$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/D10BC2D6AC0D11F1A921711A7011F970.roa File: D10BC2D6AC0D11F1A921711A7011F970.roa (raw, json) Hash identifier: 9LbT55FCc16CNUy2s7bNTZP1oBsFf0RchQv0XwtmSYA= Subject key identifier: A1:1E:D5:84:7E:30:1C:6C:DC:24:7F:7D:1A:3D:64:6B:29:4F:B4:60 Certificate issuer: /CN=A914D29B/serialNumber=4B5F1C92DC68D9412AAC3077183FA36DD03DCD15 Certificate serial: 55 Authority key identifier: 4B:5F:1C:92:DC:68:D9:41:2A:AC:30:77:18:3F:A3:6D:D0:3D:CD:15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/D10BC2D6AC0D11F1A921711A7011F970.roa Signing time: Wed 09 Sep 2026 08:46:46 +0000 ROA not before: Wed 09 Sep 2026 08:46:46 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 9498 IP address blocks: 119.10.128.0/23 maxlen: 24 223.29.220.0/24 maxlen: 24 2400:44a0:2::/48 maxlen: 48 2400:44a0:2::/118 maxlen: 118 2400:44a0:2::400/118 maxlen: 118 2400:44a0:2::800/118 maxlen: 118 2400:44a0:2::c00/118 maxlen: 118 2400:44a0:2::1000/120 maxlen: 120 2400:44a0:2::1100/120 maxlen: 120 2400:44a0:2::1200/120 maxlen: 120 2400:44a0:2::1300/120 maxlen: 120 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.crl rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D29B, serialNumber=4B5F1C92DC68D9412AAC3077183FA36DD03DCD15 Validity Not Before: Sep 9 08:46:46 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6aa11cf5-d804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2a:3c:f8:0c:d0:70:8a:ea:cc:7b:17:64:57: 28:a2:76:d4:30:12:fd:50:53:4a:f5:e8:5a:b8:c0: 4b:ad:31:d0:c0:11:de:7a:0c:39:e7:37:93:1f:b4: 4d:bb:54:77:dd:72:f3:41:d5:cd:c8:fc:49:c9:20: ec:b5:a8:42:c0:28:a9:f1:75:b1:e6:e4:0a:60:5d: b5:4c:9f:ce:3f:df:0d:8e:2a:17:74:21:fe:ab:07: d8:f8:84:51:56:e2:5f:2a:b4:5d:fc:f6:ae:7a:75: 46:8e:e4:49:0b:55:8b:60:8e:71:a1:a6:0f:be:d2: 36:eb:68:57:e9:56:d7:ca:cc:f0:0d:89:e4:56:f7: e8:5d:c8:33:45:5b:b3:1e:d0:3a:81:af:92:91:6d: de:d9:cd:c9:fe:df:00:91:18:d6:f2:76:72:e8:b8: b1:2c:e4:c8:93:7f:7e:53:d9:47:7b:25:4f:1e:f0: ab:fc:ee:e7:13:25:e0:1c:40:77:01:6f:e5:58:e3: 46:68:fc:63:c0:e2:08:0a:31:a5:d0:59:9c:7e:76: 16:a1:ee:34:03:98:2a:9f:df:72:35:58:5a:3d:c7: ec:7b:42:24:19:36:74:16:80:cb:fb:0a:9b:9f:74: bc:64:fb:a2:ba:73:4a:3b:03:3c:15:ae:b7:dc:25: eb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1E:D5:84:7E:30:1C:6C:DC:24:7F:7D:1A:3D:64:6B:29:4F:B4:60 X509v3 Authority Key Identifier: keyid:4B:5F:1C:92:DC:68:D9:41:2A:AC:30:77:18:3F:A3:6D:D0:3D:CD:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/D10BC2D6AC0D11F1A921711A7011F970.roa sbgp-ipAddrBlock: critical