$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E74/C3E729CE947F11F19B37D94E6111F970/1CF1B6D8948011F1975C376A6111F970.roa File: 1CF1B6D8948011F1975C376A6111F970.roa (raw, json) Hash identifier: 8IpHaph/KPVXES/9dvHuSAE44rYlWD7gCU6nrOwmVoc= Subject key identifier: A6:30:68:CB:42:2F:F7:59:E1:FF:0A:C6:5F:AB:CA:4A:90:38:1F:B8 Certificate issuer: /CN=A9140E74/serialNumber=803D09D6078EA7EF6392983AE071B8757D2AA78D Certificate serial: 06 Authority key identifier: 80:3D:09:D6:07:8E:A7:EF:63:92:98:3A:E0:71:B8:75:7D:2A:A7:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gD0J1geOp-9jkpg64HG4dX0qp40.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E74/C3E729CE947F11F19B37D94E6111F970/1CF1B6D8948011F1975C376A6111F970.roa Signing time: Mon 10 Aug 2026 05:59:25 +0000 ROA not before: Mon 10 Aug 2026 05:59:25 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 133419 IP address blocks: 121.101.160.0/24 maxlen: 24 121.101.161.0/24 maxlen: 24 121.101.162.0/24 maxlen: 24 121.101.163.0/24 maxlen: 24 121.101.164.0/24 maxlen: 24 121.101.165.0/24 maxlen: 24 121.101.166.0/24 maxlen: 24 121.101.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E74/C3E729CE947F11F19B37D94E6111F970/gD0J1geOp-9jkpg64HG4dX0qp40.crl rsync://rpki.apnic.net/member_repository/A9140E74/C3E729CE947F11F19B37D94E6111F970/gD0J1geOp-9jkpg64HG4dX0qp40.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gD0J1geOp-9jkpg64HG4dX0qp40.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E74, serialNumber=803D09D6078EA7EF6392983AE071B8757D2AA78D Validity Not Before: Aug 10 05:59:25 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a7968bd-2b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:af:83:8c:65:52:64:c2:ff:4f:0d:c9:51:66: 1b:6f:3c:f4:74:e1:76:f3:e3:12:61:c0:70:eb:f2: 43:36:86:b6:3b:27:5f:af:3f:1d:2d:0d:f4:9e:da: a9:12:b5:64:5d:57:eb:5e:57:a1:d3:a4:33:fb:59: 0e:c4:ba:c7:05:e0:fc:48:ed:44:db:64:f9:79:55: 55:75:fe:ea:56:ee:ce:18:8b:f8:54:72:65:0d:3d: db:d7:ae:74:21:0a:6f:5f:8e:ac:f7:aa:26:7e:68: 39:8f:eb:5a:0b:93:10:b9:db:37:06:5f:09:d8:e5: 02:e9:56:24:12:a9:38:70:1d:ce:e7:15:a0:88:69: 0e:c2:e7:d2:9d:6f:22:e4:46:39:c3:f4:3d:3d:71: 44:30:ab:fd:55:ab:12:ed:74:e3:bf:fa:51:b5:66: d0:5e:ad:35:d7:b9:4c:44:45:71:35:0b:67:f8:45: 94:92:5d:34:47:c0:66:01:3b:9c:ef:49:9e:60:97: c0:67:3e:96:a0:1d:95:b1:91:c5:86:20:7b:53:d3: 40:27:cd:a7:1f:db:00:69:c4:68:43:ff:8d:ef:a3: 70:0d:7b:78:9d:72:cb:69:b4:79:d9:c3:b5:fb:98: 31:39:4c:2d:a3:24:65:35:69:6c:33:09:c0:b6:68: 42:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:30:68:CB:42:2F:F7:59:E1:FF:0A:C6:5F:AB:CA:4A:90:38:1F:B8 X509v3 Authority Key Identifier: keyid:80:3D:09:D6:07:8E:A7:EF:63:92:98:3A:E0:71:B8:75:7D:2A:A7:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E74/C3E729CE947F11F19B37D94E6111F970/gD0J1geOp-9jkpg64HG4dX0qp40.