$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/78585C5EB6E011EFBB3E2A0DC4F9AE02.roa File: 78585C5EB6E011EFBB3E2A0DC4F9AE02.roa (raw, json) Hash identifier: 2oAHDEIFByYEQyDK/rKoP4S6sMLoa9XHz0lxAFrOlyQ= Subject key identifier: 9B:46:A6:29:94:91:9A:3E:DB:C5:7A:6C:F4:16:B6:CB:3E:C4:0B:99 Certificate issuer: /CN=A912B23F/serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0 Certificate serial: 01F0 Authority key identifier: 69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/78585C5EB6E011EFBB3E2A0DC4F9AE02.roa Signing time: Wed 23 Sep 2026 08:36:18 +0000 ROA not before: Wed 23 Sep 2026 08:36:18 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 24109 IP address blocks: 45.120.173.0/24 maxlen: 24 121.50.0.0/24 maxlen: 24 121.50.1.0/24 maxlen: 24 121.50.3.0/24 maxlen: 24 121.50.4.0/24 maxlen: 24 121.50.5.0/24 maxlen: 24 121.50.7.0/24 maxlen: 24 202.41.2.0/24 maxlen: 24 202.41.3.0/24 maxlen: 24 202.58.132.0/24 maxlen: 24 202.58.133.0/24 maxlen: 24 202.58.134.0/24 maxlen: 24 202.58.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B23F, serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0 Validity Not Before: Sep 23 08:36:18 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6ab38f81-fc27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8e:1a:bb:1a:58:b5:c7:4c:ee:cf:d1:c7:20: db:e6:40:f7:f8:91:b5:62:53:04:74:d6:ba:69:60: 00:ae:1f:a2:59:46:07:54:66:69:8b:fe:7f:6e:7d: 22:2e:00:56:6e:86:90:d6:74:4f:dc:a8:b8:20:61: 71:b2:4d:0d:09:ed:65:fd:6a:64:0b:5f:e8:4f:c3: 83:44:2c:c8:7a:1f:d1:03:bc:43:ec:74:83:a0:d1: 80:57:74:35:3f:0c:63:8d:75:90:10:13:0b:c9:96: eb:c9:94:29:2d:87:c4:86:5d:92:b0:fd:17:d8:87: bb:2a:4f:bc:20:79:5f:a3:34:db:e4:6b:5c:e8:2a: 61:af:99:39:36:35:85:07:90:92:49:50:92:2b:b4: 99:fa:83:8e:63:0d:33:1a:b6:c1:00:74:41:f7:30: 90:15:94:a7:b0:64:e9:05:65:27:1c:dd:b6:f4:da: d3:50:ba:c8:36:0e:0f:76:f3:04:a6:2e:46:64:e7: af:c8:e1:0f:39:82:61:a7:19:60:3d:6f:c8:64:a1: 9e:07:29:74:7a:89:a6:72:8d:b3:53:f4:dc:ce:84: fb:aa:61:ba:b6:83:85:93:9e:5f:8a:2e:37:3c:38: 26:4b:30:5d:2c:75:54:2c:2c:db:aa:8f:1b:f4:e3: db:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:46:A6:29:94:91:9A:3E:DB:C5:7A:6C:F4:16:B6:CB:3E:C4:0B:99 X509v3 Authority Key Identifier: keyid:69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/78585C5EB6E011EFBB3E2A0DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.120.173.0/24 121.50.0.0/23 121.50.3.0-121.50.5.255 121.50.7.0/24 202.41.2.0/23 202.58.132.0/22 Signature