$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/580C1024EA9411F09F457C8C536F56BC.roa File: 580C1024EA9411F09F457C8C536F56BC.roa (raw, json) Hash identifier: Bk8QDiGsiR10OWZzFPLNF/5k4sx9nYA1qUse86K4fTk= Subject key identifier: 66:57:12:FE:38:2E:C7:77:5A:14:DA:8B:64:92:4D:2C:4C:B3:90:DB Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3C34 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/580C1024EA9411F09F457C8C536F56BC.roa Signing time: Sun 01 Mar 2026 21:26:49 +0000 ROA not before: Tue 06 Jan 2026 00:12:10 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 209242 IP address blocks: 119.59.0.0/20 maxlen: 20 119.59.0.0/24 maxlen: 24 119.59.1.0/24 maxlen: 24 119.59.2.0/24 maxlen: 24 119.59.3.0/24 maxlen: 24 119.59.4.0/24 maxlen: 24 119.59.5.0/24 maxlen: 24 119.59.6.0/24 maxlen: 24 119.59.7.0/24 maxlen: 24 119.59.8.0/24 maxlen: 24 119.59.9.0/24 maxlen: 24 119.59.10.0/24 maxlen: 24 119.59.11.0/24 maxlen: 24 119.59.12.0/24 maxlen: 24 119.59.13.0/24 maxlen: 24 119.59.14.0/24 maxlen: 24 119.59.15.0/24 maxlen: 24 119.59.16.0/24 maxlen: 24 119.59.17.0/24 maxlen: 24 119.59.19.0/24 maxlen: 24 119.59.20.0/24 maxlen: 24 119.59.21.0/24 maxlen: 24 119.59.22.0/24 maxlen: 24 119.59.23.0/24 maxlen: 24 210.126.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Mar 2026 00:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15412 (0x3c34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Jan 6 00:12:10 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4af19-596e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6a:ae:a1:ad:64:d6:da:1f:25:55:ae:25:01: 56:95:df:7f:07:6b:10:6d:1a:5d:ac:59:ad:24:6b: 99:29:a6:62:28:8a:92:56:02:3f:3d:38:2d:6b:28: 3f:43:e7:ac:53:60:b7:c7:5d:51:e5:cd:50:40:a3: 8f:9a:b5:f4:10:00:26:fb:c0:95:a1:2f:76:14:3f: b8:cc:16:12:2f:50:00:a0:7c:13:9b:9e:43:23:34: 28:00:a7:a6:cd:20:dc:f5:88:31:f9:8e:68:6e:09: 93:81:4b:2b:e6:da:aa:3b:35:45:3c:14:0d:7c:eb: 2d:e4:86:3b:29:58:83:1b:0e:fe:6a:83:19:3d:9f: 4c:d9:0c:05:87:29:3e:6d:d0:bd:a1:6e:fb:db:a8: af:04:96:9d:42:13:0d:88:7e:35:7b:5a:f0:50:b2: 09:25:44:1e:f7:df:a3:6f:6c:c3:4b:53:9a:7e:96: 7d:bb:a2:89:86:cf:e0:af:9c:d7:2a:6a:c9:26:6d: b1:37:7a:a6:44:16:12:8c:7d:36:2b:06:bf:30:d7: 5b:4c:1a:ef:40:b7:14:fd:d4:57:06:22:66:7f:65: d6:15:0b:69:4c:a8:5c:5a:fe:76:a5:fb:3c:be:ed: f7:b1:e4:98:87:c1:00:e6:89:53:f7:ae:26:97:73: 96:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:57:12:FE:38:2E:C7:77:5A:14:DA:8B:64:92:4D:2C:4C:B3:90:DB