$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B9FBA9CE04D311E9A6452047C4F9AE02.roa File: B9FBA9CE04D311E9A6452047C4F9AE02.roa (raw, json) Hash identifier: J0bsUTVz7f6Z2PXyffpw6P5zH8dNVuOCC/5DgbI16Dk= Subject key identifier: 5E:AC:18:96:28:70:AC:58:F8:E1:5F:70:2E:01:DA:71:40:DF:5E:3C Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 211B Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B9FBA9CE04D311E9A6452047C4F9AE02.roa Signing time: Wed 30 Sep 2026 16:32:00 +0000 ROA not before: Wed 30 Sep 2026 16:32:00 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 58461 IP address blocks: 125.124.0.0/16 maxlen: 16 218.0.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8475 (0x211b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Sep 30 16:32:00 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd397f-74de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fe:d5:c2:40:d3:e4:42:47:6c:0d:68:e1:40: b1:7c:b1:57:81:9a:30:82:8c:03:f6:1a:0d:3e:77: 35:c4:45:9b:4b:ca:2f:25:01:75:8f:bf:95:3e:67: a6:62:a8:b6:2e:e9:7c:c0:23:ae:6b:cc:13:27:b1: c7:bf:2a:c8:54:9b:64:ea:38:92:65:d3:57:d3:6b: b0:15:23:15:0c:fe:94:38:c0:34:df:a9:57:39:97: bd:d4:9e:de:cb:82:70:0b:9e:f2:eb:04:24:c5:50: 90:37:26:8e:a6:a0:04:5f:53:2f:2f:89:fa:21:11: 1c:ef:f7:a9:48:38:f0:f1:9c:70:f6:27:86:45:8a: 88:85:92:3d:ff:43:9d:c6:be:7c:d0:9e:7f:b8:b8: 44:2c:6f:8e:46:7b:d3:dd:6f:7b:ed:15:21:bc:93: a2:3c:17:6d:94:07:0f:ef:ce:0b:10:0c:ce:2c:b8: c5:38:53:77:60:7b:1d:2e:8d:c9:c1:e7:89:c5:e3: 21:6b:48:f5:75:11:94:c2:92:10:6e:9c:f5:f3:ee: 41:70:98:3c:de:8e:bf:4d:06:1a:33:fd:bc:17:2e: a7:58:32:e4:84:12:9e:ce:ff:9d:c9:a9:9e:8a:15: 09:7d:d8:5b:be:05:80:ec:26:22:c1:e7:90:f6:97: 21:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AC:18:96:28:70:AC:58:F8:E1:5F:70:2E:01:DA:71:40:DF:5E:3C X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B9FBA9CE04D311E9A6452047C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 125.124.0.0/16 218.0.48.0/20 Signature Algorithm: sha256WithRSAEncryption 7a:30:3a:f6:b0:09:ed:b9:a4:69:ec:95:84:d4:37:3a:11:65: 92:c7:79:2f:f4:ac:fa:10:8e:6f:b4:d6:3d:f1:02:0f:78:47: 1f:b9:1c:7c:0d:ee:f2:f4:2d:bf:d2:a9:2a:f2:8f:0b:46:e3: bf:fd:2f:b0:a8:39:4c:99:bb:13:f2:a3:30:c2:b9:9e:1b:f2: a6:2d:d8:34:70:d4:74:fd:51:2a:9d:1c:cd:05:97:f3:1d:5e: 7a:ef:ea:3f:79:57:14:17:75:53:1b:45:4d:ef:09:16:29:32: d5:d5:a7:94:84:42:b7:9b:74:a4:bf:ef:fa:a5:29:06:7c:6c: c3:50:f3:0a:06:2c:7f:cc:d3:71:90:67:4d:83:4a:a7:46:82: 5e:07:a8:fc:15:7c:30:a6:e3:a5:52:83:36:00:5e:7a:70:b3: 44:7d:1b:0a:69:a5:4b:6f:2d:85:ac:05:05:a0:30:ba:e1:f0: 3c:1f:c1:e1:4e:a8:d4:da:9b:dd:b2:29:c3:ac:81:9e:76:71: ff:82:01:b0:91:6b:c7:df:d9:c1:17:21:c8:5a:31:7b:fd:22: d5:2e:26:f9:91:95:16:70:07:fc:dc:90:a0:c7:c0:7a:0c:6d: 75:4d:26:bf:b9:ce:52:1e:57:7b:ed:77:2a:d3:de:17:eb:cc: bc:22:5f:45 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgICIRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjYwOTMwMTYzMjAwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkMzk3Zi03NGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvP7VwkDT5EJHbA1o4UCxfLFXgZowgowD9hoNPnc1xEWbS8ovJQF1j7+VPmem Yqi2Lul8wCOua8wTJ7HHvyrIVJtk6jiSZdNX02uwFSMVDP6UOMA036lXOZe91J7e y4JwC57y6wQkxVCQNyaOpqAEX1MvL4n6IREc7/epSDjw8Zxw9ieGRYqIhZI9/0Od xr580J5/uLhELG+ORnvT3W977RUhvJOiPBdtlAcP784LEAzOLLjFOFN3YHsdLo3J weeJxeMha0j1dRGUwpIQbpz18+5BcJg83o6/TQYaM/28Fy6nWDLkhBKezv+dyame ihUJfdhbvgWA7CYiweeQ9pchpQIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFF6sGJYo cKxY+OFfcC4B2nFA3148MB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvQjlGQkE5Q0Uw NEQzMTFFOUE2NDUyMDQ3QzRGOUFFMDIucm9hMCQGCCsGAQUFBwEHAQH/BBUwEzAR BAIAATALAwMAfXwDBATaADAwDQYJKoZIhvcNAQELBQADggEBAHowOvawCe25pGns lYTUNzoRZZLHeS/0rPoQjm+01j3xAg94Rx+5HHwN7vL0Lb/SqSryjwtG47/9L7Co OUyZuxPyozDCuZ4b8qYt2DRw1HT9USqdHM0Fl/MdXnrv6j95VxQXdVMbRU3vCRYp MtXVp5SEQrebdKS/7/qlKQZ8bMNQ8woGLH/M03GQZ02DSqdGgl4HqPwVfDCm46VS gzYAXnpws0R9GwpppUtvLYWsBQWgMLrh8DwfweFOqNTam92yKcOsgZ52cf+CAbCR a8ff2cEXIchaMXv9ItUuJvmRlRZwB/zckKDHwHoMbXVNJr+5zlIeV3vtdyrT3hfr zLwiX0U= -----END CERTIFICATE-----Generated at Mon Oct 26 22:59:21 2026 by rpki-client