$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/B4B1A742BE4C11EEB1327A54C4F9AE02.roa File: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (raw, json) Hash identifier: iiiauVlcS/qlYnD0UVeEkPiESSpS7cLvUj/CtgxabWE= Subject key identifier: 51:59:6C:92:87:C3:A4:86:66:07:64:75:CA:11:9B:AE:E2:3D:F8:6B Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Certificate serial: 0705 Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/B4B1A742BE4C11EEB1327A54C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:57:32 +0000 ROA not before: Fri 31 Oct 2025 06:26:41 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 9231 IP address blocks: 58.82.192.0/19 maxlen: 24 58.82.224.0/19 maxlen: 24 103.15.84.0/22 maxlen: 24 123.136.0.0/20 maxlen: 24 161.81.0.0/16 maxlen: 24 182.239.72.0/21 maxlen: 24 182.239.80.0/20 maxlen: 24 182.239.104.0/21 maxlen: 24 182.239.112.0/20 maxlen: 24 203.142.97.0/24 maxlen: 24 203.142.98.0/24 maxlen: 24 203.142.99.0/24 maxlen: 24 203.142.127.0/24 maxlen: 24 223.122.0.0/18 maxlen: 24 223.122.64.0/18 maxlen: 24 223.122.128.0/17 maxlen: 24 2401:3000::/36 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1797 (0x705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Validity Not Before: Oct 31 06:26:41 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a453dc-21c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9d:29:98:97:6e:fd:6d:1a:c6:ff:6d:27:ea: 2e:f8:8b:6a:e4:56:cd:6e:d3:72:41:6c:c7:15:00: 5a:a8:b8:09:69:44:8e:b8:af:c8:39:7a:0f:87:16: ef:80:24:1e:01:be:da:b8:37:ce:63:4a:cb:a8:a4: 64:5b:0c:3f:8b:52:37:28:66:cd:00:3d:2e:32:2d: 01:d2:8a:99:dc:b8:05:39:98:0a:08:09:58:bb:4e: e1:6f:59:3d:01:55:5b:a2:28:aa:0b:37:46:cc:7f: 0f:aa:d4:f2:fb:49:bd:e8:93:47:45:9d:ba:d9:6d: a1:c6:c7:ab:f4:84:ef:ae:87:96:01:9f:f1:5e:a4: e1:57:eb:e7:d3:78:6a:67:19:14:3b:ee:0b:2c:29: d5:bf:10:b8:95:c0:11:10:9a:c3:a3:01:e9:c0:63: 5f:94:a4:d9:63:32:e2:54:1b:5d:12:3b:20:e6:b6: f0:31:ef:cd:2a:7c:59:b8:6e:dc:21:f5:5b:83:3f: 8e:91:7d:b9:61:73:2c:25:18:b9:7d:2f:4f:02:9f: 6c:ba:86:3e:1c:4a:b8:82:07:05:16:ae:c1:f7:f4: 84:0d:90:e4:7a:48:41:79:07:77:6f:c0:2d:94:90: 49:24:6b:19:d0:c6:7e:e9:91:19:86:49:88:25:36: 37:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:59:6C:92:87:C3:A4:86:66:07:64:75:CA:11:9B:AE:E2:3D:F8:6B X509v3 Authority Key Identifier: keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/B4B1A742BE4C11EEB1327A54C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.82.192.0/18 103.15.84.0/22 