$ rpki-client -vvf rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/DC25591636C011F0A9DAF53EC4F9AE02.roa File: DC25591636C011F0A9DAF53EC4F9AE02.roa (raw, json) Hash identifier: EU2N4gJVDh7rl8ft9+ApHPFL1rUzyfoQd0sEXkYo/7M= Subject key identifier: 55:6C:3D:89:AF:6D:8C:58:67:20:E5:0C:F0:25:CB:41:02:E6:27:CF Certificate issuer: /CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Certificate serial: 0B42 Authority key identifier: D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/DC25591636C011F0A9DAF53EC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:31:56 +0000 ROA not before: Thu 22 May 2025 03:59:47 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 24337 IP address blocks: 185.126.144.0/22 maxlen: 22 185.126.144.0/24 maxlen: 24 185.126.145.0/24 maxlen: 24 185.126.146.0/24 maxlen: 24 185.126.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2882 (0xb42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123E38, serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Validity Not Before: May 22 03:59:47 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a423ab-7742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1e:a8:e2:ea:f5:36:4f:ef:25:4a:37:b3:5f: bc:04:b8:c9:54:ff:7c:99:32:3f:d6:e4:e2:34:23: c9:0c:76:b3:0e:ca:72:fb:80:cb:09:0c:12:b8:0a: 7e:bc:88:c3:c4:82:25:7c:3d:83:54:ae:c1:55:4b: 2c:86:f7:26:08:6e:0b:dd:c2:33:f7:30:f6:04:cb: 67:c2:e0:bd:15:c0:2d:85:a1:ad:09:ef:68:3d:36: 51:90:08:cf:81:06:3d:19:83:64:9f:d6:ac:b4:84: bc:55:be:de:4f:79:48:27:ee:9b:95:a5:e4:29:0a: 2d:06:1c:01:4b:be:73:3a:28:ac:34:59:29:42:73: fc:a1:e3:30:87:34:34:91:00:14:f0:df:01:41:73: b6:be:8c:d5:a2:d4:72:a0:c5:1b:82:a6:f7:34:e0: e7:a1:9b:5c:38:43:d2:0b:ae:7a:b8:88:9f:9b:bf: 81:0e:7d:07:67:22:9e:42:a2:e6:08:9e:c9:d1:8a: 3b:23:0c:2f:ac:57:77:64:e3:12:c7:38:79:9b:7f: bb:af:29:65:84:e6:45:51:d3:e4:2c:bc:b9:e5:c0: bb:e7:c5:75:d5:8f:98:25:83:78:7b:e4:81:96:1e: 75:4f:b9:6f:4b:37:c1:92:ba:5d:ca:d0:2e:d6:ed: 04:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6C:3D:89:AF:6D:8C:58:67:20:E5:0C:F0:25:CB:41:02:E6:27:CF X509v3 Authority Key Identifier: keyid:D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/DC25591636C011F0A9DAF53EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 185.126.144.0/22 Signature Algorithm: sha256WithRSAEncryption 79:3c:13:80:07:dc:0a:f9:5b:ec:cb:52:a3:06:68:44:a1:18: 84:83:4c:70:ed:0b:51:d8:c5:05:d9:6e:35:81:a2:b2:36:36: 81:ea:6e:e8:3e:f6:c0:f7:12:d9:83:ea:3a:92:d8:b7:a6:ef: cf:76:59:35:49:ba:81:46:f0:d8:ce:8c:47:14:13:87:ba:8f: a1:c2:46:b1:05:69:58:2c:31:e3:fe:21:9e:3f:50:ea:44:da: 81:3d:07:1a:69:e3:77:b3:80:7a:b3:b3:ca:29:19:28:28:c6: 33:a7:d3:1a:fe:c6:bf:0c:5b:64:51:7c:2a:29:59:89:5e:ad: 8d:cb:90:c5:d7:97:da:08:b4:fa:d8:7e:99:7e:a1:a7:6f:f7: b8:e8:7a:71:a2:93:dd:af:96:80:dd:9d:c6:0d:e3:6e:83:ce: 8b:de:cc:59:2f:07:d7:87:cf:ba:2a:d6:6e:bf:24:54:2a:bf: 43:91:36:12:da:30:e8:b6:78:f2:b8:c2:6e:69:85:c1:57:0d: 94:9b:25:dc:35:78:3c:ef:a2:0c:38:77:e6:65:5d:27:d1:22: 5f:37:bd:83:0a:64:fa:68:1b:a7:11:41:b5:69:ac:d1:d3:29: ff:6b:98:9c:f5:b5:78:78:f5:3f:d6:b7:5b:4e:35:e0:c7:48: d0:a4:92:8d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICC0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNFMzgxMTAvBgNVBAUTKEQwOTREMjQ3MTQzNTJFMEVCQ0QzRjg4Mjc1MjMyODI3 QkM2QUM4OTAwHhcNMjUwNTIyMDM1OTQ3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjNhYi03NzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqh6o4ur1Nk/vJUo3s1+8BLjJVP98mTI/1uTiNCPJDHazDspy+4DLCQwSuAp+ vIjDxIIlfD2DVK7BVUsshvcmCG4L3cIz9zD2BMtnwuC9FcAthaGtCe9oPTZRkAjP gQY9GYNkn9astIS8Vb7eT3lIJ+6blaXkKQotBhwBS75zOiisNFkpQnP8oeMwhzQ0 kQAU8N8BQXO2vozVotRyoMUbgqb3NODnoZtcOEPSC656uIifm7+BDn0HZyKeQqLm CJ7J0Yo7IwwvrFd3ZOMSxzh5m3+7ryllhOZFUdPkLLy55cC758V11Y+YJYN4e+SB lh51T7lvSzfBkrpdytAu1u0EnQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFVsPYmv bYxYZyDlDPAly0EC5ifPMB8GA1UdIwQYMBaAFNCU0kcUNS4OvNP4gnUjKCe8asiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0UzOC82QjkxRURBMDUz NkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxnNjgwX2lDZFNNb0o3eHF5 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBKVFNSeFExTGc2ODBfaUNkU01vSjd4cXlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjNFMzgvNkI5MUVEQTA1MzZDMTFFQUE1QzI3OTBDQzRGOUFFMDIvREMyNTU5MTYz NkMwMTFGMEE5REFGNTNFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCuX6QMA0GCSqGSIb3DQEBCwUAA4IBAQB5PBOAB9wK+Vvsy1KjBmhE oRiEg0xw7QtR2MUF2W41gaKyNjaB6m7oPvbA9xLZg+o6kti3pu/Pdlk1SbqBRvDY zoxHFBOHuo+hwkaxBWlYLDHj/iGeP1DqRNqBPQcaaeN3s4B6s7PKKRkoKMYzp9Ma /sa/DFtkUXwqKVmJXq2Ny5DF15faCLT62H6ZfqGnb/e46HpxopPdr5aA3Z3GDeNu g86L3sxZLwfXh8+6KtZuvyRUKr9DkTYS2jDotnjyuMJuaYXBVw2UmyXcNXg876IM OHfmZV0n0SJfN72DCmT6aBunEUG1aazR0yn/a5ic9bV4ePU/1rdbTjXgx0jQpJKN -----END CERTIFICATE-----Generated at Mon Mar 2 18:25:27 2026 by rpki-client