$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D6672BEE0BD111ECB2E9C868C4F9AE02.roa File: D6672BEE0BD111ECB2E9C868C4F9AE02.roa (raw, json) Hash identifier: lEh9L7iyp5I84rP98tz9XY5hEAb4pddo1gVVYE+BqlM= Subject key identifier: 4E:15:22:87:9E:8F:29:14:97:C0:9B:C9:F5:31:90:A8:40:76:53:C7 Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54 Certificate serial: 3790 Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D6672BEE0BD111ECB2E9C868C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:28:41 +0000 ROA not before: Sat 22 Mar 2025 15:01:01 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140499 IP address blocks: 119.152.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14224 (0x3790) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54 Validity Not Before: Mar 22 15:01:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a48558-4d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:55:07:ec:38:a9:0a:3c:04:39:05:15:37:01: 88:dd:1d:c2:aa:b2:69:92:54:0c:14:ba:7a:79:d4: 33:90:91:bb:ec:37:e0:97:7f:0d:bd:4a:1a:c4:fd: cf:b9:a7:b1:0c:3a:f4:d5:00:01:6f:af:ba:47:76: d2:76:fc:06:fc:68:44:9e:bc:b2:8f:31:bc:cd:13: 63:f7:f7:ee:e6:95:50:83:f6:f3:e5:03:d5:3b:af: f8:c5:ae:3f:d9:a2:fe:e2:b8:d9:08:32:ef:b7:5c: 21:be:94:cb:79:71:ab:6e:da:d5:34:f5:3f:7b:f1: 29:74:96:d6:fa:3e:65:c6:b6:3b:b7:c3:19:60:69: e7:88:c9:62:a1:b0:c5:cd:b1:d8:28:f6:a3:e2:aa: 67:9d:fa:fa:be:66:59:58:6a:8d:52:be:90:92:57: 3a:df:08:95:9b:3a:6e:27:24:b0:08:fd:f9:c8:9e: 8b:12:25:88:e6:40:a7:52:a3:b1:31:b3:68:da:a2: 4a:e1:03:43:94:0f:73:a5:60:fb:df:ea:3d:f6:7c: 51:9f:ac:e2:59:43:79:fd:af:5e:ed:a5:8a:62:26: ce:a2:e3:1d:19:da:13:8f:45:65:d8:0e:01:8c:41: b6:aa:4b:9b:71:9d:c2:c8:bf:f9:3e:e8:03:f8:b4: e1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:15:22:87:9E:8F:29:14:97:C0:9B:C9:F5:31:90:A8:40:76:53:C7 X509v3 Authority Key Identifier: keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/D6672BEE0BD111ECB2E9C868C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 119.152.126.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:b2:8f:9e:cf:54:bd:24:84:58:e4:27:a3:08:a7:73:11:ad: cb:9a:3d:09:73:00:84:35:97:4a:e4:2d:8b:5c:40:93:10:d3: bf:5c:8d:c1:63:d1:3d:ac:57:cd:49:d1:3d:3a:d4:cf:19:d9: 4c:89:34:c8:31:5b:4f:61:18:41:2e:45:05:3f:21:f9:e2:e3: fa:4c:6a:56:a4:03:6b:e4:45:01:be:ef:7a:44:23:f6:76:6a: 12:70:f7:22:a5:64:d3:a7:31:b1:71:96:fc:c1:fd:9e:9a:ed: 53:d3:cb:cc:b5:af:5d:a4:a7:85:b0:0b:1a:37:1a:ea:9c:f2: 82:d0:8c:02:ce:23:a6:93:53:f1:d8:f4:44:72:c8:d8:04:4f: 6c:5c:97:67:c7:e2:8c:35:41:0a:b8:7a:8a:2e:25:89:bc:90: 64:30:e2:e9:b8:c3:92:2b:b6:4b:65:00:9d:e4:e5:ad:fb:1f: c0:6f:a8:47:fd:bc:d9:2e:f1:e3:a6:9a:1f:dc:a2:38:9f:45: 12:8a:a8:84:3d:da:6b:af:da:a4:08:1c:c3:ef:91:d7:36:40: 14:3f:12:24:d2:83:29:ed:87:3a:35:f8:ad:f6:14:1f:e4:49: 33:7c:bb:94:8b:9c:d2:e9:91:9f:7c:34:b5:2a:21:18:c9:74: 0c:0b:e1:9d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICN5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4MzIxMTAvBgNVBAUTKDlFRDkwNTUxMDdDNzBGODVCQjkxQThEQTAyNzBCNUNB NzYwQUVCNTQwHhcNMjUwMzIyMTUwMTAxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODU1OC00ZDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1UH7DipCjwEOQUVNwGI3R3CqrJpklQMFLp6edQzkJG77Dfgl38NvUoaxP3P uaexDDr01QABb6+6R3bSdvwG/GhEnryyjzG8zRNj9/fu5pVQg/bz5QPVO6/4xa4/ 2aL+4rjZCDLvt1whvpTLeXGrbtrVNPU/e/EpdJbW+j5lxrY7t8MZYGnniMliobDF zbHYKPaj4qpnnfr6vmZZWGqNUr6Qklc63wiVmzpuJySwCP35yJ6LEiWI5kCnUqOx MbNo2qJK4QNDlA9zpWD73+o99nxRn6ziWUN5/a9e7aWKYibOouMdGdoTj0Vl2A4B jEG2qkubcZ3CyL/5PugD+LThfQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFE4VIoee jykUl8CbyfUxkKhAdlPHMB8GA1UdIwQYMBaAFJ7ZBVEHxw+Fu5Go2gJwtcp2CutU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDgzMi85REFGNzgwRTFE OTQxMUUyOTkwMUYzRjgwOEIwMkNEMi9udGtGVVFmSEQ0VzdrYWphQW5DMXluWUs2 MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL250a0ZVUWZIRDRXN2thamFBbkMxeW5ZSzYxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA4MzIvOURBRjc4MEUxRDk0MTFFMjk5MDFGM0Y4MDhCMDJDRDIvRDY2NzJCRUUw QkQxMTFFQ0IyRTlDODY4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAd5h+MA0GCSqGSIb3DQEBCwUAA4IBAQB8so+ez1S9JIRY5CejCKdz Ea3Lmj0JcwCENZdK5C2LXECTENO/XI3BY9E9rFfNSdE9OtTPGdlMiTTIMVtPYRhB LkUFPyH54uP6TGpWpANr5EUBvu96RCP2dmoScPcipWTTpzGxcZb8wf2emu1T08vM ta9dpKeFsAsaNxrqnPKC0IwCziOmk1Px2PREcsjYBE9sXJdnx+KMNUEKuHqKLiWJ vJBkMOLpuMOSK7ZLZQCd5OWt+x/Ab6hH/bzZLvHjppof3KI4n0USiqiEPdprr9qk CBzD75HXNkAUPxIk0oMp7Yc6Nfit9hQf5EkzfLuUi5zS6ZGffDS1KiEYyXQMC+Gd -----END CERTIFICATE-----Generated at Sun Mar 8 09:46:01 2026 by rpki-client