$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/03BA8B36824411EF94479387C4F9AE02.roa File: 03BA8B36824411EF94479387C4F9AE02.roa (raw, json) Hash identifier: eh1uTKC6tkVJRkq8RjBwWq9qkvsNHm4pUfLbgOMIN2c= Subject key identifier: 64:6F:93:AC:93:D2:BD:A3:E5:1F:26:2D:E5:6C:6B:71:D6:E9:7B:E2 Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 0896 Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/03BA8B36824411EF94479387C4F9AE02.roa Signing time: Tue 28 Apr 2026 23:29:27 +0000 ROA not before: Tue 28 Apr 2026 23:29:26 +0000 ROA not after: Fri 28 Aug 2026 00:00:00 +0000 asID: 55740 IP address blocks: 14.195.78.0/24 maxlen: 24 14.195.79.0/24 maxlen: 24 14.195.91.0/24 maxlen: 24 14.195.124.0/24 maxlen: 24 27.107.200.0/24 maxlen: 24 27.107.201.0/24 maxlen: 24 27.107.202.0/24 maxlen: 24 49.249.1.0/24 maxlen: 24 49.249.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2198 (0x896) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: Apr 28 23:29:26 2026 GMT Not After : Aug 28 00:00:00 2026 GMT Subject: CN=69f142d6-f384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cb:5a:94:f8:8b:30:2a:69:29:51:b7:f8:bb: a0:7d:b4:30:c8:a4:b6:5f:a4:2f:29:fb:7c:80:f5: 33:6b:48:a4:c1:51:5d:26:4f:20:f2:11:df:ca:7a: 5a:e4:b8:6e:0c:7a:a7:f6:24:92:5d:a9:f0:88:22: 83:c5:df:60:0e:e3:0f:51:0f:52:f3:25:ef:0d:69: 71:19:0e:93:b7:10:46:2b:7e:ba:cf:a5:e5:e0:01: e6:be:26:64:57:71:19:d6:d4:3d:41:09:b2:8b:d7: 15:5d:8d:b5:0a:15:78:63:6b:30:66:3c:db:a7:1b: 42:02:02:a0:50:cb:ba:e4:fb:ab:40:09:88:32:b2: 9d:94:c1:aa:66:04:37:47:c9:1e:77:06:12:ae:56: c9:be:30:7c:ce:fd:c6:b2:2a:87:76:f8:5a:fc:56: ab:c7:cb:16:d1:d3:b7:3b:88:57:b0:bb:4e:43:fd: 0a:2b:bf:69:d7:56:e9:87:cd:c2:2e:d1:1b:c1:4a: 78:af:d7:b2:9f:90:6f:0d:3b:d0:58:0e:94:cb:02: db:7e:a4:78:6a:c5:43:3e:9a:bd:a4:83:41:2d:4f: b8:d4:a9:5e:5c:53:00:4e:f3:82:b4:5d:ef:ba:48: 26:4b:63:6c:00:a1:76:14:50:f2:f4:7b:3c:b4:24: f9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6F:93:AC:93:D2:BD:A3:E5:1F:26:2D:E5:6C:6B:71:D6:E9:7B:E2 X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/03BA8B36824411EF94479387C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 14.195.78.0/23 14.195.91.0/24 14.195.124.0/24 27.107.200.0-27.107.202.255 49.249.1.0/24 49.249.27.0/24 Signature Algorithm: sha256WithRSAEncryption 36:f3:60:11:bf:99:6d:92:88:dd:15:da:a3:80:87:ac:ef:a7: 60:b9:29:c6:06:e2:33:87:b3:f3:b5:27:56:1b:2c:3c:4f:d3: fc:9f:62:63:53:ac:54:89:c9:75:90:4a:39:14:da:15:2d:5a: 11:4a:6b:76:6b:ec:5e:6b:bc:d7:b6:4e:f1:90:e0:82:7d:b1: 57:90:82:68:07:82:c1:a1:c5:9b:c6:86:3e:af:9d:46:58:25: 29:85:73:c7:a1:40:53:d0:a4:97:c9:22:37:05:67:eb:cf:ce: ae:2b:cd:48:85:b3:1f:71:e9:c5:bb:aa:6f:21:f9:ed:58:43: a9:8b:0a:74:df:7c:4f:0e:ca:92:c6:ff:6f:d3:f8:2f:38:9d: c5:5a:85:5e:df:b2:ac:53:b5:88:d9:78:c8:53:8f:fe:12:36: 61:e4:70:31:e9:a1:e5:88:91:76:5a:df:0a:d7:6f:10:b4:47: 9d:37:e5:7a:90:1d:8f:fa:ef:5a:58:a9:4b:0d:a1:64:81:0d: 22:6d:a4:2f:fe:2d:dd:ca:ab:ea:20:f3:de:c6:1b:c8:04:bc: 1c:96:b1:0d:66:02:c0:01:52:b8:c4:0a:1a:93:b3:94:8b:6c: d9:63:a6:53:68:aa:e9:1d:0a:c4:36:f5:df:40:31:52:e5:6c: 0e:d1:4e:cf -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgICCJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjYwNDI4MjMyOTI2WhcNMjYwODI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWYxNDJkNi1mMzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqstalPiLMCppKVG3+LugfbQwyKS2X6QvKft8gPUza0ikwVFdJk8g8hHfynpa 5LhuDHqn9iSSXanwiCKDxd9gDuMPUQ9S8yXvDWlxGQ6TtxBGK366z6Xl4AHmviZk V3EZ1tQ9QQmyi9cVXY21ChV4Y2swZjzbpxtCAgKgUMu65PurQAmIMrKdlMGqZgQ3 R8kedwYSrlbJvjB8zv3GsiqHdvha/Farx8sW0dO3O4hXsLtOQ/0KK79p11bph83C LtEbwUp4r9eyn5BvDTvQWA6UywLbfqR4asVDPpq9pINBLU+41KleXFMATvOCtF3v ukgmS2NsAKF2FFDy9Hs8tCT5LQIDAQABo4IChjCCAoIwHQYDVR0OBBYEFGRvk6yT 0r2j5R8mLeVsa3HW6XviMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEN0EvNUREQ0NDQzY5OTE1MTFFQjk2NzI3MjQzQzRGOUFFMDIvMDNCQThCMzY4 MjQ0MTFFRjk0NDc5Mzg3QzRGOUFFMDIucm9hMEUGCCsGAQUFBwEHAQH/BDYwNDAy BAIAATAsAwQBDsNOAwQADsNbAwQADsN8MAwDBAMba8gDBAAba8oDBAAx+QEDBAAx +RswDQYJKoZIhvcNAQELBQADggEBADbzYBG/mW2SiN0V2qOAh6zvp2C5KcYG4jOH s/O1J1YbLDxP0/yfYmNTrFSJyXWQSjkU2hUtWhFKa3Zr7F5rvNe2TvGQ4IJ9sVeQ gmgHgsGhxZvGhj6vnUZYJSmFc8ehQFPQpJfJIjcFZ+vPzq4rzUiFsx9x6cW7qm8h +e1YQ6mLCnTffE8OypLG/2/T+C84ncVahV7fsqxTtYjZeMhTj/4SNmHkcDHpoeWI kXZa3wrXbxC0R5035XqQHY/671pYqUsNoWSBDSJtpC/+Ld3Kq+og897GG8gEvByW sQ1mAsABUrjEChqTs5SLbNljplNoqukdCsQ29d9AMVLlbA7RTs8= -----END CERTIFICATE-----Generated at Wed May 13 06:22:47 2026 by rpki-client