$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/1BC96D8C1BA111EA8BDD6114C4F9AE02.roa File: 1BC96D8C1BA111EA8BDD6114C4F9AE02.roa (raw, json) Hash identifier: 6SdEYqt35GAORPTUCY0ttBX2ur7jio+kU7tW6jFSa6o= Subject key identifier: BF:E3:0C:E8:E3:87:91:E9:63:56:9E:B9:49:46:E5:45:25:FD:F7:56 Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Certificate serial: 13FF Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/1BC96D8C1BA111EA8BDD6114C4F9AE02.roa Signing time: Mon 02 Mar 2026 04:49:57 +0000 ROA not before: Wed 06 Aug 2025 17:26:28 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 135887 IP address blocks: 144.138.0.0/16 maxlen: 24 147.10.0.0/16 maxlen: 24 149.167.0.0/16 maxlen: 24 155.143.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 17:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5119 (0x13ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Validity Not Before: Aug 6 17:26:28 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a516f5-4b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5b:70:c1:a3:ba:03:8f:bc:25:8d:9a:a1:39: 46:31:48:27:bc:f5:58:3f:2f:f7:58:ac:a9:07:06: f8:5e:4f:b3:ac:ab:66:91:e4:16:43:0c:fc:79:28: b4:ac:48:ec:e9:fa:df:7e:dc:ea:ac:d0:18:1c:01: 7e:48:14:e7:9a:33:44:5e:e5:85:3a:7d:f2:2f:e7: f2:f3:1d:50:07:9a:7a:f6:bc:7f:61:72:49:88:88: b3:f4:b6:8d:c3:89:cb:60:09:4c:a5:79:f4:e1:b7: 3c:37:83:8c:b6:b2:cd:29:2b:2d:ab:82:a6:3b:ec: 4b:dc:53:6a:e7:11:c5:7f:d1:3c:f3:ce:5e:3a:ce: 09:5a:f5:ca:9a:9c:41:7b:eb:81:0c:5e:c9:23:df: 31:84:bc:84:62:f5:3d:7c:34:0c:f7:35:10:a0:6b: 70:e7:70:2d:b6:8e:80:e3:e8:58:41:3c:c0:38:47: 9d:83:21:d9:48:3c:e4:23:83:7c:e3:5b:cb:28:89: ba:51:90:3d:3d:44:c9:75:be:38:31:e7:37:a4:42: 19:30:2a:31:27:06:a2:20:62:4d:47:7e:ff:ba:b1: d5:c7:55:b6:53:2e:2c:db:f5:bf:dc:36:51:60:da: e6:7c:ff:4d:98:6b:96:07:ae:bb:f0:09:0e:6d:81: d1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E3:0C:E8:E3:87:91:E9:63:56:9E:B9:49:46:E5:45:25:FD:F7:56 X509v3 Authority Key Identifier: keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/1BC96D8C1BA111EA8BDD6114C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 144.138.0.0/16 147.10.0.0/16 149.167.0.0/16 155.143.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0a:c5:93:f5:cd:b5:f1:d5:98:08:f0:49:d5:01:2f:53:6f:0d: ad:0e:6c:d0:f5:56:5a:b5:49:d2:04:7a:d0:29:29:94:38:bd: c8:ee:83:bf:be:9b:e7:fb:ac:6a:d9:0b:f8:c0:65:04:87:6c: 8e:a9:23:e3:4f:da:95:2d:b7:8f:d5:18:70:18:fb:e5:ee:cf: d1:88:ee:1d:d7:0a:fb:d5:06:c4:af:28:63:60:1d:87:7f:47: 98:5a:9b:e7:02:a0:6f:b1:3a:40:65:e2:05:fa:69:58:25:48: bd:3e:6e:05:5c:6c:a5:e9:05:3f:15:ce:b2:92:5a:4f:f8:57: 93:29:ea:0b:c7:b6:82:d0:d2:da:39:75:e9:ee:5e:6a:2c:3e: ec:1c:cd:61:c3:8b:c7:23:af:dc:9b:c9:df:c6:e3:79:c8:29: 48:ad:a6:4b:28:4b:19:9c:9a:9c:28:6b:be:cb:92:ea:da:dd: d1:44:78:d6:93:33:21:b1:a0:ae:f2:e6:1b:fd:bf:74:cf:22: 07:4a:7f:2e:5e:1d:ad:05:06:37:1e:e1:42:9f:d3:0e:cb:b2: 53:33:c3:d8:38:3e:c2:fd:ad:99:90:de:8f:00:98:66:61:de: 37:05:81:29:b7:2f:ef:21:d6:f8:67:bb:07:06:7a:00:11:e3: 12:e3:66:f4 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICE/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDg4RDg3QjEwMkY1QzI3NzFDMzY3MDY0RTIwNDlCNjhB OTAzQzcxQjUwHhcNMjUwODA2MTcyNjI4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MTZmNS00YjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApltwwaO6A4+8JY2aoTlGMUgnvPVYPy/3WKypBwb4Xk+zrKtmkeQWQwz8eSi0 rEjs6frfftzqrNAYHAF+SBTnmjNEXuWFOn3yL+fy8x1QB5p69rx/YXJJiIiz9LaN w4nLYAlMpXn04bc8N4OMtrLNKSstq4KmO+xL3FNq5xHFf9E8885eOs4JWvXKmpxB e+uBDF7JI98xhLyEYvU9fDQM9zUQoGtw53Atto6A4+hYQTzAOEedgyHZSDzkI4N8 41vLKIm6UZA9PUTJdb44Mec3pEIZMCoxJwaiIGJNR37/urHVx1W2Uy4s2/W/3DZR YNrmfP9NmGuWB6678AkObYHRUQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFL/jDOjj h5HpY1aeuUlG5UUl/fdWMB8GA1UdIwQYMBaAFIjYexAvXCdxw2cGTiBJtoqQPHG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8wRTA4MkU3MkNE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0ozSERad1pPSUVtMmlwQThj YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lOaDdFQzljSjNIRFp3Wk9JRW0yaXBBOGNiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkE5ODMvMEUwODJFNzJDRDBGMTFFODlEOUZGMTY1QzRGOUFFMDIvMUJDOTZEOEMx QkExMTFFQThCREQ2MTE0QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwMAkIoDAwCTCgMDAJWnAwMAm48wDQYJKoZIhvcNAQELBQADggEBAArF k/XNtfHVmAjwSdUBL1NvDa0ObND1Vlq1SdIEetApKZQ4vcjug7++m+f7rGrZC/jA ZQSHbI6pI+NP2pUtt4/VGHAY++Xuz9GI7h3XCvvVBsSvKGNgHYd/R5ham+cCoG+x OkBl4gX6aVglSL0+bgVcbKXpBT8VzrKSWk/4V5Mp6gvHtoLQ0to5denuXmosPuwc zWHDi8cjr9ybyd/G43nIKUitpksoSxmcmpwoa77Lkura3dFEeNaTMyGxoK7y5hv9 v3TPIgdKfy5eHa0FBjce4UKf0w7LslMzw9g4PsL9rZmQ3o8AmGZh3jcFgSm3L+8h 1vhnuwcGegAR4xLjZvQ= -----END CERTIFICATE-----Generated at Wed Mar 4 09:49:25 2026 by rpki-client