$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/AD35E5023B2F11F1A4C73024AD833773.roa File: AD35E5023B2F11F1A4C73024AD833773.roa (raw, json) Hash identifier: lyTKbKvxoL/cLSR2bX4t85NaPeWThldC+RCGxWFHVvk= Subject key identifier: 5D:54:58:E8:A4:4E:A4:F8:8E:EE:F8:A8:CF:35:E4:10:FB:4E:45:26 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 1042 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/AD35E5023B2F11F1A4C73024AD833773.roa Signing time: Mon 20 Apr 2026 18:18:54 +0000 ROA not before: Mon 20 Apr 2026 18:18:54 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 132165 IP address blocks: 14.192.129.0/24 maxlen: 24 14.192.154.0/24 maxlen: 24 14.192.155.0/24 maxlen: 24 111.92.128.0/24 maxlen: 24 111.92.129.0/24 maxlen: 24 111.92.130.0/24 maxlen: 24 111.92.131.0/24 maxlen: 24 111.92.132.0/24 maxlen: 24 111.92.133.0/24 maxlen: 24 111.92.134.0/24 maxlen: 24 111.92.135.0/24 maxlen: 24 111.92.136.0/24 maxlen: 24 111.92.137.0/24 maxlen: 24 111.92.138.0/24 maxlen: 24 111.92.139.0/24 maxlen: 24 111.92.140.0/24 maxlen: 24 111.92.141.0/24 maxlen: 24 111.92.142.0/24 maxlen: 24 111.92.143.0/24 maxlen: 24 111.92.144.0/24 maxlen: 24 111.92.145.0/24 maxlen: 24 111.92.149.0/24 maxlen: 24 111.92.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 19:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4162 (0x1042) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Apr 20 18:18:54 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69e66e0e-8aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:de:b4:07:52:85:80:37:47:f1:67:7a:da:5d: d9:93:48:f7:2f:61:3e:ae:08:da:8f:0a:93:6f:8d: 3d:1b:a6:0c:a4:31:66:50:a1:7e:f4:90:95:5b:e5: 1d:40:b6:83:d2:ab:16:6d:71:31:bc:2a:6b:3c:5d: fd:b8:7c:27:3d:28:26:2b:de:30:e4:02:0e:b1:5c: 86:27:8d:3f:99:c5:c0:5f:72:49:00:48:a6:bc:58: e7:72:b9:b0:6e:87:b3:2f:d9:a0:bd:37:df:55:ee: e4:1b:14:f0:fc:4d:c4:40:08:60:16:77:00:8b:0f: dd:8f:a7:c1:cf:ad:9e:7f:8a:0c:d8:3e:c5:a3:88: bf:ad:ed:39:b6:57:42:88:c1:d4:5b:88:4d:b5:dd: 50:ee:07:c4:f4:c6:b9:7a:2a:14:5d:47:fd:85:f9: 2a:ae:4b:78:a1:fb:8e:56:dc:a9:a3:36:30:70:d7: d7:c2:6a:d7:6a:cd:0c:d9:dc:01:c6:f3:36:77:1f: 1d:85:d4:21:0f:fb:50:47:8e:a1:ec:c9:c4:3c:68: 12:f2:b6:f0:72:4b:9d:ff:ed:43:9d:82:28:32:80: 76:22:46:0c:e9:f9:e8:48:11:98:3a:8e:75:89:82: 5f:03:f2:34:64:03:df:2a:b8:8c:1e:32:1a:5b:20: f2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:54:58:E8:A4:4E:A4:F8:8E:EE:F8:A8:CF:35:E4:10:FB:4E:45:26 