$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/DC25591636C011F0A9DAF53EC4F9AE02.roa File: DC25591636C011F0A9DAF53EC4F9AE02.roa (raw, json) Hash identifier: nqbQIgrhmeL5wj3GGG2dipmCVF4BUOr4+zNFb87qa/A= Subject key identifier: 1D:33:DC:AA:B3:8A:FE:72:CD:52:19:FB:92:8F:2B:6A:36:5C:8D:35 Certificate issuer: /CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Certificate serial: 0BC9 Authority key identifier: D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/DC25591636C011F0A9DAF53EC4F9AE02.roa Signing time: Mon 26 Oct 2026 09:28:19 +0000 ROA not before: Mon 26 Oct 2026 09:28:19 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 24337 IP address blocks: 185.126.144.0/22 maxlen: 22 185.126.144.0/24 maxlen: 24 185.126.145.0/24 maxlen: 24 185.126.146.0/24 maxlen: 24 185.126.147.0/24 maxlen: 24 185.129.140.0/22 maxlen: 22 185.129.140.0/24 maxlen: 24 185.129.141.0/24 maxlen: 24 185.129.142.0/24 maxlen: 24 185.129.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3017 (0xbc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123E38, serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Validity Not Before: Oct 26 09:28:19 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6adf1d33-b66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d0:0f:ac:34:78:a3:b3:46:6e:43:a7:8a:b6: ed:aa:8b:17:c3:67:95:ab:03:c2:fc:49:60:9c:a7: f9:60:76:cb:c7:c5:f8:ec:ad:23:8c:1c:fa:da:8f: e1:cf:f4:87:92:f0:58:c3:d9:8c:bf:46:df:71:76: 3f:c2:70:0e:9e:d5:fb:8e:3a:03:da:12:91:11:61: 95:4a:90:e3:9f:5f:c9:55:a5:c5:67:48:7d:23:31: f2:a6:a3:8f:b9:e3:0a:1d:f3:14:c5:8e:4b:f0:f6: df:cf:be:3a:e0:9e:81:fa:04:47:3e:23:a6:ea:6b: 6d:6b:b1:11:92:5d:a8:be:d2:56:7e:99:b7:f5:57: ac:9f:b4:d4:a1:11:80:d7:7b:22:a0:0d:f4:b6:12: 23:eb:ea:37:0e:4d:83:46:95:c5:cf:de:b9:cc:ed: a0:86:cf:75:e7:d0:73:db:86:78:78:52:36:0c:58: d0:0e:98:2f:64:f8:f0:fb:15:ad:da:fb:80:6e:43: 76:4f:16:ce:2d:b1:2b:b6:87:b0:e5:34:59:ba:d9: 7a:b6:64:dd:25:6c:56:c7:1f:82:d4:16:fb:dd:62: 61:3e:09:b6:ba:fc:ea:c3:5b:52:e8:c3:9a:f7:26: 59:63:ee:39:72:9d:cd:3a:db:1b:9b:9e:82:aa:e8: 4d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:33:DC:AA:B3:8A:FE:72:CD:52:19:FB:92:8F:2B:6A:36:5C:8D:35 X509v3 Authority Key Identifier: keyid:D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/DC25591636C011F0A9DAF53EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 185.126.144.0/22 185.129.140.0/22 Signature Algorithm: sha256WithRSAEncryption ca:4c:d7:e2:5d:67:cf:b8:f0:47:88:c0:40:48:c9:4e:9c:c5: 9a:5b:57:4d:e3:80:bd:2c:fa:16:8f:2d:fe:db:9f:71:2a:e1: d6:be:a7:ed:0e:36:84:a7:3e:a0:bb:9b:69:7a:83:df:a8:5e: e3:9e:f6:5e:49:89:8b:f3:68:c5:82:d2:36:9c:ad:d9:62:16: 4d:0e:58:b6:00:32:ee:2d:15:31:c0:50:70:36:29:31:06:6a: 29:a5:9a:7b:ae:96:55:cb:5f:ce:c6:09:0e:62:96:f7:b0:25: fa:9e:48:8d:9d:44:88:15:86:c3:64:03:34:24:e8:1f:90:ee: 57:42:93:6e:49:af:5a:3c:b5:25:1e:89:62:91:0c:12:20:85: 05:cf:2c:a1:3b:4c:2d:47:30:7f:cb:8b:16:6c:b2:8c:de:37: b1:d5:da:e2:cb:9b:e4:38:45:12:c4:30:00:f7:11:0d:b0:4f: 8a:ae:d7:e6:6d:49:ab:b0:4a:96:bf:d2:8b:b8:60:15:7d:d9: 85:4a:48:63:94:fa:a2:f8:ed:21:88:fa:26:c7:82:17:da:d1: 72:fe:a4:d1:51:7b:cd:66:12:e6:ab:fc:9a:18:68:65:5d:7e: 34:39:2b:cd:6e:37:94:08:79:cb:f4:2c:4a:2a:8b:2c:ba:2a: 92:f9:7c:55 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICC8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNFMzgxMTAvBgNVBAUTKEQwOTREMjQ3MTQzNTJFMEVCQ0QzRjg4Mjc1MjMyODI3 QkM2QUM4OTAwHhcNMjYxMDI2MDkyODE5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWRmMWQzMy1iNjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9APrDR4o7NGbkOnirbtqosXw2eVqwPC/ElgnKf5YHbLx8X47K0jjBz62o/h z/SHkvBYw9mMv0bfcXY/wnAOntX7jjoD2hKREWGVSpDjn1/JVaXFZ0h9IzHypqOP ueMKHfMUxY5L8Pbfz7464J6B+gRHPiOm6mtta7ERkl2ovtJWfpm39Vesn7TUoRGA 13sioA30thIj6+o3Dk2DRpXFz965zO2ghs9159Bz24Z4eFI2DFjQDpgvZPjw+xWt 2vuAbkN2TxbOLbErtoew5TRZutl6tmTdJWxWxx+C1Bb73WJhPgm2uvzqw1tS6MOa 9yZZY+45cp3NOtsbm56CquhNswIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFB0z3Kqz iv5yzVIZ+5KPK2o2XI01MB8GA1UdIwQYMBaAFNCU0kcUNS4OvNP4gnUjKCe8asiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0UzOC82QjkxRURBMDUz NkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxnNjgwX2lDZFNNb0o3eHF5 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBKVFNSeFExTGc2ODBfaUNkU01vSjd4cXlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjNFMzgvNkI5MUVEQTA1MzZDMTFFQUE1QzI3OTBDQzRGOUFFMDIvREMyNTU5MTYz NkMwMTFGMEE5REFGNTNFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCuX6QAwQCuYGMMA0GCSqGSIb3DQEBCwUAA4IBAQDKTNfiXWfPuPBH iMBASMlOnMWaW1dN44C9LPoWjy3+259xKuHWvqftDjaEpz6gu5tpeoPfqF7jnvZe SYmL82jFgtI2nK3ZYhZNDli2ADLuLRUxwFBwNikxBmoppZp7rpZVy1/OxgkOYpb3 sCX6nkiNnUSIFYbDZAM0JOgfkO5XQpNuSa9aPLUlHolikQwSIIUFzyyhO0wtRzB/ y4sWbLKM3jex1driy5vkOEUSxDAA9xENsE+KrtfmbUmrsEqWv9KLuGAVfdmFSkhj lPqi+O0hiPomx4IX2tFy/qTRUXvNZhLmq/yaGGhlXX40OSvNbjeUCHnL9CxKKoss uiqS+XxV -----END CERTIFICATE-----Generated at Tue Oct 27 16:25:10 2026 by rpki-client