$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/BD58F50404D311E9A6452047C4F9AE02.roa File: BD58F50404D311E9A6452047C4F9AE02.roa (raw, json) Hash identifier: BCcbS1CE6kiuAwGli2ix1MBmpAEqw2CBusE7A/r8dqU= Subject key identifier: 14:C5:BE:1A:81:08:49:08:20:DC:28:FF:DE:3C:92:AA:78:E3:70:D6 Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 2050 Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/BD58F50404D311E9A6452047C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:12:53 +0000 ROA not before: Sat 30 Aug 2025 16:35:51 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 63835 IP address blocks: 124.232.128.0/23 maxlen: 23 124.232.133.0/24 maxlen: 24 124.232.134.0/24 maxlen: 24 124.232.137.0/24 maxlen: 24 124.232.138.0/24 maxlen: 24 124.232.140.0/22 maxlen: 22 124.232.145.0/24 maxlen: 24 124.232.148.0/24 maxlen: 24 124.232.150.0/24 maxlen: 24 124.232.151.0/24 maxlen: 24 124.232.152.0/24 maxlen: 24 124.232.154.0/24 maxlen: 24 124.232.155.0/24 maxlen: 24 124.232.156.0/24 maxlen: 24 124.232.157.0/24 maxlen: 24 124.232.158.0/24 maxlen: 24 124.232.159.0/24 maxlen: 24 124.232.160.0/24 maxlen: 24 124.232.161.0/24 maxlen: 24 124.232.162.0/24 maxlen: 24 124.232.163.0/24 maxlen: 24 124.232.164.0/24 maxlen: 24 124.232.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8272 (0x2050) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Aug 30 16:35:51 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a48fb5-c560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:69:b5:85:1d:06:ea:4e:02:42:1c:3a:d2:96: 7e:28:fa:94:f6:21:6e:86:1c:6c:64:e2:ef:87:d1: f3:bf:b6:3c:b6:5d:c8:f7:be:52:0a:99:0c:b0:e5: 44:62:ba:e7:86:b2:d5:70:f6:ee:d9:ca:d2:4a:39: f9:93:b1:33:e1:2a:16:70:ea:76:b0:1d:97:7e:01: 39:c2:db:96:1a:2d:33:3e:52:c7:98:a8:9a:87:29: bd:28:51:2b:e0:79:14:4d:02:a9:bf:de:45:43:7d: 29:cc:ef:b6:30:fd:08:84:14:4e:16:4d:52:14:82: 6f:ab:0f:52:54:09:a3:94:7d:d3:f4:11:5e:79:5c: 44:04:67:0f:af:a7:88:48:11:df:fd:27:12:df:29: 88:86:75:09:df:46:27:01:bd:49:3a:7b:35:10:ce: 29:03:e9:4c:3c:cd:85:b6:9c:28:ef:f6:9e:bd:3a: 99:42:ec:8d:fe:dd:83:3d:09:c5:44:7b:6f:a0:4c: fd:0f:5a:38:99:18:3a:de:41:aa:2f:be:c2:84:e1: 24:b9:2a:58:3c:36:41:eb:1a:ca:32:20:bf:b1:38: 46:c6:47:0d:84:05:5e:fb:4e:5a:2b:a5:ba:15:8b: 60:51:8e:3c:74:f8:dd:7e:ce:69:58:11:57:fb:80: 3c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C5:BE:1A:81:08:49:08:20:DC:28:FF:DE:3C:92:AA:78:E3:70:D6 X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/BD58F50404D311E9A6452047C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 