$ rpki-client -vvf rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/F66F50628A9C11EB9B2E044BC4F9AE02.roa File: F66F50628A9C11EB9B2E044BC4F9AE02.roa (raw, json) Hash identifier: ViFrg5wOh95Ixt6WgSbJ0P48D8DiHVTNhf0f6qrl96I= Subject key identifier: 78:AA:13:8A:20:FF:44:E3:D9:D8:57:9B:66:36:DC:B1:B6:07:FB:5B Certificate issuer: /CN=A9125225/serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Certificate serial: 071F Authority key identifier: 85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/F66F50628A9C11EB9B2E044BC4F9AE02.roa Signing time: Tue 26 May 2026 22:27:34 +0000 ROA not before: Tue 26 May 2026 22:27:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141470 IP address blocks: 124.108.24.0/21 maxlen: 21 124.108.24.0/23 maxlen: 23 124.108.26.0/23 maxlen: 23 124.108.27.0/24 maxlen: 24 124.108.28.0/23 maxlen: 23 124.108.30.0/23 maxlen: 23 124.108.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 22:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1823 (0x71f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125225, serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Validity Not Before: May 26 22:27:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a161e56-17ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:66:1d:e3:e1:38:52:39:54:ff:57:ac:96:d8: 41:92:4e:40:f6:06:00:b2:c6:51:de:93:ab:4f:8b: bc:52:02:d7:7b:a9:67:ac:8e:67:59:a6:96:49:cf: 41:96:9d:85:d5:70:cd:a9:ec:f0:c2:34:da:a8:d9: 4f:57:b2:ab:23:a6:61:b3:84:aa:43:a2:1a:7d:5a: 22:b7:05:ea:d1:5e:26:60:86:0a:13:66:e4:5e:fc: 76:ee:c1:b2:a7:7a:00:c1:df:b6:dc:f1:60:06:d9: 86:f2:23:e7:89:be:2a:02:7d:2b:3c:b1:21:08:46: 02:b8:6c:f6:09:b1:af:f0:f0:0e:90:88:b0:05:db: 04:05:34:ae:09:23:40:de:40:8c:04:0c:0a:7a:a7: 37:e3:8d:a0:aa:c5:8b:90:e5:52:d8:2c:0a:88:63: ad:ff:f6:22:a2:3a:34:0e:87:52:4c:31:9c:b8:30: 0b:68:d7:a9:1d:9d:97:80:bc:21:d6:40:d6:19:7d: d9:34:3b:df:50:8f:1e:f9:81:63:59:40:05:5b:3d: 41:2d:60:3d:52:45:9b:ca:e0:7a:9c:b3:26:50:cd: 50:94:4c:ad:b1:4f:f6:a0:c9:06:61:c2:de:57:4e: cf:24:5d:61:76:00:41:43:11:8b:2b:1a:c0:f1:04: 9a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AA:13:8A:20:FF:44:E3:D9:D8:57:9B:66:36:DC:B1:B6:07:FB:5B X509v3 Authority Key Identifier: keyid:85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/F66F50628A9C11EB9B2E044BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 124.108.24.0/21 Signature Algorithm: sha256WithRSAEncryption a3:06:a8:ca:80:23:6e:70:22:6f:a6:48:1e:c6:45:7e:ba:84: 4d:9c:db:eb:69:20:6e:d3:fa:8d:fc:00:8c:d8:bb:cc:6a:f9: 3d:9c:35:87:de:c0:bc:eb:fa:95:44:ed:88:71:2b:4c:8d:a7: ae:cd:10:8f:20:12:73:be:34:4f:97:da:d0:93:9c:05:d1:4d: 1e:47:33:03:fd:4e:5d:69:9e:c5:56:a8:88:84:a4:be:2e:41: 43:b2:a7:fb:9d:ab:59:7e:03:4a:f6:b9:8b:00:e1:e3:ee:28: 2c:9b:58:aa:98:d2:f8:03:88:df:e0:7d:28:8f:72:ed:6b:82: 76:0d:9d:69:79:14:50:4a:c7:e6:59:d2:33:a7:bc:7e:6b:ee: 76:91:a3:50:5e:eb:04:2c:6f:8d:74:b1:4d:68:a8:42:b8:88: 15:27:84:05:a5:96:c6:fa:cc:57:20:3f:63:2b:75:a6:fc:88: c2:51:bf:e9:25:55:dd:3e:47:2e:1c:45:06:b5:26:a8:ce:8d: 81:f7:2e:83:01:9c:c3:91:37:a3:bc:f2:a4:ae:2c:bf:01:56: 95:de:e3:1b:dd:70:28:24:ad:de:28:9a:9b:6d:c9:25:a6:35: ec:31:87:1d:db:8a:11:f4:47:c7:e7:58:c6:86:3e:96:40:c1: 54:9d:21:2b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUyMjUxMTAvBgNVBAUTKDg1RDZGMTg0OTNEOEEwOENDNzJCMUIwOTFENEFGNTRG OEYwQTI4QjMwHhcNMjYwNTI2MjIyNzM0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTE2MWU1Ni0xN2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmYd4+E4UjlU/1eslthBkk5A9gYAssZR3pOrT4u8UgLXe6lnrI5nWaaWSc9B lp2F1XDNqezwwjTaqNlPV7KrI6Zhs4SqQ6IafVoitwXq0V4mYIYKE2bkXvx27sGy p3oAwd+23PFgBtmG8iPnib4qAn0rPLEhCEYCuGz2CbGv8PAOkIiwBdsEBTSuCSNA 3kCMBAwKeqc3442gqsWLkOVS2CwKiGOt//Yiojo0DodSTDGcuDALaNepHZ2XgLwh 1kDWGX3ZNDvfUI8e+YFjWUAFWz1BLWA9UkWbyuB6nLMmUM1QlEytsU/2oMkGYcLe V07PJF1hdgBBQxGLKxrA8QSabwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHiqE4og /0Tj2dhXm2Y23LG2B/tbMB8GA1UdIwQYMBaAFIXW8YST2KCMxysbCR1K9U+PCiiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTIyNS9DQTY5MDQ0MjhB OUExMUVCODBDM0VENDdDNEY5QUUwMi9oZGJ4aEpQWW9JekhLeHNKSFVyMVQ0OEtL TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hkYnhoSlBZb0l6SEt4c0pIVXIxVDQ4S0tMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUyMjUvQ0E2OTA0NDI4QTlBMTFFQjgwQzNFRDQ3QzRGOUFFMDIvRjY2RjUwNjI4 QTlDMTFFQjlCMkUwNDRCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDfGwYMA0GCSqGSIb3DQEBCwUAA4IBAQCjBqjKgCNucCJvpkgexkV+ uoRNnNvraSBu0/qN/ACM2LvMavk9nDWH3sC86/qVRO2IcStMjaeuzRCPIBJzvjRP l9rQk5wF0U0eRzMD/U5daZ7FVqiIhKS+LkFDsqf7natZfgNK9rmLAOHj7igsm1iq mNL4A4jf4H0oj3Lta4J2DZ1peRRQSsfmWdIzp7x+a+52kaNQXusELG+NdLFNaKhC uIgVJ4QFpZbG+sxXID9jK3Wm/IjCUb/pJVXdPkcuHEUGtSaozo2B9y6DAZzDkTej vPKkriy/AVaV3uMb3XAoJK3eKJqbbcklpjXsMYcd24oR9EfH51jGhj6WQMFUnSEr -----END CERTIFICATE-----Generated at Tue Jul 28 23:50:32 2026 by rpki-client