$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/237CE7561D4411F1A90872121D3D8C67.roa File: 237CE7561D4411F1A90872121D3D8C67.roa (raw, json) Hash identifier: rmCWk4bZ87JqR3ZKHH3q+v2F4yseBMj3hUE3girQZS8= Subject key identifier: 2C:0D:CD:C4:CF:3F:D3:5A:45:84:83:40:9C:FF:37:2A:B1:C6:9D:FD Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0FD7 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/237CE7561D4411F1A90872121D3D8C67.roa Signing time: Wed 11 Mar 2026 12:16:32 +0000 ROA not before: Wed 11 Mar 2026 12:16:32 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38584 IP address blocks: 111.92.128.0/24 maxlen: 24 111.92.129.0/24 maxlen: 24 111.92.132.0/24 maxlen: 24 111.92.133.0/24 maxlen: 24 111.92.135.0/24 maxlen: 24 111.92.136.0/24 maxlen: 24 111.92.140.0/24 maxlen: 24 111.92.142.0/24 maxlen: 24 111.92.143.0/24 maxlen: 24 111.92.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4055 (0xfd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Mar 11 12:16:32 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69b15d1f-8356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:57:fa:38:ea:85:9e:2d:4f:4a:c6:11:91:f5: 60:3d:a9:3a:3e:2a:c5:b4:f5:22:a9:05:2c:9e:b0: f3:59:a6:79:d6:4b:66:96:9e:07:ec:ed:94:89:3e: ad:54:3f:be:04:de:ea:00:cf:54:c6:6e:d5:3b:4b: be:f5:ae:2f:8c:01:3e:2c:bc:1d:5f:52:5b:33:dc: ed:a1:1b:93:c7:1b:f9:14:44:37:c9:5e:f9:38:c8: 43:fb:89:2c:b5:63:06:e2:84:26:a2:1f:ce:8a:67: b6:ad:84:5b:c3:a1:be:13:77:2e:53:a4:26:4a:0a: 20:05:7f:76:2b:0f:8f:56:a5:5b:c6:d3:45:96:f8: b8:26:63:1d:30:45:97:88:37:3d:cc:44:7a:f4:20: ad:5e:75:84:47:c1:e5:be:af:94:27:ca:9b:28:43: 4b:e9:43:2e:88:b3:ef:25:ec:e9:2b:7b:e4:fd:b4: 97:25:d7:44:63:16:d6:ed:b6:77:1f:e0:2d:b1:31: a7:de:ce:09:17:45:d6:56:75:8c:31:34:2a:07:d9: f6:c5:e2:5f:02:9b:45:9f:c5:e8:2f:0f:c0:36:0f: 70:10:25:a5:b8:07:0f:fc:32:ee:7e:1a:c7:45:ba: 85:57:0f:be:96:df:0e:73:91:10:06:54:80:11:29: 52:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0D:CD:C4:CF:3F:D3:5A:45:84:83:40:9C:FF:37:2A:B1:C6:9D:FD X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/237CE7561D4411F1A90872121D3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 111.92.128.0/23 111.92.132.0/23 111.92.135.0-111.92.136.255 111.92.140.0/24 111.92.142.0-111.92.144.255 Signature Algorithm: sha256WithRSAEncryption 6c:b7:9f:55:b3:5d:3f:d3:f1:6a:97:2a:41:94:82:1a:a3:4d: 14:d6:1e:bb:87:df:9f:fd:ca:f4:76:e3:2a:fb:13:21:98:6f: c6:46:ba:13:14:9b:f7:53:58:d3:07:26:ff:a7:23:b9:f4:b1: 05:f2:a5:d6:e0:e3:d3:2d:58:b5:bb:6f:a0:3a:76:50:ac:f7: ba:c4:29:7d:d8:7e:b8:1a:2c:f8:20:c9:35:1c:7a:c1:f2:2a: 83:8b:18:b9:9f:29:2d:b0:3c:33:9f:48:9d:fc:23:9e:e3:38: 26:db:3f:d6:2f:48:17:f0:55:ec:3a:d0:44:54:4d:a6:1b:b0: a7:26:c5:db:db:63:f4:21:eb:7e:dd:c1:cf:d6:97:9e:c1:67: 4f:90:d6:79:3e:a1:30:63:1b:1b:8c:cc:d2:83:4b:91:b1:8a: 10:bc:e0:36:b5:5d:55:cc:e2:04:5a:12:dc:71:6a:ee:6e:32: 3f:95:9d:a8:ca:8a:fe:90:76:27:a4:92:0d:8f:b5:c3:1a:68: 42:16:45:ec:d6:e6:2f:0f:75:d9:2e:06:12:87:9e:fb:9b:6c: 1d:b6:6b:a4:a3:da:c2:f6:3a:d6:83:30:71:d7:74:ec:b8:83: 2b:97:77:38:86:42:cf:8b:56:85:63:e9:9e:cb:87:51:06:3c: 13:1a:e3:a3 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgICD9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjYwMzExMTIxNjMyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWIxNWQxZi04MzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlf6OOqFni1PSsYRkfVgPak6PirFtPUiqQUsnrDzWaZ51ktmlp4H7O2UiT6t VD++BN7qAM9Uxm7VO0u+9a4vjAE+LLwdX1JbM9ztoRuTxxv5FEQ3yV75OMhD+4ks tWMG4oQmoh/Oime2rYRbw6G+E3cuU6QmSgogBX92Kw+PVqVbxtNFlvi4JmMdMEWX iDc9zER69CCtXnWER8Hlvq+UJ8qbKENL6UMuiLPvJezpK3vk/bSXJddEYxbW7bZ3 H+AtsTGn3s4JF0XWVnWMMTQqB9n2xeJfAptFn8XoLw/ANg9wECWluAcP/DLufhrH RbqFVw++lt8Oc5EQBlSAESlS2wIDAQABo4ICiDCCAoQwHQYDVR0OBBYEFCwNzcTP P9NaRYSDQJz/Nyqxxp39MB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvMjM3Q0U3NTYx RDQ0MTFGMUE5MDg3MjEyMUQzRDhDNjcucm9hMEcGCCsGAQUFBwEHAQH/BDgwNjA0 BAIAATAuAwQBb1yAAwQBb1yEMAwDBABvXIcDBABvXIgDBABvXIwwDAMEAW9cjgME AG9ckDANBgkqhkiG9w0BAQsFAAOCAQEAbLefVbNdP9PxapcqQZSCGqNNFNYeu4ff n/3K9HbjKvsTIZhvxka6ExSb91NY0wcm/6cjufSxBfKl1uDj0y1YtbtvoDp2UKz3 usQpfdh+uBos+CDJNRx6wfIqg4sYuZ8pLbA8M59InfwjnuM4Jts/1i9IF/BV7DrQ RFRNphuwpybF29tj9CHrft3Bz9aXnsFnT5DWeT6hMGMbG4zM0oNLkbGKELzgNrVd VcziBFoS3HFq7m4yP5WdqMqK/pB2J6SSDY+1wxpoQhZF7NbmLw912S4GEoee+5ts HbZrpKPawvY61oMwcdd07LiDK5d3OIZCz4tWhWPpnsuHUQY8Exrjow== -----END CERTIFICATE-----Generated at Fri Mar 13 22:12:07 2026 by rpki-client