$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/493CABD04FEE11F0B866DF81C4F9AE02.roa File: 493CABD04FEE11F0B866DF81C4F9AE02.roa (raw, json) Hash identifier: CY0a3MF9Wjgtmqg8UPruXQ0gE6mWPrkTmn5P+V+20+A= Subject key identifier: D8:B0:06:6D:E3:67:F1:CC:93:33:F9:9B:C8:9C:15:E5:66:AE:C5:C8 Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Certificate serial: 0ACE Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/493CABD04FEE11F0B866DF81C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:51:05 +0000 ROA not before: Sat 08 Nov 2025 19:09:57 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 4907 IP address blocks: 137.220.136.0/24 maxlen: 24 137.220.139.0/24 maxlen: 24 137.220.140.0/24 maxlen: 24 137.220.150.0/24 maxlen: 24 137.220.151.0/24 maxlen: 24 137.220.152.0/24 maxlen: 24 137.220.153.0/24 maxlen: 24 137.220.154.0/24 maxlen: 24 137.220.155.0/24 maxlen: 24 137.220.156.0/24 maxlen: 24 137.220.157.0/24 maxlen: 24 137.220.158.0/24 maxlen: 24 137.220.164.0/24 maxlen: 24 137.220.165.0/24 maxlen: 24 137.220.166.0/24 maxlen: 24 137.220.172.0/24 maxlen: 24 137.220.178.0/24 maxlen: 24 137.220.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2766 (0xace) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Validity Not Before: Nov 8 19:09:57 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a47c89-911f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2c:37:d1:32:d4:73:94:64:0b:f0:33:fc:77: 9e:99:2f:94:70:fd:7a:0d:22:02:f4:8d:80:68:8c: 13:ce:ae:18:ed:5b:66:f1:84:8c:65:60:bf:7c:3e: 72:5d:54:d8:d4:6c:ca:e2:cc:77:df:ed:2c:90:0e: 9e:6c:b8:b1:11:08:9f:e5:4f:82:4e:6a:fa:ef:91: 19:24:1f:5c:db:14:85:5a:bf:d5:a3:56:95:59:b8: 83:4d:e5:6f:a6:c0:e2:60:98:e5:1c:f2:f1:10:a1: e4:04:ac:04:9a:41:d7:dc:34:c7:d6:b9:73:f9:7c: cd:f3:b1:90:57:5f:47:d2:5d:d8:e0:8f:2d:4d:67: de:33:1a:91:83:e0:9f:3d:e7:bb:97:bb:ea:c1:a5: f4:e8:43:12:ec:85:1d:9f:d4:a6:b8:27:57:ea:85: 31:d6:0e:24:27:7d:f4:34:0b:ea:6d:06:18:f0:13: 78:87:c9:10:70:e8:d5:ee:cf:22:62:2e:3d:42:ce: 77:29:aa:e6:3c:85:dc:7f:2d:50:0b:2d:f9:0f:92: b5:58:72:16:8d:db:b3:66:07:8d:aa:49:18:15:56: 2c:75:fd:3b:23:9e:7b:82:63:f7:c3:ed:f4:74:97: b7:49:aa:65:1e:41:03:2b:ed:08:54:9a:18:42:74: f5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B0:06:6D:E3:67:F1:CC:93:33:F9:9B:C8:9C:15:E5:66:AE:C5:C8 X509v3 Authority Key Identifier: keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/493CABD04FEE11F0B866DF81C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 