$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/05CB75D01B4E11F190BF0D05243D8C67.roa File: 05CB75D01B4E11F190BF0D05243D8C67.roa (raw, json) Hash identifier: lrrFG4FOYK4jJ7hdWejojL07VsNHzzAXyxtZaYMmJy0= Subject key identifier: CB:E8:7B:D6:C0:BE:3A:39:16:02:C5:83:71:F3:4D:CC:6C:60:15:1D Certificate issuer: /CN=A912AEAB/serialNumber=6B4FBCE76E10C9F6F00901E5002F8E10F3E9AF7F Certificate serial: 03 Authority key identifier: 6B:4F:BC:E7:6E:10:C9:F6:F0:09:01:E5:00:2F:8E:10:F3:E9:AF:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/05CB75D01B4E11F190BF0D05243D8C67.roa Signing time: Mon 09 Mar 2026 00:22:14 +0000 ROA not before: Mon 09 Mar 2026 00:22:14 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 9749 IP address blocks: 119.224.144.0/20 maxlen: 20 119.224.144.0/24 maxlen: 24 119.224.145.0/24 maxlen: 24 119.224.146.0/24 maxlen: 24 119.224.147.0/24 maxlen: 24 119.224.148.0/24 maxlen: 24 119.224.149.0/24 maxlen: 24 119.224.150.0/24 maxlen: 24 119.224.151.0/24 maxlen: 24 119.224.152.0/24 maxlen: 24 119.224.153.0/24 maxlen: 24 119.224.154.0/24 maxlen: 24 119.224.155.0/24 maxlen: 24 119.224.156.0/24 maxlen: 24 119.224.157.0/24 maxlen: 24 119.224.158.0/24 maxlen: 24 119.224.159.0/24 maxlen: 24 203.23.8.0/24 maxlen: 24 203.23.142.0/24 maxlen: 24 203.62.220.0/22 maxlen: 22 203.62.220.0/23 maxlen: 24 203.62.222.0/24 maxlen: 24 203.62.223.0/24 maxlen: 24 2001:df0:c2::/48 maxlen: 48 2401:5500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.crl rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AEAB, serialNumber=6B4FBCE76E10C9F6F00901E5002F8E10F3E9AF7F Validity Not Before: Mar 9 00:22:14 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69ae12b6-e4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:86:04:36:a9:4b:0a:76:57:46:40:e0:cc:5f: 10:cd:48:a3:66:ab:58:1e:4c:10:b4:75:e0:a5:2e: cf:75:d7:1d:83:16:1b:eb:42:9b:46:c7:53:71:9a: 80:e2:2d:eb:5b:18:e8:fe:96:3e:4a:1e:a7:7f:88: 73:e3:04:f1:c6:77:62:08:71:64:e6:ad:bb:a6:20: 8a:b4:9f:ac:f4:11:28:56:01:31:95:25:14:bd:b5: f8:66:67:40:97:43:ef:34:4e:46:eb:7e:e1:e4:17: 15:18:57:e3:85:d5:9e:92:ec:2a:71:2c:7f:61:6b: f5:2d:60:08:1b:26:82:da:05:ca:b8:61:1b:70:51: ea:58:5f:0b:c5:cd:f7:e3:8d:0c:ed:21:03:0f:ad: be:78:7f:cc:e2:57:3a:68:0e:f8:dc:56:a0:d9:bb: 26:fa:d9:43:8a:c6:7c:f3:58:e6:31:96:99:78:92: 21:d5:78:1b:bc:48:ad:0c:82:0b:72:55:e4:c9:19: 63:ec:43:fe:f7:e8:98:3c:86:a9:50:1d:b9:ca:63: 2b:53:e3:1b:28:36:86:cb:45:51:82:53:ab:1b:58: 3f:5c:6c:0a:53:18:94:08:78:31:81:21:8b:75:53: 98:79:4f:ab:3a:b6:7d:d8:8f:97:88:94:d9:f3:d4: 86:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E8:7B:D6:C0:BE:3A:39:16:02:C5:83:71:F3:4D:CC:6C:60:15:1D X509v3 Authority Key Identifier: