$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/9DDCAB1AC9EC11EE9644540FC4F9AE02.roa File: 9DDCAB1AC9EC11EE9644540FC4F9AE02.roa (raw, json) Hash identifier: yPDy0xgT7qOMVChc0IeYdh84zKZ/Q4OPSOxME4uNSX8= Subject key identifier: 34:1D:C8:80:1F:47:D8:91:44:95:8B:4F:E3:3D:E6:AA:57:6F:A3:96 Certificate issuer: /CN=A91A55C9/serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D Certificate serial: 018F Authority key identifier: EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/9DDCAB1AC9EC11EE9644540FC4F9AE02.roa Signing time: Wed 11 Mar 2026 03:38:42 +0000 ROA not before: Wed 11 Mar 2026 03:38:42 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 17461 IP address blocks: 143.119.160.0/24 maxlen: 24 143.119.161.0/24 maxlen: 24 143.119.162.0/24 maxlen: 24 143.119.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55C9, serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D Validity Not Before: Mar 11 03:38:42 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69b0e3c2-54d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9c:7c:ac:eb:82:3e:6b:d4:70:8b:51:03:4b: b8:35:73:87:60:8a:3c:e5:2a:5b:31:89:4e:f4:4f: 7e:0b:68:13:97:71:5a:91:0c:35:fd:fe:d1:92:c4: 85:0f:87:79:c4:59:00:ff:5d:01:f5:f6:8b:d5:db: 8d:5c:4c:ef:fc:05:22:70:18:39:a8:00:ce:26:78: 67:b5:70:cb:a8:0b:1a:13:c6:a1:27:3a:09:1b:e0: 99:c0:51:35:eb:85:f9:c3:d3:30:37:9e:76:44:14: de:7d:6a:f6:d7:7a:35:a1:a7:ba:2c:03:8c:1f:01: e3:ff:f6:6a:71:97:31:c6:ea:0a:7b:54:28:59:e0: 8b:69:79:0f:ab:80:14:6e:ec:b1:6d:96:ae:08:df: 61:8c:78:81:3a:04:07:82:c8:ec:74:8b:c7:e1:b3: a2:cb:e9:56:57:14:bf:5a:bf:4c:19:98:4f:6c:8a: bd:34:b2:2f:3d:6a:58:36:3f:f0:33:87:84:b0:cd: 4d:33:da:ee:ab:a0:c0:e9:94:07:81:ed:b2:d1:b6: 71:ed:57:03:b3:0e:88:fd:17:b6:d8:cd:c3:d1:c1: 55:9a:4d:22:38:80:da:b1:c2:fc:36:b1:ff:3e:ba: b9:d8:b3:cb:24:a6:aa:11:8c:bb:6e:0e:d1:f1:b3: bd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1D:C8:80:1F:47:D8:91:44:95:8B:4F:E3:3D:E6:AA:57:6F:A3:96 X509v3 Authority Key Identifier: keyid:EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/9DDCAB1AC9EC11EE9644540FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 143.119.160.0/22 Signature Algorithm: sha256WithRSAEncryption 76:8a:61:09:04:72:5e:da:81:6c:ee:a8:e9:9b:38:20:15:b4: fd:44:31:d4:6f:d9:03:37:26:0d:11:f5:00:2e:9c:98:ba:34: ad:b4:8e:62:d2:f5:b8:4b:96:88:05:61:08:33:0b:f8:33:60: 88:28:b1:de:c5:5c:64:bd:f6:db:85:8a:d2:19:c3:95:f1:59: 10:64:2e:b2:dd:69:24:cf:f3:17:ee:28:09:9b:5b:f0:ed:ce: d1:1d:b6:1c:7b:16:a8:b0:df:fe:22:df:67:d4:d5:3a:23:01: 2b:68:a4:d5:d6:89:69:b9:8c:d0:38:81:75:a0:8e:7e:cb:2f: ba:5c:30:0d:04:54:4d:87:bc:f5:a2:61:e5:ab:18:af:df:2c: 8a:cc:75:cf:f0:c9:c0:b7:8e:59:8b:2b:88:50:17:6d:93:e7: b1:ff:b5:43:c8:f0:59:76:16:34:00:e1:71:b5:27:a6:22:91: 7b:98:ac:1e:d1:11:cd:98:b1:c0:8e:1e:f9:e4:b0:ab:75:96: c5:cc:05:d6:a2:ee:2c:93:2c:66:f7:c0:1e:84:df:00:76:cc: eb:87:2d:0c:15:a5:78:86:e9:fb:ae:9d:76:cd:fb:6f:b6:f7: 1a:53:10:08:ae:34:02:4b:d8:2c:75:c5:ce:9d:e2:95:49:ea: c4:41:77:2e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1QzkxMTAvBgNVBAUTKEVDNjc4REUwRDdCQ0Y4MzlEOTk4QTBGQ0U1QzlFQjc1 RkZDODY3M0QwHhcNMjYwMzExMDMzODQyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWIwZTNjMi01NGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5x8rOuCPmvUcItRA0u4NXOHYIo85SpbMYlO9E9+C2gTl3FakQw1/f7RksSF D4d5xFkA/10B9faL1duNXEzv/AUicBg5qADOJnhntXDLqAsaE8ahJzoJG+CZwFE1 64X5w9MwN552RBTefWr213o1oae6LAOMHwHj//ZqcZcxxuoKe1QoWeCLaXkPq4AU buyxbZauCN9hjHiBOgQHgsjsdIvH4bOiy+lWVxS/Wr9MGZhPbIq9NLIvPWpYNj/w M4eEsM1NM9ruq6DA6ZQHge2y0bZx7VcDsw6I/Re22M3D0cFVmk0iOIDascL8NrH/ Prq52LPLJKaqEYy7bg7R8bO9pwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDQdyIAf R9iRRJWLT+M95qpXb6OWMB8GA1UdIwQYMBaAFOxnjeDXvPg52Zig/OXJ63X/yGc9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS83RTJGMTI2OEM5 RUIxMUVFOEI4NTdCMENDNEY5QUUwMi83R2VONE5lOC1EblptS0Q4NWNucmRmX0la ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdHZU40TmU4LURuWm1LRDg1Y25yZGZfSVp6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU1QzkvN0UyRjEyNjhDOUVCMTFFRThCODU3QjBDQzRGOUFFMDIvOUREQ0FCMUFD OUVDMTFFRTk2NDQ1NDBGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCj3egMA0GCSqGSIb3DQEBCwUAA4IBAQB2imEJBHJe2oFs7qjpmzgg FbT9RDHUb9kDNyYNEfUALpyYujSttI5i0vW4S5aIBWEIMwv4M2CIKLHexVxkvfbb hYrSGcOV8VkQZC6y3Wkkz/MX7igJm1vw7c7RHbYcexaosN/+It9n1NU6IwEraKTV 1olpuYzQOIF1oI5+yy+6XDANBFRNh7z1omHlqxiv3yyKzHXP8MnAt45ZiyuIUBdt k+ex/7VDyPBZdhY0AOFxtSemIpF7mKwe0RHNmLHAjh755LCrdZbFzAXWou4skyxm 98AehN8Adszrhy0MFaV4hun7rp12zftvtvcaUxAIrjQCS9gsdcXOneKVSerEQXcu -----END CERTIFICATE-----Generated at Thu Mar 26 12:52:09 2026 by rpki-client