$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/D304973AC1E011EE81429B3EC4F9AE02.roa File: D304973AC1E011EE81429B3EC4F9AE02.roa (raw, json) Hash identifier: yhURItjRdxKg6mcd34cH8KYuvJEG8HUnJFXPM2XlV0s= Subject key identifier: 95:67:B1:8D:46:28:C1:81:01:41:B9:16:1C:9F:4D:CE:77:E2:92:CB Certificate issuer: /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977 Certificate serial: 0732 Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/D304973AC1E011EE81429B3EC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:05:23 +0000 ROA not before: Wed 16 Jul 2025 23:34:09 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 15083 IP address blocks: 115.126.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1842 (0x732) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164D60, serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977 Validity Not Before: Jul 16 23:34:09 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a463c3-aed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ef:a1:ab:d0:85:bb:58:cd:e8:0b:bc:47:e3: a0:bc:23:2f:b1:43:92:3a:2e:9a:99:6c:1e:54:63: bc:ba:9b:e7:6f:7d:d9:6c:b3:c0:ec:a2:39:26:fb: 34:40:20:d9:2a:2a:91:cd:cb:bd:95:83:0b:bb:8d: e0:0f:5f:f5:2e:a6:a8:ce:0c:e7:e8:cc:ea:ab:be: aa:e7:5e:cb:25:72:82:62:d7:fb:0b:18:b9:d7:15: 3d:39:c8:1a:76:40:5a:54:47:d1:e0:22:2c:6a:e3: d9:83:65:b9:66:01:e8:a3:46:22:fa:0e:59:1e:94: 70:12:01:a7:aa:92:9f:65:16:85:6c:ea:7a:ff:bf: d8:f4:07:06:a8:35:1e:2d:ac:21:13:a9:d0:c2:b7: 03:10:d1:c6:48:4a:f0:5b:ed:df:96:17:71:00:a9: ab:cf:bd:51:a5:2c:6a:12:a5:21:ba:9a:db:e2:5b: e5:86:17:54:a3:d2:32:f4:4f:5e:ae:cc:2e:02:fe: 38:a6:e4:76:7c:37:51:78:9f:92:22:bc:1c:ac:cc: 38:f2:83:2d:bf:8f:3a:78:ad:b8:39:af:a1:db:c9: 96:1a:55:c0:fa:a7:44:b7:a5:f1:a8:fa:ae:55:e8: c6:25:da:ae:13:35:c5:20:5e:7b:b5:3a:ff:7c:42: 9a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:67:B1:8D:46:28:C1:81:01:41:B9:16:1C:9F:4D:CE:77:E2:92:CB X509v3 Authority Key Identifier: keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/D304973AC1E011EE81429B3EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 115.126.25.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:1c:79:6a:98:e6:ff:59:d8:3e:e2:79:e2:26:8a:17:49:f0: 4d:b0:eb:bb:4e:ec:05:81:d2:55:4f:f6:04:de:bf:0f:1b:12: cf:c5:9a:f1:1e:3a:1a:12:98:f6:a4:24:75:00:ec:e1:92:16: 25:cb:52:55:33:02:a0:74:78:37:93:59:0a:cc:1c:90:ac:87: 46:87:6a:11:b0:bb:ed:f2:0d:ce:da:97:3c:2f:05:10:93:6f: 73:e7:17:f3:30:8f:ec:5f:ad:6d:0e:ec:1e:b4:11:b4:22:4d: 3f:06:54:07:3a:3a:16:64:a0:57:15:6d:66:38:62:d0:c9:bc: ed:77:ac:8e:23:50:02:4d:06:37:6e:81:13:5a:f1:52:0b:99: cf:1c:58:0c:9a:ea:58:95:f4:4d:2a:43:93:f5:4c:2e:13:2b: 32:01:1a:eb:96:1c:5e:63:75:83:ca:dd:c4:4c:6f:f8:9d:06: 36:e1:15:ee:c2:b8:dd:fa:58:0c:a2:fa:f8:a9:ac:48:d7:63: 50:d6:14:57:af:ab:e6:ac:6c:28:ac:71:45:dd:6a:de:fc:35: 9e:d3:5d:ba:16:e0:c0:a7:3b:52:49:bf:92:1d:2a:13:bb:dc: b9:90:ec:eb:cf:1a:a7:d4:73:c6:cd:89:10:a2:1b:42:f4:db: 32:32:16:f2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRENjAxMTAvBgNVBAUTKEUwQkEyMjhFQUY5ODEyRjA2N0QyRkYzQkY4MDY4OTU2 OThDOTM5NzcwHhcNMjUwNzE2MjMzNDA5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjNjMy1hZWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv++hq9CFu1jN6Au8R+OgvCMvsUOSOi6amWweVGO8upvnb33ZbLPA7KI5Jvs0 QCDZKiqRzcu9lYMLu43gD1/1Lqaozgzn6Mzqq76q517LJXKCYtf7Cxi51xU9Ocga dkBaVEfR4CIsauPZg2W5ZgHoo0Yi+g5ZHpRwEgGnqpKfZRaFbOp6/7/Y9AcGqDUe LawhE6nQwrcDENHGSErwW+3flhdxAKmrz71RpSxqEqUhuprb4lvlhhdUo9Iy9E9e rswuAv44puR2fDdReJ+SIrwcrMw48oMtv486eK24Oa+h28mWGlXA+qdEt6XxqPqu VejGJdquEzXFIF57tTr/fEKaMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJVnsY1G KMGBAUG5FhyfTc534pLLMB8GA1UdIwQYMBaAFOC6Io6vmBLwZ9L/O/gGiVaYyTl3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEQ2MC85RTBERTM5MkI0 NUYxMUVCQjYxQjc2MENDNEY5QUUwMi80TG9panEtWUV2Qm4wdjg3LUFhSlZwakpP WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMb2lqcS1ZRXZCbjB2ODctQWFKVnBqSk9YYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjRENjAvOUUwREUzOTJCNDVGMTFFQkI2MUI3NjBDQzRGOUFFMDIvRDMwNDk3M0FD MUUwMTFFRTgxNDI5QjNFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAc34ZMA0GCSqGSIb3DQEBCwUAA4IBAQAsHHlqmOb/Wdg+4nniJooX SfBNsOu7TuwFgdJVT/YE3r8PGxLPxZrxHjoaEpj2pCR1AOzhkhYly1JVMwKgdHg3 k1kKzByQrIdGh2oRsLvt8g3O2pc8LwUQk29z5xfzMI/sX61tDuwetBG0Ik0/BlQH OjoWZKBXFW1mOGLQybztd6yOI1ACTQY3boETWvFSC5nPHFgMmupYlfRNKkOT9Uwu EysyARrrlhxeY3WDyt3ETG/4nQY24RXuwrjd+lgMovr4qaxI12NQ1hRXr6vmrGwo rHFF3Wre/DWe0126FuDApztSSb+SHSoTu9y5kOzrzxqn1HPGzYkQohtC9NsyMhby -----END CERTIFICATE-----Generated at Mon Mar 2 12:51:37 2026 by rpki-client