$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0599644A1D4311F18B0A19501C3D8C67.roa File: 0599644A1D4311F18B0A19501C3D8C67.roa (raw, json) Hash identifier: TlBAKIB7tP+s06xAm5HYRC6HMPs8oqMK9Uk4IzVxY/Q= Subject key identifier: 15:C9:B4:58:DC:9D:05:A8:17:C1:7A:38:F0:CD:94:5E:3F:FF:A5:F5 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0FD5 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0599644A1D4311F18B0A19501C3D8C67.roa Signing time: Wed 11 Mar 2026 12:12:59 +0000 ROA not before: Wed 11 Mar 2026 12:12:59 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 135891 IP address blocks: 111.92.128.0/24 maxlen: 24 111.92.129.0/24 maxlen: 24 111.92.132.0/24 maxlen: 24 111.92.133.0/24 maxlen: 24 111.92.135.0/24 maxlen: 24 111.92.136.0/24 maxlen: 24 111.92.140.0/24 maxlen: 24 111.92.142.0/24 maxlen: 24 111.92.143.0/24 maxlen: 24 111.92.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4053 (0xfd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Mar 11 12:12:59 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69b15c4b-7596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:06:e7:92:bd:18:8e:eb:8f:de:c9:f5:84:56: e8:84:87:2c:59:3f:b0:1d:6f:f8:0b:cc:8c:38:2e: a9:c3:68:15:d8:2f:de:02:e9:42:88:2e:f8:9d:bb: 3c:4f:cc:b4:e7:7f:94:fd:e0:4c:38:00:c4:4a:d4: dd:4d:35:fc:1e:fc:15:4f:fc:85:7a:76:bb:75:3d: d4:fd:34:1c:62:0f:4d:9a:12:19:d5:72:c1:69:c4: 17:f4:f2:db:55:00:2f:c5:67:2b:82:40:a7:c8:39: 8a:d7:f6:f9:61:d1:43:d3:5d:c7:e3:c7:b7:3e:9d: 4f:ac:a0:15:57:6b:ba:6d:ea:2e:bb:98:ba:ea:01: bb:7f:3a:9b:9a:31:16:c2:20:9a:66:d7:82:af:00: 8e:c0:bd:0f:a0:2b:a6:c2:c9:15:f8:20:7f:e8:b2: e1:43:cd:38:41:37:cf:b3:08:9e:ce:80:09:f0:7a: 04:c4:ea:b1:a9:b8:6e:ce:56:db:24:3a:d2:2f:24: 79:87:1b:f9:ab:43:cc:d1:40:ef:d5:95:a2:75:89: 87:9f:0c:c9:be:ad:82:38:c6:58:22:bf:8c:3e:b7: 42:f6:5d:4e:98:3f:8e:64:e8:84:6b:b0:27:40:09: 3e:52:fd:22:a7:6e:ad:d0:dd:57:7a:f0:e2:94:d8: fb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C9:B4:58:DC:9D:05:A8:17:C1:7A:38:F0:CD:94:5E:3F:FF:A5:F5 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0599644A1D4311F18B0A19501C3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 111.92.128.0/23 111.92.132.0/23 111.92.135.0-111.92.136.255 111.92.140.0/24 111.92.142.0-111.92.144.255 Signature Algorithm: sha256WithRSAEncryption a3:54:51:99:86:56:14:6b:3c:62:64:01:c1:45:04:4f:f8:e7: 08:ab:5b:29:5c:a3:f9:7b:92:a6:b5:a8:c6:c6:13:d1:7b:e7: 8c:8d:e8:5c:3c:1b:c3:fd:4a:bf:2a:57:0d:55:10:e5:a4:48: a5:f3:d7:53:83:0e:ee:11:be:c3:8a:bf:68:d5:43:9b:fe:2b: 78:72:71:25:c6:54:6c:af:da:dc:a2:f0:18:81:a5:5a:e0:5a: ed:83:6e:ee:bf:9d:a4:74:e2:89:89:3f:6e:72:77:8f:67:52: 03:ba:9f:cd:1e:92:36:22:c6:c1:55:a2:5f:97:d2:61:7e:51: 3d:44:f1:76:10:02:24:92:5a:2c:bb:02:a6:6a:fc:c4:3d:68: 80:3d:dd:e5:1a:51:83:a9:83:0e:ce:aa:74:90:10:e9:9d:07: 31:8b:a7:0a:9b:8a:50:3e:84:bc:af:49:ea:cf:0c:e8:ca:f7: 76:7c:c3:f1:2f:cf:90:56:31:78:a8:39:19:b2:39:fd:0a:50: d1:34:da:29:5f:df:41:29:3e:01:04:ab:93:fa:49:f9:27:e0: 11:0a:29:a7:7e:fe:3a:1d:f9:3c:fc:9a:d5:b6:8c:71:36:f6: 75:f2:b5:a2:d0:16:06:32:60:79:34:08:9a:c4:16:d4:6d:d8: 2c:52:5e:67 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgICD9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjYwMzExMTIxMjU5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWIxNWM0Yi03NTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwbnkr0YjuuP3sn1hFbohIcsWT+wHW/4C8yMOC6pw2gV2C/eAulCiC74nbs8 T8y053+U/eBMOADEStTdTTX8HvwVT/yFena7dT3U/TQcYg9NmhIZ1XLBacQX9PLb VQAvxWcrgkCnyDmK1/b5YdFD013H48e3Pp1PrKAVV2u6beouu5i66gG7fzqbmjEW wiCaZteCrwCOwL0PoCumwskV+CB/6LLhQ804QTfPswiezoAJ8HoExOqxqbhuzlbb JDrSLyR5hxv5q0PM0UDv1ZWidYmHnwzJvq2COMZYIr+MPrdC9l1OmD+OZOiEa7An QAk+Uv0ip26t0N1XevDilNj7rwIDAQABo4ICiDCCAoQwHQYDVR0OBBYEFBXJtFjc nQWoF8F6OPDNlF4//6X1MB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvMDU5OTY0NEEx RDQzMTFGMThCMEExOTUwMUMzRDhDNjcucm9hMEcGCCsGAQUFBwEHAQH/BDgwNjA0 BAIAATAuAwQBb1yAAwQBb1yEMAwDBABvXIcDBABvXIgDBABvXIwwDAMEAW9cjgME AG9ckDANBgkqhkiG9w0BAQsFAAOCAQEAo1RRmYZWFGs8YmQBwUUET/jnCKtbKVyj +XuSprWoxsYT0XvnjI3oXDwbw/1KvypXDVUQ5aRIpfPXU4MO7hG+w4q/aNVDm/4r eHJxJcZUbK/a3KLwGIGlWuBa7YNu7r+dpHTiiYk/bnJ3j2dSA7qfzR6SNiLGwVWi X5fSYX5RPUTxdhACJJJaLLsCpmr8xD1ogD3d5RpRg6mDDs6qdJAQ6Z0HMYunCpuK UD6EvK9J6s8M6Mr3dnzD8S/PkFYxeKg5GbI5/QpQ0TTaKV/fQSk+AQSrk/pJ+Sfg EQopp37+Oh35PPya1baMcTb2dfK1otAWBjJgeTQImsQW1G3YLFJeZw== -----END CERTIFICATE-----Generated at Fri Mar 13 22:11:09 2026 by rpki-client