$ rpki-client -vvf rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/DC25591636C011F0A9DAF53EC4F9AE02.roa File: DC25591636C011F0A9DAF53EC4F9AE02.roa (raw, json) Hash identifier: EesMUM6OTKAdEg0mYRmy7VycLGp32k1mGYc0u42kdzs= Subject key identifier: EB:2B:15:95:BD:FC:F3:13:BA:1F:2D:BB:52:28:14:71:C1:A7:49:D1 Certificate issuer: /CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Certificate serial: 0B73 Authority key identifier: D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/DC25591636C011F0A9DAF53EC4F9AE02.roa Signing time: Thu 28 May 2026 17:19:53 +0000 ROA not before: Thu 28 May 2026 17:19:53 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 24337 IP address blocks: 185.126.144.0/22 maxlen: 22 185.126.144.0/24 maxlen: 24 185.126.145.0/24 maxlen: 24 185.126.146.0/24 maxlen: 24 185.126.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 16:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2931 (0xb73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123E38, serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Validity Not Before: May 28 17:19:53 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a187939-a627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:56:fb:03:ca:6c:fd:d0:a3:85:42:b0:d3:73: 8f:91:19:16:c6:11:61:62:c1:70:d9:59:4a:ee:99: 0c:26:16:bb:b9:36:7f:b3:dd:f1:18:cd:ed:fc:67: 38:d4:dd:ec:b1:da:0f:4c:c3:d9:c9:21:da:57:f2: 72:15:36:7e:44:cf:39:e0:73:2e:d3:a6:7c:36:32: db:2d:f0:6c:22:c3:11:91:f0:3c:15:36:55:f0:a7: 42:d0:fb:75:94:f8:29:19:74:54:ad:15:51:a8:1c: 8f:a2:fa:60:b3:10:dc:bd:27:0d:4a:c4:28:93:9f: c8:4c:e8:55:6c:d6:84:1f:97:ae:1f:b1:cf:78:59: b5:57:f8:04:55:79:aa:de:d5:90:c6:c3:da:42:2b: 3a:c0:0b:1e:f4:f3:f9:9a:eb:6b:55:72:c9:b4:ac: e7:7f:21:80:d1:34:0f:60:da:9f:8a:ae:40:35:be: 32:e1:99:43:22:28:e9:ea:e9:6d:64:e3:46:9e:e6: d3:17:6e:3a:a8:2c:89:92:d4:6f:4e:48:93:d9:38: c1:1c:2d:15:e3:70:5d:f1:d3:91:61:2b:e7:4c:39: ef:ef:af:d6:cb:4b:83:b4:96:0b:95:9e:00:f3:f2: 57:25:b8:be:40:6e:81:5c:26:bf:70:8d:ed:cc:3c: 21:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2B:15:95:BD:FC:F3:13:BA:1F:2D:BB:52:28:14:71:C1:A7:49:D1 X509v3 Authority Key Identifier: keyid:D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/DC25591636C011F0A9DAF53EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 185.126.144.0/22 Signature Algorithm: sha256WithRSAEncryption 96:a0:27:70:6f:87:25:e4:59:e1:87:36:84:5d:af:87:7e:0b: c2:e6:fd:27:57:3e:dc:f9:08:1a:70:44:27:72:1e:58:41:d5: 41:81:19:76:77:b5:e4:53:e2:53:47:22:23:37:c3:61:41:92: 6a:80:3f:7a:16:f2:4a:ce:92:f2:42:33:9e:e9:4f:74:6b:a4: 58:91:7d:9a:a9:32:dc:33:d2:ef:1b:04:68:85:41:1d:bf:94: 9b:17:71:37:82:4b:0f:77:66:1f:21:20:12:f2:ff:9e:45:20: 61:bd:54:de:0e:f7:2d:92:dd:0a:f3:c3:a4:64:a7:b2:40:e8: df:db:4e:c4:a7:d6:32:da:7b:8c:1d:17:cc:57:47:11:e7:6a: 12:7b:1a:f0:8b:64:84:d2:03:8c:f4:4a:a5:b3:5b:24:a0:37: 8f:66:15:13:80:83:d7:32:3c:f0:23:d2:67:22:55:c9:ad:d5: 4c:18:93:50:bc:de:35:9d:94:a6:28:6b:c6:e0:f7:2d:c5:80: 0f:f5:95:2c:e2:c3:3d:1c:38:d1:fc:e2:3e:a3:b6:fb:51:b6: 27:01:cc:d3:5c:11:97:9a:4f:d8:71:22:00:e0:e3:c6:b9:8a: 87:3e:cf:9d:06:85:ff:12:c7:b4:de:ea:51:e7:46:d2:ac:32: eb:39:0f:3c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICC3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNFMzgxMTAvBgNVBAUTKEQwOTREMjQ3MTQzNTJFMEVCQ0QzRjg4Mjc1MjMyODI3 QkM2QUM4OTAwHhcNMjYwNTI4MTcxOTUzWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTE4NzkzOS1hNjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVb7A8ps/dCjhUKw03OPkRkWxhFhYsFw2VlK7pkMJha7uTZ/s93xGM3t/Gc4 1N3ssdoPTMPZySHaV/JyFTZ+RM854HMu06Z8NjLbLfBsIsMRkfA8FTZV8KdC0Pt1 lPgpGXRUrRVRqByPovpgsxDcvScNSsQok5/ITOhVbNaEH5euH7HPeFm1V/gEVXmq 3tWQxsPaQis6wAse9PP5mutrVXLJtKznfyGA0TQPYNqfiq5ANb4y4ZlDIijp6ult ZONGnubTF246qCyJktRvTkiT2TjBHC0V43Bd8dORYSvnTDnv76/Wy0uDtJYLlZ4A 8/JXJbi+QG6BXCa/cI3tzDwhPwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOsrFZW9 /PMTuh8tu1IoFHHBp0nRMB8GA1UdIwQYMBaAFNCU0kcUNS4OvNP4gnUjKCe8asiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0UzOC82QjkxRURBMDUz NkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxnNjgwX2lDZFNNb0o3eHF5 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBKVFNSeFExTGc2ODBfaUNkU01vSjd4cXlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjNFMzgvNkI5MUVEQTA1MzZDMTFFQUE1QzI3OTBDQzRGOUFFMDIvREMyNTU5MTYz NkMwMTFGMEE5REFGNTNFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCuX6QMA0GCSqGSIb3DQEBCwUAA4IBAQCWoCdwb4cl5FnhhzaEXa+H fgvC5v0nVz7c+QgacEQnch5YQdVBgRl2d7XkU+JTRyIjN8NhQZJqgD96FvJKzpLy QjOe6U90a6RYkX2aqTLcM9LvGwRohUEdv5SbF3E3gksPd2YfISAS8v+eRSBhvVTe Dvctkt0K88OkZKeyQOjf207Ep9Yy2nuMHRfMV0cR52oSexrwi2SE0gOM9Eqls1sk oDePZhUTgIPXMjzwI9JnIlXJrdVMGJNQvN41nZSmKGvG4PctxYAP9ZUs4sM9HDjR /OI+o7b7UbYnAczTXBGXmk/YcSIA4OPGuYqHPs+dBoX/Ese03upR50bSrDLrOQ88 -----END CERTIFICATE-----Generated at Sat Jun 6 12:26:12 2026 by rpki-client