$ rpki-client -vvf rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/C7A29726A65311F091E2CF10C4F9AE02.roa File: C7A29726A65311F091E2CF10C4F9AE02.roa (raw, json) Hash identifier: RXr/2IJ/9MWQk0OdqW4xmP/C7ZFOJQkVQv3V5AO424U= Subject key identifier: BE:45:70:57:19:0D:55:2F:20:7A:2E:2E:D2:CB:36:3C:BD:3E:E8:BE Certificate issuer: /CN=A9142F59/serialNumber=1CA36DCFC3C04333F883B835F2C8DDD025D54106 Certificate serial: 88 Authority key identifier: 1C:A3:6D:CF:C3:C0:43:33:F8:83:B8:35:F2:C8:DD:D0:25:D5:41:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/C7A29726A65311F091E2CF10C4F9AE02.roa Signing time: Mon 02 Mar 2026 12:37:13 +0000 ROA not before: Sat 11 Oct 2025 03:41:53 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153689 IP address blocks: 163.223.80.0/23 maxlen: 23 163.223.80.0/24 maxlen: 24 163.223.81.0/24 maxlen: 24 2001:df5:3840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.crl rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 12:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142F59, serialNumber=1CA36DCFC3C04333F883B835F2C8DDD025D54106 Validity Not Before: Oct 11 03:41:53 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a58479-8fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b7:27:3b:63:fc:f3:fa:b0:c9:cb:81:7f:aa: 7f:dd:c6:ca:09:8c:58:f9:a2:61:c1:ab:b7:ef:0a: 48:b1:34:60:20:49:19:3e:94:f7:88:b6:68:d2:f6: 4c:19:75:b9:54:31:c6:5d:06:35:d3:20:90:b8:3c: 00:54:ce:c0:3d:06:1a:e5:20:f0:df:bf:20:5d:a5: 03:9a:5c:59:af:2c:67:28:8e:ef:63:2b:cb:1e:1f: 5c:16:e0:65:d8:2c:b2:50:be:33:ee:53:26:e2:e0: b3:e7:c7:72:54:6a:90:1c:ee:ce:dd:52:05:b3:6b: 4d:69:6b:ed:48:82:71:53:c2:eb:6d:f2:c1:1b:71: fc:a3:33:42:93:20:08:dd:7c:4c:a8:fa:7d:91:c2: d0:31:33:7e:91:fa:2c:1a:fb:27:c4:5e:a1:d2:12: d9:f7:ed:43:00:47:b7:a2:73:94:96:f9:3a:45:a7: 37:47:8c:d6:e7:ab:30:d6:9e:42:bd:1b:5f:5c:ad: 4c:82:4a:f1:42:db:53:5f:ef:0a:b2:33:0c:63:ba: 8f:da:82:b5:41:12:f7:cd:fc:ec:07:b3:41:29:be: 9b:11:ef:bd:b8:e3:45:d0:36:74:7e:db:3b:49:56: 63:0a:88:57:2a:dd:e4:8a:7b:4d:eb:5c:0e:e9:21: 9d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:45:70:57:19:0D:55:2F:20:7A:2E:2E:D2:CB:36:3C:BD:3E:E8:BE X509v3 Authority Key Identifier: keyid:1C:A3:6D:CF:C3:C0:43:33:F8:83:B8:35:F2:C8:DD:D0:25:D5:41:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/C7A29726A65311F091E2CF10C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 163.223.80.0/23 IPv6: 2001:df5:3840::/48 Signature Algorithm: