$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/1AC9199AD3CB11EF84052053C4F9AE02.roa File: 1AC9199AD3CB11EF84052053C4F9AE02.roa (raw, json) Hash identifier: xoG3XA1Lq0Bqa5zm6JhMhmxLN46lI4bw6ffgxEn95DU= Subject key identifier: B5:E6:1F:74:44:EC:83:B2:75:6E:1A:D3:43:3A:9C:50:9C:98:0D:27 Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Certificate serial: 234E Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/1AC9199AD3CB11EF84052053C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:28:18 +0000 ROA not before: Thu 08 Jan 2026 05:10:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141177 IP address blocks: 43.250.48.0/22 maxlen: 24 45.64.114.0/23 maxlen: 23 45.64.114.0/24 maxlen: 24 45.64.115.0/24 maxlen: 24 2404:7c00:2::/48 maxlen: 48 2404:7c00:10::/44 maxlen: 44 2404:7c00:20::/44 maxlen: 44 2404:7c00:20::/48 maxlen: 48 2404:7c00:39::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9038 (0x234e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Validity Not Before: Jan 8 05:10:05 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a45b11-0098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fb:40:2b:4d:03:a9:b9:ed:5f:2a:a2:09:b7: 4e:78:4f:7a:b0:cc:4a:b8:2e:96:41:c7:59:5f:03: 99:a4:f9:7a:bb:52:a3:25:25:7d:6d:ef:a4:4b:6f: 8b:5e:31:bc:2e:28:d4:c4:dc:75:36:54:06:c4:cf: 2d:6e:5a:4b:79:9b:86:94:da:64:e4:2f:46:da:fc: 3d:84:8b:65:bb:5b:26:53:36:3d:ed:eb:d7:92:24: ce:2c:05:39:60:0b:53:47:c3:e6:c7:53:d1:5c:31: d2:c4:cb:67:fb:9c:a3:c1:fd:4a:c4:0f:81:2b:53: fa:76:10:cb:88:76:de:9d:ea:ec:f7:9a:e3:9c:b5: ec:7d:23:08:37:b4:57:de:b9:2e:fa:c7:e4:98:a5: bd:dd:58:d3:e0:4f:22:9c:45:32:3d:ab:88:b5:b0: 97:cd:96:66:b2:bd:ef:22:ea:ae:00:c1:79:39:de: f5:9f:ae:84:a9:c2:ff:5d:5d:da:f0:9c:6c:3b:7f: 33:9f:fb:5c:e4:2d:16:89:ab:d2:bc:b0:81:69:9b: 81:a4:e8:65:7a:43:8b:92:65:7e:83:41:d5:eb:c0: 74:0a:da:b9:59:72:ee:87:9b:e6:71:8b:c8:cd:a8: ad:f6:5c:fa:2b:de:06:ad:2e:44:71:ac:fa:88:d2: 2a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E6:1F:74:44:EC:83:B2:75:6E:1A:D3:43:3A:9C:50:9C:98:0D:27 X509v3 Authority Key Identifier: keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/1AC9199AD3CB11EF84052053C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.250.48.0/22 45.64.114.0/23 IPv6: 2404:7c00:2::/48 2404:7c00:10::-2404:7c00:2f:ffff:ffff:ffff:ffff:ffff 2404:7c00:39::/48 Signature Algorithm: sha256WithRSAEncryption 02:da:ed:b5:4b:8d:87:77:79:aa:6e:4c:0c:a5:bf:04:47:a4: 