123.136.0.0/20 161.81.0.0/16 182.239.72.0-182.239.95.255 182.239.104.0-182.239.127.255 203.142.97.0-203.142.99.255 203.142.127.0/24 223.122.0.0/16 IPv6: 2401:3000::/36 Signature Algorithm: sha256WithRSAEncryption 4e:19:4f:cf:e2:d9:b5:bc:de:c8:1a:5a:c8:aa:e0:40:d0:e2: 9b:e4:71:07:0a:c9:d8:5a:df:68:38:45:34:5d:b2:b6:f6:e0: 24:fd:75:7f:02:87:db:b0:ab:78:4c:0e:d7:73:2e:73:45:32: 70:74:f5:12:b0:f6:e7:e5:95:94:cb:7e:eb:59:78:f6:8c:4c: 99:bd:41:9a:ac:36:cc:e6:cb:01:89:5f:96:eb:a4:f4:6a:47: 4b:fd:6a:5b:38:ab:5f:be:c0:33:b1:c0:c2:30:66:eb:f8:22: 52:24:9b:56:00:70:8f:c1:7d:66:4e:7f:52:af:b9:66:f9:ab: fb:92:2a:2f:ce:c2:f5:d7:0c:93:62:51:4b:8c:0e:09:f4:6c: 52:e2:92:7c:67:ef:a1:a6:89:96:bf:a9:15:0a:e4:a2:95:f9: b3:9e:f6:26:7a:54:d2:34:fd:f9:50:8c:49:e7:16:4c:b2:c9: 49:e8:5b:91:24:a1:36:69:a7:0e:74:77:e4:c4:62:2d:7c:33: 44:0e:75:50:af:f1:b2:0e:af:b5:cb:5a:0d:a2:e2:0a:98:ba: ed:db:93:f0:7e:be:3a:42:ae:ed:b8:3b:71:81:09:24:94:21: 66:c2:d7:fa:7c:03:52:4b:24:20:b7:3c:53:13:f5:0d:6e:fd: 3b:7f:a2:51 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICBwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3 Q0ZGRTc3RUYwHhcNMjUxMDMxMDYyNjQxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTNkYy0yMWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJ0pmJdu/W0axv9tJ+ou+Itq5FbNbtNyQWzHFQBaqLgJaUSOuK/IOXoPhxbv gCQeAb7auDfOY0rLqKRkWww/i1I3KGbNAD0uMi0B0oqZ3LgFOZgKCAlYu07hb1k9 AVVboiiqCzdGzH8PqtTy+0m96JNHRZ262W2hxser9ITvroeWAZ/xXqThV+vn03hq ZxkUO+4LLCnVvxC4lcAREJrDowHpwGNflKTZYzLiVBtdEjsg5rbwMe/NKnxZuG7c IfVbgz+OkX25YXMsJRi5fS9PAp9suoY+HEq4ggcFFq7B9/SEDZDkekhBeQd3b8At lJBJJGsZ0MZ+6ZEZhkmIJTY3cQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFFFZbJKH w6SGZgdkdcoRm67iPfhrMB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzJCNEQvQzE5OUUwMDZCMjA1MTFFQkFFQUU5RjEwQzRGOUFFMDIvQjRCMUE3NDJC RTRDMTFFRUIxMzI3QTU0QzRGOUFFMDIucm9hMHUGCCsGAQUFBwEHAQH/BGYwZDBS BAIAATBMAwQGOlLAAwQCZw9UAwQEe4gAAwMAoVEwDAMEA7bvSAMEBbbvQDAMAwQD tu9oAwQHtu8AMAwDBADLjmEDBALLjmADBADLjn8DAwDfejAOBAIAAjAIAwYEJAEw AAAwDQYJKoZIhvcNAQELBQADggEBAE4ZT8/i2bW83sgaWsiq4EDQ4pvkcQcKydha 32g4RTRdsrb24CT9dX8Ch9uwq3hMDtdzLnNFMnB09RKw9ufllZTLfutZePaMTJm9 QZqsNszmywGJX5brpPRqR0v9als4q1++wDOxwMIwZuv4IlIkm1YAcI/BfWZOf1Kv uWb5q/uSKi/OwvXXDJNiUUuMDgn0bFLiknxn76GmiZa/qRUK5KKV+bOe9iZ6VNI0 /flQjEnnFkyyyUnoW5EkoTZppw50d+TEYi18M0QOdVCv8bIOr7XLWg2i4gqYuu3b k/B+vjpCru24O3GBCSSUIWbC1/p8A1JLJCC3PFMT9Q1u/Tt/olE= -----END CERTIFICATE-----Generated at Mon Mar 2 15:01:29 2026 by rpki-client