$ rpki-client -vvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/1577D3D4CEED11EEAD68A169C4F9AE02.roa File: 1577D3D4CEED11EEAD68A169C4F9AE02.roa (raw, json) Hash identifier: LtHWtSjoNBVD/Xy45h3aaShO6UHPlFvxFAAPZ2CB9qg= Subject key identifier: 56:E1:1B:D3:8D:49:BD:D4:3F:82:BB:03:89:E4:F8:F0:B0:9F:86:26 Certificate issuer: /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2 Certificate serial: 018D Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/1577D3D4CEED11EEAD68A169C4F9AE02.roa Signing time: Mon 02 Mar 2026 15:11:00 +0000 ROA not before: Sat 05 Apr 2025 05:10:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151630 IP address blocks: 103.149.152.0/24 maxlen: 24 103.149.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C651, serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2 Validity Not Before: Apr 5 05:10:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a5a884-97d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:2c:cd:9e:28:b2:23:05:e7:a8:27:c3:cb: 93:b6:8d:37:dc:73:46:9c:ce:0c:4a:0a:62:ea:ea: b3:51:6c:7c:30:1f:e6:ed:61:6b:c3:8d:b1:de:c2: 18:ec:36:10:c8:a8:7e:a7:3f:1d:b9:70:7a:b0:27: 2a:56:54:a0:19:7e:b3:62:f8:83:89:fd:76:95:66: 13:f0:ff:49:35:2f:8d:ff:c3:ba:9c:38:b9:b3:d8: 81:0d:1e:12:9e:50:69:e4:2c:bb:e9:4d:9f:36:8a: 51:53:8f:bc:d2:c5:30:53:d4:42:d8:34:f9:d5:bf: b9:59:9b:8b:9f:43:93:4b:d4:07:e7:ea:22:7e:8f: 9d:d0:f8:44:fe:92:b3:b6:b5:c2:b0:3d:95:dd:b9: 93:96:5b:03:1a:08:04:10:8b:37:9a:4d:05:94:2d: 41:5b:fb:bf:29:58:c7:7b:d5:e8:48:ae:e7:46:25: 26:c6:4d:53:50:b9:9f:b5:b2:6b:b5:d2:74:ed:fe: 00:14:f4:08:e1:95:7c:c6:5a:c2:60:5c:b9:44:14: dc:d6:27:c0:c6:69:fe:95:59:b8:ef:db:7c:a4:64: 3c:33:5e:f6:26:1a:71:60:eb:19:32:b5:25:7c:5d: 82:25:6c:2c:49:4c:06:ac:ff:66:a1:b0:54:c1:43: 44:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E1:1B:D3:8D:49:BD:D4:3F:82:BB:03:89:E4:F8:F0:B0:9F:86:26 X509v3 Authority Key Identifier: keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/1577D3D4CEED11EEAD68A169C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.149.152.0/23 Signature Algorithm: sha256WithRSAEncryption 78:f3:61:48:83:82:64:ee:18:bf:cf:f7:0f:6b:87:d3:f8:84: 13:aa:b8:e2:3a:18:74:84:0d:42:21:00:90:64:07:d1:5e:ed: e6:46:c8:77:7e:55:3a:fb:32:ae:c9:9e:d7:35:0f:e8:cc:27: 92:14:3f:de:9e:d6:fd:4d:c4:61:db:80:29:b7:a8:63:7e:75: 96:4a:67:b8:bb:b7:5a:91:98:7e:bb:d0:82:ee:8b:6b:ae:13: 7a:c7:aa:a9:64:19:ee:7b:17:19:32:8d:e7:3d:d5:72:b2:bb: 3a:10:73:80:33:64:f2:64:0f:bd:91:a4:df:3a:c7:87:ec:7e: 46:cb:50:6b:09:73:a2:aa:de:42:97:f4:84:5b:62:5a:13:fd: f0:2c:f5:4f:d8:d3:d4:0c:a0:82:bd:93:79:65:95:89:b9:db: e3:84:86:68:91:f9:31:9b:23:8e:64:f0:3b:da:1f:3f:02:cc: 47:22:f8:f8:3f:59:34:ef:32:a0:71:d9:14:ef:47:de:e3:ba: 50:8e:d6:21:5d:a6:08:9b:4f:17:5d:d5:05:2e:b4:17:ef:75: 09:67:7a:b9:bb:ae:be:00:e6:ce:7a:21:63:28:2e:66:62:ba: 4c:0c:b2:eb:b9:30:f0:dd:22:8e:3b:1f:ce:bc:37:0e:4b:81: 83:fa:4d:2f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM2NTExMTAvBgNVBAUTKDc2RDZGQTdDRjlCRjhFNDE1RjJGNDI2MTlCODA0Mjg4 NzYzRTY3QTIwHhcNMjUwNDA1MDUxMDQzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTg4NC05N2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxI8szZ4osiMF56gnw8uTto033HNGnM4MSgpi6uqzUWx8MB/m7WFrw42x3sIY 7DYQyKh+pz8duXB6sCcqVlSgGX6zYviDif12lWYT8P9JNS+N/8O6nDi5s9iBDR4S nlBp5Cy76U2fNopRU4+80sUwU9RC2DT51b+5WZuLn0OTS9QH5+oifo+d0PhE/pKz trXCsD2V3bmTllsDGggEEIs3mk0FlC1BW/u/KVjHe9XoSK7nRiUmxk1TULmftbJr tdJ07f4AFPQI4ZV8xlrCYFy5RBTc1ifAxmn+lVm479t8pGQ8M172JhpxYOsZMrUl fF2CJWwsSUwGrP9mobBUwUNEGwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFbhG9ON Sb3UP4K7A4nk+PCwn4YmMB8GA1UdIwQYMBaAFHbW+nz5v45BXy9CYZuAQoh2Pmei MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzY1MS8zMzRGNjhDOENF RUMxMUVFQUUwMzMwNkNDNEY5QUUwMi9kdGI2ZlBtX2prRmZMMEpobTRCQ2lIWS1a NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R0YjZmUG1famtGZkwwSmhtNEJDaUhZLVo2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEM2NTEvMzM0RjY4QzhDRUVDMTFFRUFFMDMzMDZDQzRGOUFFMDIvMTU3N0QzRDRD RUVEMTFFRUFENjhBMTY5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5WYMA0GCSqGSIb3DQEBCwUAA4IBAQB482FIg4Jk7hi/z/cPa4fT +IQTqrjiOhh0hA1CIQCQZAfRXu3mRsh3flU6+zKuyZ7XNQ/ozCeSFD/entb9TcRh 24Apt6hjfnWWSme4u7dakZh+u9CC7otrrhN6x6qpZBnuexcZMo3nPdVysrs6EHOA M2TyZA+9kaTfOseH7H5Gy1BrCXOiqt5Cl/SEW2JaE/3wLPVP2NPUDKCCvZN5ZZWJ udvjhIZokfkxmyOOZPA72h8/AsxHIvj4P1k07zKgcdkU70fe47pQjtYhXaYIm08X XdUFLrQX73UJZ3q5u66+AObOeiFjKC5mYrpMDLLruTDw3SKOOx/OvDcOS4GD+k0v -----END CERTIFICATE-----Generated at Sat Mar 21 20:01:58 2026 by rpki-client