$ rpki-client -vvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/D52009B06A6311EFA96F023DC4F9AE02.roa File: D52009B06A6311EFA96F023DC4F9AE02.roa (raw, json) Hash identifier: VMik+VP2VW8b9tXPC9B03sMT9ppFEX01lrBrKEr5WZo= Subject key identifier: EB:07:BC:48:18:F7:53:E2:91:14:23:98:60:12:2A:3C:0D:5F:79:0F Certificate issuer: /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509 Certificate serial: 3611 Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/D52009B06A6311EFA96F023DC4F9AE02.roa Signing time: Mon 02 Mar 2026 04:52:59 +0000 ROA not before: Tue 02 Dec 2025 14:40:07 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 37997 IP address blocks: 124.195.128.0/20 maxlen: 20 124.195.128.0/22 maxlen: 22 124.195.128.0/24 maxlen: 24 124.195.129.0/24 maxlen: 24 124.195.130.0/24 maxlen: 24 124.195.131.0/24 maxlen: 24 124.195.132.0/22 maxlen: 22 124.195.132.0/24 maxlen: 24 124.195.133.0/24 maxlen: 24 124.195.134.0/24 maxlen: 24 124.195.135.0/24 maxlen: 24 124.195.136.0/22 maxlen: 22 124.195.136.0/24 maxlen: 24 124.195.137.0/24 maxlen: 24 124.195.138.0/24 maxlen: 24 124.195.139.0/24 maxlen: 24 124.195.140.0/22 maxlen: 22 124.195.140.0/24 maxlen: 24 124.195.141.0/24 maxlen: 24 124.195.142.0/24 maxlen: 24 124.195.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13841 (0x3611) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117394, serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509 Validity Not Before: Dec 2 14:40:07 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a517ab-983c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8e:3e:8d:b4:bd:07:da:19:0c:26:b7:f7:e0: c8:ed:7a:7b:cf:1f:6c:ef:51:55:ae:80:18:56:45: 6d:bf:5e:7f:a6:f4:19:73:cc:da:70:f3:c9:bd:34: cc:25:c0:2a:58:28:39:7d:28:78:be:ae:f4:90:6d: 07:f7:25:ff:1e:7c:f1:05:e7:90:79:ae:78:a6:00: 37:d7:2e:6a:e0:5f:71:ed:32:d6:58:c8:cf:70:c8: fe:83:ee:07:31:b9:6d:6a:14:fe:56:9f:3e:d0:56: dc:1a:25:09:a0:7c:5b:32:bf:1b:b8:ca:cb:d7:f3: 30:28:e7:e1:56:ec:46:e5:b9:de:7a:ce:26:c5:58: eb:d3:0c:5e:05:7a:62:ce:42:d0:09:be:62:fd:11: 7d:12:08:cd:d5:f7:ee:7d:9f:70:87:89:16:1b:f1: d0:f6:57:97:5b:e3:09:0b:3c:92:c8:a8:4d:89:4f: b6:98:42:fb:20:d3:31:b0:ee:f3:b1:37:24:eb:73: cd:4c:a0:a5:8d:ea:f1:fb:6e:67:cf:90:af:2d:2c: f8:0a:14:6f:bf:b6:3d:24:30:a4:7f:15:8b:42:34: 06:a3:1a:63:1f:0d:c7:68:b3:dc:b5:b6:41:3a:13: 88:2e:e2:fa:42:3b:f3:91:3b:25:28:86:33:60:c3: 4c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:07:BC:48:18:F7:53:E2:91:14:23:98:60:12:2A:3C:0D:5F:79:0F X509v3 Authority Key Identifier: keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/D52009B06A6311EFA96F023DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 124.195.128.0/20 Signature Algorithm: sha256WithRSAEncryption 5c:76:81:86:5c:6c:df:9e:d8:70:78:99:2e:b2:64:b0:53:4f: 4d:50:72:d7:c1:58:23:a4:5b:c1:52:0c:88:d6:7d:75:c8:47: 8b:7e:3e:94:15:f4:4b:6e:56:07:bb:ec:9d:cf:4b:f9:3d:00: 74:24:01:5f:99:ff:ce:12:66:ee:13:22:ee:25:9c:77:95:ad: 20:27:5e:b5:52:96:10:29:78:ff:65:f3:7c:3b:25:75:e5:f7: cb:0b:fc:9d:a9:0f:a1:19:16:25:81:15:9b:be:e3:46:79:17: 9e:c3:e5:d7:e9:cb:7a:0f:1a:bf:89:fb:9b:43:de:8c:19:84: 4f:3a:bf:53:a2:2a:c9:0d:d6:84:d9:98:ad:f5:9a:3e:1a:ab: 12:0b:34:5c:5d:5a:09:1f:13:79:14:98:b9:1b:32:a5:97:e5: 7a:29:7b:9e:f4:7d:76:69:12:47:eb:63:6b:d3:1e:a7:59:98: c5:8f:3a:e2:c8:63:3a:ff:b0:4e:e7:ba:51:94:b2:02:73:3a: 7b:09:60:c8:76:e1:5d:f9:3d:e0:72:f3:dd:e5:45:f8:33:95: 3f:31:c0:54:91:59:b2:84:7c:5a:d2:90:d0:e9:b6:fc:01:9e: 32:57:99:48:10:d5:60:9a:53:2b:f6:f6:b0:0f:bd:61:9d:b7: cd:13:be:3d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczOTQxMTAvBgNVBAUTKEFBRkFBRTNDNTcwM0IzOTMzN0ZEM0Q3QTk2NjZDNThD QjhDM0I1MDkwHhcNMjUxMjAyMTQ0MDA3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MTdhYi05ODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAno4+jbS9B9oZDCa39+DI7Xp7zx9s71FVroAYVkVtv15/pvQZc8zacPPJvTTM JcAqWCg5fSh4vq70kG0H9yX/HnzxBeeQea54pgA31y5q4F9x7TLWWMjPcMj+g+4H MbltahT+Vp8+0FbcGiUJoHxbMr8buMrL1/MwKOfhVuxG5bnees4mxVjr0wxeBXpi zkLQCb5i/RF9EgjN1ffufZ9wh4kWG/HQ9leXW+MJCzySyKhNiU+2mEL7INMxsO7z sTck63PNTKCljerx+25nz5CvLSz4ChRvv7Y9JDCkfxWLQjQGoxpjHw3HaLPctbZB OhOILuL6QjvzkTslKIYzYMNMSwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOsHvEgY 91PikRQjmGASKjwNX3kPMB8GA1UdIwQYMBaAFKr6rjxXA7OTN/09epZmxYy4w7UJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzM5NC80RjU5MTg2QTFE NkYxMUUyOUI1NDQ2QjEwOEIwMkNEMi9xdnF1UEZjRHM1TTNfVDE2bG1iRmpMakR0 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F2cXVQRmNEczVNM19UMTZsbWJGakxqRHRRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTczOTQvNEY1OTE4NkExRDZGMTFFMjlCNTQ0NkIxMDhCMDJDRDIvRDUyMDA5QjA2 QTYzMTFFRkE5NkYwMjNEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEfMOAMA0GCSqGSIb3DQEBCwUAA4IBAQBcdoGGXGzfnthweJkusmSw U09NUHLXwVgjpFvBUgyI1n11yEeLfj6UFfRLblYHu+ydz0v5PQB0JAFfmf/OEmbu EyLuJZx3la0gJ161UpYQKXj/ZfN8OyV15ffLC/ydqQ+hGRYlgRWbvuNGeReew+XX 6ct6Dxq/ifubQ96MGYRPOr9ToirJDdaE2Zit9Zo+GqsSCzRcXVoJHxN5FJi5GzKl l+V6KXue9H12aRJH62Nr0x6nWZjFjzriyGM6/7BO57pRlLICczp7CWDIduFd+T3g cvPd5UX4M5U/McBUkVmyhHxa0pDQ6bb8AZ4yV5lIENVgmlMr9vawD71hnbfNE749 -----END CERTIFICATE-----Generated at Tue Mar 3 01:15:10 2026 by rpki-client