$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/66C1BA862FBB11EB9B861059C4F9AE02.roa File: 66C1BA862FBB11EB9B861059C4F9AE02.roa (raw, json) Hash identifier: nrzPGicOlJYxg2rEt8E6hg5bNILOPQnvQxkB+utP8UE= Subject key identifier: 46:1F:6E:A7:BF:2B:3F:9D:25:27:96:62:50:43:C3:75:23:15:52:A1 Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Certificate serial: 086F Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/66C1BA862FBB11EB9B861059C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:16:06 +0000 ROA not before: Thu 10 Apr 2025 22:02:38 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 135026 IP address blocks: 118.193.79.0/24 maxlen: 24 123.58.202.0/24 maxlen: 24 123.58.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2159 (0x86f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Validity Not Before: Apr 10 22:02:38 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a48266-0f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d2:06:8d:21:ad:e1:39:a1:9c:b5:52:94:69: 96:8a:2f:70:9c:f2:89:e5:24:57:ee:8f:7d:ea:49: 8c:8f:4f:15:b8:24:ff:19:4c:0d:d2:5f:b6:8a:76: f5:7b:1c:b7:11:fa:0c:37:df:cb:4d:ee:4f:52:bd: 5c:37:c7:99:4b:68:22:2b:54:58:5c:6b:6b:10:c3: 49:e3:cf:8e:2e:b8:88:c5:24:54:3c:3c:27:f3:7c: ae:dc:6d:e8:66:db:3e:b9:02:6c:f0:c5:62:56:7a: a8:04:11:43:37:c0:48:84:46:02:b9:df:67:ad:63: 3c:50:50:93:02:57:48:12:67:86:d3:19:5f:5b:41: 86:31:74:cf:f4:56:00:c8:88:c3:8e:69:d7:3a:af: f2:58:a5:b9:9f:62:9f:75:1c:13:75:a4:a0:64:fd: 06:58:0b:3b:3b:5e:fc:21:ac:db:27:0a:7d:46:26: 0c:fa:20:93:57:d3:e4:32:7b:a8:15:17:2f:a7:e5: 47:b4:4a:f1:a8:8e:5a:e7:a9:cb:7b:f6:5f:e2:9a: 16:60:3d:fa:9e:d2:6e:a4:1b:09:f8:a7:7e:86:32: 4e:4e:b6:54:b4:3d:51:05:ac:08:90:26:11:22:f2: 18:98:63:11:67:f3:b8:d1:27:c1:56:dd:e5:61:2e: 8e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1F:6E:A7:BF:2B:3F:9D:25:27:96:62:50:43:C3:75:23:15:52:A1 X509v3 Authority Key Identifier: keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/66C1BA862FBB11EB9B861059C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 118.193.79.0/24 123.58.202.0/24 123.58.222.0/24 Signature Algorithm: sha256WithRSAEncryption a6:00:bf:fc:5c:f3:97:4f:29:b8:24:ec:5e:c6:c5:5d:45:38: 4b:17:63:ed:0c:b6:ac:6d:04:ea:1a:8c:68:fd:a3:79:a1:94: a3:49:79:55:ee:b6:ee:2a:8b:9f:d6:47:56:c0:f9:b9:61:dd: 3f:5d:d1:18:1b:9a:db:2d:5c:a6:93:e8:6e:a2:7d:b0:73:a7: 38:e5:7e:5f:db:36:a1:4c:28:cf:1f:06:ab:df:fd:86:ca:a4: 9a:2d:21:3c:3b:02:db:ed:96:a6:f6:22:c8:c3:87:ac:84:3d: 59:c8:67:df:d9:3b:33:98:64:42:cb:5e:78:04:a4:6e:21:9f: 43:ae:7e:c1:d0:a4:98:c3:a9:d3:9a:a0:e0:dc:3d:06:b5:bc: 0f:78:28:a5:78:dc:71:22:be:b4:c4:d0:25:1a:59:de:5a:b3: e3:06:76:8a:e6:b1:c0:e1:ca:4f:24:48:7f:d7:7a:ce:05:af: ce:f0:b2:c3:af:1e:3a:0f:ac:09:04:11:59:bf:88:60:5d:82: 63:44:6e:4c:72:dd:2a:25:bb:c5:a6:09:73:cf:34:b4:e9:a4: 1e:e7:49:2d:dd:d8:c0:55:3f:51:72:c1:ae:82:78:e5:e3:8e: 93:37:ff:7e:b6:5b:ad:c0:2d:fa:3b:2d:f2:58:ec:3f:94:b6: 40:f5:c4:41 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz ODEzRTVFRjgwHhcNMjUwNDEwMjIwMjM4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODI2Ni0wZjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl9IGjSGt4TmhnLVSlGmWii9wnPKJ5SRX7o996kmMj08VuCT/GUwN0l+2inb1 exy3EfoMN9/LTe5PUr1cN8eZS2giK1RYXGtrEMNJ48+OLriIxSRUPDwn83yu3G3o Zts+uQJs8MViVnqoBBFDN8BIhEYCud9nrWM8UFCTAldIEmeG0xlfW0GGMXTP9FYA yIjDjmnXOq/yWKW5n2KfdRwTdaSgZP0GWAs7O178IazbJwp9RiYM+iCTV9PkMnuo FRcvp+VHtErxqI5a56nLe/Zf4poWYD36ntJupBsJ+Kd+hjJOTrZUtD1RBawIkCYR IvIYmGMRZ/O40SfBVt3lYS6ODwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFEYfbqe/ Kz+dJSeWYlBDw3UjFVKhMB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODZFOEEvM0I0NzZFN0MyREZGMTFFQjg2OEE5MTM1QzRGOUFFMDIvNjZDMUJBODYy RkJCMTFFQjlCODYxMDU5QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAdsFPAwQAezrKAwQAezreMA0GCSqGSIb3DQEBCwUAA4IBAQCmAL/8 XPOXTym4JOxexsVdRThLF2PtDLasbQTqGoxo/aN5oZSjSXlV7rbuKouf1kdWwPm5 Yd0/XdEYG5rbLVymk+huon2wc6c45X5f2zahTCjPHwar3/2GyqSaLSE8OwLb7Zam 9iLIw4eshD1ZyGff2TszmGRCy154BKRuIZ9Drn7B0KSYw6nTmqDg3D0GtbwPeCil eNxxIr60xNAlGlneWrPjBnaK5rHA4cpPJEh/13rOBa/O8LLDrx46D6wJBBFZv4hg XYJjRG5Mct0qJbvFpglzzzS06aQe50kt3djAVT9RcsGugnjl446TN/9+tlutwC36 Oy3yWOw/lLZA9cRB -----END CERTIFICATE-----Generated at Mon Mar 2 13:49:58 2026 by rpki-client