$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/195AEC4287CF11F09EDBA229C4F9AE02.roa File: 195AEC4287CF11F09EDBA229C4F9AE02.roa (raw, json) Hash identifier: 6XI/IfvAsAWYLp6AJKm4dtAGOtIg8Onx4flKi94I10Y= Subject key identifier: F2:11:C1:9F:CF:25:5D:8D:31:8E:30:EB:5B:7A:94:D7:D9:27:02:C7 Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Certificate serial: 1D9B Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/195AEC4287CF11F09EDBA229C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:27:20 +0000 ROA not before: Mon 23 Feb 2026 07:30:49 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133502 IP address blocks: 119.30.64.0/24 maxlen: 24 119.30.81.0/24 maxlen: 24 119.30.90.0/24 maxlen: 24 119.30.110.0/24 maxlen: 24 119.73.0.0/22 maxlen: 24 119.73.59.0/24 maxlen: 24 119.73.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7579 (0x1d9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Validity Not Before: Feb 23 07:30:49 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a48508-62c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d4:14:2c:45:bb:92:92:eb:4c:3b:27:76:8d: 5c:8f:c2:45:03:fd:59:05:a9:17:70:e8:e0:ed:5c: 46:c3:2a:d6:c5:0f:01:49:d1:c3:05:0a:01:37:2a: 60:e0:9c:e0:e2:29:d6:5e:75:34:56:db:1e:d5:93: 79:22:0f:18:04:d4:9a:8a:f1:9a:a1:c4:58:ce:e5: ce:e4:34:7a:45:d1:f7:37:12:df:e7:fc:9d:88:9b: ee:3d:12:5d:52:a3:24:2d:42:e1:6f:53:c5:36:f1: a8:b5:6a:38:51:af:62:55:6b:25:e3:24:10:13:ee: 7e:95:77:6f:ae:c5:a5:20:41:05:64:06:5a:b5:bb: 8d:59:86:bf:c0:a4:4e:30:03:c0:80:c1:f4:e7:92: 7d:04:4e:67:83:1a:cc:c0:fd:9c:85:82:54:38:b3: a8:04:70:be:2b:d6:25:3f:65:2f:95:01:18:01:a5: 4e:75:4d:0f:cb:cb:2b:50:dd:7e:d7:2d:d9:33:ff: e1:35:27:31:23:42:7d:f2:ce:8f:19:92:a2:b3:81: 03:d9:52:a8:0b:fc:d6:90:58:cc:d2:70:97:1a:48: d9:bd:9e:aa:3f:e9:60:b4:39:99:c1:39:99:d3:76: 37:cf:a7:3a:cd:02:fc:14:d9:0e:21:88:62:bd:54: 1a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:11:C1:9F:CF:25:5D:8D:31:8E:30:EB:5B:7A:94:D7:D9:27:02:C7 X509v3 Authority Key Identifier: keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/195AEC4287CF11F09EDBA229C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 119.30.64.0/24 119.30.81.0/24 119.30.90.0/24 119.30.110.0/24 119.73.0.0/22 119.73.59.0/24 119.73.62.0/24 Signature Algorithm: sha256WithRSAEncryption 56:15:f5:d4:61:a8:db:88:72:89:12:fa:3d:e4:2c:76:a2:cc: e8:e9:6c:5a:d6:64:ff:b5:71:ab:e3:ac:fc:bf:e2:b7:91:cb: 37:2e:a2:1e:f2:14:cd:83:73:4d:ee:3b:41:12:0c:c1:e2:43: b6:61:6d:4b:39:e2:17:a1:14:da:e5:17:13:c0:f5:d4:86:aa: 99:b0:f9:3e:fd:ea:98:86:2b:a7:6c:75:be:b0:48:39:dd:b5: 01:98:b2:cc:16:b3:48:32:87:df:a0:30:12:75:0d:0e:48:30: 70:1e:39:a9:fc:e1:fa:08:e7:b0:f1:43:9c:d5:ba:e3:06:ae: a6:9a:ce:54:a5:b1:bb:8f:5d:20:15:f1:77:48:44:7c:b7:8a: d3:74:33:eb:1b:35:88:e5:b9:78:cd:63:be:a3:34:e7:42:0a: 46:5f:ea:75:e8:f3:e1:0e:28:33:7d:22:2a:db:71:51:5e:48: 5d:f7:e5:50:fa:a6:62:13:1a:92:dd:ac:1f:ed:7a:cc:4d:1d: 62:c4:80:a7:c5:58:18:96:00:48:c6:6d:11:b6:80:53:37:97: 27:69:d7:31:7e:42:09:09:b6:99:09:a3:6c:e1:5b:0a:9f:e7: c0:dd:a0:49:48:3a:4e:37:c0:d8:e6:c4:18:e0:9b:ea:d9:33: 66:af:ea:2b -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICHZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4 NkE5QjNGRDgwHhcNMjYwMjIzMDczMDQ5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODUwOC02MmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9QULEW7kpLrTDsndo1cj8JFA/1ZBakXcOjg7VxGwyrWxQ8BSdHDBQoBNypg 4Jzg4inWXnU0Vtse1ZN5Ig8YBNSaivGaocRYzuXO5DR6RdH3NxLf5/ydiJvuPRJd UqMkLULhb1PFNvGotWo4Ua9iVWsl4yQQE+5+lXdvrsWlIEEFZAZatbuNWYa/wKRO MAPAgMH055J9BE5ngxrMwP2chYJUOLOoBHC+K9YlP2UvlQEYAaVOdU0Py8srUN1+ 1y3ZM//hNScxI0J98s6PGZKis4ED2VKoC/zWkFjM0nCXGkjZvZ6qP+lgtDmZwTmZ 03Y3z6c6zQL8FNkOIYhivVQaRwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFPIRwZ/P JV2NMY4w61t6lNfZJwLHMB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1NjgvQkQxQTk1RDIxRDg3MTFFMjlCRTNFNkRGMDhCMDJDRDIvMTk1QUVDNDI4 N0NGMTFGMDlFREJBMjI5QzRGOUFFMDIucm9hMEMGCCsGAQUFBwEHAQH/BDQwMjAw BAIAATAqAwQAdx5AAwQAdx5RAwQAdx5aAwQAdx5uAwQCd0kAAwQAd0k7AwQAd0k+ MA0GCSqGSIb3DQEBCwUAA4IBAQBWFfXUYajbiHKJEvo95Cx2oszo6Wxa1mT/tXGr 46z8v+K3kcs3LqIe8hTNg3NN7jtBEgzB4kO2YW1LOeIXoRTa5RcTwPXUhqqZsPk+ /eqYhiunbHW+sEg53bUBmLLMFrNIMoffoDASdQ0OSDBwHjmp/OH6COew8UOc1brj Bq6mms5UpbG7j10gFfF3SER8t4rTdDPrGzWI5bl4zWO+ozTnQgpGX+p16PPhDigz fSIq23FRXkhd9+VQ+qZiExqS3awf7XrMTR1ixICnxVgYlgBIxm0RtoBTN5cnadcx fkIJCbaZCaNs4VsKn+fA3aBJSDpON8DY5sQY4Jvq2TNmr+or -----END CERTIFICATE-----Generated at Mon Mar 2 06:16:26 2026 by rpki-client