$ rpki-client -vvf rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/2A8244EEE1AB11F0A6B6CFD64A6F56BC.roa File: 2A8244EEE1AB11F0A6B6CFD64A6F56BC.roa (raw, json) Hash identifier: EqLKG4uPYdf+DEH4UJyfrFpvPeTolC1wKzTsRMJAbCw= Subject key identifier: 6F:C3:02:15:E9:CE:E5:DA:64:D5:2A:B0:0D:67:7D:DD:65:BA:7E:84 Certificate issuer: /CN=A914DCD4/serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9 Certificate serial: 2D Authority key identifier: CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/2A8244EEE1AB11F0A6B6CFD64A6F56BC.roa Signing time: Mon 02 Mar 2026 13:08:29 +0000 ROA not before: Thu 25 Dec 2025 16:02:52 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 141694 IP address blocks: 160.222.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DCD4, serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9 Validity Not Before: Dec 25 16:02:52 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a58bcd-ff9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d6:cb:6f:dd:57:32:1e:24:44:89:94:93:30: 80:70:bf:11:8d:1c:f0:9b:f1:1f:fa:1c:6c:9f:0b: ea:c7:4d:ee:0c:ac:82:7e:b7:d8:87:1b:25:63:88: 21:36:ee:f7:7a:df:18:ab:da:90:b1:86:6d:b5:62: 85:ac:bc:86:fd:f6:51:37:2b:a8:6f:c3:ad:f2:6b: ca:a7:f5:ee:ff:ef:2d:8e:85:43:e5:eb:d2:7d:53: 88:88:ad:b7:66:e8:98:d3:44:89:30:2a:91:c6:71: 87:0e:f3:8a:fa:ed:35:c3:56:b6:3a:fc:50:ba:a2: 55:2c:7f:54:ef:f9:e3:d9:f6:d0:25:1d:48:a4:e1: cd:02:af:bf:0a:b7:54:22:42:dc:4b:d2:58:15:ba: 50:03:b6:45:00:1e:67:14:c2:5b:38:10:40:12:51: 93:d2:33:14:78:c6:a8:29:a1:2c:19:2e:28:e4:06: 38:29:97:08:7b:8f:cb:14:1b:79:39:85:d5:b5:e6: 22:06:28:e5:c3:c7:d4:04:dc:d2:49:db:c4:e4:a6: 9e:5e:57:a3:c0:40:d7:a1:ba:ac:e5:97:1a:b5:b6: 73:d5:fd:02:92:d7:9e:8f:77:14:c7:c1:1b:69:ed: c0:06:d6:a2:23:e1:0b:ba:b4:f4:89:c8:2a:56:65: c5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C3:02:15:E9:CE:E5:DA:64:D5:2A:B0:0D:67:7D:DD:65:BA:7E:84 X509v3 Authority Key Identifier: keyid:CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/2A8244EEE1AB11F0A6B6CFD64A6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 160.222.193.0/24 Signature Algorithm: sha256WithRSAEncryption 53:88:23:7c:34:37:ad:f3:76:f0:c0:33:59:d0:f3:b1:26:96: cf:69:d2:b9:e6:7e:6e:17:54:28:94:04:d6:c3:37:81:56:87: 23:47:5c:c8:43:e4:6d:a0:09:fc:3a:5c:45:4a:49:46:71:1a: 70:e2:6c:c3:39:63:49:71:20:b4:7a:43:2b:8c:e5:0b:24:46: 9b:d9:92:02:4b:a7:40:af:ce:87:c3:18:12:1e:29:21:a5:d8: cd:17:d4:f0:76:ff:ec:1b:63:87:2b:66:2e:71:83:2a:94:4a: e0:72:56:1d:96:d2:a6:b7:83:06:f9:2d:c7:bc:ff:32:e3:0c: 70:1d:6f:80:8d:4d:7b:74:2c:dd:0e:e6:e1:ab:d7:36:0f:cd: 8f:a1:72:f4:2f:7e:a9:ac:fb:dc:aa:45:35:38:a4:45:b9:3d: 9f:d4:b4:28:81:d4:d1:47:6b:06:36:a1:51:dc:74:ea:70:85: 38:a1:28:a0:32:41:73:3c:22:4f:24:b4:4d:03:b9:d4:80:04: 93:8b:bc:e4:97:be:24:17:47:4c:88:9c:7f:cb:04:ab:2d:b1: a6:74:d8:a0:fe:d3:f8:75:dc:39:5f:9a:41:1f:f3:20:c7:be: 40:83:3e:2b:e9:7a:5b:00:23:21:c1:cc:2d:63:f2:2a:b3:25: 43:7f:c7:74 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RENENDExMC8GA1UEBRMoQ0MzNzZBNjhGQ0EzRTA5RjBDRUI1QzJDQjkxQjM0REIx NEMzRUJDOTAeFw0yNTEyMjUxNjAyNTJaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTU4YmNkLWZmOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCT1stv3VcyHiREiZSTMIBwvxGNHPCb8R/6HGyfC+rHTe4MrIJ+t9iHGyVjiCE2 7vd63xir2pCxhm21YoWsvIb99lE3K6hvw63ya8qn9e7/7y2OhUPl69J9U4iIrbdm 6JjTRIkwKpHGcYcO84r67TXDVrY6/FC6olUsf1Tv+ePZ9tAlHUik4c0Cr78Kt1Qi QtxL0lgVulADtkUAHmcUwls4EEASUZPSMxR4xqgpoSwZLijkBjgplwh7j8sUG3k5 hdW15iIGKOXDx9QE3NJJ28Tkpp5eV6PAQNehuqzllxq1tnPV/QKS156PdxTHwRtp 7cAG1qIj4Qu6tPSJyCpWZcWlAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUb8MCFenO 5dpk1SqwDWd93WW6foQwHwYDVR0jBBgwFoAUzDdqaPyj4J8M61wsuRs02xTD68kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREQ0Q0L0IxNzFEQjUwRTFB QTExRjBBRkNFODRCODRBNkY1NkJDL3pEZHFhUHlqNEo4TTYxd3N1UnMwMnhURDY4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvekRkcWFQeWo0SjhNNjF3c3VSczAyeFRENjhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RENENC9CMTcxREI1MEUxQUExMUYwQUZDRTg0Qjg0QTZGNTZCQy8yQTgyNDRFRUUx QUIxMUYwQTZCNkNGRDY0QTZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACg3sEwDQYJKoZIhvcNAQELBQADggEBAFOII3w0N63zdvDAM1nQ87Em ls9p0rnmfm4XVCiUBNbDN4FWhyNHXMhD5G2gCfw6XEVKSUZxGnDibMM5Y0lxILR6 QyuM5QskRpvZkgJLp0CvzofDGBIeKSGl2M0X1PB2/+wbY4crZi5xgyqUSuByVh2W 0qa3gwb5Lce8/zLjDHAdb4CNTXt0LN0O5uGr1zYPzY+hcvQvfqms+9yqRTU4pEW5 PZ/UtCiB1NFHawY2oVHcdOpwhTihKKAyQXM8Ik8ktE0DudSABJOLvOSXviQXR0yI nH/LBKstsaZ02KD+0/h13DlfmkEf8yDHvkCDPivpelsAIyHBzC1j8iqzJUN/x3Q= -----END CERTIFICATE-----Generated at Wed Mar 4 10:09:11 2026 by rpki-client