:b8:a8:0f:d1:20:b8:64:2c: ed:68:81:c5:31:37:0d:b1:0d:00:e5:b7:97:de:2e: 91:30:92:f7:9d:88:c9:41:fa:0b:cc:8d:e0:7c:cf: 0e:e1:ee:50:38:c4:bc:93:4d:e8:fd:04:99:9e:b7: 74:50:48:8e:e3:0b:33:3f:e9:88:93:79:a7:3d:6a: 18:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:29:07:20:86:5B:46:54:97:8F:8A:37:34:74:B1:50:11:5F:7F:59 X509v3 Authority Key Identifier: keyid:7F:49:35:89:5C:2D:6C:B6:2C:41:75:C4:8E:6E:D9:5D:C1:68:19:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/A1369C781C3B11F1A9F167973A3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 160.20.120.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:25:9d:c2:f5:38:fd:84:16:86:4f:4d:b1:3d:e8:66:2c:9a: b1:b2:2b:1c:3c:9e:77:ad:04:d1:fd:eb:ff:db:fe:32:1e:16: d3:b1:d8:ee:c9:e4:25:a7:6c:5d:4a:a1:be:59:e1:c5:a7:15: 48:1e:69:8c:d7:a8:ba:b2:39:0f:b1:99:e3:f7:33:e3:5c:e0: 4a:50:7b:ab:94:f9:3f:18:dd:c4:8c:a4:20:91:9b:86:c1:2a: 6a:35:c6:d4:30:fc:bd:a9:37:9a:cb:78:37:87:3f:3d:54:8f: 4b:55:38:2f:55:b1:e7:0c:2a:77:fa:1d:e8:3b:01:94:a4:16: 06:25:13:15:99:a2:49:5a:e7:00:84:0c:fd:ed:95:86:58:74: a6:a4:86:c8:61:25:8b:9a:8e:2b:a4:09:d8:2f:f0:60:42:c6: ab:df:2d:3b:e7:3a:96:10:f4:06:2a:ed:c6:43:5f:6f:fc:bd: 86:ca:6c:84:c3:77:75:df:e2:22:81:f4:8e:2a:67:e9:3a:f8: c6:e5:05:36:20:52:ba:b1:c7:92:48:68:e8:9d:16:7f:51:73: 9a:66:8f:83:cf:55:83:eb:c2:5a:7f:7f:81:a9:fe:8a:05:ce: 3f:9a:ff:df:0f:f7:07:52:9b:7b:87:8c:11:71:98:86:d2:20: d1:a2:5c:bc -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 M0Y5MDExMC8GA1UEBRMoN0Y0OTM1ODk1QzJENkNCNjJDNDE3NUM0OEU2RUQ5NURD MTY4MTk3RTAeFw0yNjAzMTAwNDQzMDZaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YWZhMTVhLWUyNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9SJUrWfiIyEybPkHLLI/PZWjmr6WvfVw+kY5KLfIleQ1IsBidDYFTbSaiCj7b zQi9rlY4KCWYEz0iye3OXhTRzzD05eKZRIxdWqJDdtnf2stD3myz/eYywephuIQy TTEKAM6KXNLOHZPppWk+E3a+z0uJxxF1b3hDSyJZlLnNG2JEGs9eDfpm2XeZtkK9 kJO8m8IbwFpqffWs45t2rKml7d1iFsbFNq4hQ5JzEDSTB/ue+rZujg/g3O24qA/R ILhkLO1ogcUxNw2xDQDlt5feLpEwkvediMlB+gvMjeB8zw7h7lA4xLyTTej9BJme t3RQSI7jCzM/6YiTeac9ahh/AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUdykHIIZb RlSXj4o3NHSxUBFff1kwHwYDVR0jBBgwFoAUf0k1iVwtbLYsQXXEjm7ZXcFoGX4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzRjkwL0Y5MTNENTE0MUMz NjExRjE4ODQ3QUIyQjM4M0Q4QzY3L2YwazFpVnd0YkxZc1FYWEVqbTdaWGNGb0dY NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZjBrMWlWd3RiTFlzUVhYRWptN1pYY0ZvR1g0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0Y5MC9GOTEzRDUxNDFDMzYxMUYxODg0N0FCMkIzODNEOEM2Ny9BMTM2OUM3ODFD M0IxMUYxQTlGMTY3OTczQTNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACgFHgwDQYJKoZIhvcNAQELBQADggEBAIwlncL1OP2EFoZPTbE96GYs mrGyKxw8nnetBNH96//b/jIeFtOx2O7J5CWnbF1Kob5Z4cWnFUgeaYzXqLqyOQ+x meP3M+Nc4EpQe6uU+T8Y3cSMpCCRm4bBKmo1xtQw/L2pN5rLeDeHPz1Uj0tVOC9V secMKnf6Heg7AZSkFgYlExWZokla5wCEDP3tlYZYdKakhshhJYuajiukCdgv8GBC xqvfLTvnOpYQ9AYq7cZDX2/8vYbKbITDd3Xf4iKB9I4qZ+k6+MblBTYgUrqxx5JI aOidFn9Rc5pmj4PPVYPrwlp/f4Gp/ooFzj+a/98P9wdSm3uHjBFxmIbSINGiXLw= -----END CERTIFICATE-----Generated at Thu Mar 26 17:17:58 2026 by rpki-client