$ rpki-client -vvf rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/7EBB570A296C11EBB7D88147C4F9AE02.roa File: 7EBB570A296C11EBB7D88147C4F9AE02.roa (raw, json) Hash identifier: E6etJLs09jxCInikK/I6oSWS8vZ+7fWKirFeSQZQozk= Subject key identifier: CB:A5:42:4F:89:0A:50:F0:2F:E7:4E:A1:7D:CC:85:A8:07:DC:91:A2 Certificate issuer: /CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1 Certificate serial: 07E2 Authority key identifier: E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/7EBB570A296C11EBB7D88147C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:40:41 +0000 ROA not before: Sat 06 Sep 2025 22:03:27 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 17707 IP address blocks: 125.6.0.0/19 maxlen: 24 125.6.112.0/20 maxlen: 24 125.6.128.0/17 maxlen: 24 203.104.96.0/20 maxlen: 24 203.104.208.0/22 maxlen: 24 203.131.192.0/20 maxlen: 24 203.174.64.0/20 maxlen: 24 2407:3000::/32 maxlen: 32 2407:3000:6::/48 maxlen: 48 2407:3000:6a::/48 maxlen: 48 2407:3000:6d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2018 (0x7e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139220, serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1 Validity Not Before: Sep 6 22:03:27 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a40999-d8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:39:43:90:42:f8:9b:37:d4:c9:48:e5:3f:e9: ce:b7:25:8c:8b:a3:67:0b:4e:e0:f9:f3:7c:16:1d: 9e:a0:9f:84:c1:8b:ce:3c:66:f9:28:58:c1:e1:a0: 27:0e:1c:10:64:97:3c:67:8c:c0:ce:19:88:85:b1: 0b:34:2e:6f:9a:03:25:29:d2:de:24:f5:e2:84:dc: 14:87:db:a7:c2:ff:4c:69:76:c4:03:64:fb:ed:7e: 76:d6:9e:8f:5c:b2:be:ba:60:a5:5a:46:c5:d9:30: 0d:d1:3b:ac:a5:67:09:db:d2:8b:a1:40:82:f7:f2: 76:10:c4:97:8f:a5:f5:d5:ad:04:05:e7:36:e4:f1: b6:58:0e:37:c6:51:7a:29:c8:41:3c:a5:d4:41:cb: 46:8a:0b:5b:79:1e:09:c7:00:3b:a4:65:39:c5:a1: ae:30:33:82:92:33:28:35:aa:5d:b5:29:59:2a:c6: 20:a3:f3:dd:a5:a4:50:ec:f1:67:e6:1b:d5:66:81: 51:6d:fd:24:5b:e6:ac:d5:39:69:76:3a:7a:be:c7: 3d:de:22:a7:7c:01:18:1f:de:76:a1:f5:f1:64:89: 63:7c:07:ba:df:e7:22:d4:96:1f:95:eb:d4:73:4e: 27:6b:ac:89:46:4a:21:25:7f:d7:67:04:fa:e4:ba: c2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A5:42:4F:89:0A:50:F0:2F:E7:4E:A1:7D:CC:85:A8:07:DC:91:A2 X509v3 Authority Key Identifier: keyid:E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/7EBB570A296C11EBB7D88147C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 125.6.0.0/19 125.6.112.0-125.6.255.255 203.104.96.0/20 203.104.208.0/22 203.131.192.0/20 203.174.64.0/20 IPv6: 2407:3000::/32 Signature Algorithm: