$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EE7D5645A5D11EB9B234479C4F9AE02.roa File: 3EE7D5645A5D11EB9B234479C4F9AE02.roa (raw, json) Hash identifier: 0cPBuGeW3rPtaeLuQK61J+Ac9mO4bf5/0VTMx/osxMA= Subject key identifier: EC:4D:B7:90:F8:0E:29:9C:96:4E:A4:3B:EC:60:47:71:CE:0F:86:E2 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3B1B Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EE7D5645A5D11EB9B234479C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:27:42 +0000 ROA not before: Mon 14 Jul 2025 14:50:13 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 131460 IP address blocks: 61.90.227.0/24 maxlen: 24 119.46.128.0/24 maxlen: 24 119.46.129.0/24 maxlen: 24 119.46.199.0/24 maxlen: 24 119.46.249.0/24 maxlen: 24 203.144.132.0/24 maxlen: 24 203.144.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15131 (0x3b1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:50:13 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4932e-fb39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:99:30:89:1a:1a:2c:94:9d:1a:46:8a:f1:92: fc:12:3b:3c:1d:71:3f:86:1f:8c:1a:87:be:1b:70: 4a:73:d8:ad:16:b0:ab:cb:5c:85:9a:de:00:52:08: f0:35:b6:20:50:48:de:d6:2f:47:d2:e0:ea:be:56: 9a:d3:85:ff:13:ea:ac:2c:61:b6:db:d6:ef:78:36: cf:6b:03:05:f9:69:6d:ab:d4:6a:50:4b:ec:fa:f5: 87:42:c3:fc:40:06:55:c6:99:38:cd:d1:71:ea:cb: 77:9d:a6:73:10:30:41:8b:e2:63:ae:7a:b3:22:10: 1d:26:48:d3:ff:1f:bf:55:6f:9b:7a:17:d8:fb:e5: aa:23:47:75:9d:b2:57:5a:10:e7:b7:2b:4b:c5:06: be:e2:93:bf:c4:8b:ff:d5:6f:68:91:7d:ef:0d:4c: 0d:5a:1c:0a:49:79:78:38:99:bb:5f:53:d6:4b:71: 12:bc:60:35:ab:f9:ca:f8:52:5c:5e:d4:36:07:3e: 11:e3:99:41:1f:19:ed:6a:32:af:87:d8:5a:b7:61: 23:26:21:65:70:2e:11:5b:76:31:f8:dc:3a:bf:38: 6c:06:41:3a:d6:f5:dc:e6:3f:49:2d:b7:0e:23:e5: 16:12:10:8a:14:46:fb:35:71:76:98:84:bf:5a:aa: f2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4D:B7:90:F8:0E:29:9C:96:4E:A4:3B:EC:60:47:71:CE:0F:86:E2 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EE7D5645A5D11EB9B234479C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.90.227.0/24 119.46.128.0/23 119.46.199.0/24 119.46.249.0/24 203.144.132.0/24 203.144.213.0/24 Signature Algorithm: sha256WithRSAEncryption 97:f2:f9:0d:74:00:6e:18:f6:63:bd:36:70:93:4d:ae:bd:f4: 5c:b9:b4:6e:32:0c:13:cb:70:86:5b:7f:ba:de:1a:4c:0a:21: 6d:c7:15:94:63:b6:f1:38:e8:51:43:e3:1f:55:e3:84:21:a3: e3:ad:29:d6:9d:79:79:80:7b:01:0c:3a:32:4d:e3:6d:4a:c1: 25:05:4a:e3:25:03:47:1a:4b:ac:bb:2c:80:e4:85:ec:69:98: b9:76:a9:bd:a6:46:82:59:89:6c:df:67:fe:95:7a:42:4b:1e: 4b:b1:00:c6:c3:7a:f2:e5:ee:10:92:b8:d0:a3:23:4f:7f:8a: 01:cb:01:e0:f2:8a:ff:e4:27:dc:0e:49:a6:e0:bf:42:20:03: a2:6c:03:6f:60:fd:9c:c6:9f:08:fb:75:52:a0:b6:4c:d4:9d: 31:f8:2d:27:6a:4a:69:6d:8e:b9:07:67:1c:26:90:10:16:47: de:a4:00:88:0b:29:b7:0d:23:2d:72:02:29:ec:f9:7f:7b:b9: e0:b9:0a:80:aa:d7:30:9a:e5:63:da:18:c3:df:81:ed:35:90: ed:db:f3:cb:e7:6e:70:30:c4:82:c8:dc:72:76:61:85:44:60: cc:6d:77:7f:28:63:15:4a:76:ca:b9:25:65:03:41:b4:b6:61: 2c:74:59:c3 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICOxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MDEzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTMyZS1mYjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpkwiRoaLJSdGkaK8ZL8Ejs8HXE/hh+MGoe+G3BKc9itFrCry1yFmt4AUgjw NbYgUEje1i9H0uDqvlaa04X/E+qsLGG229bveDbPawMF+Wltq9RqUEvs+vWHQsP8 QAZVxpk4zdFx6st3naZzEDBBi+JjrnqzIhAdJkjT/x+/VW+behfY++WqI0d1nbJX WhDntytLxQa+4pO/xIv/1W9okX3vDUwNWhwKSXl4OJm7X1PWS3ESvGA1q/nK+FJc XtQ2Bz4R45lBHxntajKvh9hat2EjJiFlcC4RW3Yx+Nw6vzhsBkE61vXc5j9JLbcO I+UWEhCKFEb7NXF2mIS/WqryzQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFOxNt5D4 Dimclk6kO+xgR3HOD4biMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvM0VFN0Q1NjQ1 QTVEMTFFQjlCMjM0NDc5QzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAATAkAwQAPVrjAwQBdy6AAwQAdy7HAwQAdy75AwQAy5CEAwQAy5DVMA0GCSqG SIb3DQEBCwUAA4IBAQCX8vkNdABuGPZjvTZwk02uvfRcubRuMgwTy3CGW3+63hpM CiFtxxWUY7bxOOhRQ+MfVeOEIaPjrSnWnXl5gHsBDDoyTeNtSsElBUrjJQNHGkus uyyA5IXsaZi5dqm9pkaCWYls32f+lXpCSx5LsQDGw3ry5e4QkrjQoyNPf4oBywHg 8or/5CfcDkmm4L9CIAOibANvYP2cxp8I+3VSoLZM1J0x+C0nakppbY65B2ccJpAQ FkfepACICym3DSMtcgIp7Pl/e7nguQqAqtcwmuVj2hjD34HtNZDt2/PL525wMMSC yNxydmGFRGDMbXd/KGMVSnbKuSVlA0G0tmEsdFnD -----END CERTIFICATE-----Generated at Mon Mar 2 21:10:46 2026 by rpki-client