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gD0J1geOp-9jkpg64HG4dX0qp40.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E74/C3E729CE947F11F19B37D94E6111F970/1CF1B6D8948011F1975C376A6111F970.roa sbgp-ipAddrBlock: critical IPv4: 121.101.160.0/21 Signature Algorithm: sha256WithRSAEncryption a5:84:fd:0d:17:e1:20:6e:42:d5:98:ed:7c:44:c4:e0:b2:86: 53:a6:71:60:8f:95:d5:2d:f9:ff:bd:e6:47:3f:95:5c:2b:d7: 34:cf:76:a8:bd:3e:f2:ad:bc:1e:ef:3e:00:8a:5e:ed:0e:41: e3:f0:68:46:d6:02:32:b0:0a:4d:ac:20:1a:0d:ac:5c:31:ea: f5:fb:02:91:11:e5:ce:50:91:96:2a:38:8f:c1:0d:a4:a9:94: 14:0c:e3:44:94:94:58:e7:93:59:86:cc:7b:24:3b:9a:49:45: 38:e9:31:a5:bb:64:2e:f8:62:55:10:9c:de:c1:07:f3:1b:b3: 62:48:19:d6:5f:59:b1:c8:10:10:66:24:84:c3:65:b1:a8:04: 50:c2:35:0c:e8:ac:c6:f3:a6:73:51:19:24:b5:0a:25:14:74: fb:fb:85:1c:b2:30:09:a8:3c:95:aa:43:cb:15:83:08:8c:4c: b1:56:5d:42:e1:25:16:ad:aa:d8:90:93:13:31:aa:29:c8:0a: 5b:1d:d3:82:18:b5:cd:64:ba:1c:6f:e7:ed:23:8f:01:de:d5: c9:e8:03:37:7c:69:36:c6:11:3e:85:14:3a:1f:a5:dc:65:1e: c8:0e:3a:71:b4:d7:dd:d8:c9:76:5e:e7:ce:a3:7f:9a:e3:51: 64:e7:2e:66 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MEU3NDExMC8GA1UEBRMoODAzRDA5RDYwNzhFQTdFRjYzOTI5ODNBRTA3MUI4NzU3 RDJBQTc4RDAeFw0yNjA4MTAwNTU5MjVaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNzk2OGJkLTJiM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmr4OMZVJkwv9PDclRZhtvPPR04Xbz4xJhwHDr8kM2hrY7J1+vPx0tDfSe2qkS tWRdV+teV6HTpDP7WQ7EuscF4PxI7UTbZPl5VVV1/upW7s4Yi/hUcmUNPdvXrnQh Cm9fjqz3qiZ+aDmP61oLkxC52zcGXwnY5QLpViQSqThwHc7nFaCIaQ7C59KdbyLk RjnD9D09cUQwq/1VqxLtdOO/+lG1ZtBerTXXuUxERXE1C2f4RZSSXTRHwGYBO5zv SZ5gl8BnPpagHZWxkcWGIHtT00Anzacf2wBpxGhD/43vo3ANe3idcstptHnZw7X7 mDE5TC2jJGU1aWwzCcC2aEKdAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUpjBoy0Iv 91nh/wrGX6vKSpA4H7gwHwYDVR0jBBgwFoAUgD0J1geOp+9jkpg64HG4dX0qp40w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwRTc0L0MzRTcyOUNFOTQ3 RjExRjE5QjM3RDk0RTYxMTFGOTcwL2dEMEoxZ2VPcC05amtwZzY0SEc0ZFgwcXA0 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0QwSjFnZU9wLTlqa3BnNjRIRzRkWDBxcDQwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU3NC9DM0U3MjlDRTk0N0YxMUYxOUIzN0Q5NEU2MTExRjk3MC8xQ0YxQjZEODk0 ODAxMUYxOTc1QzM3NkE2MTExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAN5ZaAwDQYJKoZIhvcNAQELBQADggEBAKWE/Q0X4SBuQtWY7XxExOCy hlOmcWCPldUt+f+95kc/lVwr1zTPdqi9PvKtvB7vPgCKXu0OQePwaEbWAjKwCk2s IBoNrFwx6vX7ApER5c5QkZYqOI/BDaSplBQM40SUlFjnk1mGzHskO5pJRTjpMaW7 ZC74YlUQnN7BB/Mbs2JIGdZfWbHIEBBmJITDZbGoBFDCNQzorMbzpnNRGSS1CiUU dPv7hRyyMAmoPJWqQ8sVgwiMTLFWXULhJRatqtiQkxMxqinIClsd04IYtc1kuhxv 5+0jjwHe1cnoAzd8aTbGET6FFDofpdxlHsgOOnG0193YyXZe586jf5rjUWTnLmY= -----END CERTIFICATE-----Generated at Wed Aug 19 13:37:10 2026 by rpki-client