$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/D7FEF354562111EFA7B3F00AC4F9AE02.roa File: D7FEF354562111EFA7B3F00AC4F9AE02.roa (raw, json) Hash identifier: zRLwbdLjJcZ9xIvEJX9pjeEu223B0K+u9rS591OrK1I= Subject key identifier: EF:EA:63:0D:37:E5:B8:EA:F5:62:A3:0F:07:6A:8C:43:BD:0B:97:0E Certificate issuer: /CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Certificate serial: 01AF Authority key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/D7FEF354562111EFA7B3F00AC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:20:29 +0000 ROA not before: Mon 19 Jan 2026 03:22:55 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 38819 IP address blocks: 120.88.192.0/18 maxlen: 18 120.88.192.0/19 maxlen: 19 120.88.224.0/20 maxlen: 20 120.88.224.0/24 maxlen: 24 120.88.225.0/24 maxlen: 24 120.88.226.0/24 maxlen: 24 120.88.227.0/24 maxlen: 24 120.88.230.0/24 maxlen: 24 120.88.232.0/24 maxlen: 24 120.88.236.0/24 maxlen: 24 120.88.237.0/24 maxlen: 24 120.88.240.0/24 maxlen: 24 120.88.241.0/24 maxlen: 24 120.88.242.0/24 maxlen: 24 120.88.243.0/24 maxlen: 24 120.88.245.0/24 maxlen: 24 120.88.246.0/24 maxlen: 24 120.88.252.0/24 maxlen: 24 120.88.253.0/24 maxlen: 24 120.88.254.0/24 maxlen: 24 202.4.192.0/19 maxlen: 19 202.4.196.0/24 maxlen: 24 202.4.208.0/24 maxlen: 24 223.130.32.0/19 maxlen: 19 2405:b200::/32 maxlen: 32 2405:b200:110:2600::/56 maxlen: 56 2405:b200:140:2600::/56 maxlen: 56 2405:b200:150:2600::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F7B, serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Validity Not Before: Jan 19 03:22:55 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a4593d-bd7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2c:45:7f:f7:47:10:79:5e:cf:29:88:14:54: 8c:13:1f:b6:47:f0:d4:a2:0f:63:b9:25:2e:9a:86: 24:d9:ad:29:3e:65:93:93:cc:aa:2c:a8:b4:2c:49: fc:fa:df:b5:66:80:87:83:b9:d3:48:cd:61:0b:00: 69:2d:e8:7a:a6:00:1a:84:bf:a6:29:37:21:75:04: 10:9c:f5:0e:de:ef:64:c0:ff:e2:2c:27:a5:90:aa: c0:98:7e:73:0c:62:e6:66:24:48:fb:99:92:31:0b: a1:fa:73:4d:03:43:18:a3:93:e4:22:b0:73:13:ae: 62:82:31:60:12:03:ad:7d:33:38:cb:a2:e4:3a:93: 30:09:17:73:fd:8c:bc:eb:35:96:8e:19:05:81:a4: b1:68:0d:d7:8c:87:2b:c9:21:0d:5f:25:4c:0b:58: c8:ae:e3:8f:be:a7:5c:b6:99:3d:ba:05:56:ae:f7: 48:e3:b6:19:78:83:06:cf:f7:4a:78:72:d6:19:e2: 30:70:de:ac:f1:e4:54:8e:a5:d5:79:9e:41:f6:bf: 2f:56:2e:9e:19:b1:93:f7:48:be:0f:e7:13:fc:7a: e6:9b:51:99:09:8d:df:e2:b1:83:f7:c8:14:32:a2: f7:44:44:b2:47:84:e2:59:29:f4:49:e5:ca:40:bf: 67:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EA:63:0D:37:E5:B8:EA:F5:62:A3:0F:07:6A:8C:43:BD:0B:97:0E X509v3 Authority Key Identifier: