$ rpki-client -vvf rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/16732F92826D11F0B439C27BC4F9AE02.roa File: 16732F92826D11F0B439C27BC4F9AE02.roa (raw, json) Hash identifier: /8I8Zl9zABqU4+Q0lEicmvA/CfmxVOpsQeYe0vDKQbg= Subject key identifier: A4:DF:C3:74:FE:5D:2A:EE:93:D5:19:10:90:84:68:0E:A6:36:CB:25 Certificate issuer: /CN=A918969C/serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8 Certificate serial: 6C Authority key identifier: 66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/16732F92826D11F0B439C27BC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:18:43 +0000 ROA not before: Thu 05 Feb 2026 17:26:19 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 16509 IP address blocks: 112.121.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918969C, serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8 Validity Not Before: Feb 5 17:26:19 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a43cb3-2833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:bc:02:19:69:8e:3d:be:10:d5:02:7e:eb: 37:2d:62:26:4f:9c:d0:60:0f:a3:5b:2a:bf:52:c5: 12:d6:16:7f:32:4d:e3:82:5f:4c:2f:72:8c:97:6d: 71:90:37:fd:ea:27:80:e4:91:d0:fd:db:90:57:6c: 4e:4e:2a:9e:87:b2:c1:80:64:6d:5e:14:be:e8:9f: 4f:f9:59:a9:6a:d3:48:40:77:42:a0:db:6e:2a:d4: df:b1:5f:f0:92:4a:3a:61:2a:db:aa:2f:65:af:cd: 27:d3:ba:d9:3f:47:5f:6a:e6:60:38:13:83:1a:2e: 02:ca:6a:44:20:24:12:00:f9:ac:57:cf:8c:41:b2: 11:08:f9:7e:6e:d3:82:16:e9:1e:89:18:64:85:21: 37:5f:31:92:a4:19:2a:fe:a7:87:b2:7e:7b:fd:91: b5:3e:d2:06:bc:fd:12:4d:20:60:fe:33:50:d4:b1: 1c:bb:3f:05:93:15:32:9c:c9:30:dc:e9:76:64:1e: 07:1e:0f:ee:5f:b2:e8:7e:f5:8f:de:42:f8:26:d7: 1d:7c:06:30:bd:7e:bd:e1:eb:bb:fb:af:38:51:ea: 16:10:b3:ee:c2:91:56:af:72:dc:f2:cd:24:86:80: 0f:bd:6d:42:81:92:68:4f:f3:1a:17:94:6a:92:08: 2b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DF:C3:74:FE:5D:2A:EE:93:D5:19:10:90:84:68:0E:A6:36:CB:25 X509v3 Authority Key Identifier: keyid:66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/16732F92826D11F0B439C27BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 112.121.47.0/24 Signature Algorithm: sha256WithRSAEncryption 12:8e:23:f4:0d:33:60:ce:e7:9f:59:3b:41:aa:53:6d:d4:7a: 4d:57:48:09:53:3d:19:f5:7b:8b:2a:d1:fc:1b:48:58:54:ba: 5b:68:b2:3b:a1:36:c8:0a:46:8e:aa:aa:13:aa:db:5a:db:2c: 00:36:f6:34:c7:d5:df:9d:d2:86:85:b4:2b:34:7a:bb:df:bf: 41:e9:90:b6:d0:1f:b7:a7:06:d6:93:ae:2d:4b:c7:b7:ff:21: 17:4b:f2:f9:15:bd:a1:de:8e:9a:c7:36:03:21:82:74:55:89: 2a:22:4f:0e:f4:fb:b9:3c:58:92:4a:de:b5:c7:aa:6a:c2:41: d6:90:e7:51:4c:89:02:27:93:8e:62:96:87:7a:4c:f6:a6:06: 09:ff:c8:7c:13:6c:85:a9:2e:37:25:4d:dc:61:99:50:35:0e: 1c:72:ff:67:d6:ff:64:57:1a:1a:73:d1:d5:7e:aa:97:c3:d1: c4:22:3f:0b:6f:0b:99:45:24:ad:2f:c3:ea:9e:16:2d:04:8b: 77:46:99:6e:d5:df:90:28:76:26:9d:b2:43:7f:67:a8:cf:80: 7b:17:04:3a:44:8c:4d:d1:d6:dd:2c:8b:f5:a7:fb:07:86:b7: 4c:df:ec:f2:07:66:99:2b:db:2e:49:43:fe:c4:55:cf:92:62: bb:8c:ae:66 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OTY5QzExMC8GA1UEBRMoNjZBQjRFQjk2MjlEMjZGOTdFMjQ4QThDMzI0NDU4NzNC N0UzQzBGODAeFw0yNjAyMDUxNzI2MTlaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTQzY2IzLTI4MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvVbwCGWmOPb4Q1QJ+6zctYiZPnNBgD6NbKr9SxRLWFn8yTeOCX0wvcoyXbXGQ N/3qJ4DkkdD925BXbE5OKp6HssGAZG1eFL7on0/5Walq00hAd0Kg224q1N+xX/CS SjphKtuqL2WvzSfTutk/R19q5mA4E4MaLgLKakQgJBIA+axXz4xBshEI+X5u04IW 6R6JGGSFITdfMZKkGSr+p4eyfnv9kbU+0ga8/RJNIGD+M1DUsRy7PwWTFTKcyTDc 6XZkHgceD+5fsuh+9Y/eQvgm1x18BjC9fr3h67v7rzhR6hYQs+7CkVavctzyzSSG gA+9bUKBkmhP8xoXlGqSCCtxAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUpN/DdP5d Ku6T1RkQkIRoDqY2yyUwHwYDVR0jBBgwFoAUZqtOuWKdJvl+JIqMMkRYc7fjwPgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5NjlDLzlBOEZCNTRFODI2 QzExRjBCOTNBMEU3QkM0RjlBRTAyL1pxdE91V0tkSnZsLUpJcU1Na1JZYzdmandQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnF0T3VXS2RKdmwtSklxTU1rUlljN2Zqd1BnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTY5Qy85QThGQjU0RTgyNkMxMUYwQjkzQTBFN0JDNEY5QUUwMi8xNjczMkY5Mjgy NkQxMUYwQjQzOUMyN0JDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABweS8wDQYJKoZIhvcNAQELBQADggEBABKOI/QNM2DO559ZO0GqU23U ek1XSAlTPRn1e4sq0fwbSFhUultosjuhNsgKRo6qqhOq21rbLAA29jTH1d+d0oaF tCs0ervfv0HpkLbQH7enBtaTri1Lx7f/IRdL8vkVvaHejprHNgMhgnRViSoiTw70 +7k8WJJK3rXHqmrCQdaQ51FMiQInk45ilod6TPamBgn/yHwTbIWpLjclTdxhmVA1 Dhxy/2fW/2RXGhpz0dV+qpfD0cQiPwtvC5lFJK0vw+qeFi0Ei3dGmW7V35Aodiad skN/Z6jPgHsXBDpEjE3R1t0si/Wn+weGt0zf7PIHZpkr2y5JQ/7EVc+SYruMrmY= -----END CERTIFICATE-----Generated at Mon Mar 2 13:26:04 2026 by rpki-client