$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/3BA64F0AF22611F094D5D2AE526F56BC.roa File: 3BA64F0AF22611F094D5D2AE526F56BC.roa (raw, json) Hash identifier: gjQ8EjTh4YTn2TSGcxeqBGmNj2WHRb5bDlBbyu/0FTk= Subject key identifier: 0A:C0:6E:B0:A3:0E:A9:F3:D2:1C:4C:3A:A4:3C:66:73:0E:B7:02:2C Certificate issuer: /CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C Certificate serial: 12CD Authority key identifier: 87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/3BA64F0AF22611F094D5D2AE526F56BC.roa Signing time: Mon 02 Mar 2026 04:57:30 +0000 ROA not before: Thu 15 Jan 2026 15:24:07 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 20473 IP address blocks: 66.42.32.0/20 maxlen: 24 66.42.48.0/20 maxlen: 24 139.180.128.0/19 maxlen: 24 139.180.160.0/19 maxlen: 24 139.180.192.0/19 maxlen: 24 158.247.192.0/18 maxlen: 24 167.179.64.0/18 maxlen: 24 207.148.64.0/20 maxlen: 24 207.148.80.0/21 maxlen: 24 207.148.88.0/21 maxlen: 24 207.148.96.0/20 maxlen: 24 207.148.112.0/22 maxlen: 24 207.148.116.0/22 maxlen: 24 207.148.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4813 (0x12cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BCDF, serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C Validity Not Before: Jan 15 15:24:07 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a518ba-6351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0f:eb:45:37:6e:86:2b:bd:a1:95:c7:e5:c3: 60:23:a7:37:d5:24:b3:f0:52:13:e6:98:7b:fa:62: c6:7a:96:8f:6a:e1:d0:0a:55:28:e0:39:d6:bd:fd: 5a:e2:8d:b2:6a:75:d8:3c:89:52:c8:8b:1c:e8:8b: a7:36:f4:27:c1:63:2c:fe:a7:55:25:25:f9:94:30: 0a:a1:5b:6e:ad:96:ae:18:dd:ed:9e:31:88:b2:ef: e8:dd:fa:81:2b:26:da:73:4e:ef:ae:2e:22:44:be: 8e:3e:c6:ac:94:45:83:21:4a:b2:5d:65:b9:39:5e: d8:97:8d:35:ca:86:1e:d0:b4:29:05:bb:aa:eb:90: 12:6b:83:47:2f:0e:5b:9f:68:35:f9:29:5a:a8:11: ed:50:3b:8c:7f:06:8d:34:ab:d8:1c:4c:4f:30:eb: d5:f9:84:c6:78:9f:f5:df:10:81:cd:94:62:e4:5c: 7e:b5:e0:f5:f1:71:4e:68:7c:67:a3:33:82:9e:8d: cc:e6:1f:63:0d:aa:37:c0:90:bd:3b:29:98:56:b9: c3:e7:60:35:19:80:c4:f3:c8:ce:90:7f:46:8d:36: 88:67:9b:21:c1:f5:91:1e:24:d3:92:2f:97:69:fe: 90:b5:b5:54:a4:8e:e6:63:0a:03:04:e9:c0:13:8a: ee:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C0:6E:B0:A3:0E:A9:F3:D2:1C:4C:3A:A4:3C:66:73:0E:B7:02:2C X509v3 Authority Key Identifier: keyid:87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/3BA64F0AF22611F094D5D2AE526F56BC.roa sbgp-ipAddrBlock: critical IPv4: 66.42.32.0/19 139.180.128.0-139.180.223.255 158.247.192.0/18 167.179.64.0/18 207.148.64.0/18 Signature Algorithm: sha256WithRSAEncryption 