$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/87662556555511EF88D9F680C4F9AE02.roa File: 87662556555511EF88D9F680C4F9AE02.roa (raw, json) Hash identifier: gXURQ3TI01OPFheyWVk20K8W06Uu/H87clLm9KAplj4= Subject key identifier: 3B:89:AD:BD:8C:EA:32:46:1F:6C:92:3F:2F:F4:36:4E:6B:CF:1E:A2 Certificate issuer: /CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Certificate serial: 01B1 Authority key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/87662556555511EF88D9F680C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:20:31 +0000 ROA not before: Mon 19 Jan 2026 03:22:58 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 9444 IP address blocks: 120.88.192.0/18 maxlen: 18 120.88.192.0/19 maxlen: 19 120.88.224.0/20 maxlen: 20 120.88.224.0/24 maxlen: 24 120.88.225.0/24 maxlen: 24 120.88.226.0/24 maxlen: 24 120.88.227.0/24 maxlen: 24 120.88.230.0/24 maxlen: 24 120.88.232.0/24 maxlen: 24 120.88.236.0/24 maxlen: 24 120.88.237.0/24 maxlen: 24 120.88.240.0/24 maxlen: 24 120.88.241.0/24 maxlen: 24 120.88.242.0/24 maxlen: 24 120.88.243.0/24 maxlen: 24 120.88.245.0/24 maxlen: 24 120.88.246.0/24 maxlen: 24 120.88.252.0/24 maxlen: 24 120.88.253.0/24 maxlen: 24 120.88.254.0/24 maxlen: 24 202.4.192.0/19 maxlen: 19 202.4.196.0/24 maxlen: 24 202.4.208.0/24 maxlen: 24 223.130.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F7B, serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Validity Not Before: Jan 19 03:22:58 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a4593f-2039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3d:a3:12:cc:1c:ed:4d:67:f2:d4:57:79:92: dd:83:91:7b:54:6d:d9:3d:de:a6:d6:73:09:7a:a0: 46:0b:71:80:39:06:58:91:77:d9:a7:7b:c2:f6:fd: 21:17:ea:c5:79:52:1b:7a:28:ba:2d:64:fd:63:ac: e2:ec:03:f1:bf:cb:65:f1:c7:e9:31:b0:a1:f5:62: 5d:af:56:ab:96:24:62:88:17:46:83:04:15:b9:06: d9:fb:4f:7d:0d:1d:4a:7b:fc:25:0d:c4:c3:21:d3: 6e:70:5b:ab:35:74:0f:25:ae:ea:99:e8:a5:c5:dd: 24:44:83:2e:0e:d5:b3:9e:6d:9f:ab:11:08:8a:32: 45:fb:03:8d:8d:7d:ab:c4:a2:08:e2:f3:ed:19:3e: 10:37:3a:c6:08:84:70:79:02:82:9c:50:74:31:bc: 4b:d0:d9:91:5f:16:b7:83:43:df:6b:89:cf:fe:65: a6:e3:cf:e6:a5:0c:28:f7:21:f6:85:6b:a7:ba:0f: da:ee:7a:68:15:61:dd:4f:4d:9c:83:7e:0b:4e:d9: 9e:f5:ea:95:15:dc:e6:7d:6c:26:63:f0:6d:b8:88: 8a:03:35:83:e8:38:99:ec:4e:78:5d:7a:13:aa:05: 12:38:88:f9:86:30:29:44:71:29:f8:56:87:74:b5: d0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:89:AD:BD:8C:EA:32:46:1F:6C:92:3F:2F:F4:36:4E:6B:CF:1E:A2 X509v3 Authority Key Identifier: keyid:89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/87662556555511EF88D9F680C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.88.192.0/18 