$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/50550748066011EEA5F59657C4F9AE02.roa File: 50550748066011EEA5F59657C4F9AE02.roa (raw, json) Hash identifier: oQodtB1+82tFEhpgL54CL4Nws5xDZaxhhyE9CwcFXKw= Subject key identifier: 26:34:DC:F5:39:72:E8:F0:6A:18:EE:34:D5:52:8B:EB:D5:F6:62:39 Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 211C Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/50550748066011EEA5F59657C4F9AE02.roa Signing time: Wed 30 Sep 2026 16:32:02 +0000 ROA not before: Wed 30 Sep 2026 16:32:01 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 58466 IP address blocks: 121.14.0.0/19 maxlen: 19 121.14.32.0/22 maxlen: 22 121.14.36.0/22 maxlen: 22 121.14.40.0/21 maxlen: 21 121.14.48.0/20 maxlen: 20 121.14.64.0/21 maxlen: 21 121.14.192.0/20 maxlen: 20 125.88.31.0/24 maxlen: 24 125.88.64.0/23 maxlen: 23 125.88.168.0/21 maxlen: 21 125.94.32.0/19 maxlen: 19 125.94.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8476 (0x211c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Sep 30 16:32:01 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd3981-1daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b3:4f:02:45:67:46:2f:0d:59:c3:99:9d:24: ce:f5:e4:fb:1b:87:91:82:11:ec:5c:fe:45:8b:1f: 96:b3:f9:28:4a:d4:99:61:28:1f:82:a5:8b:f4:0f: fc:f8:eb:af:11:dd:db:ab:59:12:a5:ba:8e:c5:1a: 3b:b9:7e:2c:1c:d5:f8:32:fa:74:65:3f:67:90:6c: ec:8a:d5:cd:d4:19:b0:51:cb:7b:bc:b7:ec:a5:9b: 59:7b:d5:00:ab:95:7e:a5:47:51:39:3f:fe:37:b8: e7:c1:7f:d9:c5:f3:38:e4:3e:29:ee:10:52:0d:60: 12:08:65:a7:6b:1a:49:57:dd:1e:c0:8f:11:86:36: 94:b8:3e:64:f0:33:39:11:a3:df:7f:71:46:85:e6: 53:cc:67:fd:f3:e4:15:e0:e8:7d:67:68:9a:64:9f: 07:87:87:e1:3b:b5:23:d6:17:b2:09:11:b0:8d:d0: b1:a1:6c:8f:a2:1e:24:c4:f4:27:35:35:a4:0d:ba: 85:3a:a8:0d:fe:c8:30:92:cf:1b:f7:cc:fc:3d:93: 75:56:32:39:32:80:5d:b8:00:c3:09:b8:4d:18:c7: 7d:94:82:e2:63:7d:16:24:52:46:f6:78:ad:0d:5a: 4f:3b:ea:23:60:79:13:d0:cb:2b:5f:e7:19:3f:97: bd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:34:DC:F5:39:72:E8:F0:6A:18:EE:34:D5:52:8B:EB:D5:F6:62:39 X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/50550748066011EEA5F59657C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 121.14.0.0-121.14.71.255 121.14.192.0/20 125.88.31.0/24 125.88.64.0/23 125.88.168.0/21 125.94.32.0/19 125.94.212.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:f7:18:c6:c8:b2:5d:63:d5:0e:bd:65:6a:86:65:b0:e1:be: fd:78:2f:a6:04:9d:54:8c:fc:c1:2b:a9:b9:ed:63:1c:c8:f3: 1f:5c:16:bc:d7:74:64:ac:5d:c8:da:91:ce:de:1f:d6:6e:68: 5f:7c:25:76:e3:6d:61:b2:41:e2:c8:97:df:64:5c:c8:b6:08: 00:b8:57:5a:8e:82:32:35:fd:bb:d4:4c:a6:68:fa:c3:0b:c8: a7:d8:94:3b:d6:21:fc:54:d1:7e:41:e3:7a:d6:c8:38:39:5e: 7b:0a:a0:92:13:dc:85:9a:a3:8b:bc:b0:c9:b1:09:3f:6e:4a: 30:eb:5c:5f:f4:c2:1c:5c:0f:81:da:60:d0:ac:1c:a3:e3:3c: bb:8f:a8:39:20:c4:96:8e:81:d4:27:4d:fe:8f:55:8d:d8:6c: ea:7b:d2:43:3e:65:cf:b3:d7:27:68:90:14:0a:d6:ff:de:27: fe:57:c5:1a:ab:6e:bc:6c:c3:91:b5:bf:69:68:6b:a3:6c:8f: 57:1c:e3:39:87:95:f8:51:f8:a5:3e:15:9c:2b:4a:d3:2b:6c: b7:01:a1:d6:af:65:9b:e6:de:fe:29:05:78:ef:4f:0b:f9:8c: e6:76:47:0c:68:e5:96:66:d1:c0:0d:77:e9:93:b8:dc:c7:ac: 8c:1c:1e:4c -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgICIRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjYwOTMwMTYzMjAxWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkMzk4MS0xZGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbNPAkVnRi8NWcOZnSTO9eT7G4eRghHsXP5Fix+Ws/koStSZYSgfgqWL9A/8 +OuvEd3bq1kSpbqOxRo7uX4sHNX4Mvp0ZT9nkGzsitXN1BmwUct7vLfspZtZe9UA q5V+pUdROT/+N7jnwX/ZxfM45D4p7hBSDWASCGWnaxpJV90ewI8RhjaUuD5k8DM5 EaPff3FGheZTzGf98+QV4Oh9Z2iaZJ8Hh4fhO7Uj1heyCRGwjdCxoWyPoh4kxPQn NTWkDbqFOqgN/sgwks8b98z8PZN1VjI5MoBduADDCbhNGMd9lILiY30WJFJG9nit DVpPO+ojYHkT0MsrX+cZP5e9OQIDAQABo4ICizCCAocwHQYDVR0OBBYEFCY03PU5 cujwahjuNNVSi+vV9mI5MB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvNTA1NTA3NDgw NjYwMTFFRUE1RjU5NjU3QzRGOUFFMDIucm9hMEoGCCsGAQUFBwEHAQH/BDswOTA3 BAIAATAxMAsDAwF5DgMEA3kOQAMEBHkOwAMEAH1YHwMEAX1YQAMEA31YqAMEBX1e IAMEAn1e1DANBgkqhkiG9w0BAQsFAAOCAQEAC/cYxsiyXWPVDr1laoZlsOG+/Xgv pgSdVIz8wSupue1jHMjzH1wWvNd0ZKxdyNqRzt4f1m5oX3wlduNtYbJB4siX32Rc yLYIALhXWo6CMjX9u9RMpmj6wwvIp9iUO9Yh/FTRfkHjetbIODleewqgkhPchZqj i7ywybEJP25KMOtcX/TCHFwPgdpg0Kwco+M8u4+oOSDElo6B1CdN/o9Vjdhs6nvS Qz5lz7PXJ2iQFArW/94n/lfFGqtuvGzDkbW/aWhro2yPVxzjOYeV+FH4pT4VnCtK 0ytstwGh1q9lm+be/ikFeO9PC/mM5nZHDGjllmbRwA136ZO43MesjBweTA== -----END CERTIFICATE-----Generated at Tue Oct 27 22:37:40 2026 by rpki-client