$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/8BD2406E632411F1916C95348547A888.roa File: 8BD2406E632411F1916C95348547A888.roa (raw, json) Hash identifier: p1AeAq7BQMIaOR9gs6j6kJUm91dCBrMRXhfthctc8xs= Subject key identifier: 98:5C:3E:D3:40:53:53:D1:C9:75:E8:B7:14:45:A5:CA:24:7D:C8:37 Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Certificate serial: 09AD Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/8BD2406E632411F1916C95348547A888.roa Signing time: Thu 25 Jun 2026 00:51:34 +0000 ROA not before: Thu 25 Jun 2026 00:51:34 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 152584 IP address blocks: 126.209.15.0/24 maxlen: 24 126.209.33.0/24 maxlen: 24 126.209.37.0/24 maxlen: 24 126.209.38.0/24 maxlen: 24 126.209.40.0/24 maxlen: 24 126.209.51.0/24 maxlen: 24 126.209.60.0/24 maxlen: 24 126.209.63.0/24 maxlen: 24 126.209.80.0/24 maxlen: 24 126.209.81.0/24 maxlen: 24 126.209.85.0/24 maxlen: 24 126.209.86.0/24 maxlen: 24 126.209.96.0/21 maxlen: 24 126.209.111.0/24 maxlen: 24 126.209.116.0/22 maxlen: 24 126.209.120.0/24 maxlen: 24 126.209.121.0/24 maxlen: 24 126.209.123.0/24 maxlen: 24 126.209.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 21:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2477 (0x9ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Validity Not Before: Jun 25 00:51:34 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a3c7b96-cf14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:53:59:be:19:9d:e2:42:54:fd:c7:90:6a:24: f7:42:eb:98:d2:3f:71:53:de:47:03:9f:0d:f5:e7: 31:4d:3f:e6:5d:9e:5a:e7:ac:20:3f:49:7b:30:d1: 62:e7:d6:2a:69:7a:73:d9:6a:23:4f:60:7b:21:04: 5a:28:6e:aa:58:e5:32:27:d0:8d:b7:4d:10:c2:10: 42:51:00:31:e1:ee:aa:77:27:23:72:bd:fe:08:b3: 07:6a:d7:23:d5:be:1e:4a:b7:73:f3:35:28:c5:d9: 78:c4:4c:97:e3:20:be:27:33:5f:d5:bc:b6:c3:a6: 21:82:4c:33:f3:3e:a3:83:58:bf:16:90:9a:ac:29: 0d:d9:dd:bd:c1:e2:29:c3:23:6f:43:8a:9e:41:0f: e3:59:5d:f9:8c:ac:10:a3:8f:cc:01:db:02:ed:ba: 65:91:f2:0a:23:41:01:72:7e:3b:62:26:45:1b:42: 89:b6:20:ff:e8:07:11:aa:eb:ff:56:75:1e:12:f4: 7f:db:58:2b:71:57:98:8b:6c:66:8e:ea:31:12:85: 4c:a5:13:8a:2c:d2:a0:d6:66:a9:a1:3c:7e:47:d7: b7:15:1b:e0:49:bd:12:fc:af:19:80:9c:90:e4:7c: b6:0a:fd:11:d8:5e:92:b4:e9:6d:ce:59:b8:14:8a: 2e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5C:3E:D3:40:53:53:D1:C9:75:E8:B7:14:45:A5:CA:24:7D:C8:37 X509v3 Authority Key Identifier: keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/8BD2406E632411F1916C95348547A888.roa sbgp-ipAddrBlock: critical IPv4: 126.209.15.0/24 126.209.33.0/24 126.209.37.0-126.209.38.255 126.209.40.0/24 126.209.51.0/24 126.209.60.0/24 126.209.63.0/24 126.209.80.0/23 126.209.85.0-126.209.86.255 126.209.96.0/21 126.209.111.0/24 126.209.116.0-126.209.121.255 126.209.123.0/24 126.209.126.