$ rpki-client -vvf rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/F51BAEBE1B8C11F190E3CE693B3D8C67.roa File: F51BAEBE1B8C11F190E3CE693B3D8C67.roa (raw, json) Hash identifier: lntmtUsK/UKmmG3XnsrXIU/yy3FKkaW0PJf+Akl0bIQ= Subject key identifier: 75:D1:E8:2C:0A:9D:AE:08:B2:36:32:C0:90:99:F9:AD:E1:39:A8:7C Certificate issuer: /CN=A9119D6A/serialNumber=66EA2F373679E1C3430E27D95E15FA32FA8D4AEF Certificate serial: 0E72 Authority key identifier: 66:EA:2F:37:36:79:E1:C3:43:0E:27:D9:5E:15:FA:32:FA:8D:4A:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/F51BAEBE1B8C11F190E3CE693B3D8C67.roa Signing time: Tue 10 Mar 2026 02:16:30 +0000 ROA not before: Tue 10 Mar 2026 02:16:30 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 24020 IP address blocks: 202.58.80.0/24 maxlen: 24 202.58.81.0/24 maxlen: 24 202.58.82.0/24 maxlen: 24 202.58.83.0/24 maxlen: 24 202.58.84.0/24 maxlen: 24 202.58.85.0/24 maxlen: 24 202.58.86.0/24 maxlen: 24 202.58.87.0/24 maxlen: 24 202.58.88.0/24 maxlen: 24 202.58.89.0/24 maxlen: 24 202.58.90.0/24 maxlen: 24 202.58.91.0/24 maxlen: 24 202.58.92.0/24 maxlen: 24 202.58.93.0/24 maxlen: 24 202.58.94.0/24 maxlen: 24 202.58.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.crl rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3698 (0xe72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119D6A, serialNumber=66EA2F373679E1C3430E27D95E15FA32FA8D4AEF Validity Not Before: Mar 10 02:16:30 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69af7efe-1a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:da:2c:d7:63:eb:99:6e:a7:cb:7e:f3:55:66: 1b:e5:9e:c0:7c:a9:35:f7:79:4e:2a:32:07:d7:af: bb:83:67:e9:2b:27:bf:b9:c6:53:a2:20:7e:cd:ab: d1:ae:cd:d8:8d:8d:19:ba:14:7f:ab:be:6f:82:22: 1a:06:3c:8f:25:4e:70:d4:6d:58:6a:21:43:3c:f4: 6b:f8:1a:ad:3c:99:ca:70:04:4c:30:a3:3b:da:97: be:3e:c6:5f:18:ba:c9:ef:f5:c5:6b:0f:dd:30:c5: 73:9d:dc:80:b2:b3:87:b7:4c:5e:47:32:43:20:20: 79:d7:b5:19:fc:a7:07:12:34:58:32:9b:0d:57:4a: 8e:2e:1f:e6:e3:8b:b9:01:65:b9:ed:29:9d:24:e5: 7f:27:a5:64:fe:78:b0:e4:af:7a:1d:89:ff:bb:bd: 87:08:f7:24:57:aa:f6:4c:a8:8f:78:df:16:b9:2b: 37:fa:f2:3d:d8:04:07:f5:7d:ff:d5:b7:5e:a0:99: e0:38:0e:c7:dd:ba:bb:73:4e:ac:b3:c7:d2:f9:3c: 69:9e:bc:04:33:e6:67:a9:0a:ef:98:5b:01:83:2a: ed:5e:b3:a1:44:bd:b3:58:cf:bb:ec:cd:d8:70:93: 7e:f5:3e:4a:9f:ad:0a:03:b6:6a:b8:04:40:66:d8: 59:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D1:E8:2C:0A:9D:AE:08:B2:36:32:C0:90:99:F9:AD:E1:39:A8:7C X509v3 Authority Key Identifier: