$ rpki-client -vvf rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/12326B1E3ED211EDAE00DB18C4F9AE02.roa File: 12326B1E3ED211EDAE00DB18C4F9AE02.roa (raw, json) Hash identifier: EMxgdpPufi1Og/AIiKXBzoLrbmFj4laz/LZzew8P9yk= Subject key identifier: 3C:F1:28:59:70:A3:23:38:FC:64:4D:47:77:DC:8F:22:D1:4A:24:2B Certificate issuer: /CN=A913E0D7/serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D Certificate serial: 0290 Authority key identifier: 19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/12326B1E3ED211EDAE00DB18C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:04:57 +0000 ROA not before: Wed 03 Dec 2025 00:30:14 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 135060 IP address blocks: 111.235.140.0/22 maxlen: 22 111.235.140.0/24 maxlen: 24 111.235.141.0/24 maxlen: 24 111.235.142.0/24 maxlen: 24 111.235.143.0/24 maxlen: 24 125.254.60.0/24 maxlen: 24 125.254.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E0D7, serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D Validity Not Before: Dec 3 00:30:14 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a45599-2e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:11:51:9f:b9:63:d6:5a:c0:ea:ce:4e:b1:a2: f1:97:0a:51:8a:3b:99:4b:99:05:7f:f6:00:18:a6: 19:cb:4e:f2:eb:89:50:22:e8:c7:8b:fb:a5:f4:b8: 7d:96:6e:da:12:5d:03:40:f5:3b:6e:6c:d6:3d:46: 57:29:fe:24:a9:25:97:a3:51:f4:b9:d8:52:51:32: 74:a2:12:34:b8:74:de:06:af:9a:80:5f:f9:00:98: ba:57:c9:72:fc:c9:34:b1:f5:1d:10:c2:f3:ef:9e: 69:c5:7b:c5:0a:88:89:7c:ff:3f:14:f4:24:b3:b6: 33:5a:0f:bb:94:d8:58:ed:2d:e0:89:4a:43:b3:3d: eb:3a:35:02:f8:69:e0:71:4a:90:2f:a0:6a:e7:a1: eb:9d:25:09:a1:1b:ca:e2:29:1c:fa:9b:5e:93:74: ae:53:1d:d9:b7:a4:87:9e:e8:66:36:17:d7:ad:b6: 8b:af:11:af:2f:06:44:f6:86:0b:a0:80:eb:d2:05: 40:20:5b:4e:da:eb:da:68:33:17:0b:bd:38:e2:4e: 14:8d:b3:45:de:e2:7a:ba:5e:36:c9:1a:ad:7c:59: ad:68:80:4a:a0:04:b0:b8:65:b7:8a:be:10:75:56: 82:75:ba:5b:61:5e:5e:94:71:d7:93:b1:9d:98:4c: de:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F1:28:59:70:A3:23:38:FC:64:4D:47:77:DC:8F:22:D1:4A:24:2B X509v3 Authority Key Identifier: keyid:19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/12326B1E3ED211EDAE00DB18C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 111.235.140.0/22 125.254.60.0/23 Signature Algorithm: sha256WithRSAEncryption b1:88:81:07:89:dc:ff:27:ab:eb:79:2f:bf:cf:ef:42:d3:0f: 47:80:c2:d6:f6:42:b0:d0:5f:5f:f5:d2:26:18:10:d5:69:01: 3f:b6:4b:bb:e7:64:fc:63:04:ec:ce:5b:75:6f:fc:27:80:74: 3b:b9:af:49:22:5c:9a:49:ce:94:ff:53:4c:bb:2e:42:ac:3f: 95:e8:fb:71:f0:88:58:c0:b0:fc:ba:2a:50:ce:5d:29:56:42: 6f:69:64:43:4b:43:01:67:b5:9c:0b:f8:86:f5:0e:48:3c:91: dc:d7:61:26:57:e4:11:3a:cb:93:02:c0:60:bd:e4:88:4b:dc: 8c:1a:1a:35:ec:85:b1:f2:80:87:40:cd:a8:97:4a:52:8b:f3: b2:4f:9b:8a:71:2b:8f:a8:f7:a0:2c:cf:ae:c9:9b:f3:a3:50: c6:0c:9b:35:90:68:ec:0d:91:74:7d:3d:0c:00:9c:86:8f:11: 35:4f:31:49:63:94:36:75:5f:8d:fe:6c:9e:7a:d4:83:93:7c: fc:d9:dc:db:df:d1:07:fb:f2:63:3d:31:f2:f9:cd:77:ab:3a: 11:9d:4c:10:a1:fb:5e:50:78:02:b4:11:23:4e:ce:ec:42:ce: 83:b3:6e:b8:8f:10:a3:7f:ac:12:7c:10:cb:6a:f0:aa:59:d1: 87:22:32:c4 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwRDcxMTAvBgNVBAUTKDE5QkFCQkNGNEM5OTk5MzAwQUMwNTlDNjUzQzI5MDg0 MkY2QTY2MEQwHhcNMjUxMjAzMDAzMDE0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTU5OS0yZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhFRn7lj1lrA6s5OsaLxlwpRijuZS5kFf/YAGKYZy07y64lQIujHi/ul9Lh9 lm7aEl0DQPU7bmzWPUZXKf4kqSWXo1H0udhSUTJ0ohI0uHTeBq+agF/5AJi6V8ly /Mk0sfUdEMLz755pxXvFCoiJfP8/FPQks7YzWg+7lNhY7S3giUpDsz3rOjUC+Gng cUqQL6Bq56HrnSUJoRvK4ikc+ptek3SuUx3Zt6SHnuhmNhfXrbaLrxGvLwZE9oYL oIDr0gVAIFtO2uvaaDMXC7044k4UjbNF3uJ6ul42yRqtfFmtaIBKoASwuGW3ir4Q dVaCdbpbYV5elHHXk7GdmEzedwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFDzxKFlw oyM4/GRNR3fcjyLRSiQrMB8GA1UdIwQYMBaAFBm6u89MmZkwCsBZxlPCkIQvamYN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTBENy84RkVGODQwNDNF Q0YxMUVEQTVGMUZBMTdDNEY5QUUwMi9HYnE3ejB5Wm1UQUt3Rm5HVThLUWhDOXFa ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dicTd6MHlabVRBS3dGbkdVOEtRaEM5cVpnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0UwRDcvOEZFRjg0MDQzRUNGMTFFREE1RjFGQTE3QzRGOUFFMDIvMTIzMjZCMUUz RUQyMTFFREFFMDBEQjE4QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCb+uMAwQBff48MA0GCSqGSIb3DQEBCwUAA4IBAQCxiIEHidz/J6vr eS+/z+9C0w9HgMLW9kKw0F9f9dImGBDVaQE/tku752T8YwTszlt1b/wngHQ7ua9J IlyaSc6U/1NMuy5CrD+V6Ptx8IhYwLD8uipQzl0pVkJvaWRDS0MBZ7WcC/iG9Q5I PJHc12EmV+QROsuTAsBgveSIS9yMGho17IWx8oCHQM2ol0pSi/OyT5uKcSuPqPeg LM+uyZvzo1DGDJs1kGjsDZF0fT0MAJyGjxE1TzFJY5Q2dV+N/myeetSDk3z82dzb 39EH+/JjPTHy+c13qzoRnUwQofteUHgCtBEjTs7sQs6Ds264jxCjf6wSfBDLavCq WdGHIjLE -----END CERTIFICATE-----Generated at Thu Mar 26 12:54:13 2026 by rpki-client