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:a7:6d:0c:1e:b9:c8:cb:13:e7:e9:e9:2f:36:dd:4a:0b:5d: 50:6b:b1:16:04:db:7b:98:ec:83:30:11:c1:54:99:31:7d:98: d8:35:6d:1b:a9:3a:f2:b9:bb:b2:65:28:fa:0d:e5:53:b5:79: eb:df:7a:ce:16:35:1d:c1:08:a3:59:d7:7f:d9:3e:cc:f3:c4: 71:2f:37:69:4f:08:2e:dc:4f:8e:b5:f5:44:c1:63:24:78:2e: 2f:54:d0:fc:15:89:c6:63:75:fa:3c:a0:cc:eb:95:78:76:4c: ac:22:e3:08:f7:14:2f:ea:2f:66:6e:08:34:57:ae:40:db:61: ea:33:57:1c:38:ab:8b:5e:66:52:f7:fc:db:07:14:33:fb:14: db:d5:67:d6:17:c9:b7:46:1b:a7:58:45:f3:ab:58:98:38:18: 5e:67:5c:40:70:82:11:78:aa:2f:a7:f7:46:2a:80:a7:51:88: ce:9b:fa:49:c4:52:f4:a3:3d:f9:8d:92:d2:53:76:11:4f:6c: 2d:e9:60:c2:9c:2b:df:62:83:06:3a:0b:0b:70:58:bb:dc:90: 71:3b:03:ca:3b:59:02:12:ee:8b:3a:bc:50:d1:de:42:4a:a1: b2:2c:ee:8f:4a:e7:60:1b:1c:12:bc:8a:fe:c9:82:1f:b3:b9: 6b:24:bc:74 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICCa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxRUExMTAvBgNVBAUTKEU2OTJDNUI2MEIzRUYxQzIwNDQ0MzlGQzM5MEFENTZE QzNDQkNENjMwHhcNMjYwNjI1MDA1MTM0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTNjN2I5Ni1jZjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9lNZvhmd4kJU/ceQaiT3QuuY0j9xU95HA58N9ecxTT/mXZ5a56wgP0l7MNFi 59YqaXpz2WojT2B7IQRaKG6qWOUyJ9CNt00QwhBCUQAx4e6qdycjcr3+CLMHatcj 1b4eSrdz8zUoxdl4xEyX4yC+JzNf1by2w6Yhgkwz8z6jg1i/FpCarCkN2d29weIp wyNvQ4qeQQ/jWV35jKwQo4/MAdsC7bplkfIKI0EBcn47YiZFG0KJtiD/6AcRquv/ VnUeEvR/21grcVeYi2xmjuoxEoVMpROKLNKg1mapoTx+R9e3FRvgSb0S/K8ZgJyQ 5Hy2Cv0R2F6StOltzlm4FIouVwIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFJhcPtNA U1PRyXXotxRFpcokfcg3MB8GA1UdIwQYMBaAFOaSxbYLPvHCBEQ5/DkK1W3Dy81j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFFQS85QzkzMkI0ODE3 M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThjSUVSRG44T1FyVmJjUEx6 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwTEZ0Z3MtOGNJRVJEbjhPUXJWYmNQTHpXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0QxRUEvOUM5MzJCNDgxNzNBMTFFQkEzQjk3RTdGQzRGOUFFMDIvOEJEMjQwNkU2 MzI0MTFGMTkxNkM5NTM0ODU0N0E4ODgucm9hMIGFBggrBgEFBQcBBwEB/wR2MHQw cgQCAAEwbAMEAH7RDwMEAH7RITAMAwQAftElAwQAftEmAwQAftEoAwQAftEzAwQA ftE8AwQAftE/AwQBftFQMAwDBAB+0VUDBAB+0VYDBAN+0WADBAB+0W8wDAMEAn7R dAMEAX7ReAMEAH7RewMEAH7RfjANBgkqhkiG9w0BAQsFAAOCAQEAPadtDB65yMsT 5+npLzbdSgtdUGuxFgTbe5jsgzARwVSZMX2Y2DVtG6k68rm7smUo+g3lU7V56996 zhY1HcEIo1nXf9k+zPPEcS83aU8ILtxPjrX1RMFjJHguL1TQ/BWJxmN1+jygzOuV eHZMrCLjCPcUL+ovZm4INFeuQNth6jNXHDiri15mUvf82wcUM/sU29Vn1hfJt0Yb p1hF86tYmDgYXmdcQHCCEXiqL6f3RiqAp1GIzpv6ScRS9KM9+Y2S0lN2EU9sLelg wpwr32KDBjoLC3BYu9yQcTsDyjtZAhLuizq8UNHeQkqhsizuj0rnYBscEryK/smC H7O5ayS8dA== -----END CERTIFICATE-----Generated at Tue Jul 7 15:45:43 2026 by rpki-client