124.232.128.0/23 124.232.133.0-124.232.134.255 124.232.137.0-124.232.138.255 124.232.140.0/22 124.232.145.0/24 124.232.148.0/24 124.232.150.0-124.232.152.255 124.232.154.0-124.232.165.255 Signature Algorithm: sha256WithRSAEncryption 51:0c:92:74:68:89:8f:72:93:1c:5e:29:6d:a4:0e:d3:c6:e8: 86:40:ad:61:92:7e:61:64:99:85:d2:ed:76:c6:b5:d0:42:f4: 35:7f:20:43:c8:f1:f8:4a:2a:9b:95:76:cb:cf:3c:3f:cb:db: c6:e7:3a:39:aa:d9:d7:52:36:df:14:99:60:bc:f1:0e:78:6f: 0d:5b:38:5a:b8:c8:c7:7d:a7:0b:bf:56:c3:57:9c:70:78:db: 4a:84:fd:e8:9c:51:f0:b5:14:7a:cc:09:74:40:f9:b7:f6:d9: fa:39:07:39:ed:4d:66:fc:b0:26:1f:0a:57:b2:7a:f1:00:c5: 21:56:ba:25:27:ab:43:56:a6:f4:f2:72:e5:9a:c3:2b:42:21: 7f:78:e4:6d:72:ad:e8:b2:02:fa:9a:a5:bd:16:ba:1d:82:96: 7b:06:71:01:09:37:7a:20:3d:1a:09:79:30:c6:cd:49:29:a9: 17:66:6b:2e:03:8b:00:90:29:0b:6f:4f:e3:f2:4f:ed:4c:64: 68:10:d3:69:cc:e1:12:bc:c9:cb:f4:62:7c:d5:55:fe:1b:74: e5:2c:5a:ca:2b:0c:2f:2f:dc:8c:aa:27:7a:35:db:34:b7:14: 87:9b:57:9b:23:8e:55:b2:cb:64:76:c2:9e:f8:4d:e4:62:1a: 81:4a:ba:a9 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICIFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjUwODMwMTYzNTUxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGZiNS1jNTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGm1hR0G6k4CQhw60pZ+KPqU9iFuhhxsZOLvh9Hzv7Y8tl3I975SCpkMsOVE YrrnhrLVcPbu2crSSjn5k7Ez4SoWcOp2sB2XfgE5wtuWGi0zPlLHmKiahym9KFEr 4HkUTQKpv95FQ30pzO+2MP0IhBROFk1SFIJvqw9SVAmjlH3T9BFeeVxEBGcPr6eI SBHf/ScS3ymIhnUJ30YnAb1JOns1EM4pA+lMPM2Ftpwo7/aevTqZQuyN/t2DPQnF RHtvoEz9D1o4mRg63kGqL77ChOEkuSpYPDZB6xrKMiC/sThGxkcNhAVe+05aK6W6 FYtgUY48dPjdfs5pWBFX+4A8rQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBTFvhqB CEkIINwo/948kqp443DWMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvQkQ1OEY1MDQw NEQzMTFFOUE2NDUyMDQ3QzRGOUFFMDIucm9hMGkGCCsGAQUFBwEHAQH/BFowWDBW BAIAATBQAwQBfOiAMAwDBAB86IUDBAB86IYwDAMEAHzoiQMEAHzoigMEAnzojAME AHzokQMEAHzolDAMAwQBfOiWAwQAfOiYMAwDBAF86JoDBAF86KQwDQYJKoZIhvcN AQELBQADggEBAFEMknRoiY9ykxxeKW2kDtPG6IZArWGSfmFkmYXS7XbGtdBC9DV/ IEPI8fhKKpuVdsvPPD/L28bnOjmq2ddSNt8UmWC88Q54bw1bOFq4yMd9pwu/VsNX nHB420qE/eicUfC1FHrMCXRA+bf22fo5BzntTWb8sCYfCleyevEAxSFWuiUnq0NW pvTycuWawytCIX945G1yreiyAvqapb0Wuh2ClnsGcQEJN3ogPRoJeTDGzUkpqRdm ay4DiwCQKQtvT+PyT+1MZGgQ02nM4RK8ycv0YnzVVf4bdOUsWsorDC8v3IyqJ3o1 2zS3FIebV5sjjlWyy2R2wp74TeRiGoFKuqk= -----END CERTIFICATE-----Generated at Mon Mar 2 08:39:10 2026 by rpki-client