137.220.136.0/24 137.220.139.0-137.220.140.255 137.220.150.0-137.220.158.255 137.220.164.0-137.220.166.255 137.220.172.0/24 137.220.178.0/23 Signature Algorithm: sha256WithRSAEncryption 14:a7:fa:15:63:32:24:cf:ce:a5:4d:42:7c:99:bc:c5:c3:80: 22:84:98:23:82:e4:1e:a5:f4:b0:c6:2f:9d:3f:5e:96:51:e6: c3:be:39:e5:8c:dc:09:d5:35:8b:4a:c2:04:b7:4a:85:a7:24: 05:47:e2:27:7b:4b:4f:36:75:fd:79:1a:0b:ca:69:fb:bb:fb: ec:9d:8a:64:80:78:6e:60:77:7f:6a:f3:9c:9c:37:45:f6:3a: ad:2c:95:7c:af:bf:d6:04:76:3f:15:96:b3:90:de:49:49:58: b5:37:55:5f:b3:d1:22:87:30:4d:b3:62:b7:02:1d:19:09:17: a9:d6:77:64:ef:13:08:d3:20:87:0f:77:93:bc:35:d5:e2:96: 87:04:8b:e2:e9:b2:3c:57:56:64:fb:2f:00:58:1c:38:4f:ee: 85:4a:e8:a5:b5:26:4c:78:61:73:c0:1b:44:f0:10:b1:e6:66: ff:8c:f7:cb:e3:ea:1d:b0:64:4a:2e:4c:ef:fd:ae:37:fc:0d: 89:9b:7b:14:d8:40:7d:df:5e:52:0c:42:23:ef:51:30:36:97: ab:d9:3a:fe:7b:0b:4d:89:b5:41:64:ad:b2:d9:80:c1:4c:2a: 7c:e4:5a:c0:83:18:af:ea:25:ee:3a:39:1d:f8:21:58:40:fb: 6e:52:5f:37 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICCs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw MEJBOTNCMzIwHhcNMjUxMTA4MTkwOTU3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2M4OS05MTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Cw30TLUc5RkC/Az/HeemS+UcP16DSIC9I2AaIwTzq4Y7Vtm8YSMZWC/fD5y XVTY1GzK4sx33+0skA6ebLixEQif5U+CTmr675EZJB9c2xSFWr/Vo1aVWbiDTeVv psDiYJjlHPLxEKHkBKwEmkHX3DTH1rlz+XzN87GQV19H0l3Y4I8tTWfeMxqRg+Cf Pee7l7vqwaX06EMS7IUdn9SmuCdX6oUx1g4kJ330NAvqbQYY8BN4h8kQcOjV7s8i Yi49Qs53KarmPIXcfy1QCy35D5K1WHIWjduzZgeNqkkYFVYsdf07I557gmP3w+30 dJe3SaplHkEDK+0IVJoYQnT1CQIDAQABo4ICljCCApIwHQYDVR0OBBYEFNiwBm3j Z/HMkzP5m8icFeVmrsXIMB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEM2NjEvMDRBQUIyOUU4MzZEMTFFQUI0QTJENzZEQzRGOUFFMDIvNDkzQ0FCRDA0 RkVFMTFGMEI4NjZERjgxQzRGOUFFMDIucm9hMFUGCCsGAQUFBwEHAQH/BEYwRDBC BAIAATA8AwQAidyIMAwDBACJ3IsDBACJ3IwwDAMEAYnclgMEAIncnjAMAwQCidyk AwQAidymAwQAidysAwQBidyyMA0GCSqGSIb3DQEBCwUAA4IBAQAUp/oVYzIkz86l TUJ8mbzFw4AihJgjguQepfSwxi+dP16WUebDvjnljNwJ1TWLSsIEt0qFpyQFR+In e0tPNnX9eRoLymn7u/vsnYpkgHhuYHd/avOcnDdF9jqtLJV8r7/WBHY/FZazkN5J SVi1N1Vfs9EihzBNs2K3Ah0ZCRep1ndk7xMI0yCHD3eTvDXV4paHBIvi6bI8V1Zk +y8AWBw4T+6FSuiltSZMeGFzwBtE8BCx5mb/jPfL4+odsGRKLkzv/a43/A2Jm3sU 2EB9315SDEIj71EwNper2Tr+ewtNibVBZK2y2YDBTCp85FrAgxiv6iXuOjkd+CFY QPtuUl83 -----END CERTIFICATE-----Generated at Thu Mar 26 06:45:08 2026 by rpki-client