$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/9427EF0A7CA411F09AE49B57C4F9AE02.roa File: 9427EF0A7CA411F09AE49B57C4F9AE02.roa (raw, json) Hash identifier: Lh6oS48kKqVmyqex9gqFtgZ4m13NOn4qQbQx9k6l4Fo= Subject key identifier: 66:FD:17:77:EB:B9:E5:A1:B7:74:B7:A8:19:03:18:69:58:28:9A:CC Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Certificate serial: 3609 Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/9427EF0A7CA411F09AE49B57C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:56:26 +0000 ROA not before: Mon 02 Feb 2026 15:11:40 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 7616 IP address blocks: 203.130.128.0/19 maxlen: 20 203.130.146.0/24 maxlen: 24 203.147.10.0/24 maxlen: 24 203.147.16.0/20 maxlen: 21 203.147.31.0/24 maxlen: 24 203.147.32.0/20 maxlen: 21 203.147.42.0/24 maxlen: 24 203.147.48.0/20 maxlen: 20 203.147.54.0/24 maxlen: 24 203.156.18.0/24 maxlen: 24 203.156.48.0/20 maxlen: 20 203.156.64.0/20 maxlen: 20 203.156.80.0/20 maxlen: 20 203.156.95.0/24 maxlen: 24 203.156.128.0/18 maxlen: 20 203.156.146.0/24 maxlen: 24 203.156.147.0/24 maxlen: 24 203.156.148.0/24 maxlen: 24 203.156.149.0/24 maxlen: 24 203.156.150.0/24 maxlen: 24 203.156.152.0/21 maxlen: 21 203.156.152.0/24 maxlen: 24 2403:bf00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13833 (0x3609) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Validity Not Before: Feb 2 15:11:40 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a48bda-b923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ce:62:24:69:4e:75:a5:93:c1:93:85:3e:dc: 6f:fe:81:d3:d6:b0:bf:cf:97:1b:46:ee:20:08:3d: 9a:79:ec:7a:05:52:67:47:4f:3a:77:aa:53:6d:02: 4e:06:18:fd:e9:b3:34:df:f6:22:4e:9f:80:54:f3: 67:e6:b1:12:ea:f3:5e:bc:30:1e:42:dc:f0:46:a7: 4f:5b:c5:ed:9c:e3:91:1d:e4:d7:11:fc:f1:0f:47: e3:55:c1:32:2d:4e:92:2c:51:73:41:b3:a8:fb:9e: 02:d6:91:08:66:2d:75:47:a6:03:53:75:ff:de:b7: 79:83:11:55:87:17:3f:bf:34:2c:04:7a:b5:04:25: cb:a5:8e:72:bf:e5:57:18:08:19:23:e8:b1:8b:28: 1e:9d:c4:51:36:b3:4a:f1:10:6f:b1:d1:08:93:9d: fd:21:2c:bb:50:a8:49:45:4f:ce:14:d9:81:82:58: 3f:0c:31:4d:7b:59:64:c9:85:29:4e:4f:ec:05:4b: 32:fe:d6:4d:01:c0:c7:37:89:1d:ed:14:68:2b:19: fd:c8:e0:7e:d1:d8:0b:4d:6c:6e:25:26:79:ff:47: 5c:00:6a:3c:cd:4e:9f:a1:29:2c:91:fd:63:7e:7c: 94:6d:eb:33:62:35:d5:ec:f5:23:49:61:83:03:0d: 83:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FD:17:77:EB:B9:E5:A1:B7:74:B7:A8:19:03:18:69:58:28:9A:CC X509v3 Authority Key Identifier: keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/9427EF0A7CA411F09AE49B57C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.130.128.0/19 203.147.10.0/24 203.147.16.0-203.147.63.255 203.156.18.0/24 203.156.48.0-203.156.95.255 203.156.128.0/18 IPv6: 2403:bf00::/32 Signature Algorithm: sha256WithRSAEncryption 7b:13:51:bb:f7:e4:25:a0:02:5c:6f:1e:99:1f:89:92:7e:c5: 36:e9:7b:7a:f1:70:df:56:ed:10:24:93:3d:dd:af:3f:59:1b: f0:12:0a:8a:77:a3:49:15:7e:a3:8b:a7:3b:12:55:a5:ed:91: 20:c7:88:84:34:f4:6e:a0:3e:19:56:76:0f:55:fd:65:2a:02: de:09:6b:5a:23:0e:17:ab:aa:36:96:a2:64:8e:58:5f:fc:cd: 17:c7:a0:59:96:a2:76:aa:58:13:af:93:71:05:21:4d:3d:76: 71:d4:f0:bd:d3:2d:9e:c2:de:db:ad:fb:30:12:22:80:33:f6: e3:c5:78:fa:a2:22:27:61:b4:07:c2:c3:97:74:87:c0:8b:7a: d7:ec:1b:c2:01:2b:2c:40:b7:4c:de:e6:b6:17:15:33:78:f7: 92:24:82:70:cb:ab:10:c1:d9:32:c5:e8:5f:6f:92:68:f2:ae: 03:ac:e2:08:1b:34:9e:ff:25:a9:36:0d:5b:d0:a9:4a:e7:0b: b0:61:ee:00:06:d2:69:6a:37:e3:cd:3b:8f:4d:1c:2c:3e:87: 24:ea:59:67:be:76:df:c0:e1:a3:9d:02:c8:f6:3a:60:92:c3: f9:8b:76:13:d5:9d:50:36:f3:78:e0:56:35:7b:c1:23:f5:64: ea:77:af:10 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICNgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5 QzhGNjU5MEQwHhcNMjYwMjAyMTUxMTQwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGJkYS1iOTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAts5iJGlOdaWTwZOFPtxv/oHT1rC/z5cbRu4gCD2aeex6BVJnR086d6pTbQJO Bhj96bM03/YiTp+AVPNn5rES6vNevDAeQtzwRqdPW8XtnOORHeTXEfzxD0fjVcEy LU6SLFFzQbOo+54C1pEIZi11R6YDU3X/3rd5gxFVhxc/vzQsBHq1BCXLpY5yv+VX GAgZI+ixiygencRRNrNK8RBvsdEIk539ISy7UKhJRU/OFNmBglg/DDFNe1lkyYUp Tk/sBUsy/tZNAcDHN4kd7RRoKxn9yOB+0dgLTWxuJSZ5/0dcAGo8zU6foSkskf1j fnyUbeszYjXV7PUjSWGDAw2DsQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFGb9F3fr ueWht3S3qBkDGGlYKJrMMB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc4MUEvRDUyMTQyNzAxRDlCMTFFMkI4MjFGRDg5MDhCMDJDRDIvOTQyN0VGMEE3 Q0E0MTFGMDlBRTQ5QjU3QzRGOUFFMDIucm9hMFwGCCsGAQUFBwEHAQH/BE0wSzA6 BAIAATA0AwQFy4KAAwQAy5MKMAwDBATLkxADBAbLkwADBADLnBIwDAMEBMucMAME BcucQAMEBsucgDANBAIAAjAHAwUAJAO/ADANBgkqhkiG9w0BAQsFAAOCAQEAexNR u/fkJaACXG8emR+Jkn7FNul7evFw31btECSTPd2vP1kb8BIKinejSRV+o4unOxJV pe2RIMeIhDT0bqA+GVZ2D1X9ZSoC3glrWiMOF6uqNpaiZI5YX/zNF8egWZaidqpY E6+TcQUhTT12cdTwvdMtnsLe2637MBIigDP248V4+qIiJ2G0B8LDl3SHwIt61+wb wgErLEC3TN7mthcVM3j3kiSCcMurEMHZMsXoX2+SaPKuA6ziCBs0nv8lqTYNW9Cp SucLsGHuAAbSaWo34807j00cLD6HJOpZZ75238Dho50CyPY6YJLD+Yt2E9WdUDbz eOBWNXvBI/Vk6nevEA== -----END CERTIFICATE-----Generated at Mon Mar 2 02:51:57 2026 by rpki-client