$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/5E009276B69011F0B54BD22FC4F9AE02.roa File: 5E009276B69011F0B54BD22FC4F9AE02.roa (raw, json) Hash identifier: w0/Y20ZivT/a5tcFD2rl9Yy1BY1/AxocW5RgryvCT0U= Subject key identifier: 8A:ED:7C:57:51:A9:93:46:49:78:E3:24:30:C7:D7:20:FD:25:12:68 Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 055F Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/5E009276B69011F0B54BD22FC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:49:08 +0000 ROA not before: Mon 03 Nov 2025 00:44:57 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 7029 IP address blocks: 113.20.48.0/22 maxlen: 22 113.20.52.0/22 maxlen: 22 223.29.128.0/22 maxlen: 22 223.29.136.0/22 maxlen: 22 223.29.140.0/22 maxlen: 22 223.29.144.0/22 maxlen: 22 223.29.148.0/22 maxlen: 22 223.29.152.0/22 maxlen: 22 223.29.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 23:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1375 (0x55f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Nov 3 00:44:57 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a48a24-659e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0b:18:31:7c:a3:b9:bf:ae:98:50:92:c2:89: f7:58:44:28:07:d8:c0:d9:10:80:b7:6a:5b:7c:fa: 76:fb:fb:95:dd:42:cb:ef:00:ea:c1:1e:21:10:17: 74:77:e2:6b:86:d7:54:b5:8a:bf:46:cf:37:78:36: 55:69:27:d4:a8:37:20:3e:17:30:4e:d7:5e:74:5b: d0:fb:9d:e1:f2:3e:c0:16:aa:c0:b1:8a:70:2d:a8: 17:e0:69:9e:2b:7b:53:53:a9:7d:14:18:25:7a:b3: 82:fc:4f:cd:ad:59:4f:ba:0a:b6:af:ed:26:30:9a: b9:d8:30:1e:f9:e6:e9:76:ae:04:02:bd:07:1f:4b: e8:89:b0:57:1f:15:f4:f1:91:78:29:43:ce:cf:6c: e5:8e:9a:37:b8:1c:42:70:b9:0a:ff:9b:c4:7d:3f: 7f:42:b9:46:78:0b:f2:7e:e5:22:9e:70:c0:d8:3f: fe:27:ba:3c:34:d6:eb:e3:c2:0a:e3:08:15:89:8f: 76:23:51:c8:0a:56:32:04:0e:60:e3:fc:10:2e:05: 19:d0:76:a0:43:1e:c6:bd:81:9b:0f:12:c7:98:73: 52:81:06:99:e7:35:d5:91:7d:eb:66:5d:23:ca:8c: da:49:6d:ea:16:23:68:2e:27:6e:f8:6c:bf:df:7c: 20:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:ED:7C:57:51:A9:93:46:49:78:E3:24:30:C7:D7:20:FD:25:12:68 X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/5E009276B69011F0B54BD22FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 113.20.48.0/21 223.29.128.0/22 223.29.136.0-223.29.159.255 Signature Algorithm: sha256WithRSAEncryption 7f:dd:2b:18:7c:c5:74:8d:7c:7c:47:6c:99:6e:f2:bc:1f:88: fa:a9:f6:ac:21:36:77:0b:29:35:3b:8d:85:be:fd:83:ea:eb: e7:a1:9f:76:7c:88:cd:f8:43:a2:2d:8f:37:44:05:bd:f1:fc: 06:68:5d:5d:d4:a0:ce:23:79:c5:86:6c:62:48:73:59:ee:ce: 80:a0:28:0c:6b:1a:dc:22:d4:a6:9e:ba:64:7c:11:42:2b:db: 58:91:cc:27:53:7e:97:9b:9f:5d:eb:e7:66:a1:3d:80:61:7f: 79:e8:d5:07:7d:d2:15:4a:fe:0f:ad:d9:d6:a8:97:a0:d5:82: 5f:62:88:ee:e1:f3:ed:f7:a2:e0:e5:0e:ad:d0:17:b8:86:8d: c7:04:96:46:23:99:a5:a7:87:a6:a1:b9:aa:d6:e3:a1:ee:d3: 20:3a:7d:e7:f2:e9:71:8d:2f:d8:fa:b4:2b:6a:94:bb:9b:eb: ec:e8:e0:04:94:f9:15:b7:d9:31:db:81:96:0c:10:de:6a:63: 86:d6:70:04:60:fc:9e:4b:3a:ae:de:10:9e:dc:44:56:48:4d: 23:73:e0:94:9d:de:c9:5c:93:a9:33:31:95:44:98:9d:b7:8f: 76:0e:e2:1f:ef:f7:64:20:67:41:cd:95:de:34:3a:89:ba:fa: 55:77:f6:3e -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICBV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjUxMTAzMDA0NDU3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGEyNC02NTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgsYMXyjub+umFCSwon3WEQoB9jA2RCAt2pbfPp2+/uV3ULL7wDqwR4hEBd0 d+JrhtdUtYq/Rs83eDZVaSfUqDcgPhcwTtdedFvQ+53h8j7AFqrAsYpwLagX4Gme K3tTU6l9FBglerOC/E/NrVlPugq2r+0mMJq52DAe+ebpdq4EAr0HH0voibBXHxX0 8ZF4KUPOz2zljpo3uBxCcLkK/5vEfT9/QrlGeAvyfuUinnDA2D/+J7o8NNbr48IK 4wgViY92I1HIClYyBA5g4/wQLgUZ0HagQx7GvYGbDxLHmHNSgQaZ5zXVkX3rZl0j yozaSW3qFiNoLidu+Gy/33wgQQIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFIrtfFdR qZNGSXjjJDDH1yD9JRJoMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvNUUwMDkyNzZC NjkwMTFGMEI1NEJEMjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaAwQDcRQwAwQC3x2AMAwDBAPfHYgDBAXfHYAwDQYJKoZIhvcNAQELBQAD ggEBAH/dKxh8xXSNfHxHbJlu8rwfiPqp9qwhNncLKTU7jYW+/YPq6+ehn3Z8iM34 Q6ItjzdEBb3x/AZoXV3UoM4jecWGbGJIc1nuzoCgKAxrGtwi1KaeumR8EUIr21iR zCdTfpebn13r52ahPYBhf3no1Qd90hVK/g+t2daol6DVgl9iiO7h8+33ouDlDq3Q F7iGjccElkYjmaWnh6ahuarW46Hu0yA6fefy6XGNL9j6tCtqlLub6+zo4ASU+RW3 2THbgZYMEN5qY4bWcARg/J5LOq7eEJ7cRFZITSNz4JSd3slck6kzMZVEmJ23j3YO 4h/v92QgZ0HNld40Oom6+lV39j4= -----END CERTIFICATE-----Generated at Wed Mar 4 14:26:10 2026 by rpki-client