$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/7EBB570A296C11EBB7D88147C4F9AE02.roa File: 7EBB570A296C11EBB7D88147C4F9AE02.roa (raw, json) Hash identifier: DoySYssI9dH/TsF5hpEDQa5+Fqg/aQb80V8U7maPDL4= Subject key identifier: 60:9E:87:96:FA:30:45:85:B4:D5:C7:EB:98:36:BC:1F:9A:3B:98:17 Certificate issuer: /CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1 Certificate serial: 0846 Authority key identifier: E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/7EBB570A296C11EBB7D88147C4F9AE02.roa Signing time: Fri 04 Sep 2026 21:41:40 +0000 ROA not before: Fri 04 Sep 2026 21:41:40 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 17707 IP address blocks: 125.6.0.0/19 maxlen: 24 125.6.112.0/20 maxlen: 24 125.6.128.0/17 maxlen: 24 203.104.96.0/20 maxlen: 24 203.104.208.0/22 maxlen: 24 203.131.192.0/20 maxlen: 24 203.174.64.0/20 maxlen: 24 2407:3000::/32 maxlen: 32 2407:3000:6::/48 maxlen: 48 2407:3000:6a::/48 maxlen: 48 2407:3000:6d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 21:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2118 (0x846) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139220, serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1 Validity Not Before: Sep 4 21:41:40 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a9b3b14-c9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:36:ab:88:b9:a1:5a:fa:80:de:cb:ee:85: 65:c5:b2:03:0d:c9:da:f1:50:f7:45:89:8d:50:7d: 54:28:ce:1a:64:cb:21:06:a6:b7:39:14:17:37:cb: 38:c2:92:f6:22:16:cf:e5:74:8e:74:17:49:c7:5d: 3f:86:c1:e0:a2:eb:2b:8f:b9:84:bd:50:97:6e:02: 85:ee:da:e2:17:57:53:db:0e:1d:f8:dd:b9:b7:36: 6e:0c:5a:ff:eb:12:e4:cb:5b:87:53:ea:49:4d:ce: ef:2a:4e:67:be:e7:da:4e:49:aa:6f:ff:e3:5a:ea: 98:3b:ad:d1:22:47:ea:75:e3:bb:fd:02:1d:6e:aa: ac:72:f0:51:43:3e:cb:f8:dd:ef:31:82:96:8a:b9: b3:4f:57:3b:65:f3:2d:f7:a5:b9:da:6c:36:93:50: 37:98:6f:5d:9b:7d:af:a7:11:04:03:14:dc:2e:cf: 22:45:d3:74:4c:1f:1e:53:2e:00:ec:15:75:2d:01: a9:70:9b:13:2a:73:03:5f:ea:f1:1a:37:f4:4e:1f: 3c:67:c7:58:73:09:e3:2f:06:c6:ee:91:38:7c:9c: bd:d1:51:21:29:88:b5:70:0c:15:cd:4e:49:3c:85: 86:91:04:dd:59:34:09:55:78:ef:8d:7d:c9:b1:2f: ee:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:9E:87:96:FA:30:45:85:B4:D5:C7:EB:98:36:BC:1F:9A:3B:98:17 X509v3 Authority Key Identifier: keyid:E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/7EBB570A296C11EBB7D88147C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 125.6.0.0/19 125.6.112.0-125.6.255.255 203.104.96.0/20 203.104.208.0/22 203.131.192.0/20 203.174.64.0/20 IPv6: 2407:3000::/32 Signature