$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8BA4EE8C839911EA8A5C6383C4F9AE02.roa File: 8BA4EE8C839911EA8A5C6383C4F9AE02.roa (raw, json) Hash identifier: 8H27vG7gESHZd3zRS+kNcQ10diPPB4oVcvjPuhOGRow= Subject key identifier: 4E:B8:0A:19:16:67:47:5A:A1:C2:25:40:4E:86:63:D1:47:E9:4A:67 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3B20 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8BA4EE8C839911EA8A5C6383C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:27:47 +0000 ROA not before: Mon 14 Jul 2025 14:50:17 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 132201 IP address blocks: 110.170.123.0/24 maxlen: 24 203.144.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15136 (0x3b20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:50:17 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a49333-b3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:dd:df:de:b2:bc:d7:be:25:ba:7b:ba:bb: c9:7c:f0:81:53:b4:46:5e:97:a2:2d:16:39:ab:8e: 70:5e:0c:14:ba:89:e3:91:c7:d0:ec:86:b8:79:33: 8d:e1:fe:37:aa:30:6b:5b:1b:01:4a:5a:68:08:7e: fd:6f:e6:b9:d3:44:e0:68:a8:ed:c4:af:7f:e4:64: e8:74:cb:4b:77:74:2e:0e:bf:fc:bc:e7:83:0d:7a: 51:5e:3b:67:e8:ed:dd:25:f5:fa:12:c0:d9:1d:36: 9e:07:67:f8:76:01:f2:ee:f5:1a:72:ed:e0:d7:fe: ff:49:55:32:c7:13:fc:0a:79:d3:68:f4:e2:c7:e7: 87:16:c2:f9:bc:cd:3e:eb:a0:e9:58:54:24:60:2a: dd:26:16:06:7a:7f:7c:de:aa:72:dc:63:26:d3:ed: 14:cb:a4:47:8f:d0:60:63:1f:ae:11:df:85:7a:13: 91:c4:6a:d3:8a:a9:cf:4d:54:c3:24:96:8a:19:96: 35:c9:44:31:e5:95:38:5b:c3:7f:2c:7a:3d:92:75: b6:d5:38:76:06:da:dd:5c:77:1e:bd:70:32:31:6e: 7a:cc:2d:35:cb:63:58:98:f2:be:0a:52:2a:33:48: 75:3e:89:cc:9c:86:cb:dd:87:df:63:a1:29:b7:d8: b6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B8:0A:19:16:67:47:5A:A1:C2:25:40:4E:86:63:D1:47:E9:4A:67 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8BA4EE8C839911EA8A5C6383C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 110.170.123.0/24 203.144.135.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:00:44:cf:a8:ed:e8:fb:90:55:fe:ee:0f:c8:d0:4a:bc:8e: c0:82:ed:03:ac:3c:c0:3c:50:f1:2c:6d:3c:af:5a:0f:07:e0: a3:9f:55:d3:d5:45:49:5e:41:9b:ee:f7:a8:04:84:ac:5c:26: ba:06:80:0d:14:f1:99:4c:ad:6b:15:7a:05:14:7b:92:1a:77: e3:2b:81:99:9a:86:48:c2:6b:a2:48:f1:0c:aa:37:79:6c:74: 39:4b:72:10:86:03:d3:40:5c:ec:ac:1c:44:82:27:b8:9a:50: d1:29:9f:d0:d7:b7:be:8f:66:fe:f7:9e:a5:dd:0f:1b:1e:12: 3c:d3:f3:ce:0b:77:82:9c:d5:b1:a2:41:9b:c6:b6:49:db:b2: 06:2a:7f:1f:cb:70:d8:4b:50:aa:7d:83:1e:93:aa:8d:36:5a: 92:ec:a3:5c:63:5e:ab:60:a3:4d:77:16:6e:39:74:29:c7:5f: a6:0a:73:e2:36:5b:b8:0f:42:28:39:26:99:87:c7:ca:e7:35: c2:93:95:1c:7b:db:4b:41:9a:67:b2:b7:51:86:ac:94:8b:3e: 7f:5b:4d:79:ab:24:31:65:13:84:41:05:2f:8f:f6:51:67:05: 43:04:07:fb:bd:f5:7e:68:bc:cc:ed:65:5b:2e:1c:40:12:5e: d2:84:3c:ba -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICOyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MDE3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTMzMy1iM2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuM3d396yvNe+Jbp7urvJfPCBU7RGXpeiLRY5q45wXgwUuonjkcfQ7Ia4eTON 4f43qjBrWxsBSlpoCH79b+a500TgaKjtxK9/5GTodMtLd3QuDr/8vOeDDXpRXjtn 6O3dJfX6EsDZHTaeB2f4dgHy7vUacu3g1/7/SVUyxxP8CnnTaPTix+eHFsL5vM0+ 66DpWFQkYCrdJhYGen983qpy3GMm0+0Uy6RHj9BgYx+uEd+FehORxGrTiqnPTVTD JJaKGZY1yUQx5ZU4W8N/LHo9knW21Th2BtrdXHcevXAyMW56zC01y2NYmPK+ClIq M0h1PonMnIbL3YffY6Ept9i2RQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFE64ChkW Z0daocIlQE6GY9FH6UpnMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvOEJBNEVFOEM4 Mzk5MTFFQThBNUM2MzgzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAbqp7AwQAy5CHMA0GCSqGSIb3DQEBCwUAA4IBAQAcAETPqO3o+5BV /u4PyNBKvI7Agu0DrDzAPFDxLG08r1oPB+Cjn1XT1UVJXkGb7veoBISsXCa6BoAN FPGZTK1rFXoFFHuSGnfjK4GZmoZIwmuiSPEMqjd5bHQ5S3IQhgPTQFzsrBxEgie4 mlDRKZ/Q17e+j2b+956l3Q8bHhI80/POC3eCnNWxokGbxrZJ27IGKn8fy3DYS1Cq fYMek6qNNlqS7KNcY16rYKNNdxZuOXQpx1+mCnPiNlu4D0IoOSaZh8fK5zXCk5Uc e9tLQZpnsrdRhqyUiz5/W015qyQxZROEQQUvj/ZRZwVDBAf7vfV+aLzM7WVbLhxA El7ShDy6 -----END CERTIFICATE-----Generated at Mon Mar 2 09:09:43 2026 by rpki-client