$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/5D24529CAB0C11EA8D5ADE09C4F9AE02.roa File: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (raw, json) Hash identifier: SUdVIcZkUhygJe2xIbtJt7uwqKCG9Ii1WDhJ2Iav9eM= Subject key identifier: A7:46:59:4A:F3:1F:C0:DE:38:8E:16:E4:3A:4A:92:2B:53:0C:6B:BA Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Certificate serial: 1D94 Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/5D24529CAB0C11EA8D5ADE09C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:27:13 +0000 ROA not before: Tue 04 Nov 2025 15:00:32 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 38710 IP address blocks: 119.30.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7572 (0x1d94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Validity Not Before: Nov 4 15:00:32 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a48501-347d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fe:8e:2f:be:22:da:36:b5:78:31:15:b2:62: d7:c3:f4:29:ae:78:9f:fb:85:fb:b6:79:1d:cd:73: f6:4b:49:90:28:9d:9a:da:01:e4:00:45:9c:75:63: 55:67:44:90:9f:a2:41:19:26:61:41:73:d9:f9:c9: e0:7a:fc:72:06:ba:f9:48:91:7f:b6:ac:8b:a2:87: 92:89:e0:94:f4:cb:fb:ec:7d:71:d6:a3:27:d5:f6: dc:ad:a6:9d:e5:4f:58:06:e3:57:cb:9b:17:d7:ee: 21:17:1c:3d:00:8e:81:48:ce:44:af:9a:76:b4:07: 42:10:04:db:a9:34:bd:21:98:c4:77:d7:02:56:6a: bd:78:87:f4:1e:f3:ef:12:3f:e8:6e:72:84:08:f6: 24:1c:84:01:80:92:8c:5d:12:f1:5a:1a:20:13:80: 9f:8b:9a:e3:ef:d0:94:27:8f:8e:35:68:65:0a:0a: dd:c3:f9:9d:81:87:74:fc:57:78:bd:82:97:b2:f7: 0b:d4:a1:01:2f:0d:dd:61:aa:89:ae:12:f9:fb:bc: 78:3f:8c:97:42:1d:e1:e5:4d:81:b5:c2:7c:0b:a2: b8:39:2a:29:aa:96:a2:e3:b6:20:20:72:11:59:cf: bf:cf:04:ee:2a:a5:cf:bd:9c:ec:7e:50:a7:b2:28: c0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:46:59:4A:F3:1F:C0:DE:38:8E:16:E4:3A:4A:92:2B:53:0C:6B:BA X509v3 Authority Key Identifier: keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/5D24529CAB0C11EA8D5ADE09C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 119.30.88.0/24 Signature Algorithm: sha256WithRSAEncryption 63:7f:e6:b2:75:b5:4f:32:c8:41:e8:87:f0:c9:e1:c7:63:7f: d0:18:cb:58:5b:13:c8:00:68:6e:1d:45:98:0e:5d:ad:41:3c: 29:29:5c:fa:25:f5:ba:94:74:2c:f5:2b:b4:f3:84:22:19:80: d2:73:b4:4f:e3:11:b1:7d:6b:1a:e1:bd:ee:57:e0:06:31:b9: 2e:8a:6c:e8:51:7a:87:19:a3:3d:46:64:ce:5c:91:53:37:f0: d4:f1:d3:48:2f:1a:fc:16:a8:3b:f5:73:92:49:df:b4:16:c6: 88:28:d0:0f:95:1b:77:e6:d5:a3:97:63:19:6c:ca:7a:4e:97: 2d:27:0b:a7:09:d5:2f:1f:41:8a:67:4c:86:e6:79:4a:68:f0: ee:30:01:b8:26:3a:84:b3:7e:8c:4c:47:81:35:b6:cc:9a:7d: 49:1b:1c:77:b2:66:ba:7a:a7:dd:97:af:42:9a:3d:bb:9a:93: 9d:d1:25:af:41:47:a7:54:03:d2:ec:c8:9b:52:c0:0d:2a:c0: b0:50:88:1a:69:77:55:7c:c2:80:1e:5b:f1:49:e1:26:d5:ad: 33:b1:49:b5:b1:9d:19:72:5d:57:cc:bd:a0:4b:a9:23:a5:44: 58:a1:3e:14:af:10:73:43:fc:9c:ef:60:87:69:ef:d1:b2:d0: 18:de:8d:69 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICHZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4 NkE5QjNGRDgwHhcNMjUxMTA0MTUwMDMyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODUwMS0zNDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzv6OL74i2ja1eDEVsmLXw/Qprnif+4X7tnkdzXP2S0mQKJ2a2gHkAEWcdWNV Z0SQn6JBGSZhQXPZ+cngevxyBrr5SJF/tqyLooeSieCU9Mv77H1x1qMn1fbcraad 5U9YBuNXy5sX1+4hFxw9AI6BSM5Er5p2tAdCEATbqTS9IZjEd9cCVmq9eIf0HvPv Ej/obnKECPYkHIQBgJKMXRLxWhogE4Cfi5rj79CUJ4+ONWhlCgrdw/mdgYd0/Fd4 vYKXsvcL1KEBLw3dYaqJrhL5+7x4P4yXQh3h5U2BtcJ8C6K4OSopqpai47YgIHIR Wc+/zwTuKqXPvZzsflCnsijAzwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKdGWUrz H8DeOI4W5DpKkitTDGu6MB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1NjgvQkQxQTk1RDIxRDg3MTFFMjlCRTNFNkRGMDhCMDJDRDIvNUQyNDUyOUNB QjBDMTFFQThENUFERTA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAdx5YMA0GCSqGSIb3DQEBCwUAA4IBAQBjf+aydbVPMshB6IfwyeHH Y3/QGMtYWxPIAGhuHUWYDl2tQTwpKVz6JfW6lHQs9Su084QiGYDSc7RP4xGxfWsa 4b3uV+AGMbkuimzoUXqHGaM9RmTOXJFTN/DU8dNILxr8Fqg79XOSSd+0FsaIKNAP lRt35tWjl2MZbMp6TpctJwunCdUvH0GKZ0yG5nlKaPDuMAG4JjqEs36MTEeBNbbM mn1JGxx3sma6eqfdl69Cmj27mpOd0SWvQUenVAPS7MibUsANKsCwUIgaaXdVfMKA HlvxSeEm1a0zsUm1sZ0Zcl1XzL2gS6kjpURYoT4UrxBzQ/yc72CHae/RstAY3o1p -----END CERTIFICATE-----Generated at Mon Mar 2 06:18:39 2026 by rpki-client