202.4.192.0/19 223.130.32.0/19 Signature Algorithm: sha256WithRSAEncryption 32:be:42:d3:97:57:ea:c8:85:e1:80:92:76:36:ad:bd:ac:c2: 6d:61:63:97:f4:c9:31:5f:47:0b:bc:09:5e:16:04:29:36:02: ae:29:be:8a:30:77:40:9b:e8:d6:48:fc:69:bd:ca:a5:3d:41: 2c:2e:f2:5b:f5:3c:da:cd:8a:2b:94:93:17:c5:c6:9d:b5:61: 64:ea:1b:4b:7c:dd:c5:23:30:d7:27:20:42:a3:c8:a7:05:4c: 91:e3:34:fa:76:9a:be:24:76:42:39:04:04:c5:34:78:82:75: e9:3b:11:e6:69:88:a1:44:c5:4b:df:cc:09:4e:1e:2f:bb:0e: b2:5f:09:36:c1:93:f5:e6:a8:8b:2b:83:f2:46:e0:79:e8:9d: b3:9c:dc:de:d4:20:6d:f5:ae:3d:3e:eb:9b:5a:0c:ec:9a:9c: 9f:58:17:be:95:3d:c0:52:2c:ef:45:6c:11:03:53:c1:cb:80: ec:e8:60:39:31:a6:11:43:fa:96:0f:76:09:ee:72:2e:f4:5d: e6:08:59:42:9d:17:12:57:fc:de:7a:fa:39:0f:1e:a1:27:cb: d3:a0:cd:6d:39:d0:3e:63:aa:09:5b:1b:19:32:75:9c:db:71: 50:35:3a:ca:05:7c:cc:95:79:09:74:08:2a:a0:e3:79:34:8d: e5:0e:80:e0 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGN0IxMTAvBgNVBAUTKDg5MEIxREVGRTg4RDU5MTk2QkNDN0I2NTI2OEM2MkU4 NkU1NEQ0NkQwHhcNMjYwMTE5MDMyMjU4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTkzZi0yMDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkT2jEswc7U1n8tRXeZLdg5F7VG3ZPd6m1nMJeqBGC3GAOQZYkXfZp3vC9v0h F+rFeVIbeii6LWT9Y6zi7APxv8tl8cfpMbCh9WJdr1arliRiiBdGgwQVuQbZ+099 DR1Ke/wlDcTDIdNucFurNXQPJa7qmeilxd0kRIMuDtWznm2fqxEIijJF+wONjX2r xKII4vPtGT4QNzrGCIRweQKCnFB0MbxL0NmRXxa3g0Pfa4nP/mWm48/mpQwo9yH2 hWunug/a7npoFWHdT02cg34LTtme9eqVFdzmfWwmY/BtuIiKAzWD6DiZ7E54XXoT qgUSOIj5hjApRHEp+FaHdLXQUwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDuJrb2M 6jJGH2ySPy/0Nk5rzx6iMB8GA1UdIwQYMBaAFIkLHe/ojVkZa8x7ZSaMYuhuVNRt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUY3Qi9BMTMxQjM5NEJC MzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldSbHJ6SHRsSm94aTZHNVUx RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRc2Q3LWlOV1JscnpIdGxKb3hpNkc1VTFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTVGN0IvQTEzMUIzOTRCQjM5MTFFRUE2NTU0MTdFQzRGOUFFMDIvODc2NjI1NTY1 NTU1MTFFRjg4RDlGNjgwQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQGeFjAAwQFygTAAwQF34IgMA0GCSqGSIb3DQEBCwUAA4IBAQAyvkLT l1fqyIXhgJJ2Nq29rMJtYWOX9MkxX0cLvAleFgQpNgKuKb6KMHdAm+jWSPxpvcql PUEsLvJb9TzazYorlJMXxcadtWFk6htLfN3FIzDXJyBCo8inBUyR4zT6dpq+JHZC OQQExTR4gnXpOxHmaYihRMVL38wJTh4vuw6yXwk2wZP15qiLK4PyRuB56J2znNze 1CBt9a49PuubWgzsmpyfWBe+lT3AUizvRWwRA1PBy4Ds6GA5MaYRQ/qWD3YJ7nIu 9F3mCFlCnRcSV/zeevo5Dx6hJ8vToM1tOdA+Y6oJWxsZMnWc23FQNTrKBXzMlXkJ dAgqoON5NI3lDoDg -----END CERTIFICATE-----Generated at Mon Mar 2 15:11:21 2026 by rpki-client