$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/DFBA3AD2555611E7A82D327CC4F9AE02.roa File: DFBA3AD2555611E7A82D327CC4F9AE02.roa (raw, json) Hash identifier: xeXe0W9LGadlWUHbrq3B2ViS6+U7W91OTOihQY9/fWg= Subject key identifier: C2:AB:2A:7F:F8:47:2A:30:78:52:42:37:4F:7B:21:4F:BD:8A:16:34 Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 2623 Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/DFBA3AD2555611E7A82D327CC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:52:53 +0000 ROA not before: Mon 04 Aug 2025 16:24:19 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 23689 IP address blocks: 120.28.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9763 (0x2623) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Aug 4 16:24:19 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a48b05-b02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f9:02:4b:86:4c:76:f3:2b:7d:5a:54:15:bd: c4:39:5d:98:d6:c1:60:71:07:fc:f0:e5:0d:e2:3c: 06:a3:e1:04:86:f1:ba:3d:b9:98:ff:c5:9b:01:11: 0b:bb:e1:77:2b:4e:c4:3b:87:ef:d5:f4:58:98:5c: 61:ba:35:87:2e:7d:a0:b4:36:22:7d:fb:3a:cc:80: 13:fa:d5:9b:1a:b4:e0:e2:b7:67:b5:1d:f5:f8:7f: d6:c6:fb:d4:55:4a:d7:f2:03:95:ae:2f:39:08:9f: 73:7f:b7:f8:10:58:a4:66:23:c5:ae:21:00:f6:0f: cc:87:4c:f0:77:95:69:ab:83:e8:c6:5e:65:25:1f: ff:29:f8:ef:42:55:1f:d8:82:2d:41:51:4d:a6:4c: 9c:03:d4:07:8a:ad:00:9c:82:bc:5d:74:e1:3d:65: 41:bf:e9:6f:3a:62:cc:12:8c:2a:bb:5d:d2:47:17: 38:dc:68:eb:36:f6:be:70:f5:be:aa:3c:29:ad:e4: 1a:08:29:14:32:a5:a9:4c:0b:5f:57:04:e2:f3:31: ef:03:97:d5:d9:fe:27:ff:1b:aa:56:02:24:f0:14: 79:17:ac:91:d1:44:29:96:d1:d9:85:93:d9:a2:58: 54:fb:46:88:90:8e:0e:f2:8b:86:5d:dc:14:0d:6f: 8c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AB:2A:7F:F8:47:2A:30:78:52:42:37:4F:7B:21:4F:BD:8A:16:34 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/DFBA3AD2555611E7A82D327CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.28.28.0/23 Signature Algorithm: sha256WithRSAEncryption d6:d6:07:f4:8d:c8:6d:74:7d:50:e2:13:3e:80:fe:ce:80:10: b7:af:c2:56:c5:68:d7:2e:5b:e4:65:3d:56:cc:49:d0:c9:a2: 19:83:be:70:9e:48:c8:1f:f5:37:32:cb:09:08:2b:e5:ed:fd: 72:ac:20:45:db:4a:db:42:30:66:d7:48:9f:03:6e:c6:8e:d8: 62:1a:11:b4:10:84:97:4d:f3:d4:ab:e9:6a:c4:9b:4a:99:cb: e7:84:5a:7f:da:c6:00:4e:5a:9d:2e:8c:99:f8:ef:8b:e6:12: 66:19:de:a1:5b:9c:df:f7:7d:e7:fe:40:55:af:a0:79:2f:0f: 8d:2c:b5:31:92:8d:1a:fb:21:db:f0:8c:9d:d7:7e:c5:29:69: ec:57:a7:74:3c:81:dc:fe:48:0f:bd:73:33:ce:51:d7:b5:6f: 20:16:3b:95:da:66:b6:7d:50:d8:f6:8a:79:3c:02:62:40:b8: d6:84:5d:22:c6:76:11:53:a4:6e:a7:f5:0f:15:83:e7:14:dc: 51:89:ed:b8:2d:a3:bd:4b:48:bc:a9:bc:29:74:9d:65:2b:93: 23:b8:1a:24:2a:d7:e6:31:28:84:30:cb:c4:8a:6c:7b:71:7f: 92:93:83:14:e2:86:37:cd:b9:c9:53:4a:82:56:d1:9b:dc:ee: 70:59:4d:fd -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICJiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjUwODA0MTYyNDE5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGIwNS1iMDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8/kCS4ZMdvMrfVpUFb3EOV2Y1sFgcQf88OUN4jwGo+EEhvG6PbmY/8WbAREL u+F3K07EO4fv1fRYmFxhujWHLn2gtDYiffs6zIAT+tWbGrTg4rdntR31+H/WxvvU VUrX8gOVri85CJ9zf7f4EFikZiPFriEA9g/Mh0zwd5Vpq4Poxl5lJR//KfjvQlUf 2IItQVFNpkycA9QHiq0AnIK8XXThPWVBv+lvOmLMEowqu13SRxc43GjrNva+cPW+ qjwpreQaCCkUMqWpTAtfVwTi8zHvA5fV2f4n/xuqVgIk8BR5F6yR0UQpltHZhZPZ olhU+0aIkI4O8ouGXdwUDW+MdQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMKrKn/4 RyoweFJCN097IU+9ihY0MB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvREZCQTNBRDI1 NTU2MTFFN0E4MkQzMjdDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBeBwcMA0GCSqGSIb3DQEBCwUAA4IBAQDW1gf0jchtdH1Q4hM+gP7O gBC3r8JWxWjXLlvkZT1WzEnQyaIZg75wnkjIH/U3MssJCCvl7f1yrCBF20rbQjBm 10ifA27GjthiGhG0EISXTfPUq+lqxJtKmcvnhFp/2sYATlqdLoyZ+O+L5hJmGd6h W5zf933n/kBVr6B5Lw+NLLUxko0a+yHb8Iyd137FKWnsV6d0PIHc/kgPvXMzzlHX tW8gFjuV2ma2fVDY9op5PAJiQLjWhF0ixnYRU6Rup/UPFYPnFNxRie24LaO9S0i8 qbwpdJ1lK5MjuBokKtfmMSiEMMvEimx7cX+Sk4MU4oY3zbnJU0qCVtGb3O5wWU39 -----END CERTIFICATE-----Generated at Mon Mar 2 05:42:48 2026 by rpki-client