keyid:6B:4F:BC:E7:6E:10:C9:F6:F0:09:01:E5:00:2F:8E:10:F3:E9:AF:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/05CB75D01B4E11F190BF0D05243D8C67.roa sbgp-ipAddrBlock: critical IPv4: 119.224.144.0/20 203.23.8.0/24 203.23.142.0/24 203.62.220.0/22 IPv6: 2001:df0:c2::/48 2401:5500::/32 Signature Algorithm: sha256WithRSAEncryption 55:e8:4f:48:f8:50:cb:4f:3a:88:da:eb:46:1e:92:b6:6c:81: 43:fa:02:8f:99:47:05:26:2d:41:ae:82:d4:32:83:29:3a:3b: fd:ca:7a:84:f8:14:a2:d2:10:36:b5:16:20:88:ae:a1:3b:94: 41:26:f9:a3:d6:ff:a8:46:87:ea:21:22:17:3e:65:7b:5e:64: 16:e9:aa:37:3a:cf:c9:43:76:1b:17:70:b8:d1:4e:14:1e:7c: b6:fc:77:9a:4f:4f:38:da:f4:1d:59:33:bb:b8:94:36:60:55: d9:69:4c:e0:eb:2a:b0:5e:3c:b3:fb:99:a1:02:24:e5:ca:3d: 13:2f:dc:03:b7:a0:ca:ef:9c:99:c5:e0:63:12:31:0f:f6:18: 3e:d5:b9:18:e3:19:27:83:73:b8:71:9c:d5:62:93:0b:d9:23: b3:45:6c:ca:bd:f5:80:44:16:34:92:04:8d:f1:fc:5e:39:a2: e6:64:93:7a:6f:98:44:20:d5:03:ac:b4:6e:1d:0e:96:b7:5c: d0:b4:43:3c:32:26:d4:66:c1:71:9b:ef:0b:c6:05:b5:5b:10: f8:96:bc:65:47:19:e7:2d:5f:39:12:46:b2:87:53:e6:bb:a3: fa:1b:7a:27:9b:0f:02:7e:9e:aa:7c:15:ea:12:49:5c:1c:bb: d7:a2:6e:99 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QUVBQjExMC8GA1UEBRMoNkI0RkJDRTc2RTEwQzlGNkYwMDkwMUU1MDAyRjhFMTBG M0U5QUY3RjAeFw0yNjAzMDkwMDIyMTRaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YWUxMmI2LWU0YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0hgQ2qUsKdldGQODMXxDNSKNmq1geTBC0deClLs911x2DFhvrQptGx1NxmoDi LetbGOj+lj5KHqd/iHPjBPHGd2IIcWTmrbumIIq0n6z0EShWATGVJRS9tfhmZ0CX Q+80TkbrfuHkFxUYV+OF1Z6S7CpxLH9ha/UtYAgbJoLaBcq4YRtwUepYXwvFzffj jQztIQMPrb54f8ziVzpoDvjcVqDZuyb62UOKxnzzWOYxlpl4kiHVeBu8SK0Mggty VeTJGWPsQ/736Jg8hqlQHbnKYytT4xsoNobLRVGCU6sbWD9cbApTGJQIeDGBIYt1 U5h5T6s6tn3Yj5eIlNnz1IZDAgMBAAGjggKKMIIChjAdBgNVHQ4EFgQUy+h71sC+ OjkWAsWDcfNNzGxgFR0wHwYDVR0jBBgwFoAUa0+8524QyfbwCQHlAC+OEPPpr38w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBRUFCLzlEODczNjA0MUI0 QzExRjFCNkRFRjdFRDIxM0Q4QzY3L2EwLTg1MjRReWZid0NRSGxBQy1PRVBQcHIz OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYTAtODUyNFF5ZmJ3Q1FIbEFDLU9FUFBwcjM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUVBQi85RDg3MzYwNDFCNEMxMUYxQjZERUY3RUQyMTNEOEM2Ny8wNUNCNzVEMDFC NEUxMUYxOTBCRjBEMDUyNDNEOEM2Ny5yb2EwSQYIKwYBBQUHAQcBAf8EOjA4MB4E AgABMBgDBAR34JADBADLFwgDBADLF44DBALLPtwwFgQCAAIwEAMHACABDfAAwgMF ACQBVQAwDQYJKoZIhvcNAQELBQADggEBAFXoT0j4UMtPOoja60YekrZsgUP6Ao+Z RwUmLUGugtQygyk6O/3KeoT4FKLSEDa1FiCIrqE7lEEm+aPW/6hGh+ohIhc+ZXte ZBbpqjc6z8lDdhsXcLjRThQefLb8d5pPTzja9B1ZM7u4lDZgVdlpTODrKrBePLP7 maECJOXKPRMv3AO3oMrvnJnF4GMSMQ/2GD7VuRjjGSeDc7hxnNVikwvZI7NFbMq9 9YBEFjSSBI3x/F45ouZkk3pvmEQg1QOstG4dDpa3XNC0QzwyJtRmwXGb7wvGBbVb EPiWvGVHGectXzkSRrKHU+a7o/obeiebDwJ+nqp8FeoSSVwcu9eibpk= -----END CERTIFICATE-----Generated at Thu Mar 26 07:47:50 2026 by rpki-client