sha256WithRSAEncryption 83:60:da:fe:c9:05:89:c8:b6:8d:e9:c2:67:43:e5:f6:7e:05: e9:93:ea:6d:f8:01:53:71:15:d5:7b:86:e6:43:8b:59:60:79: 34:bc:29:67:06:4b:aa:a5:e7:cd:20:37:f1:8b:d0:19:f1:ee: 76:aa:39:68:3f:e3:76:18:a8:ef:7e:64:8a:ea:cd:a6:e6:53: 45:ce:eb:60:09:77:3f:ac:6b:d7:86:cd:56:db:09:1b:87:2e: 9c:b5:db:86:60:55:0b:86:03:4f:5e:6c:83:73:eb:43:2a:a6: 0a:a0:05:b4:c9:80:47:7c:3c:5f:f2:f8:2b:c1:1d:e3:af:0b: 21:1f:6e:6f:e1:19:24:cf:53:13:a7:dc:b2:c5:8c:ff:05:d4: f8:92:6f:78:d4:21:13:b8:dd:05:56:7f:22:97:c0:59:64:c3: a6:93:d6:05:72:46:02:28:61:5c:bc:f7:7f:10:c6:c9:1f:f6: 83:87:ad:02:24:01:7c:99:b6:d5:73:ad:a1:18:3c:0d:3d:25: 13:2f:85:a9:f1:24:fc:fc:78:0e:53:dd:a9:29:0d:c4:f4:86: a2:82:1a:aa:86:9e:b6:cd:48:ee:23:af:65:10:cc:b9:2f:9f: d9:17:3f:a5:20:b2:26:92:ef:ac:6f:29:a2:7c:4c:f9:db:31: aa:7e:35:50 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICB+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkyMjAxMTAvBgNVBAUTKEUyQ0ZDNDJCNkEwODE1MEFFRkVGRTcxODlCRTVBRjJC RTU2OEY4QzEwHhcNMjUwOTA2MjIwMzI3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDk5OS1kOGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDlDkEL4mzfUyUjlP+nOtyWMi6NnC07g+fN8Fh2eoJ+EwYvOPGb5KFjB4aAn DhwQZJc8Z4zAzhmIhbELNC5vmgMlKdLeJPXihNwUh9unwv9MaXbEA2T77X521p6P XLK+umClWkbF2TAN0TuspWcJ29KLoUCC9/J2EMSXj6X11a0EBec25PG2WA43xlF6 KchBPKXUQctGigtbeR4JxwA7pGU5xaGuMDOCkjMoNapdtSlZKsYgo/PdpaRQ7PFn 5hvVZoFRbf0kW+as1Tlpdjp6vsc93iKnfAEYH952ofXxZIljfAe63+ci1JYflevU c04na6yJRkohJX/XZwT65LrC1wIDAQABo4IClDCCApAwHQYDVR0OBBYEFMulQk+J ClDwL+dOoX3MhagH3JGiMB8GA1UdIwQYMBaAFOLPxCtqCBUK7+/nGJvlryvlaPjB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTIyMC8xNUNEMUMyMjI4 QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZRcnY3LWNZbS1XdkstVm8t TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRzX0VLMm9JRlFydjctY1ltLVd2Sy1Wby1NRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkyMjAvMTVDRDFDMjIyOEIwMTFFQkI0NDY5RTFFQzRGOUFFMDIvN0VCQjU3MEEy OTZDMTFFQkI3RDg4MTQ3QzRGOUFFMDIucm9hMFMGCCsGAQUFBwEHAQH/BEQwQjAx BAIAATArAwQFfQYAMAsDBAR9BnADAwB9BgMEBMtoYAMEAsto0AMEBMuDwAMEBMuu QDANBAIAAjAHAwUAJAcwADANBgkqhkiG9w0BAQsFAAOCAQEAg2Da/skFici2jenC Z0Pl9n4F6ZPqbfgBU3EV1XuG5kOLWWB5NLwpZwZLqqXnzSA38YvQGfHudqo5aD/j dhio735kiurNpuZTRc7rYAl3P6xr14bNVtsJG4cunLXbhmBVC4YDT15sg3PrQyqm CqAFtMmAR3w8X/L4K8Ed468LIR9ub+EZJM9TE6fcssWM/wXU+JJveNQhE7jdBVZ/ IpfAWWTDppPWBXJGAihhXLz3fxDGyR/2g4etAiQBfJm21XOtoRg8DT0lEy+FqfEk /Px4DlPdqSkNxPSGooIaqoaets1I7iOvZRDMuS+f2Rc/pSCyJpLvrG8ponxM+dsx qn41UA== -----END CERTIFICATE-----Generated at Mon Mar 2 15:18:15 2026 by rpki-client