sha256WithRSAEncryption 6a:09:a4:49:aa:9e:91:7d:08:55:0b:66:a3:6f:0e:f9:fa:f3: fd:80:52:1b:9c:9d:d2:83:96:f5:13:54:f2:24:0c:60:ff:17: 99:e8:27:8f:1b:5d:40:d3:b9:52:94:03:44:db:06:b9:43:cf: 8c:f2:27:66:32:82:0f:2f:64:d0:a4:14:02:35:1f:61:c6:dd: b9:12:f0:65:64:b2:f9:80:38:d7:e6:21:69:dd:ab:af:6d:7d: b2:29:1d:3f:fd:ec:40:74:59:3d:d8:d2:aa:50:36:ff:10:cc: fb:7b:bd:68:e1:3a:f2:ef:12:3a:86:f4:61:c4:2a:80:40:f6: e8:90:4b:4c:c1:a6:9a:e6:13:35:5f:a7:e8:dc:58:0d:94:55: ed:97:26:2d:1e:f2:0a:76:6d:b3:a7:32:dd:28:6b:c6:2d:1d: 75:82:b1:c2:f5:2a:55:9d:f0:ca:63:c9:9b:15:a6:61:cf:ef: e5:5b:16:90:bf:54:d4:bf:9b:a5:c8:b2:5b:e5:22:d6:00:2f: 0c:08:9e:72:af:7f:08:a3:b8:a5:32:e6:c4:e9:46:00:22:17: a5:30:2c:fc:fe:c4:20:4d:a8:12:86:b3:d4:3e:8d:44:d1:2e: ba:40:8f:7d:c2:6c:8a:dd:62:ce:6b:68:8a:42:d5:85:90:0f: bd:24:17:d6 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJGNTkxMTAvBgNVBAUTKDFDQTM2RENGQzNDMDQzMzNGODgzQjgzNUYyQzhEREQw MjVENTQxMDYwHhcNMjUxMDExMDM0MTUzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ODQ3OS04ZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7cnO2P88/qwycuBf6p/3cbKCYxY+aJhwau37wpIsTRgIEkZPpT3iLZo0vZM GXW5VDHGXQY10yCQuDwAVM7APQYa5SDw378gXaUDmlxZryxnKI7vYyvLHh9cFuBl 2CyyUL4z7lMm4uCz58dyVGqQHO7O3VIFs2tNaWvtSIJxU8LrbfLBG3H8ozNCkyAI 3XxMqPp9kcLQMTN+kfosGvsnxF6h0hLZ9+1DAEe3onOUlvk6Rac3R4zW56sw1p5C vRtfXK1MgkrxQttTX+8KsjMMY7qP2oK1QRL3zfzsB7NBKb6bEe+9uONF0DZ0fts7 SVZjCohXKt3kintN61wO6SGdpQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFL5FcFcZ DVUvIHouLtLLNjy9Pui+MB8GA1UdIwQYMBaAFByjbc/DwEMz+IO4NfLI3dAl1UEG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkY1OS8wNTI2RDYyRTYy MzAxMUYwQTAyMDc2MzBDNEY5QUUwMi9IS050ejhQQVF6UDRnN2cxOHNqZDBDWFZR UVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hLTnR6OFBBUXpQNGc3ZzE4c2pkMENYVlFRWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDJGNTkvMDUyNkQ2MkU2MjMwMTFGMEEwMjA3NjMwQzRGOUFFMDIvQzdBMjk3MjZB NjUzMTFGMDkxRTJDRjEwQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBo99QMA8EAgACMAkDBwAgAQ31OEAwDQYJKoZIhvcNAQELBQADggEB AGoJpEmqnpF9CFULZqNvDvn68/2AUhucndKDlvUTVPIkDGD/F5noJ48bXUDTuVKU A0TbBrlDz4zyJ2Yygg8vZNCkFAI1H2HG3bkS8GVksvmAONfmIWndq69tfbIpHT/9 7EB0WT3Y0qpQNv8QzPt7vWjhOvLvEjqG9GHEKoBA9uiQS0zBpprmEzVfp+jcWA2U Ve2XJi0e8gp2bbOnMt0oa8YtHXWCscL1KlWd8MpjyZsVpmHP7+VbFpC/VNS/m6XI slvlItYALwwInnKvfwijuKUy5sTpRgAiF6UwLPz+xCBNqBKGs9Q+jUTRLrpAj33C bIrdYs5raIpC1YWQD70kF9Y= -----END CERTIFICATE-----Generated at Mon Mar 2 22:19:31 2026 by rpki-client