$ rpki-client -vvf rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/4462F034F0EC11EB9D0B176AC4F9AE02.roa File: 4462F034F0EC11EB9D0B176AC4F9AE02.roa (raw, json) Hash identifier: te6K7h74NKd0mHdVkf229ZoBYjiL4niibZWuwJlhYHM= Subject key identifier: B0:9C:D9:6A:FF:C1:56:02:2A:79:5E:97:3A:03:1C:41:39:A5:76:28 Certificate issuer: /CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32 Certificate serial: 2CBD Authority key identifier: B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/4462F034F0EC11EB9D0B176AC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:38:23 +0000 ROA not before: Mon 02 Jun 2025 16:12:56 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 133878 IP address blocks: 120.136.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11453 (0x2cbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C128, serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32 Validity Not Before: Jun 2 16:12:56 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a4414f-dca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:54:5c:54:67:92:38:4f:f9:74:1f:6c:53:a8: ce:dc:fa:50:88:7f:08:4c:ab:75:11:5a:6e:e0:d1: de:28:ff:89:29:74:6f:31:b4:b1:1b:f9:25:9c:a4: 81:9e:13:cf:6c:64:a8:12:a3:48:0e:8c:9e:74:2b: 0d:17:59:93:3c:41:de:cd:27:0f:1f:df:e8:2a:0c: f6:25:6b:64:50:b6:43:07:4f:3e:88:5c:cd:a4:5f: e1:81:90:6d:43:3e:6b:25:4a:02:33:24:89:eb:c3: d4:20:6c:d3:b5:8a:36:3d:15:87:a5:f8:27:20:c0: 4b:46:64:b9:d5:e5:d5:2e:c1:73:c3:dc:4f:ea:5a: 4c:e3:ba:60:0d:35:d8:c1:25:e9:50:10:79:fa:bc: 09:5e:fa:df:66:d9:a1:62:f7:1e:ce:89:a1:22:c5: 00:14:c8:3d:d0:3c:b2:e4:8f:48:e4:7a:5c:90:1b: de:69:22:bf:db:8f:6e:93:a1:6a:99:b2:9b:ec:fa: 36:bd:ec:7d:ed:02:d6:74:bc:ef:0c:a6:13:4c:ca: f2:10:5e:e7:44:09:89:1c:fc:b9:00:16:cf:b6:69: ef:62:8e:46:00:3a:15:a5:0c:5e:29:24:06:c5:d4: c9:dc:0b:d9:5a:da:ae:1d:70:8e:62:f2:52:c3:ae: d3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9C:D9:6A:FF:C1:56:02:2A:79:5E:97:3A:03:1C:41:39:A5:76:28 X509v3 Authority Key Identifier: keyid:B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/4462F034F0EC11EB9D0B176AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.136.6.0/24 Signature Algorithm: sha256WithRSAEncryption 43:58:a6:71:31:ef:f9:80:de:f1:c4:af:ee:24:0b:48:cb:a9: 7e:a8:d7:de:b9:a9:3e:ee:77:c5:80:25:f3:f2:21:f0:ea:81: e7:8c:84:40:4b:93:0f:82:1d:44:0b:17:dc:8f:d1:40:03:34: 18:b0:6e:fe:ed:2c:99:63:18:a1:c3:3b:46:8b:ee:90:0e:c9: 10:3d:dd:8f:81:2a:c5:fd:54:05:d9:23:ec:92:7c:12:85:fe: 2d:0d:50:c7:0e:02:d3:dd:61:c8:37:b2:df:df:5b:8c:4b:a4: 45:2e:86:75:ec:09:63:63:cd:08:7a:8a:04:da:03:9f:1d:4b: 70:a8:cb:df:81:34:00:11:24:d3:f8:cf:f3:1e:39:0c:4b:c7: 26:26:41:0b:02:74:f9:72:4a:81:5e:7c:a1:bd:fb:a2:aa:8c: fa:08:a9:1c:56:cc:32:09:08:e4:32:84:39:03:6f:64:9e:7c: 06:07:30:e5:85:8d:d4:89:05:ac:9d:25:7b:64:03:7b:17:19: a9:05:d9:1f:89:54:ab:92:a3:5c:b7:67:8a:82:05:f2:7a:63: 81:c1:b0:de:65:fb:f6:f3:ca:ab:b9:cb:f4:bd:09:4f:a6:01: 2b:57:30:1b:89:33:c7:61:2b:b2:d2:46:a6:d5:71:e5:5f:b7: 0b:6f:ee:f4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMxMjgxMTAvBgNVBAUTKEI1NjQyNzMyMjY1RDQwQkY3NUNBOTRBOUVDODExOTIx MUMxQjlCMzIwHhcNMjUwNjAyMTYxMjU2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDE0Zi1kY2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5VRcVGeSOE/5dB9sU6jO3PpQiH8ITKt1EVpu4NHeKP+JKXRvMbSxG/klnKSB nhPPbGSoEqNIDoyedCsNF1mTPEHezScPH9/oKgz2JWtkULZDB08+iFzNpF/hgZBt Qz5rJUoCMySJ68PUIGzTtYo2PRWHpfgnIMBLRmS51eXVLsFzw9xP6lpM47pgDTXY wSXpUBB5+rwJXvrfZtmhYvcezomhIsUAFMg90Dyy5I9I5HpckBveaSK/249uk6Fq mbKb7Po2vex97QLWdLzvDKYTTMryEF7nRAmJHPy5ABbPtmnvYo5GADoVpQxeKSQG xdTJ3AvZWtquHXCOYvJSw67T8QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLCc2Wr/ wVYCKnlelzoDHEE5pXYoMB8GA1UdIwQYMBaAFLVkJzImXUC/dcqUqeyBGSEcG5sy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzEyOC82NjRBOUJDQUZB NkQxMUUzQjZBQzIzNTA1OTExRUEzMi90V1FuTWlaZFFMOTF5cFNwN0lFWklSd2Jt ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RXUW5NaVpkUUw5MXlwU3A3SUVaSVJ3Ym16SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkMxMjgvNjY0QTlCQ0FGQTZEMTFFM0I2QUMyMzUwNTkxMUVBMzIvNDQ2MkYwMzRG MEVDMTFFQjlEMEIxNzZBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAeIgGMA0GCSqGSIb3DQEBCwUAA4IBAQBDWKZxMe/5gN7xxK/uJAtI y6l+qNfeuak+7nfFgCXz8iHw6oHnjIRAS5MPgh1ECxfcj9FAAzQYsG7+7SyZYxih wztGi+6QDskQPd2PgSrF/VQF2SPsknwShf4tDVDHDgLT3WHIN7Lf31uMS6RFLoZ1 7AljY80IeooE2gOfHUtwqMvfgTQAESTT+M/zHjkMS8cmJkELAnT5ckqBXnyhvfui qoz6CKkcVswyCQjkMoQ5A29knnwGBzDlhY3UiQWsnSV7ZAN7FxmpBdkfiVSrkqNc t2eKggXyemOBwbDeZfv288qrucv0vQlPpgErVzAbiTPHYSuy0kam1XHlX7cLb+70 -----END CERTIFICATE-----Generated at Mon Mar 2 12:43:01 2026 by rpki-client