$ rpki-client -vvf rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/80A9DE56614C11EC9175DE54C4F9AE02.roa File: 80A9DE56614C11EC9175DE54C4F9AE02.roa (raw, json) Hash identifier: ERLTmQk83R4LxALyNwa1PO2UwX8u5XdkmpQu0uN+p1U= Subject key identifier: 3D:9F:82:3E:ED:F4:DF:8E:2E:8A:A1:46:DB:11:E3:11:E5:56:E0:C6 Certificate issuer: /CN=A9129C87/serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA Certificate serial: 04C8 Authority key identifier: E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/80A9DE56614C11EC9175DE54C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:47:39 +0000 ROA not before: Sat 01 Nov 2025 00:45:43 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 56120 IP address blocks: 1.20.0.0/24 maxlen: 24 1.20.1.0/24 maxlen: 24 1.20.2.0/24 maxlen: 24 1.20.3.0/24 maxlen: 24 1.20.4.0/22 maxlen: 22 1.20.8.0/21 maxlen: 21 1.20.16.0/20 maxlen: 20 1.20.32.0/20 maxlen: 20 1.20.48.0/21 maxlen: 21 1.20.56.0/22 maxlen: 22 1.20.60.0/24 maxlen: 24 1.20.61.0/24 maxlen: 24 1.20.62.0/24 maxlen: 24 1.20.63.0/24 maxlen: 24 1.20.64.0/24 maxlen: 24 1.20.65.0/24 maxlen: 24 1.20.66.0/24 maxlen: 24 1.20.117.0/24 maxlen: 24 1.20.119.0/24 maxlen: 24 1.20.120.0/24 maxlen: 24 1.20.121.0/24 maxlen: 24 1.20.122.0/24 maxlen: 24 1.20.123.0/24 maxlen: 24 1.20.125.0/24 maxlen: 24 1.20.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1224 (0x4c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129C87, serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA Validity Not Before: Nov 1 00:45:43 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a4356b-4fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e7:a3:67:8c:b6:cf:07:87:e9:81:37:f0:51: ec:81:50:a1:c0:63:a2:d9:2b:05:de:c8:d0:36:1f: eb:6c:5a:95:1e:cb:75:80:97:f2:06:67:44:82:b6: a1:d8:f3:07:ed:28:0f:c7:b7:05:57:41:a9:6a:b4: b1:0d:46:a4:ad:bb:95:64:41:4c:b9:03:e1:9f:79: 54:e7:f6:c6:1b:f8:dd:e6:a4:75:1f:43:df:26:c1: b2:1e:a6:d7:2e:82:7f:b7:46:7d:6d:7f:e3:6c:33: 7a:86:5a:00:71:87:51:25:4e:74:bb:0d:22:87:ab: 4a:25:78:37:d8:ac:8e:a7:8c:3a:e4:21:ff:d6:fd: cc:b4:a0:e0:dd:bb:04:43:96:f5:7c:32:af:87:3f: b8:9c:93:62:8a:14:f7:2d:68:8d:d6:97:3f:57:c9: 81:f2:74:4a:85:38:bf:93:9e:ba:e9:1a:b6:97:73: 31:45:31:4c:79:f3:96:c9:4c:0c:29:0c:01:6b:35: 14:ed:83:9d:1c:b9:f4:a1:6a:52:62:03:c0:ee:97: 29:1b:02:a4:8b:07:64:aa:5a:d3:9d:de:f9:dd:ba: 37:98:d6:03:b7:81:2a:42:87:9f:ca:c5:c5:eb:3c: fc:12:8c:83:29:34:78:ec:95:0a:db:bd:59:bd:5f: 96:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9F:82:3E:ED:F4:DF:8E:2E:8A:A1:46:DB:11:E3:11:E5:56:E0:C6 X509v3 Authority Key Identifier: keyid:E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/80A9DE56614C11EC9175DE54C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 