$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/EBF4C0063C8811EC889B9D78C4F9AE02.roa File: EBF4C0063C8811EC889B9D78C4F9AE02.roa (raw, json) Hash identifier: xL18VcZ56ntQg06dxu8mPMsho0DT/fe8AiSvaUT/7NM= Subject key identifier: 38:AD:6D:B5:93:AF:8F:5D:96:88:3D:1C:76:90:49:66:39:FD:C4:29 Certificate issuer: /CN=A9120AC1/serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14 Certificate serial: 0551 Authority key identifier: 77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/EBF4C0063C8811EC889B9D78C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:37:13 +0000 ROA not before: Thu 05 Feb 2026 09:23:25 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 45753 IP address blocks: 141.193.152.0/21 maxlen: 21 141.193.152.0/24 maxlen: 24 141.193.153.0/24 maxlen: 24 141.193.154.0/24 maxlen: 24 141.193.155.0/24 maxlen: 24 141.193.156.0/24 maxlen: 24 141.193.157.0/24 maxlen: 24 141.193.158.0/24 maxlen: 24 141.193.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 14:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1361 (0x551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1, serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14 Validity Not Before: Feb 5 09:23:25 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a46b39-4df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8a:c8:8b:2a:d4:06:0b:af:5e:45:4b:bd:f4: a4:67:03:4c:16:ae:ff:64:b2:56:2f:3c:b8:bb:f8: 7c:92:bd:57:5e:ff:74:79:bf:74:d3:5a:2e:17:cd: 32:d5:a6:c1:ca:b6:b9:71:e5:fa:51:d5:b0:57:16: 20:90:5e:ea:1e:0d:94:76:da:2d:28:c4:77:4b:66: b0:be:e8:8b:58:08:03:a5:fd:a2:ee:8a:88:2d:20: 5b:58:c8:3e:4b:b0:be:f3:fa:b2:7e:4b:39:bc:2a: b6:00:8f:f7:3e:c6:20:f7:b6:9f:67:fb:77:a1:0f: ab:33:c4:be:17:41:e7:ee:00:97:38:90:3f:b4:3f: 74:8a:06:ad:75:6a:81:f9:38:02:95:eb:65:48:a8: bc:cf:ad:f9:d5:39:fa:5a:77:85:53:b2:05:08:01: 27:81:d4:9a:8d:43:df:72:3e:fa:80:6c:13:e4:02: 8e:0e:81:ac:84:37:72:fd:84:07:fa:c6:fc:3d:a4: 0f:27:22:9e:21:8a:1e:16:62:83:dd:f6:45:94:3a: d3:4c:e8:f8:1e:27:b2:5d:ce:c2:17:bc:21:8d:4e: cf:49:1d:fb:57:f1:52:34:ea:9a:ca:35:74:e8:21: 9b:ef:5e:f0:85:d1:2c:ba:b1:dd:9f:7f:02:6b:79: 8f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AD:6D:B5:93:AF:8F:5D:96:88:3D:1C:76:90:49:66:39:FD:C4:29 X509v3 Authority Key Identifier: keyid:77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/EBF4C0063C8811EC889B9D78C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 141.193.152.0/21 Signature Algorithm: sha256WithRSAEncryption 9d:c1:9a:ee:2d:9f:dd:bc:98:78:04:d3:28:79:02:35:c9:04: e2:30:92:eb:09:79:f0:58:24:ee:03:39:f2:19:31:45:af:b0: 2d:87:98:0b:89:c8:a5:38:f6:c2:c9:1b:d6:c7:cc:3f:bd:18: 57:03:23:d1:7a:79:b0:ce:ab:1b:fa:99:f3:e7:25:7e:9f:3f: 28:d0:34:9a:1f:63:98:60:31:5f:04:b1:c6:8f:57:c9:ec:93: b1:1f:9b:cc:d0:53:c7:7a:ef:b3:cf:6b:3d:7e:70:3a:70:c9: be:69:a0:58:0c:35:53:76:1f:60:21:71:fc:9e:19:e0:c4:1a: 81:ed:5c:aa:c8:ef:42:9a:36:fa:48:c7:81:c8:ad:69:88:c0: 9b:fe:1e:c4:35:35:7e:c8:d2:7c:c9:8a:3b:3d:e9:ac:2d:25: 9b:5e:aa:19:b3:61:47:5f:2f:7e:d3:18:b6:82:07:d0:aa:14: 00:47:ea:b7:cd:c0:b8:52:c3:e9:61:04:66:ff:e5:12:59:c8: bb:df:06:db:e7:f0:d5:6a:09:e0:81:0c:6f:f2:c5:01:08:c5: aa:25:08:e3:32:3d:76:5a:5e:a3:8b:fb:88:51:5d:02:77:6a: 19:16:d2:40:56:ec:0d:50:d5:34:b2:9c:27:87:e3:fd:56:b0: 85:10:cb:87 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKDc3NDBDRTBFNkNEMDU0QzQzMkRFNDZENEMzRURBMTRG NjQyRkRBMTQwHhcNMjYwMjA1MDkyMzI1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmIzOS00ZGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsorIiyrUBguvXkVLvfSkZwNMFq7/ZLJWLzy4u/h8kr1XXv90eb9001ouF80y 1abByra5ceX6UdWwVxYgkF7qHg2UdtotKMR3S2awvuiLWAgDpf2i7oqILSBbWMg+ S7C+8/qyfks5vCq2AI/3PsYg97afZ/t3oQ+rM8S+F0Hn7gCXOJA/tD90igatdWqB +TgCletlSKi8z6351Tn6WneFU7IFCAEngdSajUPfcj76gGwT5AKODoGshDdy/YQH +sb8PaQPJyKeIYoeFmKD3fZFlDrTTOj4HieyXc7CF7whjU7PSR37V/FSNOqayjV0 6CGb717whdEsurHdn38Ca3mP0QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDitbbWT r49dlog9HHaQSWY5/cQpMB8GA1UdIwQYMBaAFHdAzg5s0FTEMt5G1MPtoU9kL9oU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS8zNTkwNjVBNjMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9kMERPRG16UVZNUXkza2JVdy0yaFQyUXYy aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2QwRE9EbXpRVk1ReTNrYlV3LTJoVDJRdjJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjBBQzEvMzU5MDY1QTYzMDk3MTFFQ0IyODVBNjRCQzRGOUFFMDIvRUJGNEMwMDYz Qzg4MTFFQzg4OUI5RDc4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDjcGYMA0GCSqGSIb3DQEBCwUAA4IBAQCdwZruLZ/dvJh4BNMoeQI1 yQTiMJLrCXnwWCTuAznyGTFFr7Ath5gLicilOPbCyRvWx8w/vRhXAyPRenmwzqsb +pnz5yV+nz8o0DSaH2OYYDFfBLHGj1fJ7JOxH5vM0FPHeu+zz2s9fnA6cMm+aaBY DDVTdh9gIXH8nhngxBqB7VyqyO9Cmjb6SMeByK1piMCb/h7ENTV+yNJ8yYo7Pems LSWbXqoZs2FHXy9+0xi2ggfQqhQAR+q3zcC4UsPpYQRm/+USWci73wbb5/DVagng gQxv8sUBCMWqJQjjMj12Wl6ji/uIUV0Cd2oZFtJAVuwNUNU0spwnh+P9VrCFEMuH -----END CERTIFICATE-----Generated at Mon Mar 2 04:37:13 2026 by rpki-client