$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/F5A921B85BE911EF8624AA20C4F9AE02.roa File: F5A921B85BE911EF8624AA20C4F9AE02.roa (raw, json) Hash identifier: HtAUxiV2GGFLsnw5Ftue8AlO9jul/mJwmhYMXTb/CeY= Subject key identifier: 37:6A:EF:65:06:50:54:85:AE:1D:7C:82:7D:C8:59:73:09:A5:95:05 Certificate issuer: /CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Certificate serial: 0507 Authority key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/F5A921B85BE911EF8624AA20C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:14:28 +0000 ROA not before: Sat 20 Dec 2025 17:14:47 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 58867 IP address blocks: 45.129.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1287 (0x507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Validity Not Before: Dec 20 17:14:47 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a58d34-f552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a5:89:0c:c4:18:1f:c2:9c:fd:eb:85:0a:b7: 92:da:ae:8a:97:5d:42:bf:36:fa:49:6f:72:de:7b: 65:71:1f:a3:2c:d4:db:4d:02:bf:53:3d:02:29:22: a2:05:4e:99:0b:d2:61:54:26:b1:4f:da:fd:ad:d0: 28:59:05:02:dc:c2:9d:45:fc:59:48:1b:bc:23:02: d9:d8:27:24:72:dc:0e:84:e0:fd:df:9f:2d:7e:e1: 94:39:ea:b0:fd:02:83:ee:ad:89:ab:84:ff:ee:16: 71:fb:ef:6e:c0:b1:55:f9:fa:79:16:52:12:4e:83: 96:c0:1b:2d:38:3e:06:3a:5e:e1:55:c0:ea:06:a3: b3:d0:25:b8:13:1f:65:eb:81:64:c3:2e:bf:06:a9: 77:bf:37:aa:23:cd:84:d4:5d:da:b1:33:9b:3d:a9: 9c:64:9b:2b:27:bf:92:32:7f:3d:8c:ec:76:a3:01: ca:ec:d9:d9:87:48:c6:08:43:bc:d2:39:ff:56:1f: 80:4b:8a:cd:21:07:da:bc:03:99:51:0f:51:19:68: b3:34:66:ce:77:5e:99:9a:84:bc:55:fd:5a:95:79: 1a:8a:e2:be:01:1d:cc:dd:f3:f4:42:0c:3f:6e:40: eb:fa:79:83:bf:02:3b:57:71:5c:33:7d:42:ea:ba: d4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6A:EF:65:06:50:54:85:AE:1D:7C:82:7D:C8:59:73:09:A5:95:05 X509v3 Authority Key Identifier: keyid:76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/F5A921B85BE911EF8624AA20C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.129.229.0/24 Signature Algorithm: sha256WithRSAEncryption 31:53:7a:0a:90:5a:8c:0d:0f:a4:b1:3a:d1:83:ba:15:9e:c4: cb:5b:71:ca:89:70:21:8d:e3:04:6f:81:60:e9:2b:c8:3a:6b: 70:a5:39:73:ba:3a:84:e3:63:b4:35:1b:35:0d:70:31:5a:f1: 06:4f:1f:13:9d:d8:40:c2:14:5a:7a:48:96:af:62:71:29:ee: 4e:1b:b9:12:59:99:e0:e9:53:5f:58:39:67:f4:d6:0b:0f:a3: 9b:36:6c:e3:79:14:90:df:19:42:08:fb:06:69:b7:00:25:67: d8:b3:51:e1:70:c1:4a:e6:fa:a8:f8:81:38:02:06:57:59:62: de:60:5e:c7:28:46:0b:be:a8:27:eb:de:13:f4:4b:9a:dc:79: 61:bc:74:74:dc:20:ba:d7:2b:2f:29:bf:96:1e:1f:08:bf:8c: e8:9c:8e:e8:f9:43:65:6d:52:f5:41:d4:b5:36:72:7a:7f:b7: 25:79:ec:b5:0d:6a:75:f0:6b:4c:cc:45:b5:6b:8c:6c:3c:99: 04:ba:31:86:84:0f:08:aa:03:a5:50:6f:27:fe:75:29:5e:08: 7d:88:15:7b:64:7d:c5:85:c8:e6:0d:bf:2a:70:9e:e2:61:6a: da:7d:50:82:1c:95:8f:9d:52:09:10:f4:e7:61:02:7f:5d:c8: c9:db:89:07 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKDc2MEU2QTdGMDhCNzJGRjgwRUI1NkY2NzUwMzIzQjE2 NEE3MERBMUQwHhcNMjUxMjIwMTcxNDQ3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGQzNC1mNTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmaWJDMQYH8Kc/euFCreS2q6Kl11Cvzb6SW9y3ntlcR+jLNTbTQK/Uz0CKSKi BU6ZC9JhVCaxT9r9rdAoWQUC3MKdRfxZSBu8IwLZ2CckctwOhOD9358tfuGUOeqw /QKD7q2Jq4T/7hZx++9uwLFV+fp5FlISToOWwBstOD4GOl7hVcDqBqOz0CW4Ex9l 64Fkwy6/Bql3vzeqI82E1F3asTObPamcZJsrJ7+SMn89jOx2owHK7NnZh0jGCEO8 0jn/Vh+AS4rNIQfavAOZUQ9RGWizNGbOd16ZmoS8Vf1alXkaiuK+AR3M3fP0Qgw/ bkDr+nmDvwI7V3FcM31C6rrUIwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDdq72UG UFSFrh18gn3IWXMJpZUFMB8GA1UdIwQYMBaAFHYOan8Ity/4DrVvZ1AyOxZKcNod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS81QjRDNEUzNjU5 NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xfZ090VzluVURJN0ZrcHcy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RnNXFmd2kzTF9nT3RXOW5VREk3RmtwdzJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNUI0QzRFMzY1OTY5MTFFQzk0QTNFNzcwQzRGOUFFMDIvRjVBOTIxQjg1 QkU5MTFFRjg2MjRBQTIwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQALYHlMA0GCSqGSIb3DQEBCwUAA4IBAQAxU3oKkFqMDQ+ksTrRg7oV nsTLW3HKiXAhjeMEb4Fg6SvIOmtwpTlzujqE42O0NRs1DXAxWvEGTx8TndhAwhRa ekiWr2JxKe5OG7kSWZng6VNfWDln9NYLD6ObNmzjeRSQ3xlCCPsGabcAJWfYs1Hh cMFK5vqo+IE4AgZXWWLeYF7HKEYLvqgn694T9Eua3HlhvHR03CC61ysvKb+WHh8I v4zonI7o+UNlbVL1QdS1NnJ6f7cleey1DWp18GtMzEW1a4xsPJkEujGGhA8IqgOl UG8n/nUpXgh9iBV7ZH3FhcjmDb8qcJ7iYWrafVCCHJWPnVIJEPTnYQJ/XcjJ24kH -----END CERTIFICATE-----Generated at Thu Mar 26 15:18:20 2026 by rpki-client