$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/311C494286CC11F09348D16BC4F9AE02.roa File: 311C494286CC11F09348D16BC4F9AE02.roa (raw, json) Hash identifier: RBYV41pL4Nucn1z+q4JWoCIg19xsy/360DZ/MRrEtr0= Subject key identifier: F4:BE:87:7A:C6:2B:F1:02:A3:55:5B:89:50:C2:86:1E:24:6C:7A:E1 Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Certificate serial: 095F Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/311C494286CC11F09348D16BC4F9AE02.roa Signing time: Wed 15 Apr 2026 03:07:16 +0000 ROA not before: Wed 15 Apr 2026 03:07:16 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 152584 IP address blocks: 126.209.15.0/24 maxlen: 24 126.209.33.0/24 maxlen: 24 126.209.37.0/24 maxlen: 24 126.209.51.0/24 maxlen: 24 126.209.60.0/24 maxlen: 24 126.209.63.0/24 maxlen: 24 126.209.80.0/24 maxlen: 24 126.209.81.0/24 maxlen: 24 126.209.85.0/24 maxlen: 24 126.209.86.0/24 maxlen: 24 126.209.96.0/21 maxlen: 24 126.209.116.0/22 maxlen: 24 126.209.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2399 (0x95f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Validity Not Before: Apr 15 03:07:16 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69df00e4-606f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:4c:4c:7d:67:ea:4d:59:cc:66:aa:04:09: f3:17:7f:d8:a6:7b:0d:a2:e8:01:4b:1f:8a:fe:db: 74:9b:47:54:f1:60:e0:ab:42:ae:fb:13:2d:67:8e: c5:57:fd:86:12:1c:1d:1c:88:43:4a:ad:3f:ef:b8: 33:32:fd:d1:06:20:cf:10:71:49:19:38:c3:7a:4b: f9:13:ce:7d:4e:bb:63:89:d4:05:36:b7:e5:9b:2b: 81:46:27:ff:c5:01:26:f5:a0:61:2e:8f:e4:2f:b9: 72:09:75:54:1d:8b:8b:6e:b2:57:60:94:9a:87:dc: 90:60:30:10:48:2e:11:91:50:c2:dc:cb:f3:d5:f7: 04:dc:f9:bf:e8:2b:9b:c7:1b:30:c3:3d:9e:2c:bc: 13:a8:ab:0a:01:b1:1e:05:86:30:f9:de:e0:c7:d0: bc:f2:5b:b2:9b:10:22:a5:6f:99:9a:1a:99:f6:3e: 06:25:81:76:83:7e:aa:c5:e1:5c:5e:37:41:95:de: 7b:f5:71:df:e4:cc:d5:cb:8d:ed:9f:01:ec:46:4a: c0:27:c2:87:c8:3d:8f:a1:7c:11:73:90:c0:b8:6b: 81:a5:1c:1c:8f:c1:18:8b:18:07:63:bd:0f:90:1e: 7e:9a:a5:53:d9:b1:c1:c0:a2:d2:50:d8:07:8f:95: 33:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BE:87:7A:C6:2B:F1:02:A3:55:5B:89:50:C2:86:1E:24:6C:7A:E1 X509v3 Authority Key Identifier: keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/311C494286CC11F09348D16BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 126.209.15.0/24 126.209.33.0/24 126.209.37.0/24 126.209.51.0/24 126.209.60.0/24 126.209.63.0/24 126.209.80.0/23 126.209.85.0-126.209.86.255 126.209.96.0/21 126.209.116.0-126.209.123.255 Signature Algorithm: sha256WithRSAEncryption 