Algorithm: sha256WithRSAEncryption 56:c8:37:00:29:17:47:cc:73:0b:cc:cb:02:61:0e:7b:0d:63: 49:37:51:bd:59:39:7f:72:05:a0:9f:d8:26:36:27:d9:c0:5c: 3b:26:89:6c:88:d5:a4:be:04:cb:57:80:70:04:01:a3:22:24: 90:79:72:6b:b5:c0:78:d2:76:4a:20:7c:0b:cf:31:f0:94:d8: b4:a8:93:c7:d8:af:37:b5:80:10:4a:8e:bd:bb:6d:68:d4:38: 35:d9:21:86:19:34:09:b2:32:b7:e0:06:27:b3:55:f9:2e:29: b6:9e:ca:b2:1a:ba:8c:2e:37:7e:07:99:ca:b1:35:bc:dd:7f: 97:93:da:c6:07:e1:bd:78:b5:8c:f6:50:03:54:4d:33:36:c0: 33:8a:d7:0b:16:bb:36:74:fe:f5:54:e5:1c:37:d3:85:08:53: 6c:7f:1f:28:f2:45:da:49:2f:cd:56:1c:48:c9:02:24:6e:24: ba:ff:9e:b5:9f:59:28:3d:5f:45:5a:7c:93:13:42:ce:4d:d6: 9d:e5:bb:fd:fd:56:96:9e:31:ef:9e:25:d9:77:b1:86:e1:53: 8f:15:4e:b9:ff:ef:7c:a3:29:7e:d6:d8:4d:85:eb:f1:c8:5e: 76:4f:ba:a5:c7:24:5b:9c:54:67:8b:30:6a:b4:7e:fe:7b:5a: 18:74:5b:cd -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIyM0YxMTAvBgNVBAUTKDY5QTk5M0ExODgyMTk4QUNBRDVGMUNFQTM1MDY2QkFG NDlFN0Q1RDAwHhcNMjYwOTIzMDgzNjE4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIzOGY4MS1mYzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoI4auxpYtcdM7s/RxyDb5kD3+JG1YlMEdNa6aWAArh+iWUYHVGZpi/5/bn0i LgBWboaQ1nRP3Ki4IGFxsk0NCe1l/WpkC1/oT8ODRCzIeh/RA7xD7HSDoNGAV3Q1 PwxjjXWQEBMLyZbryZQpLYfEhl2SsP0X2Ie7Kk+8IHlfozTb5Gtc6Cphr5k5NjWF B5CSSVCSK7SZ+oOOYw0zGrbBAHRB9zCQFZSnsGTpBWUnHN229NrTULrINg4PdvME pi5GZOevyOEPOYJhpxlgPW/IZKGeByl0eommco2zU/TczoT7qmG6toOFk55fii43 PDgmSzBdLHVULCzbqo8b9OPb1QIDAQABo4IChjCCAoIwHQYDVR0OBBYEFJtGpimU kZo+28V6bPQWtss+xAuZMB8GA1UdIwQYMBaAFGmpk6GIIZisrV8c6jUGa69J59XQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjIzRi82NzBDMkYyQ0Uy OUYxMUVFQjY4MkM2MTFDNEY5QUUwMi9hYW1Ub1lnaG1LeXRYeHpxTlFacnIwbm4x ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhbVRvWWdobUt5dFh4enFOUVpycjBubjFkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkIyM0YvNjcwQzJGMkNFMjlGMTFFRUI2ODJDNjExQzRGOUFFMDIvNzg1ODVDNUVC NkUwMTFFRkJCM0UyQTBEQzRGOUFFMDIucm9hMEUGCCsGAQUFBwEHAQH/BDYwNDAy BAIAATAsAwQALXitAwQBeTIAMAwDBAB5MgMDBAF5MgQDBAB5MgcDBAHKKQIDBALK OoQwDQYJKoZIhvcNAQELBQADggEBAFbINwApF0fMcwvMywJhDnsNY0k3Ub1ZOX9y BaCf2CY2J9nAXDsmiWyI1aS+BMtXgHAEAaMiJJB5cmu1wHjSdkogfAvPMfCU2LSo k8fYrze1gBBKjr27bWjUODXZIYYZNAmyMrfgBiezVfkuKbaeyrIauowuN34Hmcqx Nbzdf5eT2sYH4b14tYz2UANUTTM2wDOK1wsWuzZ0/vVU5Rw304UIU2x/HyjyRdpJ L81WHEjJAiRuJLr/nrWfWSg9X0VafJMTQs5N1p3lu/39VpaeMe+eJdl3sYbhU48V Trn/73yjKX7W2E2F6/HIXnZPuqXHJFucVGeLMGq0fv57Whh0W80= -----END CERTIFICATE-----Generated at Fri Sep 25 22:48:45 2026 by rpki-client