$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/9C193BAC08C511EDBC862E48C4F9AE02.roa File: 9C193BAC08C511EDBC862E48C4F9AE02.roa (raw, json) Hash identifier: SJVE7ZBsoRSsliTmJf9TKg9PsayamV5jFN7WqlX3xvc= Subject key identifier: 33:C8:0F:FF:4D:10:7D:63:49:F9:C2:43:1F:94:99:09:20:1B:40:A2 Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Certificate serial: 36A5 Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/9C193BAC08C511EDBC862E48C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:10:49 +0000 ROA not before: Tue 02 Dec 2025 14:41:46 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137226 IP address blocks: 111.125.108.0/22 maxlen: 22 111.125.108.0/24 maxlen: 24 111.125.109.0/24 maxlen: 24 111.125.110.0/24 maxlen: 24 111.125.111.0/24 maxlen: 24 111.125.120.0/22 maxlen: 22 111.125.120.0/24 maxlen: 24 111.125.121.0/24 maxlen: 24 111.125.122.0/24 maxlen: 24 111.125.123.0/24 maxlen: 24 120.29.67.0/24 maxlen: 24 120.29.70.0/23 maxlen: 24 120.29.81.0/24 maxlen: 24 120.29.83.0/24 maxlen: 24 120.29.93.0/24 maxlen: 24 120.29.104.0/22 maxlen: 22 120.29.104.0/24 maxlen: 24 120.29.105.0/24 maxlen: 24 120.29.106.0/24 maxlen: 24 120.29.107.0/24 maxlen: 24 120.29.112.0/24 maxlen: 24 120.29.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13989 (0x36a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Validity Not Before: Dec 2 14:41:46 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a48129-899f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d8:f3:af:e0:20:6d:95:76:9b:87:89:cc:aa: c8:59:49:2f:7b:0b:6a:dd:fe:75:5d:28:e7:90:b3: c8:7d:0a:81:c8:28:6a:d4:8b:28:62:13:37:aa:0d: a2:ee:b8:a8:f3:82:ec:da:8b:88:7f:b4:d0:47:ea: 05:b6:6a:4e:81:c6:26:12:ed:32:e5:c5:66:65:85: 12:20:51:55:f4:5e:09:ea:1e:eb:39:61:87:5d:0e: 57:00:40:27:dc:34:9f:bf:b2:bb:c3:c8:be:01:ba: 36:f4:af:5c:54:ce:d0:f4:70:47:3e:d7:80:ba:fb: 05:c9:5b:f8:04:db:fd:86:4c:5a:4e:51:ce:d5:fc: c2:d0:a5:91:ed:fa:0b:3c:f2:1f:11:5f:84:4c:be: 66:d3:bb:4a:19:83:50:e1:47:e9:85:83:5e:e6:c3: 43:5e:c0:42:a9:8a:17:8c:65:83:e6:5a:18:06:95: e9:51:5c:bc:8d:2e:f6:12:03:f5:53:dd:09:3e:1f: 66:cf:70:38:ad:d3:bd:f1:f0:a2:41:d6:c3:e1:cf: b0:99:de:26:56:07:ab:b4:77:78:fd:99:de:61:8e: c5:b4:da:34:75:dd:69:ef:04:c0:34:1c:10:3b:f2: 6f:bc:f6:8e:76:f3:09:94:72:48:58:dc:bb:ff:00: c2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C8:0F:FF:4D:10:7D:63:49:F9:C2:43:1F:94:99:09:20:1B:40:A2 X509v3 Authority Key Identifier: keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/9C193BAC08C511EDBC862E48C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 111.125.108.0/22 111.125.120.0/22 120.29.67.0/24 120.29.70.0/23 120.29.81.0/24 