$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/59F5C224337811EAAD3FAA39C4F9AE02.roa File: 59F5C224337811EAAD3FAA39C4F9AE02.roa (raw, json) Hash identifier: 9eaOeBh0UQa0cSAZymBrxkNLUyT58kdQqa3jgcDlH40= Subject key identifier: C1:35:D4:E7:57:A2:2F:C0:AC:2D:23:C5:6D:46:9C:A5:F7:5F:23:6B Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3B9D Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/59F5C224337811EAAD3FAA39C4F9AE02.roa Signing time: Thu 20 Aug 2026 16:24:00 +0000 ROA not before: Thu 20 Aug 2026 16:24:00 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 24521 IP address blocks: 119.82.240.0/24 maxlen: 24 119.82.241.0/24 maxlen: 24 119.82.242.0/24 maxlen: 24 119.82.243.0/24 maxlen: 24 119.82.244.0/24 maxlen: 24 119.82.245.0/24 maxlen: 24 119.82.246.0/24 maxlen: 24 119.82.247.0/24 maxlen: 24 175.184.236.0/22 maxlen: 22 175.184.236.0/24 maxlen: 24 175.184.237.0/24 maxlen: 24 175.184.238.0/24 maxlen: 24 175.184.239.0/24 maxlen: 24 2403:ba00::/32 maxlen: 32 2403:ba00:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 15:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15261 (0x3b9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Aug 20 16:24:00 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a872a20-2ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9b:71:10:f8:a6:6f:18:7a:e9:1d:fb:d4:9a: 43:ac:3a:d9:82:d9:54:89:be:c8:57:4b:84:e4:7f: 6a:12:55:88:0f:c6:52:a5:55:ab:84:36:3a:b7:65: 7b:db:a7:d9:a0:a0:3f:51:e5:46:c6:7b:cf:bd:1d: fc:40:8e:41:fc:7c:d3:6c:80:5c:a4:64:84:80:60: 22:cb:bc:75:35:a7:51:39:f2:0a:be:4a:f1:5e:13: 23:7c:58:00:57:ac:60:99:3c:c5:2a:d0:30:81:4f: 32:e8:71:11:97:5a:0d:12:fa:bf:19:fc:7b:63:f9: 18:4d:e9:8c:b3:22:69:44:fe:cd:15:67:6d:3a:eb: cc:8f:2d:18:c7:f3:f6:f0:f0:81:c3:0a:ba:fb:e2: d2:8c:60:e9:59:03:22:92:bd:3b:64:fd:39:fc:14: 80:4b:48:61:a8:c0:2f:72:0d:c0:1e:59:e4:fe:52: 20:f1:69:e8:7a:58:35:53:c3:01:67:1d:bf:38:d3: 10:71:8b:14:e4:5a:97:65:dd:28:62:f4:83:99:51: a0:12:b3:af:16:07:a6:43:52:50:e3:3a:a7:a5:b1: a0:31:11:03:3a:9f:7d:39:92:af:bd:d1:51:ec:4d: 72:1f:21:58:62:33:83:49:07:fc:9e:01:7f:8f:79: 77:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:35:D4:E7:57:A2:2F:C0:AC:2D:23:C5:6D:46:9C:A5:F7:5F:23:6B X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/59F5C224337811EAAD3FAA39C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 119.82.240.0/21 175.184.236.0/22 IPv6: 2403:ba00::/32 Signature Algorithm: sha256WithRSAEncryption 7b:a6:cb:ff:20:18:5a:9b:76:16:84:d5:1a:ad:e8:a4:ad:6e: 65:76:30:d1:a6:62:cc:00:b4:7d:fd:c4:a5:3b:02:d4:08:6e: 3c:3e:62:7a:79:9b:8c:c0:b2:b5:ea:fe:a1:76:d6:b6:fe:e3: 88:52:e1:b7:35:e4:8f:33:46:86:47:a7:00:bf:e6:8d:95:b3: 7e:ee:43:7c:e8:1a:24:26:97:a9:5f:01:8a:c8:21:0d:57:cd: ec:96:30:a5:70:a6:64:6b:1a:8f:ac:89:4f:39:d1:81:1d:dd: 32:d2:1e:e3:ce:2f:d2:f6:a2:ef:30:b0:95:43:3a:55:7f:ed: 84:3c:94:b8:05:d7:fa:ef:71:d8:17:1f:c1:33:50:b7:bb:11: 57:74:fb:62:7d:58:d0:f5:a1:46:ff:04:14:d4:fc:be:69:72: 38:3b:76:47:e2:84:24:af:bc:41:16:72:47:2a:66:e5:dd:b5: 43:e1:31:cd:9b:88:14:f2:91:10:a3:92:f5:cd:cf:c6:cc:cc: b1:e1:60:3f:1c:81:a7:91:c8:e6:10:7e:b5:b6:b2:89:5c:30: 14:cb:76:42:f5:cb:19:b1:d5:d8:9d:71:7a:8f:6d:e0:08:a2: ea:32:f0:12:bd:4a:f2:b7:c6:cc:06:70:04:89:6e:e3:fc:95: b9:34:65:2d -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICO50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjYwODIwMTYyNDAwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg3MmEyMC0yYmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZtxEPimbxh66R371JpDrDrZgtlUib7IV0uE5H9qElWID8ZSpVWrhDY6t2V7 26fZoKA/UeVGxnvPvR38QI5B/HzTbIBcpGSEgGAiy7x1NadROfIKvkrxXhMjfFgA V6xgmTzFKtAwgU8y6HERl1oNEvq/Gfx7Y/kYTemMsyJpRP7NFWdtOuvMjy0Yx/P2 8PCBwwq6++LSjGDpWQMikr07ZP05/BSAS0hhqMAvcg3AHlnk/lIg8Wnoelg1U8MB Zx2/ONMQcYsU5FqXZd0oYvSDmVGgErOvFgemQ1JQ4zqnpbGgMREDOp99OZKvvdFR 7E1yHyFYYjODSQf8ngF/j3l33wIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFME11OdX oi/ArC0jxW1GnKX3XyNrMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvNTlGNUMyMjQz Mzc4MTFFQUFEM0ZBQTM5QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQDd1LwAwQCr7jsMA0EAgACMAcDBQAkA7oAMA0GCSqGSIb3DQEBCwUA A4IBAQB7psv/IBham3YWhNUareikrW5ldjDRpmLMALR9/cSlOwLUCG48PmJ6eZuM wLK16v6hdta2/uOIUuG3NeSPM0aGR6cAv+aNlbN+7kN86BokJpepXwGKyCENV83s ljClcKZkaxqPrIlPOdGBHd0y0h7jzi/S9qLvMLCVQzpVf+2EPJS4Bdf673HYFx/B M1C3uxFXdPtifVjQ9aFG/wQU1Py+aXI4O3ZH4oQkr7xBFnJHKmbl3bVD4THNm4gU 8pEQo5L1zc/GzMyx4WA/HIGnkcjmEH61trKJXDAUy3ZC9csZsdXYnXF6j23gCKLq MvASvUryt8bMBnAEiW7j/JW5NGUt -----END CERTIFICATE-----Generated at Thu Sep 10 21:56:24 2026 by rpki-client