81:93:b9:c3:49:7d:87:f8:54:6e:7b:7a:b3:aa:c7:b0:d1:de: 2a:c5:de:45:5d:e5:b7:c8:ba:87:ae:76:a7:d0:f7:b2:90:cd: 09:3e:61:37:8d:f7:6f:3e:8a:f6:c9:0a:39:84:71:af:8e:c6: 67:72:4e:41:21:9e:02:09:4c:96:2b:26:02:34:85:b1:49:43: e9:2d:62:df:2d:69:e3:42:74:14:ec:c2:71:27:be:ad:8d:c3: 78:ff:ae:9b:cc:99:2d:48:0f:05:52:4d:e6:08:6c:93:a8:e2: a1:03:12:d7:31:a4:96:6f:74:6d:e4:d7:1f:db:75:be:9f:61: bc:3a:c3:46:2b:fa:13:f3:47:99:fa:f9:59:ce:ec:a2:56:ea: 36:83:cc:ec:5e:b7:d1:08:2f:39:ed:74:90:3e:74:18:07:5a: a1:d2:9b:e0:63:eb:66:42:76:f9:6b:f0:71:9c:2d:1a:70:b0: 39:14:02:87:ca:50:60:59:19:2a:52:56:93:51:a5:ca:c6:e8: 76:dc:96:71:01:d6:cf:d2:ba:81:48:78:44:90:27:7d:70:e4: ae:e9:14:cf:a4:e8:9b:f7:86:4b:ea:0b:cb:e9:83:7b:51:e8: 10:2b:29:74:be:7a:5b:75:ff:cb:05:02:1d:5c:0a:4c:a9:b3: cf:a4:f8:18 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxRUExMTAvBgNVBAUTKEU2OTJDNUI2MEIzRUYxQzIwNDQ0MzlGQzM5MEFENTZE QzNDQkNENjMwHhcNMjYwNDE1MDMwNzE2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWRmMDBlNC02MDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0RMTH1n6k1ZzGaqBAnzF3/YpnsNougBSx+K/tt0m0dU8WDgq0Ku+xMtZ47F V/2GEhwdHIhDSq0/77gzMv3RBiDPEHFJGTjDekv5E859TrtjidQFNrflmyuBRif/ xQEm9aBhLo/kL7lyCXVUHYuLbrJXYJSah9yQYDAQSC4RkVDC3Mvz1fcE3Pm/6Cub xxswwz2eLLwTqKsKAbEeBYYw+d7gx9C88luymxAipW+ZmhqZ9j4GJYF2g36qxeFc XjdBld579XHf5MzVy43tnwHsRkrAJ8KHyD2PoXwRc5DAuGuBpRwcj8EYixgHY70P kB5+mqVT2bHBwKLSUNgHj5UzdQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPS+h3rG K/ECo1VbiVDChh4kbHrhMB8GA1UdIwQYMBaAFOaSxbYLPvHCBEQ5/DkK1W3Dy81j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFFQS85QzkzMkI0ODE3 M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThjSUVSRG44T1FyVmJjUEx6 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwTEZ0Z3MtOGNJRVJEbjhPUXJWYmNQTHpXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0QxRUEvOUM5MzJCNDgxNzNBMTFFQkEzQjk3RTdGQzRGOUFFMDIvMzExQzQ5NDI4 NkNDMTFGMDkzNDhEMTZCQzRGOUFFMDIucm9hMGUGCCsGAQUFBwEHAQH/BFYwVDBS BAIAATBMAwQAftEPAwQAftEhAwQAftElAwQAftEzAwQAftE8AwQAftE/AwQBftFQ MAwDBAB+0VUDBAB+0VYDBAN+0WAwDAMEAn7RdAMEAn7ReDANBgkqhkiG9w0BAQsF AAOCAQEAgZO5w0l9h/hUbnt6s6rHsNHeKsXeRV3lt8i6h652p9D3spDNCT5hN433 bz6K9skKOYRxr47GZ3JOQSGeAglMlismAjSFsUlD6S1i3y1p40J0FOzCcSe+rY3D eP+um8yZLUgPBVJN5ghsk6jioQMS1zGklm90beTXH9t1vp9hvDrDRiv6E/NHmfr5 Wc7solbqNoPM7F630QgvOe10kD50GAdaodKb4GPrZkJ2+WvwcZwtGnCwORQCh8pQ YFkZKlJWk1GlysbodtyWcQHWz9K6gUh4RJAnfXDkrukUz6Tom/eGS+oLy+mDe1Ho ECspdL56W3X/ywUCHVwKTKmzz6T4GA== -----END CERTIFICATE-----Generated at Fri Apr 17 15:20:21 2026 by rpki-client