$ rpki-client -vvf rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/FE5E15E2216911EC82319078C4F9AE02.roa File: FE5E15E2216911EC82319078C4F9AE02.roa (raw, json) Hash identifier: g3gsNvkXAeD0LqTvPButkL1dsuXDCkq774OmJJkZZZ8= Subject key identifier: C2:E5:5A:92:00:B1:CA:D1:C2:68:6B:B1:0B:12:5E:15:AC:3D:25:2D Certificate issuer: /CN=A9171845/serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B Certificate serial: 056C Authority key identifier: 7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/FE5E15E2216911EC82319078C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:57:59 +0000 ROA not before: Wed 03 Sep 2025 00:15:49 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 24324 IP address blocks: 153.111.220.0/24 maxlen: 24 153.111.222.0/24 maxlen: 24 153.111.226.0/24 maxlen: 24 153.111.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1388 (0x56c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171845, serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B Validity Not Before: Sep 3 00:15:49 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a59767-4cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:80:c0:f9:58:9b:73:f5:ab:4e:f5:87:8c:0b: 85:75:02:37:b3:d9:33:8f:ac:1e:e2:9f:21:60:cc: e3:2c:04:e0:d9:15:f1:c4:2e:af:14:64:cd:57:22: 53:49:8a:60:83:13:dc:6f:90:56:8d:30:2a:23:73: e1:2e:84:81:2f:a7:de:57:5f:0e:ec:1e:3f:4c:e7: 55:30:a3:b5:4d:e4:51:5c:cf:ad:53:d4:4f:d2:11: f3:9b:81:03:7c:2d:71:3a:96:60:23:6f:64:0a:11: 6b:c5:5a:17:5f:5b:f7:8c:3a:f8:e8:7c:15:df:27: cb:6f:06:15:19:b1:a7:d1:69:44:cd:9e:53:e7:59: d6:25:af:87:29:0e:da:81:2f:7a:05:4e:2b:a4:fb: ef:11:24:f2:89:cb:bd:b9:89:25:73:b3:76:14:a8: 00:3b:65:3c:88:07:6a:34:9f:b1:2c:16:1b:b2:18: a0:48:a8:96:5d:47:83:f6:88:12:90:4e:0c:45:f6: 39:5b:7c:50:82:f7:82:6c:88:c9:44:d4:cb:39:89: c8:dc:42:56:e5:56:1b:d6:22:9b:57:36:dc:9c:e6: 3f:7a:38:5f:28:47:7e:05:02:47:54:79:5c:7c:6b: 6c:2e:65:e6:39:a3:2d:dc:3d:5d:36:86:a5:ff:4d: ab:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E5:5A:92:00:B1:CA:D1:C2:68:6B:B1:0B:12:5E:15:AC:3D:25:2D X509v3 Authority Key Identifier: keyid:7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/FE5E15E2216911EC82319078C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 153.111.220.0/24 153.111.222.0/24 153.111.226.0/24 153.111.229.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:1b:99:6f:ca:b9:2c:0f:b9:18:9f:1d:36:3b:83:52:b1:ef: 37:bd:f2:45:be:4f:28:47:d5:32:ed:4c:c1:b6:f4:cd:65:58: 33:6c:26:50:6e:e6:58:62:a9:65:14:b6:41:73:33:6d:48:df: 50:e7:38:91:e5:42:99:79:c6:53:bc:76:7c:c4:8a:77:fa:0e: 38:ec:17:4e:5e:8d:ca:4d:d8:a9:b9:40:76:e2:d6:eb:be:8f: de:f2:c3:64:98:e8:34:db:d8:74:15:92:43:45:8d:6c:23:86: 1b:bb:00:90:2e:41:7f:31:08:52:2c:b7:ec:d4:41:cf:2e:e6: 0c:d6:81:ae:83:8c:c7:a9:4d:0a:54:9d:40:e9:d6:d8:bc:13: 70:a3:e7:f1:56:40:bb:4b:6d:d4:26:19:cd:08:70:3e:c6:e2: 02:7e:87:34:cf:a7:b8:dc:70:a3:8f:a1:dd:03:7a:4a:da:bd: e3:23:04:20:f8:70:9f:29:bd:e5:7d:0d:14:c7:28:30:c4:ec: 3a:2f:0d:cf:1f:78:f2:c3:fe:d4:ee:62:b9:d8:ff:ac:3c:a6: 1f:12:a0:70:93:1d:ff:f0:fd:09:58:eb:ca:25:b0:9a:75:1a: e7:64:9b:c1:7e:5f:da:3b:38:e9:78:73:e6:0f:3b:71:d8:07: 2c:b0:8f:00 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICBWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE4NDUxMTAvBgNVBAUTKDdDOUIyOUYxRjU2RTg3RUVBRUIxQkY3NDA3Njk0REI0 RUREQUQ1M0IwHhcNMjUwOTAzMDAxNTQ5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTc2Ny00Y2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroDA+Vibc/WrTvWHjAuFdQI3s9kzj6we4p8hYMzjLATg2RXxxC6vFGTNVyJT SYpggxPcb5BWjTAqI3PhLoSBL6feV18O7B4/TOdVMKO1TeRRXM+tU9RP0hHzm4ED fC1xOpZgI29kChFrxVoXX1v3jDr46HwV3yfLbwYVGbGn0WlEzZ5T51nWJa+HKQ7a gS96BU4rpPvvESTyicu9uYklc7N2FKgAO2U8iAdqNJ+xLBYbshigSKiWXUeD9ogS kE4MRfY5W3xQgveCbIjJRNTLOYnI3EJW5VYb1iKbVzbcnOY/ejhfKEd+BQJHVHlc fGtsLmXmOaMt3D1dNoal/02rYwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFMLlWpIA scrRwmhrsQsSXhWsPSUtMB8GA1UdIwQYMBaAFHybKfH1bofurrG/dAdpTbTt2tU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg0NS84Njc1QkU4MDIw Q0ExMUVDQjY2QzE0NTJDNEY5QUUwMi9mSnNwOGZWdWgtNnVzYjkwQjJsTnRPM2Ex VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZKc3A4ZlZ1aC02dXNiOTBCMmxOdE8zYTFUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzE4NDUvODY3NUJFODAyMENBMTFFQ0I2NkMxNDUyQzRGOUFFMDIvRkU1RTE1RTIy MTY5MTFFQzgyMzE5MDc4QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAmW/cAwQAmW/eAwQAmW/iAwQAmW/lMA0GCSqGSIb3DQEBCwUAA4IB AQAvG5lvyrksD7kYnx02O4NSse83vfJFvk8oR9Uy7UzBtvTNZVgzbCZQbuZYYqll FLZBczNtSN9Q5ziR5UKZecZTvHZ8xIp3+g447BdOXo3KTdipuUB24tbrvo/e8sNk mOg029h0FZJDRY1sI4YbuwCQLkF/MQhSLLfs1EHPLuYM1oGug4zHqU0KVJ1A6dbY vBNwo+fxVkC7S23UJhnNCHA+xuICfoc0z6e43HCjj6HdA3pK2r3jIwQg+HCfKb3l fQ0UxygwxOw6Lw3PH3jyw/7U7mK52P+sPKYfEqBwkx3/8P0JWOvKJbCadRrnZJvB fl/aOzjpeHPmDztx2AcssI8A -----END CERTIFICATE-----Generated at Thu Mar 26 18:18:20 2026 by rpki-client