55:51:79:cb:96:14:76:5e:06:3e:b9:57:32:7e:5c:83:db:91: b2:ef:9c:34:9a:f6:20:95:22:50:9e:ef:c6:79:27:0b:ab:a7: 04:8c:cc:24:9d:d6:c6:a9:6f:a8:e7:f3:fc:5e:73:a5:19:23: 82:fd:be:ed:31:93:08:11:5c:cc:b0:32:58:a6:cc:a3:10:c8: 77:1b:0b:ee:8a:a1:7f:44:b3:59:7c:af:9e:24:c4:51:6c:01: 85:d5:fd:a9:eb:9d:95:8d:d1:b4:03:1f:c7:08:e7:51:78:93: c4:ed:52:72:8d:00:89:d8:1d:9f:76:d0:e8:e9:58:68:23:fc: 64:3d:0a:19:5a:b9:52:e5:26:f2:26:99:0a:e3:76:88:54:4e: bd:6a:62:78:2f:fc:b9:e3:f4:02:e3:9a:30:29:d2:cf:23:79: fb:ad:a6:c8:48:5d:bc:a2:ca:ef:8d:35:46:9b:bf:ce:6c:11: 11:bd:a8:91:2d:86:32:10:f3:40:4f:e8:63:57:8a:46:e2:40: 46:32:f9:2d:d6:37:26:a5:c2:2b:f9:b9:00:3c:50:63:27:a7: 5a:d2:be:a5:77:da:2e:67:b6:ec:03:b6:e7:6a:12:8c:8e:85: c3:bc:5b:89 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICI04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzMzMxMTAvBgNVBAUTKDY5OUU2NzQyNTY3QkU3MzI5Q0MzQTc4NkRFQjc4NTdF MkMyNDIwRjkwHhcNMjYwMTA4MDUxMDA1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWIxMS0wMDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnftAK00DqbntXyqiCbdOeE96sMxKuC6WQcdZXwOZpPl6u1KjJSV9be+kS2+L XjG8LijUxNx1NlQGxM8tblpLeZuGlNpk5C9G2vw9hItlu1smUzY97evXkiTOLAU5 YAtTR8Pmx1PRXDHSxMtn+5yjwf1KxA+BK1P6dhDLiHbeners95rjnLXsfSMIN7RX 3rku+sfkmKW93VjT4E8inEUyPauItbCXzZZmsr3vIuquAMF5Od71n66EqcL/XV3a 8JxsO38zn/tc5C0WiavSvLCBaZuBpOhlekOLkmV+g0HV68B0Ctq5WXLuh5vmcYvI zait9lz6K94GrS5Ecaz6iNIq8wIDAQABo4IClDCCApAwHQYDVR0OBBYEFLXmH3RE 7IOydW4a00M6nFCcmA0nMB8GA1UdIwQYMBaAFGmeZ0JWe+cynMOnht63hX4sJCD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzMy8wNjVEQTNCQUI4 NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6S2N3NmVHM3JlRmZpd2tJ UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaNW5RbFo3NXpLY3c2ZUczcmVGZml3a0lQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTkzMzMvMDY1REEzQkFCODQ0MTFFNUI1MzU3QjJGQzRGOUFFMDIvMUFDOTE5OUFE M0NCMTFFRjg0MDUyMDUzQzRGOUFFMDIucm9hMFMGCCsGAQUFBwEHAQH/BEQwQjAS BAIAATAMAwQCK/owAwQBLUByMCwEAgACMCYDBwAkBHwAAAIwEgMHBCQEfAAAEAMH BCQEfAAAIAMHACQEfAAAOTANBgkqhkiG9w0BAQsFAAOCAQEAAtrttUuNh3d5qm5M DKW/BEekVVF5y5YUdl4GPrlXMn5cg9uRsu+cNJr2IJUiUJ7vxnknC6unBIzMJJ3W xqlvqOfz/F5zpRkjgv2+7TGTCBFczLAyWKbMoxDIdxsL7oqhf0SzWXyvniTEUWwB hdX9qeudlY3RtAMfxwjnUXiTxO1Sco0Aidgdn3bQ6OlYaCP8ZD0KGVq5UuUm8iaZ CuN2iFROvWpieC/8ueP0AuOaMCnSzyN5+62myEhdvKLK7401Rpu/zmwREb2okS2G MhDzQE/oY1eKRuJARjL5LdY3JqXCK/m5ADxQYyenWtK+pXfaLme27AO252oSjI6F w7xbiQ== -----END CERTIFICATE-----Generated at Mon Mar 2 13:02:16 2026 by rpki-client