$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/925D8646772A11EBAE8A8181C4F9AE02.roa File: 925D8646772A11EBAE8A8181C4F9AE02.roa (raw, json) Hash identifier: GHAiy1U9rxwuTHVrOO4W5yr6dZrHk1J4DMJnsgMqY/I= Subject key identifier: 7B:52:38:A8:2E:A1:77:21:9B:03:7A:20:87:DE:3B:94:BB:5A:15:21 Certificate issuer: /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A Certificate serial: 35A0 Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/925D8646772A11EBAE8A8181C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:58:13 +0000 ROA not before: Thu 30 Oct 2025 15:00:45 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 198949 IP address blocks: 112.121.110.0/24 maxlen: 24 112.121.111.0/24 maxlen: 24 112.121.118.0/24 maxlen: 24 112.121.119.0/24 maxlen: 24 112.121.124.0/24 maxlen: 24 112.121.125.0/24 maxlen: 24 112.121.126.0/24 maxlen: 24 112.121.127.0/24 maxlen: 24 202.80.109.0/24 maxlen: 24 202.80.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13728 (0x35a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A Validity Not Before: Oct 30 15:00:45 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a47025-535f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9d:ad:62:e0:8b:fc:22:0b:da:62:f0:0f:b9: 58:3e:e6:0f:6d:d7:ec:03:7c:47:69:15:53:b8:b5: 1d:07:52:75:b2:d9:f4:e3:7b:02:28:d5:1f:5b:e1: 3c:22:28:93:b1:1b:78:3a:e8:da:38:ae:68:7e:dc: 80:c9:b1:b3:0e:e7:f1:45:b0:e4:46:1e:1a:ff:51: d2:56:2f:ef:13:2f:d2:3d:02:f6:99:31:7a:84:65: 23:5d:44:04:8e:6a:d2:b6:ed:27:d9:17:59:a4:8f: 75:2b:7e:49:b1:13:d3:96:80:96:54:9a:b9:15:21: 24:aa:62:cd:4f:c8:1e:4b:ac:46:b8:44:88:5b:e7: eb:01:38:2f:89:bd:09:a0:cd:4a:08:16:66:03:a5: 08:5e:aa:2a:4b:24:6c:5b:54:42:80:28:dd:74:c1: 4f:73:b9:a3:53:00:2a:00:b0:60:f3:a2:0c:66:f3: eb:bc:86:9f:06:6d:de:4e:bd:61:ef:5d:6f:5b:55: 28:26:64:9e:69:43:0c:83:33:67:17:7c:f9:08:db: 2c:bf:ac:9e:9e:ed:dd:e6:0b:d6:b5:4f:35:27:55: 6a:e1:e9:2d:7f:09:4b:88:a2:80:7d:a7:bd:2c:4a: 39:b4:b9:c7:17:b8:6f:af:a4:b8:e0:11:b4:60:1d: 8c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:52:38:A8:2E:A1:77:21:9B:03:7A:20:87:DE:3B:94:BB:5A:15:21 X509v3 Authority Key Identifier: keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/925D8646772A11EBAE8A8181C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 112.121.110.0/23 112.121.118.0/23 112.121.124.0/22 202.80.109.0-202.80.110.255 Signature Algorithm: sha256WithRSAEncryption 14:e3:c7:d6:f3:7e:e7:9c:65:35:1e:13:6e:60:ca:41:da:54: