$ rpki-client -vvf rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/4B65B208288F11EFB3C88742C4F9AE02.roa File: 4B65B208288F11EFB3C88742C4F9AE02.roa (raw, json) Hash identifier: e8QtZE9yszuYCxHhJN7AlKtSnjkZn1yLygAtwcSvRbk= Subject key identifier: C8:CE:26:BF:0F:95:0D:4F:57:78:2A:F4:33:63:78:3A:8C:A8:4A:AD Certificate issuer: /CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF Certificate serial: 296E Authority key identifier: 1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/4B65B208288F11EFB3C88742C4F9AE02.roa Signing time: Thu 26 Mar 2026 16:18:26 +0000 ROA not before: Thu 26 Mar 2026 16:18:26 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 17770 IP address blocks: 182.161.0.0/19 maxlen: 19 202.124.160.0/21 maxlen: 21 2402:4000:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10606 (0x296e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A447, serialNumber=1F68258C526C5DBC715434357D380020146440EF Validity Not Before: Mar 26 16:18:26 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69c55c52-ce78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2e:d9:33:fd:9d:9d:f3:c9:43:64:8a:e0:9e: 69:08:5c:46:a8:22:0b:ad:86:91:70:41:c8:7c:77: 5f:fb:a3:71:ae:c7:fc:0c:8f:4e:69:c1:db:26:3f: a7:51:fd:38:cd:88:08:b6:82:24:34:d1:5e:c0:21: b1:51:29:1c:68:83:58:2e:0d:b6:ac:ea:71:e1:03: a0:9c:a6:31:da:50:ae:b8:7b:cf:5b:83:33:6a:39: 13:21:66:58:4b:c2:31:71:2e:ed:b2:81:4f:70:4a: 43:ab:5a:0e:33:c5:cf:94:ac:6c:1e:8f:5f:0c:70: fb:58:f8:4c:da:75:6a:d5:a1:6f:1a:a6:95:d0:54: 2f:2e:3a:f7:c4:0d:62:5a:a8:cd:7a:52:3a:75:fe: 87:69:ef:d0:3e:15:06:91:02:91:a1:32:93:83:75: 7c:a3:55:41:60:35:46:c1:42:6b:cd:45:5c:24:26: d5:42:91:0f:88:61:d7:2a:56:c6:da:08:52:90:0c: 7c:3d:c3:06:e3:e5:6e:75:83:f6:1b:cd:b0:f6:6b: 2a:a0:b9:7c:08:0e:0c:6f:71:0d:17:1b:7a:63:17: 32:ec:24:48:43:11:e1:f2:3b:94:e0:91:3b:55:93: 96:0c:49:a9:e9:42:e4:ca:88:91:71:20:01:a4:94: ce:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CE:26:BF:0F:95:0D:4F:57:78:2A:F4:33:63:78:3A:8C:A8:4A:AD X509v3 Authority Key Identifier: keyid:1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/4B65B208288F11EFB3C88742C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 182.161.0.0/19 202.124.160.0/21 IPv6: 2402:4000:f000::/36 Signature Algorithm: sha256WithRSAEncryption 45:d5:aa:c5:38:44:42:7f:ac:b4:b9:06:97:38:d6:d9:57:00: 4d:f9:f3:79:62:cb:f2:7e:77:40:e0:c2:a6:4f:3e:be:79:f9: d9:67:dd:7e:e5:fa:bf:c7:04:4b:8c:91:01:8a:ab:f2:70:32: 54:c2:a7:51:42:ab:03:4d:91:96:37:8b:4e:0d:3e:94:86:44: de:20:90:d7:78:63:e2:c7:9e:3c:20:26:ee:28:a2:0a:97:b7: 07:28:b9:17:70:16:fa:80:e3:d9:a3:ec:09:08:90:07:c3:18: ed:26:17:46:2e:4d:c5:27:60:26:0c:13:ed:ac:4c:aa:80:2f: 7f:d9:63:0d:3d:d0:0d:48:a1:f9:2f:a1:b8:30:40:9a:04:04: c4:24:55:a6:7d:80:e7:30:6f:62:a9:b6:05:52:c1:85:c2:ce: 5b:73:2a:f7:05:2d:b1:1c:03:53:4f:16:d7:b6:05:27:45:a0: ca:ad:80:dc:1c:d1:e6:9e:90:49:89:8b:9b:b4:a3:e7:a4:d9: b0:13:5e:70:0d:4b:8b:f9:58:02:9b:01:f8:69:9c:cd:16:28: 54:29:c9:d4:ea:47:2a:80:a9:9a:0d:85:29:09:d7:38:fe:1e: fc:73:71:e7:0c:4c:24:30:f9:5d:cd:d1:bb:89:9a:ed:f5:cd: dc:ec:de:f2 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgICKW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE0NDcxMTAvBgNVBAUTKDFGNjgyNThDNTI2QzVEQkM3MTU0MzQzNTdEMzgwMDIw MTQ2NDQwRUYwHhcNMjYwMzI2MTYxODI2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWM1NWM1Mi1jZTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAri7ZM/2dnfPJQ2SK4J5pCFxGqCILrYaRcEHIfHdf+6Nxrsf8DI9OacHbJj+n Uf04zYgItoIkNNFewCGxUSkcaINYLg22rOpx4QOgnKYx2lCuuHvPW4MzajkTIWZY S8IxcS7tsoFPcEpDq1oOM8XPlKxsHo9fDHD7WPhM2nVq1aFvGqaV0FQvLjr3xA1i WqjNelI6df6Hae/QPhUGkQKRoTKTg3V8o1VBYDVGwUJrzUVcJCbVQpEPiGHXKlbG 2ghSkAx8PcMG4+VudYP2G82w9msqoLl8CA4Mb3ENFxt6Yxcy7CRIQxHh8juU4JE7 VZOWDEmp6ULkyoiRcSABpJTOVQIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFMjOJr8P lQ1PV3gq9DNjeDqMqEqtMB8GA1UdIwQYMBaAFB9oJYxSbF28cVQ0NX04ACAUZEDv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTQ0Ny9EMjA3NTgxNEEw OUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hieHhWRFExZlRnQUlCUmtR TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyZ2xqRkpzWGJ4eFZEUTFmVGdBSUJSa1FPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkE0NDcvRDIwNzU4MTRBMDlDMTFFNEI1MEU3QjE1QzRGOUFFMDIvNEI2NUIyMDgy ODhGMTFFRkIzQzg4NzQyQzRGOUFFMDIucm9hMDUGCCsGAQUFBwEHAQH/BCYwJDAS BAIAATAMAwQFtqEAAwQDynygMA4EAgACMAgDBgQkAkAA8DANBgkqhkiG9w0BAQsF AAOCAQEARdWqxThEQn+stLkGlzjW2VcATfnzeWLL8n53QODCpk8+vnn52WfdfuX6 v8cES4yRAYqr8nAyVMKnUUKrA02RljeLTg0+lIZE3iCQ13hj4seePCAm7iiiCpe3 Byi5F3AW+oDj2aPsCQiQB8MY7SYXRi5NxSdgJgwT7axMqoAvf9ljDT3QDUih+S+h uDBAmgQExCRVpn2A5zBvYqm2BVLBhcLOW3Mq9wUtsRwDU08W17YFJ0Wgyq2A3BzR 5p6QSYmLm7Sj56TZsBNecA1Li/lYApsB+GmczRYoVCnJ1OpHKoCpmg2FKQnXOP4e /HNx5wxMJDD5Xc3Ru4ma7fXN3Oze8g== -----END CERTIFICATE-----Generated at Mon Apr 6 10:11:35 2026 by rpki-client