$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/E4BA3CE8DFCE11EFBC4CD631C4F9AE02.roa File: E4BA3CE8DFCE11EFBC4CD631C4F9AE02.roa (raw, json) Hash identifier: gaWU+X+/mNK/B9cZjLPSBTco2OY87BQH5ky7affM8lQ= Subject key identifier: 4E:C1:80:CB:C2:FD:D6:CD:77:3D:E0:84:D3:66:63:74:B5:88:50:24 Certificate issuer: /CN=A9157DA0/serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44 Certificate serial: 3595 Authority key identifier: 88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/E4BA3CE8DFCE11EFBC4CD631C4F9AE02.roa Signing time: Thu 23 Jul 2026 04:47:47 +0000 ROA not before: Thu 23 Jul 2026 04:47:47 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 139759 IP address blocks: 119.252.112.0/21 maxlen: 21 119.252.112.0/24 maxlen: 24 119.252.116.0/22 maxlen: 22 119.252.122.0/24 maxlen: 24 124.109.8.0/22 maxlen: 22 2407:4800::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13717 (0x3595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DA0, serialNumber=8887CF6CF5102F0FB713F4C4A1BDE389481F1C44 Validity Not Before: Jul 23 04:47:47 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a619cf2-176d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7f:92:f4:25:b5:3c:f6:cb:26:9a:c4:9d:f0: 0b:dc:c1:3e:a1:52:fc:44:c6:60:cc:f7:bd:3b:c9: 51:f4:6e:19:96:cc:11:c6:39:88:60:df:a2:e3:20: bb:9a:ab:b4:c9:59:e7:77:2f:56:16:e0:09:1e:c3: 35:41:4f:cd:17:ea:12:e7:d0:8c:80:65:c4:40:fb: 06:20:b2:18:b0:90:35:17:15:92:73:98:e9:a9:83: a1:ee:76:8b:f2:68:8d:b0:c3:c5:9c:2c:56:61:01: 7c:ad:fd:4d:f1:fe:11:b9:0d:c9:9d:49:2c:ea:7f: 55:2d:be:08:e7:31:d1:aa:16:6a:39:9a:d4:f1:2a: 11:3d:b5:32:f1:6d:ce:54:aa:e7:81:90:ce:5d:52: 1d:ae:59:45:da:0a:50:64:58:a6:3c:28:ef:87:ba: b1:c2:94:da:78:9b:fa:36:9a:21:f5:1c:09:db:0d: 77:73:c6:8b:58:af:c8:22:ae:be:4b:de:05:34:0a: 92:6a:03:bb:8a:02:51:68:74:f3:04:89:4b:11:4e: dd:87:35:44:0c:bd:dc:85:b9:76:c9:0e:6f:e0:42: e5:6f:6a:f1:39:d1:e9:d9:60:cc:5f:d4:bb:ff:b2: a9:eb:8e:d4:91:c6:ec:37:d6:1c:45:66:b2:c4:be: e3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C1:80:CB:C2:FD:D6:CD:77:3D:E0:84:D3:66:63:74:B5:88:50:24 X509v3 Authority Key Identifier: keyid:88:87:CF:6C:F5:10:2F:0F:B7:13:F4:C4:A1:BD:E3:89:48:1F:1C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iIfPbPUQLw-3E_TEob3jiUgfHEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DA0/3A0D93101D8C11E28EFF57E708B02CD2/E4BA3CE8DFCE11EFBC4CD631C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 119.252.112.0/21 119.252.122.0/24 124.109.8.0/22 IPv6: 2407:4800::/36 Signature Algorithm: