$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/E75B22220B5D11EBADED9667C4F9AE02.roa File: E75B22220B5D11EBADED9667C4F9AE02.roa (raw, json) Hash identifier: /NNxt2PRGKi4jINC1uMA6kp3kzBSWqOUAHvR4Zmm09U= Subject key identifier: 74:F5:0E:82:BA:2C:31:54:07:69:9A:7F:32:81:29:20:FD:7C:55:98 Certificate issuer: /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469 Certificate serial: 0855 Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/E75B22220B5D11EBADED9667C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:51:19 +0000 ROA not before: Wed 10 Dec 2025 20:14:02 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 132825 IP address blocks: 118.107.244.0/24 maxlen: 24 118.107.245.0/24 maxlen: 24 118.107.246.0/24 maxlen: 24 118.107.247.0/24 maxlen: 24 118.107.248.0/24 maxlen: 24 118.107.249.0/24 maxlen: 24 118.107.250.0/24 maxlen: 24 118.107.251.0/24 maxlen: 24 118.107.252.0/24 maxlen: 24 118.107.253.0/24 maxlen: 24 118.107.254.0/24 maxlen: 24 118.107.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2133 (0x855) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123072, serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469 Validity Not Before: Dec 10 20:14:02 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a47c97-4dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:48:a7:bf:ae:fa:98:c3:94:40:6d:3a:71:0c: 04:07:b0:30:44:18:46:b9:82:5c:8e:c1:37:dc:a8: 97:ba:d5:38:b0:8e:5a:02:ea:d5:dd:e3:ca:43:30: 06:c7:f6:dc:89:46:17:11:ff:be:4b:a3:73:40:26: 0e:08:42:0f:c3:31:97:1b:ff:17:56:f1:4e:7f:33: b3:07:d1:d4:01:63:e4:13:a2:4b:33:48:d6:cf:52: 7e:14:c3:54:2a:cc:c5:e4:83:d4:a1:9b:ab:bd:87: f2:10:ed:5a:54:cb:31:04:ef:e7:4b:66:a9:02:68: ae:b2:54:31:bd:07:9d:fd:05:42:90:d6:e0:a9:da: 61:a2:7d:fc:1a:09:61:16:cc:00:90:0c:02:92:34: b5:6b:c0:c1:d3:9f:06:b4:6f:e5:a0:1c:19:f1:62: d5:64:85:66:d9:3f:86:02:33:fa:39:a7:cd:84:a8: 75:da:cd:41:29:5d:73:e8:37:c9:dc:e3:79:ff:2d: d4:e6:9f:5f:d2:1f:30:5e:70:00:33:36:1f:a1:3c: 8f:10:0d:c2:e7:3c:0e:6d:d8:70:c6:af:79:c2:06: 02:ad:60:4d:67:2f:04:63:68:6d:a9:2a:c3:4b:c5: 7e:ab:cb:0b:e6:fd:ee:a9:38:8c:3b:13:82:38:2d: 58:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F5:0E:82:BA:2C:31:54:07:69:9A:7F:32:81:29:20:FD:7C:55:98 X509v3 Authority Key Identifier: keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/E75B22220B5D11EBADED9667C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 118.107.244.0-118.107.255.255 Signature Algorithm: sha256WithRSAEncryption 