$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/368F5308A27311EFA8731822C4F9AE02.roa File: 368F5308A27311EFA8731822C4F9AE02.roa (raw, json) Hash identifier: KBf8JxajMdMMi2+GI03db8VLySuC8cD1rgByqAKzBds= Subject key identifier: 94:68:18:79:9A:8D:B3:9F:17:49:D5:D3:11:81:25:4B:71:93:05:C4 Certificate issuer: /CN=A9185D6E/serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E Certificate serial: 0622 Authority key identifier: 95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/368F5308A27311EFA8731822C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:49:31 +0000 ROA not before: Thu 02 Oct 2025 23:24:34 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 14618 IP address blocks: 104.161.192.0/20 maxlen: 24 104.161.208.0/20 maxlen: 24 161.32.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 22:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1570 (0x622) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D6E, serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E Validity Not Before: Oct 2 23:24:34 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a46e1b-f867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:79:7e:7d:88:dc:76:7f:bf:dc:e0:cd:f6:e5: 1b:e7:9c:9a:14:8d:a7:1a:5e:96:51:f6:f1:b8:17: d4:ac:f1:b9:b6:2e:bc:3d:f3:de:c1:ef:d0:d4:80: aa:fb:4b:0e:72:41:75:e3:3e:4e:c0:46:53:0f:84: 3d:ef:cd:2d:48:29:48:0d:0d:f6:2b:e5:de:8d:b3: 49:b7:65:ab:f9:68:20:d3:bc:d1:9c:43:d8:fd:a9: f1:cf:3d:3d:d5:b0:d1:2d:67:eb:2d:ef:2b:c8:cd: d0:2b:ce:57:09:8b:92:69:6f:80:e1:c8:d3:59:21: 89:05:cb:72:54:84:24:72:a0:51:3f:dc:cc:59:ed: 4b:88:8d:d1:42:73:0b:3d:4d:16:03:cb:52:0d:1a: b6:ef:34:b9:70:b2:44:77:24:b9:8d:ff:95:bf:fb: 4e:07:de:50:88:8e:5c:d5:4e:44:57:cc:2f:37:57: c3:3a:58:5f:95:b0:64:b7:41:98:64:b1:4e:33:d2: 42:2b:4b:0c:e0:57:a5:44:b2:bf:72:d0:62:aa:39: d9:ee:4a:f4:48:39:eb:50:a4:2a:42:fa:5d:7b:cc: 08:9c:ee:1b:77:e5:db:a5:84:da:f3:9f:c7:21:e9: 79:60:0a:02:5d:ca:ce:24:f4:0c:2e:10:de:8b:4c: 2f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:68:18:79:9A:8D:B3:9F:17:49:D5:D3:11:81:25:4B:71:93:05:C4 X509v3 Authority Key Identifier: keyid:95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/368F5308A27311EFA8731822C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 104.161.192.0/19 161.32.64.0/20 Signature Algorithm: sha256WithRSAEncryption 0b:ae:b3:df:ed:3c:92:fa:01:11:02:c7:23:e6:66:56:0e:84: ce:87:dc:ba:c0:d9:11:4f:60:71:6d:3b:e7:ba:19:04:17:db: 7e:31:9a:8b:49:22:65:03:88:8e:e5:7b:04:d3:da:55:4a:9d: 2d:4e:b1:8a:b7:b4:99:28:fa:50:2e:ac:67:ec:b5:e0:69:6d: 8d:24:ee:f6:b2:e7:d3:7c:1b:33:2f:7c:98:dc:24:1a:2f:48: e9:2e:82:31:3d:3e:15:2f:5c:a3:2d:26:b1:70:54:93:d4:a5: 9b:37:d3:56:8e:01:d0:4b:35:75:b2:e9:6d:ae:d7:47:1d:45: b1:d1:82:60:57:cd:37:5b:e3:55:34:f9:b5:d0:13:e6:bf:01: 2a:d5:42:5b:06:45:40:5b:1f:ca:fb:07:ba:d2:10:b8:c6:cd: ae:f1:b7:f8:6d:78:13:00:c7:74:f8:c6:f1:e9:68:38:13:32: ae:46:d5:ed:fe:35:b9:ed:b5:ce:de:25:0b:12:e6:a1:02:9c: 49:1e:fa:56:79:17:90:41:72:51:74:bc:a6:69:65:00:20:ed: 29:f6:dc:2b:6e:7b:e3:cd:54:47:51:84:60:f5:2f:00:3e:82: 0a:e8:39:b7:09:ed:1e:08:d1:e4:e6:54:78:66:56:c1:17:68: 3c:9f:cd:e0 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENkUxMTAvBgNVBAUTKDk1MjRFQTlCODIzQzIwRkE3ODkyM0JFNjY2N0UxNEY2 QzRDM0I0N0UwHhcNMjUxMDAyMjMyNDM0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmUxYi1mODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3l+fYjcdn+/3ODN9uUb55yaFI2nGl6WUfbxuBfUrPG5ti68PfPewe/Q1ICq +0sOckF14z5OwEZTD4Q9780tSClIDQ32K+XejbNJt2Wr+Wgg07zRnEPY/anxzz09 1bDRLWfrLe8ryM3QK85XCYuSaW+A4cjTWSGJBctyVIQkcqBRP9zMWe1LiI3RQnML PU0WA8tSDRq27zS5cLJEdyS5jf+Vv/tOB95QiI5c1U5EV8wvN1fDOlhflbBkt0GY ZLFOM9JCK0sM4FelRLK/ctBiqjnZ7kr0SDnrUKQqQvpde8wInO4bd+XbpYTa85/H Iel5YAoCXcrOJPQMLhDei0wvXQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJRoGHma jbOfF0nV0xGBJUtxkwXEMB8GA1UdIwQYMBaAFJUk6puCPCD6eJI75mZ+FPbEw7R+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS80Q0JGRjRBRURG RjExMUVCODk0RjMwNjdDNEY5QUUwMi9sU1RxbTRJOElQcDRranZtWm40VTlzVER0 SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xTVHFtNEk4SVBwNGtqdm1abjRVOXNURHRINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODVENkUvNENCRkY0QUVERkYxMTFFQjg5NEYzMDY3QzRGOUFFMDIvMzY4RjUzMDhB MjczMTFFRkE4NzMxODIyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQFaKHAAwQEoSBAMA0GCSqGSIb3DQEBCwUAA4IBAQALrrPf7TyS+gER Ascj5mZWDoTOh9y6wNkRT2BxbTvnuhkEF9t+MZqLSSJlA4iO5XsE09pVSp0tTrGK t7SZKPpQLqxn7LXgaW2NJO72sufTfBszL3yY3CQaL0jpLoIxPT4VL1yjLSaxcFST 1KWbN9NWjgHQSzV1sultrtdHHUWx0YJgV803W+NVNPm10BPmvwEq1UJbBkVAWx/K +we60hC4xs2u8bf4bXgTAMd0+Mbx6Wg4EzKuRtXt/jW57bXO3iULEuahApxJHvpW eReQQXJRdLymaWUAIO0p9twrbnvjzVRHUYRg9S8APoIK6Dm3Ce0eCNHk5lR4ZlbB F2g8n83g -----END CERTIFICATE-----Generated at Fri Mar 13 22:18:59 2026 by rpki-client