47:a1:ea:55:07:e1:8f:30:02:3b:f1:8b:55:00:20:33:e0:48: 45:e2:4a:96:50:ec:05:28:0c:a8:91:ee:29:52:4f:6e:0d:fc: e4:78:9b:f4:21:75:4c:03:20:b9:3a:69:bc:08:bd:5b:6e:08: 77:01:21:0a:6d:18:f5:40:93:7d:a7:ff:22:fd:c3:22:2c:6e: d6:d2:44:1c:c1:77:06:96:10:ba:d8:51:dc:61:4f:0a:dd:f5: 9f:64:fa:0c:ce:2b:51:bb:28:fc:ca:05:3e:f6:6b:4d:68:b4: 9e:15:78:e6:d5:b2:14:50:8c:55:84:3a:9e:2e:8c:84:44:91: 2e:65:c7:78:42:30:da:ad:fd:bd:67:6b:14:6b:77:26:6e:8b: 90:36:61:03:44:8e:19:be:f3:4c:ef:99:ea:42:ef:1e:72:cf: 37:01:0c:d7:54:5e:c4:e0:b9:f1:69:79:d3:d1:39:a0:07:15: d3:51:ae:9f:62:e5:a3:10:62:9c:1e:6e:23:15:23:9e:20:7d: c9:45:5b:17:1c:01:f7:16:7b:2d:2e:be:8b:b9:8f:30:2b:ac: 87:42:f8:84:0d:f3:4f:8c:56:da:8d:8f:f2:1c:53:bf:37:6f: fa:76:08:b3:e2:3d:72:17:f9:1f:cd:80:01:93:a4:c9:b4:1f: f9:28:a4:88 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICEs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJDREYxMTAvBgNVBAUTKDg3OTU0QzAyMzFDQUFDQjJCRTJERkRCNTY3Qzc0QUY1 RUNCNzVCMEMwHhcNMjYwMTE1MTUyNDA3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MThiYS02MzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsg/rRTduhiu9oZXH5cNgI6c31SSz8FIT5ph7+mLGepaPauHQClUo4DnWvf1a 4o2yanXYPIlSyIsc6IunNvQnwWMs/qdVJSX5lDAKoVturZauGN3tnjGIsu/o3fqB Kybac07vri4iRL6OPsaslEWDIUqyXWW5OV7Yl401yoYe0LQpBbuq65ASa4NHLw5b n2g1+SlaqBHtUDuMfwaNNKvYHExPMOvV+YTGeJ/13xCBzZRi5Fx+teD18XFOaHxn ozOCno3M5h9jDao3wJC9OymYVrnD52A1GYDE88jOkH9GjTaIZ5shwfWRHiTTki+X af6QtbVUpI7mYwoDBOnAE4ru7QIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFArAbrCj Dqnz0hxMOqQ8ZnMOtwIsMB8GA1UdIwQYMBaAFIeVTAIxyqyyvi39tWfHSvXst1sM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNERi9FQ0UwRkJFNkUz NkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9oNVZNQWpIS3JMSy1MZjIxWjhkSzlleTNX d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2g1Vk1BakhLckxLLUxmMjFaOGRLOWV5M1d3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkJDREYvRUNFMEZCRTZFMzZEMTFFODk1NkYzNTE2QzRGOUFFMDIvM0JBNjRGMEFG MjI2MTFGMDk0RDVEMkFFNTI2RjU2QkMucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAs BAIAATAmAwQFQiogMAwDBAeLtIADBAWLtMADBAae98ADBAans0ADBAbPlEAwDQYJ KoZIhvcNAQELBQADggEBAEeh6lUH4Y8wAjvxi1UAIDPgSEXiSpZQ7AUoDKiR7ilS T24N/OR4m/QhdUwDILk6abwIvVtuCHcBIQptGPVAk32n/yL9wyIsbtbSRBzBdwaW ELrYUdxhTwrd9Z9k+gzOK1G7KPzKBT72a01otJ4VeObVshRQjFWEOp4ujIREkS5l x3hCMNqt/b1naxRrdyZui5A2YQNEjhm+80zvmepC7x5yzzcBDNdUXsTgufFpedPR OaAHFdNRrp9i5aMQYpwebiMVI54gfclFWxccAfcWey0uvou5jzArrIdC+IQN80+M VtqNj/IcU783b/p2CLPiPXIX+R/NgAGTpMm0H/kopIg= -----END CERTIFICATE-----Generated at Thu Mar 26 16:14:47 2026 by rpki-client