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/AD35E5023B2F11F1A4C73024AD833773.roa sbgp-ipAddrBlock: critical IPv4: 14.192.129.0/24 14.192.154.0/23 111.92.128.0-111.92.145.255 111.92.149.0-111.92.150.255 Signature Algorithm: sha256WithRSAEncryption 28:d1:28:29:64:04:23:c7:d2:34:58:18:21:e2:c0:f6:d1:89: 30:ee:54:e6:4b:18:72:ed:38:5d:19:9b:1f:ef:56:59:65:c1: 03:5d:10:8c:ed:e8:6f:3b:25:b0:6b:95:e1:04:27:97:91:4e: 3d:ec:9e:44:ab:bd:f8:4a:99:37:27:15:4b:6f:4c:a7:10:6f: e1:6d:91:67:11:ec:3b:df:03:f8:4d:fd:21:52:6f:c4:95:9e: 78:7f:a0:fa:e9:aa:dc:e8:b1:ed:40:d5:0b:15:9d:da:ee:bb: 27:49:d2:6b:a0:9e:f9:73:58:ee:90:b1:d7:60:df:d1:e4:3a: 6d:3d:cc:3f:0c:78:d2:66:dc:99:0b:bb:cb:1d:01:d6:33:59: 9c:d4:36:01:13:8a:95:70:a4:98:7b:d9:11:c2:9d:b3:67:ec: 82:92:cd:3e:08:0f:da:9d:d0:3e:f1:a9:cb:21:81:fe:f2:ef: e5:7c:28:5f:df:75:95:cc:0f:9b:b2:71:32:a2:0a:40:48:ae: 4d:b3:1e:ab:96:37:fd:20:b6:56:eb:81:1f:4e:2b:74:df:e7: 7e:47:8b:71:7c:6f:6a:2a:65:79:3b:43:1e:0f:f0:05:f6:16: d2:70:b1:a6:e1:52:06:21:1c:50:70:ef:1c:3e:e0:76:aa:26: 2e:8d:55:bb -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICEEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjYwNDIwMTgxODU0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWU2NmUwZS04YWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtN60B1KFgDdH8Wd62l3Zk0j3L2E+rgjajwqTb409G6YMpDFmUKF+9JCVW+Ud QLaD0qsWbXExvCprPF39uHwnPSgmK94w5AIOsVyGJ40/mcXAX3JJAEimvFjncrmw boezL9mgvTffVe7kGxTw/E3EQAhgFncAiw/dj6fBz62ef4oM2D7Fo4i/re05tldC iMHUW4hNtd1Q7gfE9Ma5eioUXUf9hfkqrkt4ofuOVtypozYwcNfXwmrXas0M2dwB xvM2dx8dhdQhD/tQR46h7MnEPGgS8rbwckud/+1DnYIoMoB2IkYM6fnoSBGYOo51 iYJfA/I0ZAPfKriMHjIaWyDyAwIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFF1UWOik TqT4ju74qM815BD7TkUmMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvQUQzNUU1MDIz QjJGMTFGMUE0QzczMDI0QUQ4MzM3NzMucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAu BAIAATAoAwQADsCBAwQBDsCaMAwDBAdvXIADBAFvXJAwDAMEAG9clQMEAG9cljAN BgkqhkiG9w0BAQsFAAOCAQEAKNEoKWQEI8fSNFgYIeLA9tGJMO5U5ksYcu04XRmb H+9WWWXBA10QjO3obzslsGuV4QQnl5FOPeyeRKu9+EqZNycVS29MpxBv4W2RZxHs O98D+E39IVJvxJWeeH+g+umq3Oix7UDVCxWd2u67J0nSa6Ce+XNY7pCx12Df0eQ6 bT3MPwx40mbcmQu7yx0B1jNZnNQ2AROKlXCkmHvZEcKds2fsgpLNPggP2p3QPvGp yyGB/vLv5XwoX991lcwPm7JxMqIKQEiuTbMeq5Y3/SC2VuuBH04rdN/nfkeLcXxv aipleTtDHg/wBfYW0nCxpuFSBiEcUHDvHD7gdqomLo1Vuw== -----END CERTIFICATE-----Generated at Tue Apr 28 05:24:17 2026 by rpki-client