keyid:89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/D7FEF354562111EFA7B3F00AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.88.192.0/18 202.4.192.0/19 223.130.32.0/19 IPv6: 2405:b200::/32 Signature Algorithm: sha256WithRSAEncryption 1b:86:28:8f:d2:79:23:b0:7e:8b:b2:e7:92:74:63:53:75:74: 02:93:b1:32:6a:f6:39:95:22:97:c0:22:48:8c:28:6f:bd:07: 74:33:99:1a:d8:b4:13:c4:1a:26:a8:7a:6d:78:dd:69:97:bd: 9b:a6:23:06:0e:0c:ad:99:ef:08:f7:71:d6:8b:52:65:87:11: 6e:32:77:fe:0f:7c:b0:01:24:7a:b3:18:da:be:02:fe:a1:70: 5a:66:71:af:bc:66:56:77:e3:6f:02:51:c1:9f:e0:cb:96:4f: e9:7b:d1:63:c5:be:61:ae:91:3c:26:aa:77:9c:d4:6b:e2:b3: f5:5e:2e:8d:a7:bd:84:42:4c:00:69:10:ae:e8:c5:10:4e:a9: 9f:ad:37:70:5f:4e:4e:13:30:0f:39:d1:f9:40:52:64:16:fd: d2:36:d6:2c:25:02:86:f4:64:08:3a:4c:7c:ac:d6:5b:d4:9c: 7c:ff:87:aa:10:fe:98:90:cb:85:23:c9:6f:00:a0:47:ab:aa: 9d:fe:a2:00:81:62:5f:d8:50:0b:0f:18:b2:98:c9:86:fd:de: ab:ef:8a:5e:50:b1:c7:c9:bf:3b:45:12:16:70:fc:af:f7:7f: 9e:09:9c:9b:c5:a0:a4:1b:91:8d:29:59:b4:63:91:59:bc:8b: 9e:a2:24:d9 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGN0IxMTAvBgNVBAUTKDg5MEIxREVGRTg4RDU5MTk2QkNDN0I2NTI2OEM2MkU4 NkU1NEQ0NkQwHhcNMjYwMTE5MDMyMjU1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTkzZC1iZDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSxFf/dHEHlezymIFFSMEx+2R/DUog9juSUumoYk2a0pPmWTk8yqLKi0LEn8 +t+1ZoCHg7nTSM1hCwBpLeh6pgAahL+mKTchdQQQnPUO3u9kwP/iLCelkKrAmH5z DGLmZiRI+5mSMQuh+nNNA0MYo5PkIrBzE65igjFgEgOtfTM4y6LkOpMwCRdz/Yy8 6zWWjhkFgaSxaA3XjIcrySENXyVMC1jIruOPvqdctpk9ugVWrvdI47YZeIMGz/dK eHLWGeIwcN6s8eRUjqXVeZ5B9r8vVi6eGbGT90i+D+cT/Hrmm1GZCY3f4rGD98gU MqL3RESyR4TiWSn0SeXKQL9n9QIDAQABo4ICezCCAncwHQYDVR0OBBYEFO/qYw03 5bjq9WKjDwdqjEO9C5cOMB8GA1UdIwQYMBaAFIkLHe/ojVkZa8x7ZSaMYuhuVNRt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUY3Qi9BMTMxQjM5NEJC MzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldSbHJ6SHRsSm94aTZHNVUx RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRc2Q3LWlOV1JscnpIdGxKb3hpNkc1VTFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTVGN0IvQTEzMUIzOTRCQjM5MTFFRUE2NTU0MTdFQzRGOUFFMDIvRDdGRUYzNTQ1 NjIxMTFFRkE3QjNGMDBBQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQGeFjAAwQFygTAAwQF34IgMA0EAgACMAcDBQAkBbIAMA0GCSqGSIb3 DQEBCwUAA4IBAQAbhiiP0nkjsH6LsueSdGNTdXQCk7EyavY5lSKXwCJIjChvvQd0 M5ka2LQTxBomqHpteN1pl72bpiMGDgytme8I93HWi1JlhxFuMnf+D3ywASR6sxja vgL+oXBaZnGvvGZWd+NvAlHBn+DLlk/pe9Fjxb5hrpE8Jqp3nNRr4rP1Xi6Np72E QkwAaRCu6MUQTqmfrTdwX05OEzAPOdH5QFJkFv3SNtYsJQKG9GQIOkx8rNZb1Jx8 /4eqEP6YkMuFI8lvAKBHq6qd/qIAgWJf2FALDxiymMmG/d6r74peULHHyb87RRIW cPyv93+eCZybxaCkG5GNKVm0Y5FZvIueoiTZ -----END CERTIFICATE-----Generated at Mon Mar 2 15:28:26 2026 by rpki-client