$ rpki-client -vvf rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/F66F50628A9C11EB9B2E044BC4F9AE02.roa File: F66F50628A9C11EB9B2E044BC4F9AE02.roa (raw, json) Hash identifier: taqp3LL8tAiDHV2u6BkFdJRyNn3w2njiu3rh4Og8etQ= Subject key identifier: 9C:7A:AA:80:E9:23:52:5F:61:06:14:DC:04:BA:C9:79:6F:E4:D8:CD Certificate issuer: /CN=A9125225/serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Certificate serial: 06EF Authority key identifier: 85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/F66F50628A9C11EB9B2E044BC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:45:08 +0000 ROA not before: Tue 24 Jun 2025 22:41:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141470 IP address blocks: 124.108.24.0/21 maxlen: 21 124.108.24.0/23 maxlen: 23 124.108.26.0/23 maxlen: 23 124.108.27.0/24 maxlen: 24 124.108.28.0/23 maxlen: 23 124.108.30.0/23 maxlen: 23 124.108.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1775 (0x6ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125225, serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Validity Not Before: Jun 24 22:41:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a40aa4-8e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fd:f8:7a:14:6e:8f:9e:c3:c1:c9:84:03:2e: f6:a1:f2:72:e4:d4:51:d6:73:f7:4e:af:75:43:1b: 77:eb:20:7b:d7:1f:ba:3c:9e:88:52:3f:c3:c8:90: 87:c8:ca:79:e9:ab:81:e8:dc:1f:3e:1d:84:18:e5: d7:63:ac:6f:2a:c5:fd:1b:e8:dc:e8:6d:1f:b7:9d: e7:96:46:54:82:79:d7:d9:e4:b6:38:3d:51:ea:3d: 42:5c:4f:a0:0e:11:24:b0:9f:ad:1c:ea:8f:3e:54: de:45:6b:10:e7:12:17:91:2f:cb:15:58:2c:14:f7: f1:bc:ee:2c:d2:80:c2:52:95:22:80:82:0e:9e:dc: 32:d1:20:09:70:b2:f4:58:75:7b:db:6a:67:fb:72: 14:b2:62:14:da:b4:96:4e:06:24:10:cd:f4:fd:af: c7:ac:de:0a:58:33:f8:a0:54:59:77:fd:5d:ed:43: 57:51:b0:26:59:63:ad:a9:b0:53:d9:91:ab:50:e0: 90:9b:18:76:aa:02:d2:40:fc:c0:2d:85:32:5f:90: 49:83:ca:66:b2:1f:2f:7f:5f:b1:d3:e0:99:60:ff: a6:8e:e8:60:8a:91:c7:41:9b:43:de:9e:28:0c:80: 71:36:a9:8c:94:e7:4e:91:cc:2a:08:15:56:2e:2b: 15:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7A:AA:80:E9:23:52:5F:61:06:14:DC:04:BA:C9:79:6F:E4:D8:CD X509v3 Authority Key Identifier: keyid:85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/F66F50628A9C11EB9B2E044BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 124.108.24.0/21 Signature Algorithm: sha256WithRSAEncryption 09:1c:db:d4:9d:ed:a1:da:d8:30:c0:3b:ac:e8:43:58:a8:4f: 6e:19:09:66:bb:33:bc:2f:40:b8:86:a9:2f:c6:e6:92:50:67: 3f:30:93:67:2a:22:0f:4d:8a:c8:b0:e2:39:27:ca:b8:27:38: 09:ff:f6:d3:5c:21:69:51:11:e7:3a:99:81:8d:0a:2e:8f:bc: 92:5d:72:b2:40:a7:6e:b9:de:ad:18:30:3f:90:f3:ea:d8:45: 0b:a7:e3:90:f4:eb:51:78:c0:c9:18:e3:52:4e:6f:29:21:bc: 7e:bd:ae:f5:6c:84:98:c5:81:84:e9:e6:ce:25:92:b8:84:a5: f4:1b:d0:6d:8b:1c:37:c8:9f:61:c1:90:38:3b:ce:a0:32:e8: e9:5d:01:91:7d:d7:5c:8f:b4:3d:5d:b1:91:37:9f:b2:8d:5c: d8:87:e4:7d:e4:38:e2:ca:81:58:3a:d2:cf:db:71:03:c0:6a: cb:72:bb:89:9f:bf:2f:f5:ca:ca:9e:bc:84:33:a0:22:b8:1d: 00:96:6f:5e:5a:8b:36:90:03:07:37:7c:e4:00:c6:19:82:17: ec:63:52:c0:c8:16:e9:0e:d8:c8:a4:a0:d6:1c:5a:a5:27:f9: 1a:99:bb:11:16:1e:42:b2:91:5e:57:3e:22:b9:a1:f4:a1:bc: 7a:f7:d7:f5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUyMjUxMTAvBgNVBAUTKDg1RDZGMTg0OTNEOEEwOENDNzJCMUIwOTFENEFGNTRG OEYwQTI4QjMwHhcNMjUwNjI0MjI0MTUwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGFhNC04ZTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7f34ehRuj57DwcmEAy72ofJy5NRR1nP3Tq91Qxt36yB71x+6PJ6IUj/DyJCH yMp56auB6NwfPh2EGOXXY6xvKsX9G+jc6G0ft53nlkZUgnnX2eS2OD1R6j1CXE+g DhEksJ+tHOqPPlTeRWsQ5xIXkS/LFVgsFPfxvO4s0oDCUpUigIIOntwy0SAJcLL0 WHV722pn+3IUsmIU2rSWTgYkEM30/a/HrN4KWDP4oFRZd/1d7UNXUbAmWWOtqbBT 2ZGrUOCQmxh2qgLSQPzALYUyX5BJg8pmsh8vf1+x0+CZYP+mjuhgipHHQZtD3p4o DIBxNqmMlOdOkcwqCBVWLisVAwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJx6qoDp I1JfYQYU3AS6yXlv5NjNMB8GA1UdIwQYMBaAFIXW8YST2KCMxysbCR1K9U+PCiiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTIyNS9DQTY5MDQ0MjhB OUExMUVCODBDM0VENDdDNEY5QUUwMi9oZGJ4aEpQWW9JekhLeHNKSFVyMVQ0OEtL TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hkYnhoSlBZb0l6SEt4c0pIVXIxVDQ4S0tMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUyMjUvQ0E2OTA0NDI4QTlBMTFFQjgwQzNFRDQ3QzRGOUFFMDIvRjY2RjUwNjI4 QTlDMTFFQjlCMkUwNDRCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDfGwYMA0GCSqGSIb3DQEBCwUAA4IBAQAJHNvUne2h2tgwwDus6ENY qE9uGQlmuzO8L0C4hqkvxuaSUGc/MJNnKiIPTYrIsOI5J8q4JzgJ//bTXCFpURHn OpmBjQouj7ySXXKyQKduud6tGDA/kPPq2EULp+OQ9OtReMDJGONSTm8pIbx+va71 bISYxYGE6ebOJZK4hKX0G9Btixw3yJ9hwZA4O86gMujpXQGRfddcj7Q9XbGRN5+y jVzYh+R95DjiyoFYOtLP23EDwGrLcruJn78v9crKnryEM6AiuB0Alm9eWos2kAMH N3zkAMYZghfsY1LAyBbpDtjIpKDWHFqlJ/kambsRFh5CspFeVz4iuaH0obx699f1 -----END CERTIFICATE-----Generated at Mon Mar 2 15:51:16 2026 by rpki-client