36:56:8a:fa:d4:79:74:89:c4:b3:77:41:78:eb:10:db:dc:cc: 9b:45:23:09:62:53:c0:97:ad:0f:e8:e4:e7:58:e9:a3:17:1a: 27:22:84:e2:90:8d:17:14:80:dc:51:c4:35:9e:c7:b1:60:4a: b8:1a:af:a7:ce:d5:b7:1a:14:8b:ab:12:99:6f:22:11:d0:2d: ac:6f:b8:d4:e1:8a:a6:8c:a0:46:36:82:8c:a7:41:2e:8b:bc: d9:36:77:23:b2:df:2f:9e:73:e7:fe:9f:74:df:ea:05:d4:1a: 1a:12:24:20:bc:3a:5e:d2:98:ea:b0:8c:e5:e9:36:32:2f:2a: d5:76:1e:66:d4:b0:10:21:d7:67:03:e8:b8:cb:70:d6:fb:44: ca:b6:74:1a:6a:08:af:19:ca:c7:57:fb:e2:81:64:9f:b8:8a: cc:6d:c0:2a:72:25:10:fd:db:c8:1f:2a:3c:a4:8e:2f:54:b8: 48:c5:7f:34:fe:64:f4:b8:d2:63:05:5e:3d:5f:6a:2a:a3:72: 87:18:74:c3:e5:ba:79:af:f7:22:84:51:d1:6a:b3:e7:95:94: d9:c1:3d:70:1d:1a:b2:f8:d9:59:7d:05:6f:fc:88:4c:36:23: 38:78:56:91:36:12:fa:ea:0a:ac:c6:94:73:37:4f:19:a7:fa: 7c:3a:12:91 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgICCFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwNzIxMTAvBgNVBAUTKEUzQkNCQTg4QkVEQzJBNzY4QTk4NjVGNDE2RDY4QTdD MzAzM0Y0NjkwHhcNMjUxMjEwMjAxNDAyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2M5Ny00ZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kinv676mMOUQG06cQwEB7AwRBhGuYJcjsE33KiXutU4sI5aAurV3ePKQzAG x/bciUYXEf++S6NzQCYOCEIPwzGXG/8XVvFOfzOzB9HUAWPkE6JLM0jWz1J+FMNU KszF5IPUoZurvYfyEO1aVMsxBO/nS2apAmiuslQxvQed/QVCkNbgqdphon38Gglh FswAkAwCkjS1a8DB058GtG/loBwZ8WLVZIVm2T+GAjP6OafNhKh12s1BKV1z6DfJ 3ON5/y3U5p9f0h8wXnAAMzYfoTyPEA3C5zwObdhwxq95wgYCrWBNZy8EY2htqSrD S8V+q8sL5v3uqTiMOxOCOC1YwQIDAQABo4ICZzCCAmMwHQYDVR0OBBYEFHT1DoK6 LDFUB2mafzKBKSD9fFWYMB8GA1UdIwQYMBaAFOO8uoi+3Cp2iphl9BbWinwwM/Rp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA3Mi8wQ0VBNDk1QzBC NUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tuYUttR1gwRnRhS2ZEQXo5 R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ3eTZpTDdjS25hS21HWDBGdGFLZkRBejlHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjMwNzIvMENFQTQ5NUMwQjVDMTFFQjk5QTE3NTYyQzRGOUFFMDIvRTc1QjIyMjIw QjVEMTFFQkFERUQ5NjY3QzRGOUFFMDIucm9hMCYGCCsGAQUFBwEHAQH/BBcwFTAT BAIAATANMAsDBAJ2a/QDAwJ2aDANBgkqhkiG9w0BAQsFAAOCAQEANlaK+tR5dInE s3dBeOsQ29zMm0UjCWJTwJetD+jk51jpoxcaJyKE4pCNFxSA3FHENZ7HsWBKuBqv p87VtxoUi6sSmW8iEdAtrG+41OGKpoygRjaCjKdBLou82TZ3I7LfL55z5/6fdN/q BdQaGhIkILw6XtKY6rCM5ek2Mi8q1XYeZtSwECHXZwPouMtw1vtEyrZ0GmoIrxnK x1f74oFkn7iKzG3AKnIlEP3byB8qPKSOL1S4SMV/NP5k9LjSYwVePV9qKqNyhxh0 w+W6ea/3IoRR0Wqz55WU2cE9cB0asvjZWX0Fb/yITDYjOHhWkTYS+uoKrMaUczdP Gaf6fDoSkQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:27:41 2026 by rpki-client