120.29.83.0/24 120.29.93.0/24 120.29.104.0/22 120.29.112.0/24 120.29.117.0/24 Signature Algorithm: sha256WithRSAEncryption 09:99:a8:64:af:2e:26:e4:a3:ac:4a:dc:43:45:be:97:eb:1d: 00:ca:e3:4f:75:9a:5a:3e:8d:08:79:f1:ac:5c:1c:2f:b4:55: 89:66:b1:24:ed:b6:36:43:fd:b1:0c:a8:36:80:c7:95:9c:14: e2:04:ee:35:eb:5f:78:bb:42:a1:8b:4c:54:68:19:b2:a8:49: 53:7b:8b:9e:0f:d1:58:8b:15:df:c2:c3:ac:1a:11:0f:92:a3: 8d:f8:34:6e:0e:f0:d0:0c:2d:87:de:2a:93:f1:6f:a1:28:88: 07:05:0f:82:a0:2d:83:52:e1:70:50:59:93:20:8e:42:c4:c1: 87:7c:0a:2c:4d:8b:17:22:7d:fe:6c:bd:cd:3b:ea:d3:54:8c: 55:ed:d9:70:06:90:de:61:15:9b:99:53:bd:7a:de:bc:1d:b3: e1:73:f2:2c:a3:f6:10:00:bc:2f:d2:bf:32:5f:c8:a6:25:4a: be:c7:60:dd:16:ac:fd:4c:bb:c7:d9:73:f7:9a:e3:af:13:16: 9f:40:a9:7d:d1:c0:04:94:a8:c0:37:e5:6b:1a:fb:f0:66:7b: a7:5d:96:f6:6f:c3:08:f3:6e:0c:10:a1:0d:b8:da:17:1e:c5: cb:2a:54:14:81:b7:99:c7:97:25:cc:c8:44:de:65:92:ff:29: 00:14:e7:91 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICNqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0NTQxMTAvBgNVBAUTKEFCNjI2MkJDN0QwMkVDMUFENDhCNzFEQTk4QjczRDIy QTM2MkRBRjAwHhcNMjUxMjAyMTQ0MTQ2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODEyOS04OTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0djzr+AgbZV2m4eJzKrIWUkvewtq3f51XSjnkLPIfQqByChq1IsoYhM3qg2i 7rio84Ls2ouIf7TQR+oFtmpOgcYmEu0y5cVmZYUSIFFV9F4J6h7rOWGHXQ5XAEAn 3DSfv7K7w8i+Abo29K9cVM7Q9HBHPteAuvsFyVv4BNv9hkxaTlHO1fzC0KWR7foL PPIfEV+ETL5m07tKGYNQ4UfphYNe5sNDXsBCqYoXjGWD5loYBpXpUVy8jS72EgP1 U90JPh9mz3A4rdO98fCiQdbD4c+wmd4mVgertHd4/ZneYY7FtNo0dd1p7wTANBwQ O/JvvPaOdvMJlHJIWNy7/wDCywIDAQABo4ICljCCApIwHQYDVR0OBBYEFDPID/9N EH1jSfnCQx+UmQkgG0CiMB8GA1UdIwQYMBaAFKtiYrx9Auwa1Itx2pi3PSKjYtrw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQ1NC9ENEMzMEI0MjFE ODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdCclVpM0hhbUxjOUlxTmky dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EySml2SDBDN0JyVWkzSGFtTGM5SXFOaTJ2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI0NTQvRDRDMzBCNDIxRDg3MTFFMkExOTgyMkUwMDhCMDJDRDIvOUMxOTNCQUMw OEM1MTFFREJDODYyRTQ4QzRGOUFFMDIucm9hMFUGCCsGAQUFBwEHAQH/BEYwRDBC BAIAATA8AwQCb31sAwQCb314AwQAeB1DAwQBeB1GAwQAeB1RAwQAeB1TAwQAeB1d AwQCeB1oAwQAeB1wAwQAeB11MA0GCSqGSIb3DQEBCwUAA4IBAQAJmahkry4m5KOs StxDRb6X6x0AyuNPdZpaPo0IefGsXBwvtFWJZrEk7bY2Q/2xDKg2gMeVnBTiBO41 6194u0Khi0xUaBmyqElTe4ueD9FYixXfwsOsGhEPkqON+DRuDvDQDC2H3iqT8W+h KIgHBQ+CoC2DUuFwUFmTII5CxMGHfAosTYsXIn3+bL3NO+rTVIxV7dlwBpDeYRWb mVO9et68HbPhc/Iso/YQALwv0r8yX8imJUq+x2DdFqz9TLvH2XP3muOvExafQKl9 0cAElKjAN+VrGvvwZnunXZb2b8MI824MEKENuNoXHsXLKlQUgbeZx5clzMhE3mWS /ykAFOeR -----END CERTIFICATE-----Generated at Mon Mar 2 07:39:13 2026 by rpki-client