$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/E88FA9C050EC11EDA7DA9346C4F9AE02.roa File: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (raw, json) Hash identifier: rI2XTb2R2MdCZIREOxF9HZq/Z6L/AhVI3hF8SVkg8es= Subject key identifier: AE:85:6E:45:D0:E4:32:0F:8F:7A:86:3A:03:A8:F6:B5:A4:51:82:3B Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 261C Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/E88FA9C050EC11EDA7DA9346C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:52:47 +0000 ROA not before: Mon 04 Aug 2025 16:24:13 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 14499 IP address blocks: 112.198.24.0/24 maxlen: 24 112.198.25.0/24 maxlen: 24 222.127.107.0/24 maxlen: 24 222.127.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9756 (0x261c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Aug 4 16:24:13 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a48aff-8b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:99:61:0d:76:bf:c4:59:1a:f2:41:ba:97:84: 37:d6:12:e3:0b:0b:f9:e6:c8:df:35:c3:da:96:7e: f4:8c:7f:63:31:73:85:13:1c:dc:e9:47:59:23:e4: b3:02:f8:5d:3b:73:09:3d:8a:2d:bb:be:6f:3e:bb: df:af:00:bf:b1:4b:2f:5f:bf:b1:17:48:29:a8:c2: a0:72:05:ab:38:61:3c:00:30:2e:29:07:bd:5a:c2: f0:9d:58:90:82:b8:4b:58:47:f7:15:00:58:d7:7f: e2:dc:6d:18:3f:cb:c8:6a:8a:64:46:3b:21:9f:d8: 63:a2:aa:00:a7:e9:27:2d:5a:58:c6:1b:5c:47:8e: 2e:2c:bc:65:53:7a:c7:a1:6c:ee:30:b9:10:02:ba: 59:fc:49:a6:72:da:5a:c0:49:c5:9b:61:3f:f0:45: 6a:26:ed:32:1d:6c:3c:0f:f2:e1:4d:9f:a8:f3:7c: 13:40:d8:d2:04:0d:8f:a8:46:3a:f6:d4:a7:e9:a7: 24:24:16:10:cf:20:f2:98:d1:43:a6:2d:26:19:eb: 69:4b:8b:9f:e2:6a:33:8c:8b:ff:0b:18:6d:61:78: 18:a1:e4:15:f5:ed:f1:ac:89:95:f5:b0:3d:97:5e: 8e:99:73:c1:93:88:6b:28:5d:5f:bf:d6:7e:44:98: fd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:85:6E:45:D0:E4:32:0F:8F:7A:86:3A:03:A8:F6:B5:A4:51:82:3B X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/E88FA9C050EC11EDA7DA9346C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 112.198.24.0/23 222.127.107.0/24 222.127.141.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:34:6f:6e:c5:9a:8f:4d:1f:f7:f7:9a:b8:d0:a2:6e:80:f0: 1a:e9:2e:94:09:6f:65:73:ab:65:e6:ff:05:fd:81:8b:b5:fc: 06:5f:af:00:29:27:09:ad:35:88:2d:32:ce:9a:b3:6b:6a:10: 33:3e:f0:56:70:6b:9c:b8:b1:b0:6c:cb:9d:45:12:36:0f:d1: 53:7f:c3:ad:f6:34:f6:ad:1e:da:67:95:23:10:a6:f7:c3:07: 4f:12:08:d0:fa:98:b6:07:64:41:a1:e8:00:49:1a:90:46:b8: 5c:ba:16:79:d4:fa:3d:ff:c0:d5:73:d2:cf:3e:0e:06:4b:50: e3:12:42:3e:af:79:9d:96:f2:7f:5f:0f:73:90:a3:3a:d4:1e: 48:e0:07:8f:a5:c2:7f:14:9d:b7:d5:4d:a9:2f:30:59:58:4c: fd:be:3b:e3:5a:31:51:65:57:49:2f:96:05:61:b5:c5:e4:71: 00:24:81:8c:5e:af:66:49:c6:9c:b4:0b:bb:ba:7f:7a:eb:09: 25:9b:9d:53:33:fc:ef:e0:68:d0:03:21:c7:0b:99:82:5a:79: b8:79:0e:92:c8:85:24:c5:c0:86:d6:c1:57:39:ff:27:91:e7: 2e:f0:cd:47:98:17:29:29:34:68:e4:8c:05:ee:91:4a:19:4a: 85:16:0f:51 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICJhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjUwODA0MTYyNDEzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGFmZi04YjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5lhDXa/xFka8kG6l4Q31hLjCwv55sjfNcPaln70jH9jMXOFExzc6UdZI+Sz AvhdO3MJPYotu75vPrvfrwC/sUsvX7+xF0gpqMKgcgWrOGE8ADAuKQe9WsLwnViQ grhLWEf3FQBY13/i3G0YP8vIaopkRjshn9hjoqoAp+knLVpYxhtcR44uLLxlU3rH oWzuMLkQArpZ/EmmctpawEnFm2E/8EVqJu0yHWw8D/LhTZ+o83wTQNjSBA2PqEY6 9tSn6ackJBYQzyDymNFDpi0mGetpS4uf4mozjIv/CxhtYXgYoeQV9e3xrImV9bA9 l16OmXPBk4hrKF1fv9Z+RJj9VwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFK6FbkXQ 5DIPj3qGOgOo9rWkUYI7MB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvRTg4RkE5QzA1 MEVDMTFFREE3REE5MzQ2QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBcMYYAwQA3n9rAwQA3n+NMA0GCSqGSIb3DQEBCwUAA4IBAQCONG9u xZqPTR/395q40KJugPAa6S6UCW9lc6tl5v8F/YGLtfwGX68AKScJrTWILTLOmrNr ahAzPvBWcGucuLGwbMudRRI2D9FTf8Ot9jT2rR7aZ5UjEKb3wwdPEgjQ+pi2B2RB oegASRqQRrhcuhZ51Po9/8DVc9LPPg4GS1DjEkI+r3mdlvJ/Xw9zkKM61B5I4AeP pcJ/FJ231U2pLzBZWEz9vjvjWjFRZVdJL5YFYbXF5HEAJIGMXq9mScactAu7un96 6wklm51TM/zv4GjQAyHHC5mCWnm4eQ6SyIUkxcCG1sFXOf8nkecu8M1HmBcpKTRo 5IwF7pFKGUqFFg9R -----END CERTIFICATE-----Generated at Tue Mar 3 02:11:25 2026 by rpki-client