$ rpki-client -vvf rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/9A5A24842DB011F1BFD489B0A5833773.roa File: 9A5A24842DB011F1BFD489B0A5833773.roa (raw, json) Hash identifier: XJsWHL3ugMeUbfYGNS+bzJUHfrHHR6vw3+mpKlurlZY= Subject key identifier: 54:0C:08:90:A3:5B:00:54:30:2E:2A:08:B9:5F:42:FA:2C:68:FA:F8 Certificate issuer: /CN=A9184FC8/serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858 Certificate serial: 03 Authority key identifier: 96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/9A5A24842DB011F1BFD489B0A5833773.roa Signing time: Wed 01 Apr 2026 09:53:15 +0000 ROA not before: Wed 01 Apr 2026 09:53:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150142 IP address blocks: 163.128.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:32:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184FC8, serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858 Validity Not Before: Apr 1 09:53:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69cceb0b-3779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:12:3d:4d:b0:85:18:43:6c:6a:07:36:79:a7: ec:ea:13:b0:d6:8e:cc:16:3d:db:33:d6:4d:19:4c: 90:e0:82:0c:2d:6c:c7:cd:22:02:67:6b:d0:13:e4: 72:0c:bf:67:d3:56:94:ac:f9:be:b5:db:45:95:a9: 7f:f1:4e:68:f3:b8:80:61:43:54:0e:6f:ac:6e:10: 94:50:d7:a0:a7:d7:f7:5a:5b:72:7a:98:f2:a2:85: c2:63:74:ae:12:c2:6c:29:20:7e:5f:b6:31:0d:16: 3b:68:f3:03:b6:02:25:c6:0c:69:e0:f3:75:d4:8d: 7b:d1:2e:35:bc:77:5e:dd:36:84:75:66:dd:d1:fe: df:66:3a:24:a2:ca:73:28:10:44:84:6a:8b:68:73: aa:98:5b:52:6b:99:c9:0e:67:e2:e9:25:6e:43:2d: a9:14:12:12:12:88:d2:24:aa:c3:7a:ff:33:f2:d3: cd:be:3f:95:44:c2:8f:19:4f:98:65:b8:59:f9:14: 2e:d1:39:8c:47:5c:b5:2c:95:f4:c2:38:5b:a4:6f: 89:32:5a:5b:e8:47:8e:6c:e3:db:2d:ca:ef:44:ff: f2:c6:06:4d:47:55:38:ce:11:1d:90:af:29:6c:6e: e3:68:7e:50:d1:bd:ff:f0:cb:53:84:3a:ff:52:ce: 8d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0C:08:90:A3:5B:00:54:30:2E:2A:08:B9:5F:42:FA:2C:68:FA:F8 X509v3 Authority Key Identifier: keyid:96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/9A5A24842DB011F1BFD489B0A5833773.roa sbgp-ipAddrBlock: critical IPv4: 163.128.140.0/24 Signature Algorithm: sha256WithRSAEncryption 66:c3:c6:26:26:47:96:34:83:5b:19:47:61:ea:e8:2b:b7:1c: d3:e4:07:43:4c:95:ca:ed:52:30:72:7d:b9:0a:7a:c7:64:23: ae:4c:0f:bd:1a:69:92:e0:0c:67:6f:d4:b8:d6:ae:e1:2b:24: 09:0a:e3:bb:16:0a:94:88:77:b7:f5:aa:8b:9b:b1:f8:06:43: f1:2f:0a:60:53:34:45:a6:84:d7:77:f6:9b:92:d2:93:17:f8: 5f:fc:7f:b7:44:b9:62:01:cf:d6:6a:71:5a:40:51:6c:36:23: 7a:b9:70:40:50:8c:ce:b2:27:75:ab:06:b4:4f:73:58:fa:b6: 0d:30:00:9f:40:a2:0b:f0:dc:f8:6a:6b:53:37:7c:15:97:dc: 4f:8a:e1:b5:6b:64:26:cb:10:0d:e2:08:f9:37:75:ee:33:f7: 12:d1:7f:eb:be:27:dc:00:b8:5e:12:8e:6a:81:5a:36:f3:53: 65:4e:a0:55:c9:d8:fa:b5:24:de:0c:ca:45:bb:3b:22:93:6e: ec:bf:f2:fb:ec:3f:8b:b8:7f:43:d7:28:65:0b:23:85:93:ac: 03:3f:ba:81:e5:83:c6:9f:ad:e7:9d:43:aa:51:06:9b:e1:a8: 44:fe:ce:7c:01:33:5b:c4:7b:db:26:20:96:e6:73:fd:99:b2: 7e:8e:7c:06 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NEZDODExMC8GA1UEBRMoOTY4OTdDQ0Q3MUM5QkQ0MzE1QUY4MTVBNjJGQTdBMjIy RDZENzg1ODAeFw0yNjA0MDEwOTUzMTVaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5Y2NlYjBiLTM3NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDREj1NsIUYQ2xqBzZ5p+zqE7DWjswWPdsz1k0ZTJDgggwtbMfNIgJna9AT5HIM v2fTVpSs+b6120WVqX/xTmjzuIBhQ1QOb6xuEJRQ16Cn1/daW3J6mPKihcJjdK4S wmwpIH5ftjENFjto8wO2AiXGDGng83XUjXvRLjW8d17dNoR1Zt3R/t9mOiSiynMo EESEaotoc6qYW1JrmckOZ+LpJW5DLakUEhISiNIkqsN6/zPy082+P5VEwo8ZT5hl uFn5FC7ROYxHXLUslfTCOFukb4kyWlvoR45s49styu9E//LGBk1HVTjOER2Qryls buNoflDRvf/wy1OEOv9Szo2/AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUVAwIkKNb AFQwLioIuV9C+ixo+vgwHwYDVR0jBBgwFoAUlol8zXHJvUMVr4FaYvp6Ii1teFgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0RkM4L0IzRENGMUI2MkQ5 NzExRjFCMDA3OEU1MTlEODMzNzczL2xvbDh6WEhKdlVNVnI0RmFZdnA2SWkxdGVG Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbG9sOHpYSEp2VU1WcjRGYVl2cDZJaTF0ZUZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEZDOC9CM0RDRjFCNjJEOTcxMUYxQjAwNzhFNTE5RDgzMzc3My85QTVBMjQ4NDJE QjAxMUYxQkZENDg5QjBBNTgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACjgIwwDQYJKoZIhvcNAQELBQADggEBAGbDxiYmR5Y0g1sZR2Hq6Cu3 HNPkB0NMlcrtUjByfbkKesdkI65MD70aaZLgDGdv1LjWruErJAkK47sWCpSId7f1 qoubsfgGQ/EvCmBTNEWmhNd39puS0pMX+F/8f7dEuWIBz9ZqcVpAUWw2I3q5cEBQ jM6yJ3WrBrRPc1j6tg0wAJ9Aogvw3Phqa1M3fBWX3E+K4bVrZCbLEA3iCPk3de4z 9xLRf+u+J9wAuF4SjmqBWjbzU2VOoFXJ2Pq1JN4MykW7OyKTbuy/8vvsP4u4f0PX KGULI4WTrAM/uoHlg8afreedQ6pRBpvhqET+znwBM1vEe9smIJbmc/2Zsn6OfAY= -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:41 2026 by rpki-client