e7:a4:8d:98:1e:b4:d8:9c:c5:2d:eb:1e:93:28:ff:4b:d2:ef: 48:f1:85:40:f9:64:3f:06:be:00:df:bc:40:3e:61:db:52:ed: bf:b8:51:13:99:2e:13:e0:44:a6:b4:e7:ae:ab:d3:c1:1e:96: fa:c1:b8:3b:c8:3f:a1:2c:7b:ac:f6:15:30:b8:51:3f:36:fc: b7:f4:93:81:35:89:25:bb:ac:7d:6c:d7:e5:b2:37:e6:c4:1c: ad:96:c8:32:60:35:80:d8:41:57:b3:30:a4:0a:bc:74:59:ee: 86:c4:e3:a6:98:cd:bb:0a:cb:f1:5c:63:51:79:50:e4:48:ad: fe:d6:32:25:e0:94:64:62:79:a6:88:f2:e1:0d:9a:ea:0d:5d: 4e:5e:83:6f:8f:a9:0e:f7:1e:cb:a1:13:0b:6b:8a:df:eb:d5: a1:50:ed:28:cd:7c:e0:91:04:e7:24:33:9a:d0:71:39:a9:08: 01:dc:1d:7d:81:e8:80:b8:3b:e8:98:ce:88:28:71:46:e2:2d: 88:a3:49:25:23:af:d2:54:97:c3:2a:fa:1a:0b:9a:e7:3d:48: 98:c2:77:c2:ec:a0:69:0b:7f:48:93:57:5c:77:16:50:a3:7e: b0:53:2b:d2 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICNaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCNTAxMTAvBgNVBAUTKDk5MUIzRjE3MDg0Rjc2RjEyRjlGMDUwOUQ1OTdGMEZG RUNBMDRCNEEwHhcNMjUxMDMwMTUwMDQ1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzAyNS01MzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Z2tYuCL/CIL2mLwD7lYPuYPbdfsA3xHaRVTuLUdB1J1stn043sCKNUfW+E8 IiiTsRt4OujaOK5oftyAybGzDufxRbDkRh4a/1HSVi/vEy/SPQL2mTF6hGUjXUQE jmrStu0n2RdZpI91K35JsRPTloCWVJq5FSEkqmLNT8geS6xGuESIW+frATgvib0J oM1KCBZmA6UIXqoqSyRsW1RCgCjddMFPc7mjUwAqALBg86IMZvPrvIafBm3eTr1h 711vW1UoJmSeaUMMgzNnF3z5CNssv6yenu3d5gvWtU81J1Vq4ektfwlLiKKAfae9 LEo5tLnHF7hvr6S44BG0YB2MkQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFHtSOKgu oXchmwN6IIfeO5S7WhUhMB8GA1UdIwQYMBaAFJkbPxcIT3bxL58FCdWX8P/soEtK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I1MC85RDEzMDVDODFE OEYxMUUyQTAyQkNERUUwOEIwMkNEMi9tUnNfRndoUGR2RXZud1VKMVpmd18teWdT MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21Sc19Gd2hQZHZFdm53VUoxWmZ3Xy15Z1Mwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjdCNTAvOUQxMzA1QzgxRDhGMTFFMkEwMkJDREVFMDhCMDJDRDIvOTI1RDg2NDY3 NzJBMTFFQkFFOEE4MTgxQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQBcHluAwQBcHl2AwQCcHl8MAwDBADKUG0DBADKUG4wDQYJKoZIhvcN AQELBQADggEBABTjx9bzfuecZTUeE25gykHaVOekjZgetNicxS3rHpMo/0vS70jx hUD5ZD8GvgDfvEA+YdtS7b+4UROZLhPgRKa0566r08EelvrBuDvIP6Ese6z2FTC4 UT82/Lf0k4E1iSW7rH1s1+WyN+bEHK2WyDJgNYDYQVezMKQKvHRZ7obE46aYzbsK y/FcY1F5UORIrf7WMiXglGRieaaI8uENmuoNXU5eg2+PqQ73HsuhEwtrit/r1aFQ 7SjNfOCRBOckM5rQcTmpCAHcHX2B6IC4O+iYzogocUbiLYijSSUjr9JUl8Mq+hoL muc9SJjCd8LsoGkLf0iTV1x3FlCjfrBTK9I= -----END CERTIFICATE-----Generated at Mon Mar 2 11:59:25 2026 by rpki-client