$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/B9CAD7A47D2311EEA3696814C4F9AE02.roa File: B9CAD7A47D2311EEA3696814C4F9AE02.roa (raw, json) Hash identifier: n/+iSZ/XdamVp91QYBtpJ28J2tmDpxBk4yTTzrUUrg0= Subject key identifier: A8:94:D2:6C:03:70:5E:B4:7E:A8:C0:47:9D:DB:89:13:CC:45:0E:67 Certificate issuer: /CN=A9125E1B/serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Certificate serial: 01BE Authority key identifier: 86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/B9CAD7A47D2311EEA3696814C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:04:34 +0000 ROA not before: Fri 09 Jan 2026 03:22:49 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138505 IP address blocks: 180.131.132.0/23 maxlen: 23 180.131.132.0/24 maxlen: 24 180.131.133.0/24 maxlen: 24 2001:df3:1dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125E1B, serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Validity Not Before: Jan 9 03:22:49 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a43962-6a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:89:6a:bc:c7:69:d3:a8:2d:1e:51:f5:c5:ea: f4:1a:d8:70:bd:14:f6:65:b4:e7:22:22:d3:6f:cc: 6a:0e:f8:46:86:43:58:46:ec:f2:2c:03:8c:b5:f3: d6:44:48:cf:58:4d:87:58:1d:49:1c:61:72:db:f4: f7:9d:55:90:ec:06:ce:31:25:fa:0b:20:37:e1:e5: a2:02:e6:11:ba:38:0f:91:e9:1b:c1:e4:54:71:17: 2a:56:cb:bf:5f:f5:8f:ca:1d:11:f3:30:52:2c:8f: 1c:54:a5:a7:d5:e6:75:30:02:af:7a:7c:f5:40:d3: 94:86:58:a1:31:69:66:7c:1f:3f:64:4d:8a:4b:a3: b5:77:b6:1a:8f:1d:f2:fd:8d:db:5c:47:3b:fe:59: cb:67:d7:26:cf:f7:32:0b:ee:61:b1:45:c9:10:69: 6d:bf:91:c0:a9:66:d6:eb:26:c5:e2:19:cb:3b:f6: 93:12:d2:bb:57:6a:96:e9:71:3b:4e:3d:3e:62:b3: de:c2:33:02:af:b8:68:da:61:8d:98:16:10:de:e0: 34:ae:a3:97:49:98:38:cb:48:18:6b:fe:6d:b6:a6: ef:1e:03:8b:c0:ed:9d:6f:bd:15:e5:3c:91:fd:a8: 94:b2:d3:db:e7:20:ac:d6:26:99:c5:cf:e9:45:e2: 67:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:94:D2:6C:03:70:5E:B4:7E:A8:C0:47:9D:DB:89:13:CC:45:0E:67 X509v3 Authority Key Identifier: keyid:86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/B9CAD7A47D2311EEA3696814C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 180.131.132.0/23 IPv6: 2001:df3:1dc0::/48 Signature Algorithm: sha256WithRSAEncryption 7f:c3:62:fe:99:6e:b6:18:48:d6:83:3e:35:fc:08:77:b1:e9: 5f:56:c9:e0:a6:31:6a:35:68:e9:3a:26:9e:6a:41:95:d8:93: bf:cf:8e:eb:ee:3c:3b:fe:33:34:f6:72:5a:3f:6b:09:e6:9a: c7:36:ca:42:46:77:2b:0f:c0:dd:52:74:b2:94:3c:88:26:3a: ca:52:3b:4d:7b:64:81:18:c4:22:34:df:b1:21:9a:44:58:5b: 93:cf:c0:91:a5:df:6f:3a:93:e0:95:63:20:f1:49:aa:5e:02: ba:e5:e1:1f:67:cc:73:aa:03:cb:9a:b1:d5:09:55:3a:64:4b: 51:d0:a5:9f:b9:f9:05:08:c5:eb:e1:07:89:34:5b:66:09:22: 1f:df:5a:dd:7f:74:b1:d0:59:97:82:1c:6d:cb:47:60:77:ab: 48:3d:7c:ef:27:5e:e6:ba:31:d7:cf:a2:74:f6:ec:70:c8:56: d0:fd:25:48:02:8e:49:7e:c9:a8:e4:a0:4a:aa:bf:6d:f9:83: 23:70:80:5c:8d:ff:d6:0b:20:1d:0c:5e:1f:c4:8b:f2:d0:27: c4:c8:b2:d6:a3:41:5f:39:f5:80:70:12:ba:65:1c:18:df:f8: fb:6b:72:68:b7:05:11:7b:d0:ec:44:48:12:1b:4b:a6:7e:f2: c8:12:21:c9 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVFMUIxMTAvBgNVBAUTKDg2NEM1MTM5NUE2NUQ1REU3MEVDRDMwQUFEMjdBNjlG NEI5QjIyQkMwHhcNMjYwMTA5MDMyMjQ5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Mzk2Mi02YTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYlqvMdp06gtHlH1xer0GthwvRT2ZbTnIiLTb8xqDvhGhkNYRuzyLAOMtfPW REjPWE2HWB1JHGFy2/T3nVWQ7AbOMSX6CyA34eWiAuYRujgPkekbweRUcRcqVsu/ X/WPyh0R8zBSLI8cVKWn1eZ1MAKvenz1QNOUhlihMWlmfB8/ZE2KS6O1d7Yajx3y /Y3bXEc7/lnLZ9cmz/cyC+5hsUXJEGltv5HAqWbW6ybF4hnLO/aTEtK7V2qW6XE7 Tj0+YrPewjMCr7ho2mGNmBYQ3uA0rqOXSZg4y0gYa/5ttqbvHgOLwO2db70V5TyR /aiUstPb5yCs1iaZxc/pReJn4wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKiU0mwD cF60fqjAR53biRPMRQ5nMB8GA1UdIwQYMBaAFIZMUTlaZdXecOzTCq0npp9LmyK8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUUxQi83NDk1MjUxNDdE MjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFkNXc3Tk1LclNlbW4wdWJJ cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hreFJPVnBsMWQ1dzdOTUtyU2VtbjB1Yklydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjVFMUIvNzQ5NTI1MTQ3RDIyMTFFRUE3QjA3NDYwQzRGOUFFMDIvQjlDQUQ3QTQ3 RDIzMTFFRUEzNjk2ODE0QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBtIOEMA8EAgACMAkDBwAgAQ3zHcAwDQYJKoZIhvcNAQELBQADggEB AH/DYv6ZbrYYSNaDPjX8CHex6V9WyeCmMWo1aOk6Jp5qQZXYk7/PjuvuPDv+MzT2 clo/awnmmsc2ykJGdysPwN1SdLKUPIgmOspSO017ZIEYxCI037EhmkRYW5PPwJGl 3286k+CVYyDxSapeArrl4R9nzHOqA8uasdUJVTpkS1HQpZ+5+QUIxevhB4k0W2YJ Ih/fWt1/dLHQWZeCHG3LR2B3q0g9fO8nXua6MdfPonT27HDIVtD9JUgCjkl+yajk oEqqv235gyNwgFyN/9YLIB0MXh/Ei/LQJ8TIstajQV859YBwErplHBjf+Ptrcmi3 BRF70OxESBIbS6Z+8sgSIck= -----END CERTIFICATE-----Generated at Mon Mar 2 16:10:08 2026 by rpki-client