$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/1AC9199AD3CB11EF84052053C4F9AE02.roa File: 1AC9199AD3CB11EF84052053C4F9AE02.roa (raw, json) Hash identifier: plwWFq4k0Hgx6vP8bTzqJt9GJIcOt71z9VOfufJhc6Q= Subject key identifier: A3:B8:E1:EB:56:0C:36:32:D0:8D:9C:03:97:67:F4:89:AA:7F:AB:B0 Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Certificate serial: 2368 Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/1AC9199AD3CB11EF84052053C4F9AE02.roa Signing time: Fri 10 Apr 2026 16:19:00 +0000 ROA not before: Fri 10 Apr 2026 16:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141177 IP address blocks: 43.250.48.0/22 maxlen: 24 45.64.114.0/23 maxlen: 23 45.64.114.0/24 maxlen: 24 45.64.115.0/24 maxlen: 24 2404:7c00:2::/48 maxlen: 48 2404:7c00:10::/44 maxlen: 44 2404:7c00:20::/44 maxlen: 44 2404:7c00:20::/48 maxlen: 48 2404:7c00:39::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9064 (0x2368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Validity Not Before: Apr 10 16:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69d922f4-2f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1f:e3:31:a9:91:e8:2f:4c:4c:da:18:29:e9: f2:9b:26:1e:cd:59:ce:0c:e2:2c:85:b9:c3:a5:d4: ed:b0:50:81:ee:19:eb:e4:19:82:5f:07:ae:0a:ab: 53:71:59:e1:15:91:f9:cc:34:92:88:77:50:4b:2d: f7:af:35:79:61:11:2e:54:af:2a:f2:10:30:5a:2c: a3:db:a6:3f:78:c0:5d:56:dc:d5:95:c9:61:ef:cd: 16:59:39:2f:3b:c5:34:c9:77:63:4c:28:d9:20:09: f7:9e:b0:e8:10:02:c5:ef:40:c1:11:83:fa:97:1a: 56:51:b9:a4:e8:69:68:04:90:93:f4:dd:37:f8:68: 54:e7:11:1a:a1:64:d1:05:5f:b8:2b:a3:d9:ae:30: 79:db:44:96:8a:90:fe:56:e4:18:aa:6c:51:e6:3c: 5f:44:6f:6d:64:8c:1c:58:f0:ee:61:67:58:19:36: 69:90:69:a3:13:2a:4b:08:5c:fa:45:42:f7:16:99: a5:b0:2c:38:b5:11:72:0b:71:f4:6c:14:41:e6:ff: d9:73:09:ae:5d:e8:f3:58:9a:ee:60:4d:3a:d2:9a: ec:bf:eb:c2:53:7e:3e:cf:ae:42:6c:6a:53:63:5e: 8b:13:21:3a:42:d5:c3:ea:f1:52:1e:97:b4:15:a6: 65:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B8:E1:EB:56:0C:36:32:D0:8D:9C:03:97:67:F4:89:AA:7F:AB:B0 X509v3 Authority Key Identifier: keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/1AC9199AD3CB11EF84052053C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.250.48.0/22 45.64.114.0/23 IPv6: 2404:7c00:2::/48 2404:7c00:10::-2404:7c00:2f:ffff:ffff:ffff:ffff:ffff 2404:7c00:39::/48 Signature Algorithm: sha256WithRSAEncryption 9c:5a:b5:e8:51:c7:18:9e:7f:80:ca:b7:d0:54:03:4f:73:ad: 45:4d:a6:65:2a:6b:5a:04:f2:51:9d:9b:0c:38:4e:cf:41:f5: 