$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4E9A620EAEBB11EA8A15501DC4F9AE02.roa File: 4E9A620EAEBB11EA8A15501DC4F9AE02.roa (raw, json) Hash identifier: XGY5JkXuPkDk1NPz+jtMdWIRKlt+baVhZb4tswurL84= Subject key identifier: A3:99:81:2E:1C:96:A6:86:2E:26:63:84:56:CA:1D:B2:EA:32:87:1E Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3B3F Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4E9A620EAEBB11EA8A15501DC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:28:14 +0000 ROA not before: Mon 14 Jul 2025 14:50:43 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 15133 IP address blocks: 119.46.85.0/24 maxlen: 24 2001:fb0:109f:8005::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15167 (0x3b3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:50:43 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4934e-ceb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:09:82:56:f5:9e:27:5f:c5:06:12:2e:27:ce: 9c:81:a7:d2:fa:03:20:6e:bb:dd:80:64:85:56:96: 13:d6:82:7a:e8:b7:d3:07:80:52:2b:b0:40:31:df: b9:14:4b:af:ae:e8:4b:0c:d2:e5:36:14:2b:f1:22: 60:b8:a7:3c:60:7f:77:a9:bd:e9:e5:61:02:e6:b4: bd:4c:58:15:ef:d5:d8:2e:b6:0e:7c:f2:90:fc:f2: bd:7b:1c:40:bc:76:c5:57:a4:85:f2:49:7e:34:cc: 14:14:b9:ea:a6:78:2d:9e:ca:0b:4c:b1:16:53:20: d6:d9:f7:75:89:ee:b5:d5:77:42:a8:d6:29:86:b3: 63:28:b0:50:96:c6:12:be:d4:df:db:e8:0b:0d:b6: 40:ce:24:b8:f3:d4:02:a7:57:67:dc:80:58:92:d9: 68:c6:95:40:3c:95:c4:ff:9f:fe:77:f9:0f:a3:e5: ad:8f:96:f3:44:ad:5f:8b:7d:6d:1b:e0:0b:78:ad: 9f:c5:1f:90:3d:de:ce:50:11:db:92:30:57:7b:44: 5d:4a:62:d8:8f:7d:37:4e:e1:0c:57:75:ab:06:58: ce:6e:8e:27:e2:45:a3:e7:66:47:1a:4d:fe:01:68: 0e:23:77:12:77:18:10:f5:d5:c5:63:36:b8:84:c1: b5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:99:81:2E:1C:96:A6:86:2E:26:63:84:56:CA:1D:B2:EA:32:87:1E X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4E9A620EAEBB11EA8A15501DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 119.46.85.0/24 IPv6: 2001:fb0:109f:8005::/64 Signature Algorithm: sha256WithRSAEncryption 20:3f:e3:10:00:6a:a2:c7:07:ac:96:2f:6d:ce:22:31:36:5a: 60:1c:f8:34:11:63:ca:42:6d:ea:04:0f:78:4a:1b:cd:5d:73: 09:b2:dd:ed:eb:6e:75:75:f6:5f:f9:f6:23:d4:ed:1d:70:9b: e5:20:84:28:07:19:f0:96:4e:e3:a7:69:64:ba:f7:d7:c0:e0: 3c:b2:c8:a5:a9:c2:21:bf:ad:e2:e6:d2:9e:47:75:f7:cf:36: 53:34:be:e3:8d:6e:00:77:6b:b7:eb:14:88:7a:75:cb:d3:18: 3f:57:e1:95:d9:a9:6d:4e:f0:64:25:85:a0:6b:f1:9f:e1:18: bf:46:5b:84:51:03:3e:20:dd:c6:3a:f4:43:a7:41:d7:a7:d7: 8f:90:2c:3e:62:26:3e:eb:f7:83:6e:b7:35:8d:d7:37:30:7e: d9:be:8f:2d:be:2c:c4:3f:3e:e7:59:ff:52:11:8b:a1:71:95: ff:85:37:37:0c:60:75:ea:c5:0a:23:9a:1c:ae:cf:0c:92:c3: 37:ff:e7:f8:63:c4:be:35:99:2f:b6:ff:1c:08:2f:22:cd:e8: 24:89:fa:cc:95:24:5d:6c:57:bd:bb:72:a0:3e:94:fe:10:ea: 2f:eb:72:50:25:1e:e3:b4:fa:6d:cf:b4:de:f8:ca:75:1d:60: f8:23:a2:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICOz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MDQzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTM0ZS1jZWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAmCVvWeJ1/FBhIuJ86cgafS+gMgbrvdgGSFVpYT1oJ66LfTB4BSK7BAMd+5 FEuvruhLDNLlNhQr8SJguKc8YH93qb3p5WEC5rS9TFgV79XYLrYOfPKQ/PK9exxA vHbFV6SF8kl+NMwUFLnqpngtnsoLTLEWUyDW2fd1ie611XdCqNYphrNjKLBQlsYS vtTf2+gLDbZAziS489QCp1dn3IBYktloxpVAPJXE/5/+d/kPo+Wtj5bzRK1fi31t G+ALeK2fxR+QPd7OUBHbkjBXe0RdSmLYj303TuEMV3WrBljObo4n4kWj52ZHGk3+ AWgOI3cSdxgQ9dXFYza4hMG1swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKOZgS4c lqaGLiZjhFbKHbLqMoceMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNEU5QTYyMEVB RUJCMTFFQThBMTU1MDFEQzRGOUFFMDIucm9hMDIGCCsGAQUFBwEHAQH/BCMwITAM BAIAATAGAwQAdy5VMBEEAgACMAsDCQAgAQ+wEJ+ABTANBgkqhkiG9w0BAQsFAAOC AQEAID/jEABqoscHrJYvbc4iMTZaYBz4NBFjykJt6gQPeEobzV1zCbLd7etudXX2 X/n2I9TtHXCb5SCEKAcZ8JZO46dpZLr318DgPLLIpanCIb+t4ubSnkd19882UzS+ 441uAHdrt+sUiHp1y9MYP1fhldmpbU7wZCWFoGvxn+EYv0ZbhFEDPiDdxjr0Q6dB 16fXj5AsPmImPuv3g263NY3XNzB+2b6PLb4sxD8+51n/UhGLoXGV/4U3NwxgderF CiOaHK7PDJLDN//n+GPEvjWZL7b/HAgvIs3oJIn6zJUkXWxXvbtyoD6U/hDqL+ty UCUe47T6bc+03vjKdR1g+COibg== -----END CERTIFICATE-----Generated at Mon Mar 2 21:26:03 2026 by rpki-client