keyid:66:EA:2F:37:36:79:E1:C3:43:0E:27:D9:5E:15:FA:32:FA:8D:4A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/ZuovNzZ54cNDDifZXhX6MvqNSu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuovNzZ54cNDDifZXhX6MvqNSu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119D6A/78115F5EB8C411E99C801A65C4F9AE02/F51BAEBE1B8C11F190E3CE693B3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 202.58.80.0/20 Signature Algorithm: sha256WithRSAEncryption 07:c4:f4:09:66:4c:fa:0d:a1:83:f5:bc:05:06:2d:7c:ea:19: be:d6:45:4e:bb:68:f9:de:8c:2f:e8:ea:1e:ef:d6:0a:b6:bb: 99:82:54:7e:8c:e8:9e:34:fa:c6:bc:48:08:20:ec:55:55:91: da:23:dc:90:7b:48:f9:fa:85:c7:14:d4:9c:27:70:6b:70:6d: 6c:33:6f:4a:0b:b4:f2:ca:92:a7:8c:74:b8:1f:13:60:f7:62: f3:0b:b0:02:22:e1:a6:58:7a:2f:7f:7f:ff:75:75:d0:38:3f: 47:d3:10:b2:bb:8c:6b:9b:f3:bc:ac:ce:4a:ed:cb:b2:86:5e: 93:46:44:d9:c7:89:d5:79:d7:23:9a:86:ab:89:1d:c3:47:95: 47:5e:b4:7a:a0:df:fe:c9:ab:de:67:07:61:45:9e:44:e8:85: 36:1a:a9:6c:8d:a6:55:79:fa:6a:8f:ad:7e:47:ea:32:fd:3d: 3f:74:57:e3:3d:46:6b:da:09:50:86:e1:b5:20:85:e0:e8:90: 8e:8b:7e:9f:bc:ce:0b:50:01:07:ae:5f:ce:a5:91:08:da:71: 96:76:d3:15:52:24:36:b3:98:d3:9e:36:12:59:69:73:c6:c5: 42:96:96:a2:70:e7:fd:ce:39:5d:67:39:44:5d:53:1d:42:12: bd:bb:d7:70 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlENkExMTAvBgNVBAUTKDY2RUEyRjM3MzY3OUUxQzM0MzBFMjdEOTVFMTVGQTMy RkE4RDRBRUYwHhcNMjYwMzEwMDIxNjMwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFmN2VmZS0xYTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Nos12PrmW6ny37zVWYb5Z7AfKk193lOKjIH16+7g2fpKye/ucZToiB+zavR rs3YjY0ZuhR/q75vgiIaBjyPJU5w1G1YaiFDPPRr+BqtPJnKcARMMKM72pe+PsZf GLrJ7/XFaw/dMMVzndyAsrOHt0xeRzJDICB517UZ/KcHEjRYMpsNV0qOLh/m44u5 AWW57SmdJOV/J6Vk/niw5K96HYn/u72HCPckV6r2TKiPeN8WuSs3+vI92AQH9X3/ 1bdeoJngOA7H3bq7c06ss8fS+TxpnrwEM+ZnqQrvmFsBgyrtXrOhRL2zWM+77M3Y cJN+9T5Kn60KA7ZquARAZthZXQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHXR6CwK na4IsjYywJCZ+a3hOah8MB8GA1UdIwQYMBaAFGbqLzc2eeHDQw4n2V4V+jL6jUrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUQ2QS83ODExNUY1RUI4 QzQxMUU5OUM4MDFBNjVDNEY5QUUwMi9adW92TnpaNTRjTkREaWZaWGhYNk12cU5T dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1b3ZOelo1NGNORERpZlpYaFg2TXZxTlN1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTlENkEvNzgxMTVGNUVCOEM0MTFFOTlDODAxQTY1QzRGOUFFMDIvRjUxQkFFQkUx QjhDMTFGMTkwRTNDRTY5M0IzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEyjpQMA0GCSqGSIb3DQEBCwUAA4IBAQAHxPQJZkz6DaGD9bwFBi18 6hm+1kVOu2j53owv6Ooe79YKtruZglR+jOieNPrGvEgIIOxVVZHaI9yQe0j5+oXH FNScJ3BrcG1sM29KC7TyypKnjHS4HxNg92LzC7ACIuGmWHovf3//dXXQOD9H0xCy u4xrm/O8rM5K7cuyhl6TRkTZx4nVedcjmoariR3DR5VHXrR6oN/+yaveZwdhRZ5E 6IU2GqlsjaZVefpqj61+R+oy/T0/dFfjPUZr2glQhuG1IIXg6JCOi36fvM4LUAEH rl/OpZEI2nGWdtMVUiQ2s5jTnjYSWWlzxsVClpaicOf9zjldZzlEXVMdQhK9u9dw -----END CERTIFICATE-----Generated at Fri Mar 27 00:07:41 2026 by rpki-client