$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9D3B8A8AC91A11F0B4BFC673C4F9AE02.roa File: 9D3B8A8AC91A11F0B4BFC673C4F9AE02.roa (raw, json) Hash identifier: /+8j5V7Q4inRuiyHFTWZNWPR7MOmulWdNP3/6QLql64= Subject key identifier: B7:B7:85:92:B9:FE:4B:4D:E4:3E:AB:43:40:F9:08:B2:91:C6:01:13 Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Certificate serial: D1 Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9D3B8A8AC91A11F0B4BFC673C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:11:15 +0000 ROA not before: Mon 24 Nov 2025 09:47:39 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133761 IP address blocks: 122.154.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Validity Not Before: Nov 24 09:47:39 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a48f53-9b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9a:11:a7:dd:68:4b:02:85:50:5c:e5:2f:c9: 7d:da:09:d3:e8:f1:63:3a:cf:1e:99:6e:aa:35:bd: 39:8b:4d:32:8f:93:d9:69:82:73:99:07:1d:99:8b: 90:b1:cd:b4:aa:44:a9:50:14:08:e8:64:17:c8:c3: 9e:50:d2:01:c1:1b:2e:74:c0:34:fb:84:62:72:3a: 4e:f5:3f:c3:a9:bd:8c:dc:86:25:28:e0:e0:d6:f2: 74:65:bd:22:e9:98:a7:8d:f1:f5:34:58:7c:8c:09: 2d:1b:46:a4:39:26:25:2a:51:46:a7:74:81:3c:1b: fa:30:e5:6a:fb:02:b7:ab:b0:47:61:3a:fd:a4:63: 9d:27:9f:28:95:75:16:da:b1:e0:3e:73:53:22:d8: a2:e2:2b:bc:9a:4e:7c:ba:c3:c5:de:e6:2e:ac:46: 78:4f:51:ba:bf:af:3f:6b:aa:ad:e7:5f:97:5f:9b: 78:ed:4e:31:26:40:ee:98:54:8d:ef:d1:f0:34:8f: 07:ea:dc:9a:15:e5:6f:58:87:0a:a7:b3:33:dc:aa: 6b:ac:39:4b:d0:2e:db:a2:b8:ee:67:98:d6:fd:95: f9:0c:7c:0d:17:38:c0:a1:20:f5:12:b7:0f:16:77: 64:fd:79:a2:e8:1b:1a:90:04:48:c5:d0:d3:36:1c: 1a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B7:85:92:B9:FE:4B:4D:E4:3E:AB:43:40:F9:08:B2:91:C6:01:13 X509v3 Authority Key Identifier: keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9D3B8A8AC91A11F0B4BFC673C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 122.154.20.0/24 Signature Algorithm: sha256WithRSAEncryption 22:ee:82:b3:55:97:3e:19:6e:83:ef:ca:e1:44:54:3f:66:57: 02:50:14:00:a8:3b:b0:a8:33:b4:29:d7:a8:be:77:2d:c7:3e: 46:04:23:09:63:56:31:8e:ee:5d:b4:f8:38:ec:f3:7e:0f:02: 98:81:95:1c:93:0b:91:a9:5a:ed:d9:2f:2b:b9:45:43:05:b5: 27:fb:46:0f:3f:5e:e2:a9:c5:40:c0:2f:2d:b5:0d:97:ad:dd: 35:2e:f7:17:fe:7d:b1:42:94:96:e1:ee:00:70:48:d0:e7:ac: b6:df:76:34:22:0e:1c:1e:76:02:24:56:f5:0f:70:a6:b2:ac: db:e2:ba:9c:5b:b5:b2:1d:a7:be:cf:5c:54:c6:91:38:db:8a: 81:39:07:e7:de:9a:e5:f7:e6:8f:22:8c:b1:76:ba:0c:ba:15: 6d:15:23:cd:26:24:ed:2e:4e:28:db:cf:d5:85:c1:bc:bf:79: 1d:1d:8c:7a:de:fd:b2:32:77:8f:a7:6d:8a:c6:f2:52:48:62: f5:a1:6c:b9:45:b8:6d:97:7b:05:24:62:b6:6b:bf:45:9d:aa: 08:ed:80:e4:8a:84:6d:01:5a:5b:d8:0a:a5:48:b3:9c:d0:2b: 96:3f:b7:08:ed:b9:e8:6e:2d:64:03:9b:7c:98:f6:d7:93:77: b2:2d:52:f6 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU5OEQxMTAvBgNVBAUTKDlBM0E2N0VERENEMDk3NzUzM0E5QTBCOEM0OUY0QzAx MDBDODUzOTEwHhcNMjUxMTI0MDk0NzM5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGY1My05YjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZoRp91oSwKFUFzlL8l92gnT6PFjOs8emW6qNb05i00yj5PZaYJzmQcdmYuQ sc20qkSpUBQI6GQXyMOeUNIBwRsudMA0+4RicjpO9T/Dqb2M3IYlKODg1vJ0Zb0i 6ZinjfH1NFh8jAktG0akOSYlKlFGp3SBPBv6MOVq+wK3q7BHYTr9pGOdJ58olXUW 2rHgPnNTItii4iu8mk58usPF3uYurEZ4T1G6v68/a6qt51+XX5t47U4xJkDumFSN 79HwNI8H6tyaFeVvWIcKp7Mz3KprrDlL0C7borjuZ5jW/ZX5DHwNFzjAoSD1ErcP Fndk/Xmi6BsakARIxdDTNhwaMwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLe3hZK5 /ktN5D6rQ0D5CLKRxgETMB8GA1UdIwQYMBaAFJo6Z+3c0Jd1M6mguMSfTAEAyFOR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTk4RC9CODg1MzFDQUM4 RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi9tanBuN2R6UWwzVXpxYUM0eEo5TUFRRElV NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU5OEQvQjg4NTMxQ0FDOEVDMTFGMEEzNDRBQjQ1QzRGOUFFMDIvOUQzQjhBOEFD OTFBMTFGMEI0QkZDNjczQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAepoUMA0GCSqGSIb3DQEBCwUAA4IBAQAi7oKzVZc+GW6D78rhRFQ/ ZlcCUBQAqDuwqDO0Kdeovnctxz5GBCMJY1Yxju5dtPg47PN+DwKYgZUckwuRqVrt 2S8ruUVDBbUn+0YPP17iqcVAwC8ttQ2Xrd01LvcX/n2xQpSW4e4AcEjQ56y233Y0 Ig4cHnYCJFb1D3Cmsqzb4rqcW7WyHae+z1xUxpE424qBOQfn3prl9+aPIoyxdroM uhVtFSPNJiTtLk4o28/VhcG8v3kdHYx63v2yMnePp22KxvJSSGL1oWy5Rbhtl3sF JGK2a79FnaoI7YDkioRtAVpb2AqlSLOc0CuWP7cI7bnobi1kA5t8mPbXk3eyLVL2 -----END CERTIFICATE-----Generated at Mon Mar 2 07:39:28 2026 by rpki-client