X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/580C1024EA9411F09F457C8C536F56BC.roa sbgp-ipAddrBlock: critical IPv4: 119.59.0.0-119.59.17.255 119.59.19.0-119.59.23.255 210.126.126.0/24 Signature Algorithm: sha256WithRSAEncryption d9:4b:25:f8:b3:4b:5c:5f:96:1f:ad:39:50:6c:54:82:f0:dc: 94:72:29:77:10:f5:86:88:36:f0:e4:99:a6:cf:a3:2b:52:eb: c5:13:1b:45:ee:b0:ae:5b:70:ab:72:94:d7:2a:00:7c:61:43: 73:44:90:e1:c0:92:9a:bb:22:32:96:53:12:f0:eb:34:9a:64: cb:1c:32:6e:8a:30:ab:34:48:d5:33:c4:4c:28:9c:3f:e4:a3: 74:2d:cf:6d:8e:14:0a:58:0e:3a:2b:de:52:ed:25:d2:33:b6: 42:6b:fd:3f:a6:01:a5:d6:28:f1:ca:5b:07:d1:c5:aa:d5:62: 1a:e2:ce:88:6c:df:f0:db:80:94:f7:52:0e:31:5a:1c:f0:40: 26:4e:bc:df:b7:ad:4e:50:8d:72:0f:df:9b:2c:21:d8:29:7a: 27:8e:89:09:16:81:4b:6c:28:a7:d9:40:e6:71:4d:81:bc:f7: ae:08:86:d6:aa:35:59:ad:a7:c3:7d:cf:69:00:d2:f4:89:8a: 73:d1:43:d9:73:e0:f0:ab:67:0c:c0:e8:93:7d:51:8b:64:aa: 2b:43:d5:b9:9b:bc:07:4d:d2:36:71:8a:97:0e:ae:86:ac:e2: f1:ec:ec:0a:6b:c0:30:44:c3:94:11:fc:af:4b:ba:cb:2e:f8: 07:d1:e3:98 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICPDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwMTA2MDAxMjEwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWYxOS01OTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGquoa1k1tofJVWuJQFWld9/B2sQbRpdrFmtJGuZKaZiKIqSVgI/PTgtayg/ Q+esU2C3x11R5c1QQKOPmrX0EAAm+8CVoS92FD+4zBYSL1AAoHwTm55DIzQoAKem zSDc9Ygx+Y5obgmTgUsr5tqqOzVFPBQNfOst5IY7KViDGw7+aoMZPZ9M2QwFhyk+ bdC9oW7726ivBJadQhMNiH41e1rwULIJJUQe99+jb2zDS1OafpZ9u6KJhs/gr5zX KmrJJm2xN3qmRBYSjH02Kwa/MNdbTBrvQLcU/dRXBiJmf2XWFQtpTKhcWv52pfs8 vu33seSYh8EA5olT964ml3OWPwIDAQABo4ICezCCAncwHQYDVR0OBBYEFGZXEv44 Lsd3WhTai2SSTSxMs5DbMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNTgwQzEwMjRF QTk0MTFGMDlGNDU3QzhDNTM2RjU2QkMucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAn BAIAATAhMAsDAwB3OwMEAXc7EDAMAwQAdzsTAwQDdzsQAwQA0n5+MA0GCSqGSIb3 DQEBCwUAA4IBAQDZSyX4s0tcX5YfrTlQbFSC8NyUcil3EPWGiDbw5Jmmz6MrUuvF ExtF7rCuW3CrcpTXKgB8YUNzRJDhwJKauyIyllMS8Os0mmTLHDJuijCrNEjVM8RM KJw/5KN0Lc9tjhQKWA46K95S7SXSM7ZCa/0/pgGl1ijxylsH0cWq1WIa4s6IbN/w 24CU91IOMVoc8EAmTrzft61OUI1yD9+bLCHYKXonjokJFoFLbCin2UDmcU2BvPeu CIbWqjVZrafDfc9pANL0iYpz0UPZc+Dwq2cMwOiTfVGLZKorQ9W5m7wHTdI2cYqX Dq6GrOLx7OwKa8AwRMOUEfyvS7rLLvgH0eOY -----END CERTIFICATE-----Generated at Tue Mar 10 13:21:17 2026 by rpki-client