$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/9A05BA12D86B11E9B8BFCE0AC4F9AE02.roa File: 9A05BA12D86B11E9B8BFCE0AC4F9AE02.roa (raw, json) Hash identifier: gGhukCL6lx8yYMc3XoZXuAuKGy5qCMkAQFaNYx2UVBo= Subject key identifier: 6F:DA:3C:F2:C3:DD:BC:09:A0:0A:86:8D:D1:9B:B4:81:8B:42:21:41 Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Certificate serial: 3607 Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/9A05BA12D86B11E9B8BFCE0AC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:56:25 +0000 ROA not before: Mon 02 Feb 2026 15:11:35 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 45629 IP address blocks: 58.82.128.0/24 maxlen: 24 58.82.191.0/24 maxlen: 24 182.50.84.0/22 maxlen: 22 182.50.84.0/23 maxlen: 23 182.50.86.0/23 maxlen: 23 182.50.87.0/24 maxlen: 24 182.50.92.0/22 maxlen: 22 182.50.92.0/24 maxlen: 24 182.50.93.0/24 maxlen: 24 182.50.94.0/24 maxlen: 24 203.209.191.0/24 maxlen: 24 2404:4a00::/32 maxlen: 32 2404:4a00:3293::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13831 (0x3607) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Validity Not Before: Feb 2 15:11:35 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a48bd8-fe66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:74:f2:bf:05:a1:48:58:0a:18:4a:c0:cc:33: 47:06:6e:06:d5:53:e8:52:5c:b8:b2:ec:d0:43:2b: f3:23:85:2f:cd:a6:10:63:1c:bd:d4:fe:7a:be:ed: ce:c2:7b:63:e0:b5:33:21:b7:57:4e:5e:93:e2:c9: 88:ab:86:af:b2:c8:1e:49:1a:4a:27:89:7d:7a:c8: d2:e6:4f:96:9a:77:1e:35:63:c7:b9:76:2b:7c:e5: db:7f:7f:36:e8:f2:c7:e0:e5:9c:de:fe:2a:2c:3f: 32:88:ec:62:84:10:ee:f2:d7:1e:44:31:33:8a:46: 31:8a:07:0b:cb:2f:6c:24:ae:43:c2:96:c4:e8:d3: 27:17:a3:be:08:4e:79:5e:0b:6d:31:50:9e:68:7a: 15:65:36:9d:4f:ee:61:19:3a:da:3f:fe:56:81:c7: 35:d2:0d:f6:7d:41:0e:13:0d:dc:e8:78:2b:cf:44: ee:58:bc:56:23:f7:cb:32:6c:52:93:8f:a8:56:e7: 92:68:00:b0:0f:39:d8:f5:99:ba:05:ef:d0:3b:7f: 36:55:79:e9:42:f0:a9:6f:89:bd:8e:05:98:c6:8e: 52:29:bb:16:5b:13:5f:1d:c3:18:f3:f4:58:41:4e: 85:fd:a7:20:21:8b:49:81:90:fa:9e:c0:b1:a5:bf: 20:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DA:3C:F2:C3:DD:BC:09:A0:0A:86:8D:D1:9B:B4:81:8B:42:21:41 X509v3 Authority Key Identifier: keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/9A05BA12D86B11E9B8BFCE0AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.82.128.0/24 58.82.191.0/24 182.50.84.0/22 182.50.92.0/22 203.209.191.0/24 IPv6: 2404:4a00::/32 Signature Algorithm: sha256WithRSAEncryption d5:9f:9f:86:0b:ef:8f:b7:c3:63:09:b6:b8:b1:40:2c:b5:72: 23:9e:f0:f2:00:7a:86:28:c3:66:85:bb:3c:ba:3f:f4:2c:f5: b1:47:91:bf:6d:df:cf:dc:35:ab:7c:8e:83:3f:88:e2:70:8d: d3:23:aa:ed:56:d6:db:e5:49:d5:f4:14:5b:8c:4c:e2:5e:44: 76:a1:da:c2:c2:84:5c:74:29:16:ec:85:1f:8b:b5:e4:77:6d: b8:42:67:52:97:3f:81:76:4f:97:c1:ba:74:c5:a8:dc:57:ff: a3:a5:45:03:5d:ae:99:13:63:19:14:31:7d:83:23:dd:c0:25: 76:df:7f:8d:d9:30:83:8f:57:a1:3a:52:f5:09:91:ab:29:36: 45:5f:fd:65:3f:c7:58:cc:a4:8e:9e:f6:e1:e5:ab:bd:ba:52: 45:07:18:04:a9:a2:a3:25:52:04:e9:52:26:62:23:d7:ab:5f: 70:86:cf:0a:5f:4d:74:7a:c4:2b:13:3c:78:79:b3:2f:7a:c2: 1d:7b:58:1d:f9:c2:5f:24:0f:cc:24:3f:e4:79:c2:aa:07:5c: a8:49:a2:33:af:cf:b4:e8:34:e1:de:81:c1:f2:d1:0e:36:63: 63:32:b9:98:99:75:6f:f6:34:fb:23:6d:f3:ef:1e:1c:7d:09: 42:f2:5a:ee -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICNgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5 QzhGNjU5MEQwHhcNMjYwMjAyMTUxMTM1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGJkOC1mZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi3TyvwWhSFgKGErAzDNHBm4G1VPoUly4suzQQyvzI4UvzaYQYxy91P56vu3O wntj4LUzIbdXTl6T4smIq4avssgeSRpKJ4l9esjS5k+WmnceNWPHuXYrfOXbf382 6PLH4OWc3v4qLD8yiOxihBDu8tceRDEzikYxigcLyy9sJK5DwpbE6NMnF6O+CE55 XgttMVCeaHoVZTadT+5hGTraP/5Wgcc10g32fUEOEw3c6Hgrz0TuWLxWI/fLMmxS k4+oVueSaACwDznY9Zm6Be/QO382VXnpQvCpb4m9jgWYxo5SKbsWWxNfHcMY8/RY QU6F/acgIYtJgZD6nsCxpb8gcQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFG/aPPLD 3bwJoAqGjdGbtIGLQiFBMB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc4MUEvRDUyMTQyNzAxRDlCMTFFMkI4MjFGRDg5MDhCMDJDRDIvOUEwNUJBMTJE ODZCMTFFOUI4QkZDRTBBQzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQAOlKAAwQAOlK/AwQCtjJUAwQCtjJcAwQAy9G/MA0EAgACMAcDBQAk BEoAMA0GCSqGSIb3DQEBCwUAA4IBAQDVn5+GC++Pt8NjCba4sUAstXIjnvDyAHqG KMNmhbs8uj/0LPWxR5G/bd/P3DWrfI6DP4jicI3TI6rtVtbb5UnV9BRbjEziXkR2 odrCwoRcdCkW7IUfi7Xkd224QmdSlz+Bdk+Xwbp0xajcV/+jpUUDXa6ZE2MZFDF9 gyPdwCV233+N2TCDj1ehOlL1CZGrKTZFX/1lP8dYzKSOnvbh5au9ulJFBxgEqaKj JVIE6VImYiPXq19whs8KX010esQrEzx4ebMvesIde1gd+cJfJA/MJD/kecKqB1yo SaIzr8+06DTh3oHB8tEONmNjMrmYmXVv9jT7I23z7x4cfQlC8lru -----END CERTIFICATE-----Generated at Mon Mar 2 06:17:56 2026 by rpki-client