sha256WithRSAEncryption 9d:9c:f4:e8:3f:0d:41:3d:19:8b:d1:e7:a7:c4:17:75:77:2a: 00:3b:79:85:76:6b:03:c8:91:cd:9b:ed:e3:38:9d:15:f4:3d: d7:8e:71:0a:8a:80:55:78:62:1f:94:08:66:e1:38:70:67:bb: 90:29:cf:eb:18:7b:7f:28:65:da:d1:e0:49:8f:c4:bc:e8:89: 56:36:53:b7:08:e6:a9:98:bb:2d:5d:cc:fd:73:a1:d1:66:cf: 51:dd:d9:f9:66:83:46:e7:6c:f3:5b:2c:fe:af:43:40:27:0e: e0:12:72:59:e0:cb:f0:05:71:95:88:2b:e6:09:2c:5d:d6:fa: 80:89:59:75:55:75:80:fa:a2:31:7a:93:65:2f:37:65:e0:04: de:c5:34:27:9e:8b:07:00:5d:9c:17:ae:60:6b:ae:f5:4b:80: 27:2f:42:89:be:4f:48:9b:7e:42:ca:28:11:01:4b:93:d9:7c: d5:5e:5f:28:f9:41:7c:24:ce:c8:c9:b9:87:4d:fe:ce:b5:f5: 41:5c:a0:46:6c:20:78:2d:60:d7:53:26:ec:c0:ba:66:51:fc: 9d:24:e7:f5:f6:bf:45:b5:c0:b4:fb:20:d5:08:32:67:5f:06: ba:f9:01:58:8a:01:5a:c9:13:ad:cd:45:30:17:3d:99:4d:35: 7a:34:3f:c3 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgICNZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQTAxMTAvBgNVBAUTKDg4ODdDRjZDRjUxMDJGMEZCNzEzRjRDNEExQkRFMzg5 NDgxRjFDNDQwHhcNMjYwNzIzMDQ0NzQ3WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYxOWNmMi0xNzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwH+S9CW1PPbLJprEnfAL3ME+oVL8RMZgzPe9O8lR9G4ZlswRxjmIYN+i4yC7 mqu0yVnndy9WFuAJHsM1QU/NF+oS59CMgGXEQPsGILIYsJA1FxWSc5jpqYOh7naL 8miNsMPFnCxWYQF8rf1N8f4RuQ3JnUks6n9VLb4I5zHRqhZqOZrU8SoRPbUy8W3O VKrngZDOXVIdrllF2gpQZFimPCjvh7qxwpTaeJv6Npoh9RwJ2w13c8aLWK/IIq6+ S94FNAqSagO7igJRaHTzBIlLEU7dhzVEDL3chbl2yQ5v4ELlb2rxOdHp2WDMX9S7 /7Kp647UkcbsN9YcRWayxL7jRwIDAQABo4ICfDCCAngwHQYDVR0OBBYEFE7BgMvC /dbNdz3ghNNmY3S1iFAkMB8GA1UdIwQYMBaAFIiHz2z1EC8PtxP0xKG944lIHxxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBMC8zQTBEOTMxMDFE OEMxMUUyOEVGRjU3RTcwOEIwMkNEMi9pSWZQYlBVUUx3LTNFX1RFb2IzamlVZ2ZI RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lJZlBiUFVRTHctM0VfVEVvYjNqaVVnZkhFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQTAvM0EwRDkzMTAxRDhDMTFFMjhFRkY1N0U3MDhCMDJDRDIvRTRCQTNDRThE RkNFMTFFRkJDNENENjMxQzRGOUFFMDIucm9hMDsGCCsGAQUFBwEHAQH/BCwwKjAY BAIAATASAwQDd/xwAwQAd/x6AwQCfG0IMA4EAgACMAgDBgQkB0gAADANBgkqhkiG 9w0BAQsFAAOCAQEAnZz06D8NQT0Zi9Hnp8QXdXcqADt5hXZrA8iRzZvt4zidFfQ9 145xCoqAVXhiH5QIZuE4cGe7kCnP6xh7fyhl2tHgSY/EvOiJVjZTtwjmqZi7LV3M /XOh0WbPUd3Z+WaDRuds81ss/q9DQCcO4BJyWeDL8AVxlYgr5gksXdb6gIlZdVV1 gPqiMXqTZS83ZeAE3sU0J56LBwBdnBeuYGuu9UuAJy9Cib5PSJt+QsooEQFLk9l8 1V5fKPlBfCTOyMm5h03+zrX1QVygRmwgeC1g11Mm7MC6ZlH8nSTn9fa/RbXAtPsg 1QgyZ18GuvkBWIoBWskTrc1FMBc9mU01ejQ/ww== -----END CERTIFICATE-----Generated at Wed Jul 29 06:37:29 2026 by rpki-client