Algorithm: sha256WithRSAEncryption 75:70:73:81:f4:01:88:92:15:35:a4:30:bd:3e:dc:fc:b0:a4: 74:e9:3e:77:fd:e0:4e:81:5b:c4:94:1e:52:06:b1:09:95:91: 56:7d:67:33:16:f4:09:7e:d4:ee:cd:91:a9:74:8e:36:28:23: c5:bf:b3:fd:87:2f:2e:74:5a:e0:11:23:44:f1:12:07:8e:2d: 11:39:de:53:56:9c:4d:0f:57:66:23:8f:bc:60:48:d2:5c:aa: b1:35:1a:5d:95:05:a9:de:73:1e:59:95:cf:30:c2:d0:8d:c5: af:eb:81:40:5e:69:1d:6a:e3:e9:e0:bb:71:bd:fd:9a:da:90: 1b:d6:a8:d8:ab:2d:f8:de:8c:58:af:e8:06:7b:b4:4b:76:f7: 8a:ff:30:19:fc:da:15:5a:c8:8e:f8:0b:34:94:ec:5d:26:80: 9d:7f:0d:b6:50:de:c5:f9:bd:df:17:af:d3:d8:b7:ff:66:f3: 63:60:f5:bc:fa:bb:74:1a:44:91:23:f1:2c:08:4c:ae:64:f5: 49:81:28:c8:10:ff:89:bd:03:fb:2c:01:cb:61:e5:b1:62:6d: a7:1f:a2:97:55:e7:9e:86:7b:bb:89:65:6c:23:81:35:45:98: 50:c5:53:f2:96:5b:5d:c3:9d:f6:a6:c7:b7:11:68:da:f6:a3: 74:f3:fa:65 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICCEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkyMjAxMTAvBgNVBAUTKEUyQ0ZDNDJCNkEwODE1MEFFRkVGRTcxODlCRTVBRjJC RTU2OEY4QzEwHhcNMjYwOTA0MjE0MTQwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTliM2IxNC1jOWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfk2q4i5oVr6gN7L7oVlxbIDDcna8VD3RYmNUH1UKM4aZMshBqa3ORQXN8s4 wpL2IhbP5XSOdBdJx10/hsHgousrj7mEvVCXbgKF7triF1dT2w4d+N25tzZuDFr/ 6xLky1uHU+pJTc7vKk5nvufaTkmqb//jWuqYO63RIkfqdeO7/QIdbqqscvBRQz7L +N3vMYKWirmzT1c7ZfMt96W52mw2k1A3mG9dm32vpxEEAxTcLs8iRdN0TB8eUy4A 7BV1LQGpcJsTKnMDX+rxGjf0Th88Z8dYcwnjLwbG7pE4fJy90VEhKYi1cAwVzU5J PIWGkQTdWTQJVXjvjX3JsS/u6wIDAQABo4IClDCCApAwHQYDVR0OBBYEFGCeh5b6 MEWFtNXH65g2vB+aO5gXMB8GA1UdIwQYMBaAFOLPxCtqCBUK7+/nGJvlryvlaPjB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTIyMC8xNUNEMUMyMjI4 QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZRcnY3LWNZbS1XdkstVm8t TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRzX0VLMm9JRlFydjctY1ltLVd2Sy1Wby1NRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkyMjAvMTVDRDFDMjIyOEIwMTFFQkI0NDY5RTFFQzRGOUFFMDIvN0VCQjU3MEEy OTZDMTFFQkI3RDg4MTQ3QzRGOUFFMDIucm9hMFMGCCsGAQUFBwEHAQH/BEQwQjAx BAIAATArAwQFfQYAMAsDBAR9BnADAwB9BgMEBMtoYAMEAsto0AMEBMuDwAMEBMuu QDANBAIAAjAHAwUAJAcwADANBgkqhkiG9w0BAQsFAAOCAQEAdXBzgfQBiJIVNaQw vT7c/LCkdOk+d/3gToFbxJQeUgaxCZWRVn1nMxb0CX7U7s2RqXSONigjxb+z/Ycv LnRa4BEjRPESB44tETneU1acTQ9XZiOPvGBI0lyqsTUaXZUFqd5zHlmVzzDC0I3F r+uBQF5pHWrj6eC7cb39mtqQG9ao2Kst+N6MWK/oBnu0S3b3iv8wGfzaFVrIjvgL NJTsXSaAnX8NtlDexfm93xev09i3/2bzY2D1vPq7dBpEkSPxLAhMrmT1SYEoyBD/ ib0D+ywBy2HlsWJtpx+il1XnnoZ7u4llbCOBNUWYUMVT8pZbXcOd9qbHtxFo2vaj dPP6ZQ== -----END CERTIFICATE-----Generated at Mon Sep 28 22:21:01 2026 by rpki-client