IPv4: 119.10.128.0/23 223.29.220.0/24 IPv6: 2400:44a0:2::/48 Signature Algorithm: sha256WithRSAEncryption 97:bc:89:ad:e8:29:57:3f:56:67:8f:24:11:c5:4a:52:03:57: d9:84:7c:d7:64:90:03:85:b5:3e:84:9e:db:67:bd:dc:ad:ad: ed:e0:c1:0c:c6:4a:ee:62:8e:db:fd:2d:91:f0:45:fa:5a:9a: a4:25:f3:98:0f:9f:89:53:fc:49:da:0a:46:59:70:d5:81:37: 2a:e2:b4:33:d2:d6:3f:26:40:25:31:a3:6a:6b:1d:69:e5:5c: 08:81:84:e2:4a:26:02:ac:74:64:c7:f5:bb:9a:e0:8c:50:23: 43:f9:11:42:ea:7c:23:d5:af:dc:91:97:da:57:2d:5c:07:da: 66:bd:23:9e:51:82:73:eb:2e:1f:c9:60:c4:d6:21:dc:c1:de: 98:43:bb:90:03:c2:b7:73:cf:7d:9f:9c:bb:bc:d8:35:e9:ed: b1:c8:ee:75:42:7e:d0:e2:00:c8:7a:11:f0:ae:07:0e:29:d9: a9:5c:48:ca:bc:bc:a0:e1:f8:86:2f:ab:ac:a3:32:4a:0b:5c: 50:47:cc:29:e3:a2:4d:fa:34:9f:ba:c7:6b:02:e1:fc:35:df: fa:09:7e:07:d4:fb:26:85:63:87:2b:cd:00:f9:d5:f3:4f:f8: d0:33:55:b2:98:5a:1b:23:04:d5:b3:f8:20:63:2f:34:b1:1e: 12:1d:5a:07 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RDI5QjExMC8GA1UEBRMoNEI1RjFDOTJEQzY4RDk0MTJBQUMzMDc3MTgzRkEzNkRE MDNEQ0QxNTAeFw0yNjA5MDkwODQ2NDZaFw0yNzA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYTExY2Y1LWQ4MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNKjz4DNBwiurMexdkVyiidtQwEv1QU0r16Fq4wEutMdDAEd56DDnnN5MftE27 VHfdcvNB1c3I/EnJIOy1qELAKKnxdbHm5ApgXbVMn84/3w2OKhd0If6rB9j4hFFW 4l8qtF389q56dUaO5EkLVYtgjnGhpg++0jbraFfpVtfKzPANieRW9+hdyDNFW7Me 0DqBr5KRbd7Zzcn+3wCRGNbydnLouLEs5MiTf35T2Ud7JU8e8Kv87ucTJeAcQHcB b+VY40Zo/GPA4ggKMaXQWZx+dhah7jQDmCqf33I1WFo9x+x7QiQZNnQWgMv7Cpuf dLxk+6K6c0o7AzwVrrfcJesRAgMBAAGjggJ3MIICczAdBgNVHQ4EFgQUoR7VhH4w HGzcJH99Gj1kaylPtGAwHwYDVR0jBBgwFoAUS18cktxo2UEqrDB3GD+jbdA9zRUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREMjlCLzBCNzc4RTgwNTVD MTExRjFBQjA0ODg5NEE0ODMzNzczL1MxOGNrdHhvMlVFcXJEQjNHRC1qYmRBOXpS VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzE4Y2t0eG8yVUVxckRCM0dELWpiZEE5elJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDI5Qi8wQjc3OEU4MDU1QzExMUYxQUIwNDg4OTRBNDgzMzc3My9EMTBCQzJENkFD MEQxMUYxQTkyMTcxMUE3MDExRjk3MC5yb2EwNgYIKwYBBQUHAQcBAf8EJzAlMBIE AgABMAwDBAF3CoADBADfHdwwDwQCAAIwCQMHACQARKAAAjANBgkqhkiG9w0BAQsF AAOCAQEAl7yJregpVz9WZ48kEcVKUgNX2YR812SQA4W1PoSe22e93K2t7eDBDMZK 7mKO2/0tkfBF+lqapCXzmA+fiVP8SdoKRllw1YE3KuK0M9LWPyZAJTGjamsdaeVc CIGE4komAqx0ZMf1u5rgjFAjQ/kRQup8I9Wv3JGX2lctXAfaZr0jnlGCc+suH8lg xNYh3MHemEO7kAPCt3PPfZ+cu7zYNentscjudUJ+0OIAyHoR8K4HDinZqVxIyry8 oOH4hi+rrKMySgtcUEfMKeOiTfo0n7rHawLh/DXf+gl+B9T7JoVjhyvNAPnV80/4 0DNVsphaGyME1bP4IGMvNLEeEh1aBw== -----END CERTIFICATE-----Generated at Fri Sep 11 14:23:09 2026 by rpki-client