$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/59F5C224337811EAAD3FAA39C4F9AE02.roa File: 59F5C224337811EAAD3FAA39C4F9AE02.roa (raw, json) Hash identifier: lHdU91ugPSiyzHpw87Uncl3C8ztnmcH0g3CXqM78J+k= Subject key identifier: 2C:12:44:A3:19:C5:AA:1C:EA:07:8C:0A:F9:D6:77:8A:A5:12:B0:50 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3A5F Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/59F5C224337811EAAD3FAA39C4F9AE02.roa Signing time: Sun 01 Mar 2026 21:22:22 +0000 ROA not before: Fri 16 Jan 2026 16:13:29 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 24521 IP address blocks: 119.82.240.0/24 maxlen: 24 119.82.241.0/24 maxlen: 24 119.82.242.0/24 maxlen: 24 119.82.243.0/24 maxlen: 24 119.82.244.0/24 maxlen: 24 119.82.245.0/24 maxlen: 24 119.82.246.0/24 maxlen: 24 119.82.247.0/24 maxlen: 24 175.184.236.0/22 maxlen: 22 175.184.236.0/24 maxlen: 24 175.184.237.0/24 maxlen: 24 175.184.238.0/24 maxlen: 24 175.184.239.0/24 maxlen: 24 2403:ba00::/32 maxlen: 32 2403:ba00:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14943 (0x3a5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Jan 16 16:13:29 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4ae0e-23d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:53:cd:9c:86:d4:04:e5:5c:d2:73:4b:12:1a: 31:48:b0:0e:04:ec:30:9a:cf:09:be:af:d0:a7:e3: a0:7c:e9:1e:ec:d9:be:84:03:4e:d7:f6:14:32:9b: b8:81:4d:a8:42:d5:5c:36:0a:44:27:4a:15:fb:45: 95:65:d8:ea:3d:ca:4c:54:ba:64:29:c1:1d:f8:f5: e0:08:f6:48:e9:e4:5d:e6:fe:49:7e:38:f7:bc:50: 99:12:74:a7:bd:e6:53:f6:e1:69:ec:81:0a:4c:9d: 9f:a2:d1:d2:16:10:3a:38:74:c7:d4:dd:0b:88:87: ed:65:4f:05:4e:aa:01:37:16:ed:49:0b:a8:c7:75: ef:32:db:e3:2a:28:8c:3a:5e:fa:5e:01:88:a3:d9: c4:61:98:b6:cc:3e:f5:8a:54:35:ce:3a:b9:75:b5: e5:36:1d:31:f0:da:d3:07:5d:2a:fe:81:8b:6e:ed: 32:fe:9d:d9:38:a2:32:a8:90:a3:61:7c:01:17:93: 24:87:85:48:da:de:dc:db:69:a3:8f:94:54:09:f1: 84:de:ca:38:b2:c5:a7:0f:ba:da:29:ae:fd:fd:64: 0e:e1:b2:55:96:d3:44:eb:86:a8:c7:77:2b:b8:62: 4e:26:e9:bd:79:d8:75:1a:80:e2:17:bd:07:04:3a: d6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:12:44:A3:19:C5:AA:1C:EA:07:8C:0A:F9:D6:77:8A:A5:12:B0:50 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/59F5C224337811EAAD3FAA39C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 119.82.240.0/21 175.184.236.0/22 IPv6: 2403:ba00::/32 Signature Algorithm: sha256WithRSAEncryption 12:71:51:f7:1b:50:f3:a9:50:7c:e3:bf:e0:5a:a9:7b:6e:6b: f0:d9:16:71:57:ed:bc:7b:6f:5f:c1:4a:65:0e:22:c8:bb:36: e8:2d:39:79:aa:53:a5:5b:eb:95:01:2b:c5:8d:7b:a6:fb:a9: fc:67:5e:1b:49:2b:c9:12:dc:3b:b4:97:e2:0f:44:a5:7f:8a: d1:36:c9:72:a3:97:21:cd:ee:6e:23:b0:2f:01:28:10:71:be: 67:f3:a9:45:84:db:9d:3e:db:5f:9e:82:78:24:0d:a1:c5:67: 1a:b6:f5:83:15:18:4a:4e:22:dc:b9:bd:28:fd:bd:3a:c0:17: 11:6e:db:04:a6:e5:47:e1:39:99:a3:59:21:fc:da:f9:ed:d1: a6:a3:43:fe:cd:5c:5b:23:3b:40:4e:2f:c6:4e:91:72:c4:e4: f5:b3:3d:ae:9a:cc:f2:8d:b8:dd:64:91:27:39:c8:7d:8c:95: 4d:23:06:9a:83:cc:67:7a:bb:d4:cd:66:f3:b7:99:fa:2c:f0: 6f:0c:43:d2:49:3d:17:f1:70:6f:39:82:5e:c1:a6:a9:c5:63: 16:83:8e:94:72:0e:fe:2e:2c:6c:29:eb:ae:0f:ce:7c:a7:0a: 95:b2:e8:ff:be:2f:8a:fb:a5:da:46:00:82:13:7a:2a:02:10: 02:59:ad:5f -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICOl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjYwMTE2MTYxMzI5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWUwZS0yM2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFPNnIbUBOVc0nNLEhoxSLAOBOwwms8Jvq/Qp+OgfOke7Nm+hANO1/YUMpu4 gU2oQtVcNgpEJ0oV+0WVZdjqPcpMVLpkKcEd+PXgCPZI6eRd5v5Jfjj3vFCZEnSn veZT9uFp7IEKTJ2fotHSFhA6OHTH1N0LiIftZU8FTqoBNxbtSQuox3XvMtvjKiiM Ol76XgGIo9nEYZi2zD71ilQ1zjq5dbXlNh0x8NrTB10q/oGLbu0y/p3ZOKIyqJCj YXwBF5Mkh4VI2t7c22mjj5RUCfGE3so4ssWnD7raKa79/WQO4bJVltNE64aox3cr uGJOJum9edh1GoDiF70HBDrW0QIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFCwSRKMZ xaoc6geMCvnWd4qlErBQMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvNTlGNUMyMjQz Mzc4MTFFQUFEM0ZBQTM5QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQDd1LwAwQCr7jsMA0EAgACMAcDBQAkA7oAMA0GCSqGSIb3DQEBCwUA A4IBAQAScVH3G1DzqVB847/gWql7bmvw2RZxV+28e29fwUplDiLIuzboLTl5qlOl W+uVASvFjXum+6n8Z14bSSvJEtw7tJfiD0Slf4rRNslyo5chze5uI7AvASgQcb5n 86lFhNudPttfnoJ4JA2hxWcatvWDFRhKTiLcub0o/b06wBcRbtsEpuVH4TmZo1kh /Nr57dGmo0P+zVxbIztATi/GTpFyxOT1sz2umszyjbjdZJEnOch9jJVNIwaag8xn ervUzWbzt5n6LPBvDEPSST0X8XBvOYJewaapxWMWg46Ucg7+LixsKeuuD858pwqV suj/vi+K+6XaRgCCE3oqAhACWa1f -----END CERTIFICATE-----Generated at Mon Mar 2 05:39:09 2026 by rpki-client