1.20.0.0-1.20.66.255 1.20.117.0/24 1.20.119.0-1.20.123.255 1.20.125.0-1.20.126.255 Signature Algorithm: sha256WithRSAEncryption 85:14:e2:91:3a:90:66:d9:4b:11:de:58:78:04:95:41:6e:4b: d5:ca:ee:c1:da:c3:d2:f9:01:eb:51:f3:4f:99:09:63:ee:94: 41:b5:b4:9d:5b:06:c5:0b:57:d3:5c:c2:6b:5e:7e:ff:5e:ae: 97:ec:17:25:5d:2d:15:a3:01:c7:aa:68:47:fd:ee:6f:07:8b: 2b:0a:51:08:2f:ec:f3:ec:dd:9f:30:bc:7d:44:50:5c:1d:88: 76:f5:57:61:fe:85:70:0f:25:a7:ff:ac:cc:e6:f1:92:d4:a4: 3c:52:33:b4:ed:ea:a1:2a:bc:38:67:52:62:2c:3a:b7:cb:44: 53:a4:2e:75:d1:a8:ca:99:59:6b:c9:c1:a9:b8:0a:68:c5:37: c9:74:6b:dc:28:b4:60:21:d4:3d:31:b2:f2:cf:67:84:55:e8: 5a:1a:f7:ad:f0:3d:6c:e0:7e:c9:a2:c9:4e:d7:5d:10:f4:be: dc:66:48:14:7f:9d:77:28:c7:0a:00:af:f3:9e:32:5a:35:eb: b0:3d:3e:17:3f:a2:d1:9a:0a:c4:ac:7e:59:bb:ca:96:75:a1: 1e:8c:ba:4f:23:21:64:83:9c:b1:93:dd:5a:db:e9:75:5f:7c: ab:a8:90:a3:25:7e:3e:dd:14:17:d7:ab:33:eb:5b:b7:be:bd: 2c:61:de:20 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlDODcxMTAvBgNVBAUTKEU4RjkyRDZCMkEyOTMwRjBBNUJFQUY1MzA0NEM4NUQ4 RUFERTFFQkEwHhcNMjUxMTAxMDA0NTQzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzU2Yi00ZmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweejZ4y2zweH6YE38FHsgVChwGOi2SsF3sjQNh/rbFqVHst1gJfyBmdEgrah 2PMH7SgPx7cFV0GparSxDUakrbuVZEFMuQPhn3lU5/bGG/jd5qR1H0PfJsGyHqbX LoJ/t0Z9bX/jbDN6hloAcYdRJU50uw0ih6tKJXg32KyOp4w65CH/1v3MtKDg3bsE Q5b1fDKvhz+4nJNiihT3LWiN1pc/V8mB8nRKhTi/k5666Rq2l3MxRTFMefOWyUwM KQwBazUU7YOdHLn0oWpSYgPA7pcpGwKkiwdkqlrTnd753bo3mNYDt4EqQoefysXF 6zz8EoyDKTR47JUK271ZvV+WRwIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFD2fgj7t 9N+OLoqhRtsR4xHlVuDGMB8GA1UdIwQYMBaAFOj5LWsqKTDwpb6vUwRMhdjq3h66 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUM4Ny9GRDA4M0Y1ODVF RUQxMUVDOUE0OTZENTlDNEY5QUUwMi82UGt0YXlvcE1QQ2x2cTlUQkV5RjJPcmVI cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZQa3RheW9wTVBDbHZxOVRCRXlGMk9yZUhyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjlDODcvRkQwODNGNTg1RUVEMTFFQzlBNDk2RDU5QzRGOUFFMDIvODBBOURFNTY2 MTRDMTFFQzkxNzVERTU0QzRGOUFFMDIucm9hMEgGCCsGAQUFBwEHAQH/BDkwNzA1 BAIAATAvMAsDAwIBFAMEAAEUQgMEAAEUdTAMAwQAARR3AwQCARR4MAwDBAABFH0D BAABFH4wDQYJKoZIhvcNAQELBQADggEBAIUU4pE6kGbZSxHeWHgElUFuS9XK7sHa w9L5AetR80+ZCWPulEG1tJ1bBsULV9Ncwmtefv9erpfsFyVdLRWjAceqaEf97m8H iysKUQgv7PPs3Z8wvH1EUFwdiHb1V2H+hXAPJaf/rMzm8ZLUpDxSM7Tt6qEqvDhn UmIsOrfLRFOkLnXRqMqZWWvJwam4CmjFN8l0a9wotGAh1D0xsvLPZ4RV6Foa963w PWzgfsmiyU7XXRD0vtxmSBR/nXcoxwoAr/OeMlo167A9Phc/otGaCsSsflm7ypZ1 oR6Muk8jIWSDnLGT3Vrb6XVffKuokKMlfj7dFBfXqzPrW7e+vSxh3iA= -----END CERTIFICATE-----Generated at Mon Mar 2 12:42:55 2026 by rpki-client