18:0c:5c:4c:8a:5d:ca:cc:fb:a5:cf:5c:c0:3a:e5:38:c9:2d: 53:d6:bf:d9:bb:18:74:0f:cf:5b:78:69:9b:6b:36:83:53:6e: c9:bd:bd:43:8c:e5:04:96:3d:46:15:ec:7c:85:6a:51:d3:b4: 08:95:4c:f3:71:4c:14:75:41:49:8a:d6:6a:27:e3:a5:ae:fb: 09:20:7f:15:4f:1c:b2:ed:5b:bf:45:07:ba:01:92:0a:dc:fc: ab:85:2d:73:85:13:bd:78:a1:ab:6e:13:ab:03:d3:3e:6d:e9: 23:d8:68:cb:9c:83:00:fa:65:2c:b2:bd:8f:b4:e1:08:22:41: 97:23:d2:d1:50:9f:c2:97:0c:63:c8:30:8f:e4:c5:07:87:5d: d9:01:55:45:74:6c:58:6f:68:8d:06:46:21:36:eb:12:3c:66: 21:5e:f0:72:bc:c7:4f:35:75:b4:58:20:43:1c:87:91:6b:32: ff:71:05:72:24:53:57:f7:e4:f5:fe:78:43:ce:7b:12:46:fd: 2a:17:f6:2e:e4:71:72:ea:01:c9:e9:ab:f7:d4:14:a2:f1:1b: aa:da:f1:d8 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICI2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzMzMxMTAvBgNVBAUTKDY5OUU2NzQyNTY3QkU3MzI5Q0MzQTc4NkRFQjc4NTdF MkMyNDIwRjkwHhcNMjYwNDEwMTYxOTAwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWQ5MjJmNC0yZjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxR/jMamR6C9MTNoYKenymyYezVnODOIshbnDpdTtsFCB7hnr5BmCXweuCqtT cVnhFZH5zDSSiHdQSy33rzV5YREuVK8q8hAwWiyj26Y/eMBdVtzVlclh780WWTkv O8U0yXdjTCjZIAn3nrDoEALF70DBEYP6lxpWUbmk6GloBJCT9N03+GhU5xEaoWTR BV+4K6PZrjB520SWipD+VuQYqmxR5jxfRG9tZIwcWPDuYWdYGTZpkGmjEypLCFz6 RUL3FpmlsCw4tRFyC3H0bBRB5v/ZcwmuXejzWJruYE060prsv+vCU34+z65CbGpT Y16LEyE6QtXD6vFSHpe0FaZlMQIDAQABo4IClDCCApAwHQYDVR0OBBYEFKO44etW DDYy0I2cA5dn9Imqf6uwMB8GA1UdIwQYMBaAFGmeZ0JWe+cynMOnht63hX4sJCD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzMy8wNjVEQTNCQUI4 NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6S2N3NmVHM3JlRmZpd2tJ UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaNW5RbFo3NXpLY3c2ZUczcmVGZml3a0lQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTkzMzMvMDY1REEzQkFCODQ0MTFFNUI1MzU3QjJGQzRGOUFFMDIvMUFDOTE5OUFE M0NCMTFFRjg0MDUyMDUzQzRGOUFFMDIucm9hMFMGCCsGAQUFBwEHAQH/BEQwQjAS BAIAATAMAwQCK/owAwQBLUByMCwEAgACMCYDBwAkBHwAAAIwEgMHBCQEfAAAEAMH BCQEfAAAIAMHACQEfAAAOTANBgkqhkiG9w0BAQsFAAOCAQEAnFq16FHHGJ5/gMq3 0FQDT3OtRU2mZSprWgTyUZ2bDDhOz0H1GAxcTIpdysz7pc9cwDrlOMktU9a/2bsY dA/PW3hpm2s2g1Nuyb29Q4zlBJY9RhXsfIVqUdO0CJVM83FMFHVBSYrWaifjpa77 CSB/FU8csu1bv0UHugGSCtz8q4Utc4UTvXihq24TqwPTPm3pI9hoy5yDAPplLLK9 j7ThCCJBlyPS0VCfwpcMY8gwj+TFB4dd2QFVRXRsWG9ojQZGITbrEjxmIV7wcrzH TzV1tFggQxyHkWsy/3EFciRTV/fk9f54Q857Ekb9Khf2LuRxcuoByemr99QUovEb qtrx2A== -----END CERTIFICATE-----Generated at Fri Apr 17 17:45:21 2026 by rpki-client