$ rpki-client -vvf rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/3F6A3A284F1C11EB9953172CC4F9AE02.roa File: 3F6A3A284F1C11EB9953172CC4F9AE02.roa (raw, json) Hash identifier: CwXcRqhRbjq3Ns+lJ2WdMtAUVQ2BrXXhjeOPxyQZfAI= Subject key identifier: BC:E4:5F:AB:71:0C:94:8F:28:58:DC:C0:23:CA:51:83:0E:37:F3:D0 Certificate issuer: /CN=A9149CA9/serialNumber=C7A08672A8100DA330C122315115587BE6110DF1 Certificate serial: 0779 Authority key identifier: C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/3F6A3A284F1C11EB9953172CC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:34:31 +0000 ROA not before: Tue 18 Nov 2025 20:42:55 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 38797 IP address blocks: 125.62.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.crl rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 21:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1913 (0x779) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149CA9, serialNumber=C7A08672A8100DA330C122315115587BE6110DF1 Validity Not Before: Nov 18 20:42:55 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a591e7-d9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9f:44:a6:d7:55:4f:0c:fb:ca:e3:11:0c:41: 5a:06:1c:e7:e1:2d:2a:4f:a8:ad:cf:ac:c1:32:3d: 04:c4:bb:35:5f:a0:0c:2c:47:08:90:d4:4d:28:98: 4a:86:a4:c5:f5:50:71:a1:6e:89:3f:ff:29:e7:40: 3e:da:d6:6e:8a:4b:fc:b9:66:11:5e:4e:2d:24:ad: b1:b3:1c:87:7f:45:1d:67:e9:73:bb:52:2f:8a:2a: 43:3f:65:a6:31:b0:61:49:96:dd:f8:9c:51:79:50: f9:af:56:b7:16:f6:3f:50:63:62:f7:e7:f2:2a:7b: 2b:6c:09:39:60:74:ac:95:f7:64:db:81:f2:f7:67: 8f:cc:c2:c5:a7:12:71:43:b6:0b:82:b7:ed:60:ba: 03:8c:ea:8d:b0:dc:d1:a1:36:70:00:74:ee:f4:a6: ef:5c:73:9c:5c:64:13:32:ad:ad:8d:ce:c6:32:3b: e9:65:6f:f5:69:7a:39:59:47:03:5c:35:f4:3d:f0: b3:88:c8:b8:a6:fd:8b:54:f0:ab:b5:21:b5:b4:fb: a6:57:ef:53:c1:c8:69:70:cc:5b:07:aa:be:c9:5a: 36:30:c0:69:b9:76:83:5a:41:d2:50:e2:05:a1:53: c2:72:09:c4:24:b8:c2:f9:5f:62:ef:16:03:fe:e3: 76:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E4:5F:AB:71:0C:94:8F:28:58:DC:C0:23:CA:51:83:0E:37:F3:D0 X509v3 Authority Key Identifier: keyid:C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/3F6A3A284F1C11EB9953172CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 125.62.224.0/20 Signature Algorithm: sha256WithRSAEncryption b7:94:a9:0e:cb:5b:f7:ee:79:a7:94:64:92:1b:16:e8:c1:6b: 14:5b:14:88:fc:f2:00:42:78:6c:2f:70:66:a7:46:e0:e9:4a: b2:2f:7d:39:21:e3:ef:d2:9e:83:db:0b:94:bd:6e:61:78:09: e1:c4:3a:23:b1:c2:c9:d7:d2:62:fb:4a:25:2e:6b:65:99:ed: e7:e5:d8:52:dd:2b:5d:1a:9d:b3:4a:6a:ea:dc:8f:57:f5:f5: 46:d1:14:ba:d2:67:33:62:54:54:34:73:62:eb:a4:9e:04:81: 70:d9:12:dd:5a:a9:83:70:c8:68:c9:f4:5e:70:78:ac:85:a5: 0c:73:33:e0:6a:8f:05:85:bd:8a:db:1c:25:0d:0a:32:77:2a: a5:bb:0b:1d:12:0f:0b:eb:c0:af:19:7b:fb:d8:97:ee:7a:03: b7:8b:25:73:79:03:ba:ce:e0:0d:3f:41:4a:95:f9:bb:78:d5: 4f:fb:46:8b:9d:84:24:71:74:b9:fe:a0:bf:73:ac:30:54:20: 2b:de:f7:70:ab:5a:ad:c2:70:76:82:f4:38:30:64:00:6f:58: dd:cf:a5:f1:73:45:fc:bf:88:6c:34:33:bb:a6:58:10:ca:67: fc:e0:02:e0:f1:c9:25:55:1e:a0:cd:6f:cd:61:18:8c:cd:b6: d1:e7:c8:97 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDQTkxMTAvBgNVBAUTKEM3QTA4NjcyQTgxMDBEQTMzMEMxMjIzMTUxMTU1ODdC RTYxMTBERjEwHhcNMjUxMTE4MjA0MjU1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTFlNy1kOWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq59EptdVTwz7yuMRDEFaBhzn4S0qT6itz6zBMj0ExLs1X6AMLEcIkNRNKJhK hqTF9VBxoW6JP/8p50A+2tZuikv8uWYRXk4tJK2xsxyHf0UdZ+lzu1IviipDP2Wm MbBhSZbd+JxReVD5r1a3FvY/UGNi9+fyKnsrbAk5YHSslfdk24Hy92ePzMLFpxJx Q7YLgrftYLoDjOqNsNzRoTZwAHTu9KbvXHOcXGQTMq2tjc7GMjvpZW/1aXo5WUcD XDX0PfCziMi4pv2LVPCrtSG1tPumV+9TwchpcMxbB6q+yVo2MMBpuXaDWkHSUOIF oVPCcgnEJLjC+V9i7xYD/uN2oQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLzkX6tx DJSPKFjcwCPKUYMON/PQMB8GA1UdIwQYMBaAFMeghnKoEA2jMMEiMVEVWHvmEQ3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUNBOS9FRUQ3NDhENjRG MTUxMUVCOEM3RUFCMUFDNEY5QUUwMi94NkNHY3FnUURhTXd3U0l4VVJWWWUtWVJE ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g2Q0djcWdRRGFNd3dTSXhVUlZZZS1ZUkRmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlDQTkvRUVENzQ4RDY0RjE1MTFFQjhDN0VBQjFBQzRGOUFFMDIvM0Y2QTNBMjg0 RjFDMTFFQjk5NTMxNzJDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEfT7gMA0GCSqGSIb3DQEBCwUAA4IBAQC3lKkOy1v37nmnlGSSGxbo wWsUWxSI/PIAQnhsL3Bmp0bg6UqyL305IePv0p6D2wuUvW5heAnhxDojscLJ19Ji +0olLmtlme3n5dhS3StdGp2zSmrq3I9X9fVG0RS60mczYlRUNHNi66SeBIFw2RLd WqmDcMhoyfRecHishaUMczPgao8Fhb2K2xwlDQoydyqluwsdEg8L68CvGXv72Jfu egO3iyVzeQO6zuANP0FKlfm7eNVP+0aLnYQkcXS5/qC/c6wwVCAr3vdwq1qtwnB2 gvQ4MGQAb1jdz6Xxc0X8v4hsNDO7plgQymf84ALg8cklVR6gzW/NYRiMzbbR58iX -----END CERTIFICATE-----Generated at Tue Mar 3 04:25:00 2026 by rpki-client