$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/D008EA4AC92211F0AD92BA21C4F9AE02.roa File: D008EA4AC92211F0AD92BA21C4F9AE02.roa (raw, json) Hash identifier: C7uwuCI7TqrSFDaQH8Zzgy3OnejNXfnU7UwlS3rMRx4= Subject key identifier: BB:20:16:97:E8:A4:CB:FA:A6:54:FB:F8:7F:39:97:3D:E0:02:C1:40 Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Certificate serial: E1 Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/D008EA4AC92211F0AD92BA21C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:11:29 +0000 ROA not before: Mon 24 Nov 2025 10:59:55 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 9464 IP address blocks: 122.154.60.0/23 maxlen: 23 2001:c38:9718::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Validity Not Before: Nov 24 10:59:55 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a48f61-6576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d7:7b:9a:73:03:48:ca:e3:9f:4a:1d:c5:f0: 63:4b:4b:b6:92:b1:a6:4a:ac:c5:4e:4c:ec:63:7b: e6:6c:4c:98:4a:b1:75:39:f5:79:f7:07:7f:9b:22: 73:6a:a4:a4:43:6a:59:08:c8:a7:95:d5:c7:d7:b9: cd:1e:04:ec:8d:0d:ff:d3:2c:13:08:c9:dd:ef:cd: 2f:96:57:a2:a1:b9:79:04:df:f0:79:05:94:b4:08: c3:d3:17:e1:8d:71:58:23:78:0b:99:ae:69:78:cb: 01:39:94:8b:f1:66:33:67:0d:b0:3d:52:54:bc:e9: 02:4f:1e:88:ce:ad:1e:54:a5:c1:b4:91:56:ed:c3: d5:1a:7c:f9:47:e1:42:cf:44:0b:18:4b:4b:1e:c6: ed:95:6e:2a:b5:03:a0:74:60:9a:63:07:c0:d0:75: b1:0f:84:19:03:24:7b:86:ba:d2:94:74:63:43:9c: 15:a8:66:db:b5:99:19:23:67:c5:19:02:41:9e:e9: 1d:a4:34:fb:67:0a:39:a5:84:d1:71:f9:5b:df:c2: ea:d1:d7:cd:82:03:12:ce:e0:d9:69:8a:ed:7d:15: a6:49:69:c7:ac:f3:35:02:1e:ec:10:04:37:97:7e: 7c:6b:59:29:ec:28:d8:b6:56:22:d0:40:80:78:5d: 2c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:20:16:97:E8:A4:CB:FA:A6:54:FB:F8:7F:39:97:3D:E0:02:C1:40 X509v3 Authority Key Identifier: keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/D008EA4AC92211F0AD92BA21C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 122.154.60.0/23 IPv6: 2001:c38:9718::/48 Signature Algorithm: sha256WithRSAEncryption 46:9b:db:17:73:37:9b:6d:20:05:4d:8b:68:83:3f:0f:b8:46: 14:d9:c0:52:0b:f3:8b:95:3e:58:4d:f7:e0:78:c8:44:d2:b7: b3:67:97:8c:e4:c2:ab:85:c3:ce:0c:bb:c3:d6:d8:22:d4:ce: 9d:0f:19:6a:b9:5a:79:ff:16:85:09:57:f8:83:c8:69:8d:56: 31:34:ca:87:3f:5c:24:74:29:9b:a3:f6:39:ad:69:62:9f:f7: 1f:8c:33:7f:5e:c9:b8:26:30:38:4d:a6:c3:43:ef:2a:46:77: f2:da:31:0f:68:5f:88:54:9e:e3:30:d9:be:0e:d6:d0:8f:e9: b0:91:6c:6c:14:50:e6:07:b0:b4:bb:2b:00:2b:c1:f7:d5:ca: b4:4b:ea:85:d0:44:dc:7c:2e:a7:55:12:f2:13:f0:09:db:6b: 3c:61:6c:73:73:30:93:4a:de:29:52:9f:c5:e6:38:9f:fd:5e: 1e:4b:35:4e:85:bd:ba:5b:e9:ad:4d:f1:a4:8d:f5:97:70:e7: b8:27:6d:b5:a2:3d:3c:6c:2b:96:bb:47:ba:39:50:4a:5f:11: 10:96:05:39:7d:a3:8c:15:22:22:96:04:ea:9b:ed:20:6e:a1: 75:fb:6b:40:23:28:61:43:a4:47:1b:99:84:b5:4a:ef:3b:89: c8:03:3a:30 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU5OEQxMTAvBgNVBAUTKDlBM0E2N0VERENEMDk3NzUzM0E5QTBCOEM0OUY0QzAx MDBDODUzOTEwHhcNMjUxMTI0MTA1OTU1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGY2MS02NTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9d7mnMDSMrjn0odxfBjS0u2krGmSqzFTkzsY3vmbEyYSrF1OfV59wd/myJz aqSkQ2pZCMinldXH17nNHgTsjQ3/0ywTCMnd780vlleiobl5BN/weQWUtAjD0xfh jXFYI3gLma5peMsBOZSL8WYzZw2wPVJUvOkCTx6Izq0eVKXBtJFW7cPVGnz5R+FC z0QLGEtLHsbtlW4qtQOgdGCaYwfA0HWxD4QZAyR7hrrSlHRjQ5wVqGbbtZkZI2fF GQJBnukdpDT7Zwo5pYTRcflb38Lq0dfNggMSzuDZaYrtfRWmSWnHrPM1Ah7sEAQ3 l358a1kp7CjYtlYi0ECAeF0sVQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFLsgFpfo pMv6plT7+H85lz3gAsFAMB8GA1UdIwQYMBaAFJo6Z+3c0Jd1M6mguMSfTAEAyFOR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTk4RC9CODg1MzFDQUM4 RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi9tanBuN2R6UWwzVXpxYUM0eEo5TUFRRElV NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU5OEQvQjg4NTMxQ0FDOEVDMTFGMEEzNDRBQjQ1QzRGOUFFMDIvRDAwOEVBNEFD OTIyMTFGMEFEOTJCQTIxQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBepo8MA8EAgACMAkDBwAgAQw4lxgwDQYJKoZIhvcNAQELBQADggEB AEab2xdzN5ttIAVNi2iDPw+4RhTZwFIL84uVPlhN9+B4yETSt7Nnl4zkwquFw84M u8PW2CLUzp0PGWq5Wnn/FoUJV/iDyGmNVjE0yoc/XCR0KZuj9jmtaWKf9x+MM39e ybgmMDhNpsND7ypGd/LaMQ9oX4hUnuMw2b4O1tCP6bCRbGwUUOYHsLS7KwArwffV yrRL6oXQRNx8LqdVEvIT8AnbazxhbHNzMJNK3ilSn8XmOJ/9Xh5LNU6Fvbpb6a1N 8aSN9Zdw57gnbbWiPTxsK5a7R7o5UEpfERCWBTl9o4wVIiKWBOqb7SBuoXX7a0Aj KGFDpEcbmYS1Su87icgDOjA= -----END CERTIFICATE-----Generated at Mon Mar 2 03:59:37 2026 by rpki-client