$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/1321A11C9DF311E99A8DE961C4F9AE02.roa File: 1321A11C9DF311E99A8DE961C4F9AE02.roa (raw, json) Hash identifier: Er3lL/S505EsaOt1uacROwj0JQEQVjW8R9dfPP8sfHo= Subject key identifier: F4:E9:1F:6C:CA:6E:BD:C5:34:CD:55:89:04:AE:5D:4A:1B:4F:62:2A Certificate issuer: /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005 Certificate serial: 1AE0 Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/1321A11C9DF311E99A8DE961C4F9AE02.roa Signing time: Fri 08 May 2026 17:20:20 +0000 ROA not before: Fri 08 May 2026 17:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9896 IP address blocks: 202.37.60.0/22 maxlen: 24 2001:4403:dead::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:24:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6880 (0x1ae0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005 Validity Not Before: May 8 17:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69fe1b54-b0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:04:e0:81:58:04:4f:b9:bd:b0:75:81:6d:62: b1:5a:bc:63:b0:8e:5a:c6:51:b4:52:30:44:4b:ce: 1d:58:4d:97:9f:72:53:de:66:c6:e6:ab:be:63:6d: f9:29:4e:c1:3b:2a:6c:46:18:bc:6d:77:a3:5f:a1: 6c:70:aa:25:05:35:ea:3c:30:0b:e4:4f:eb:ba:81: 54:0e:88:13:fe:fa:58:62:6c:bd:74:5f:d3:c8:1d: fc:4b:92:1f:a4:f6:70:23:86:20:70:3a:43:f0:f0: f8:4e:e2:e1:f4:33:c4:b7:70:29:48:b0:70:cc:46: 35:00:8c:d0:05:f9:f4:9a:67:44:19:4c:8b:f4:e1: 31:ea:74:0e:4d:70:fc:a7:6d:5a:27:5a:03:e1:3b: 11:3c:a5:55:3b:ba:bb:d2:53:b8:fd:f1:2b:d2:a0: 25:ef:6f:b7:d5:2b:97:7a:78:b4:4a:4a:a3:6f:e4: 36:b6:2b:b7:03:25:3f:b0:69:8d:de:e1:3f:c8:a6: 29:d7:b3:eb:6b:55:7a:ab:1b:16:22:fd:c0:c9:b1: ef:56:a6:17:41:7f:b0:0e:cb:67:de:11:a7:8f:8b: 75:d8:63:c2:41:77:2c:a7:21:18:e0:c5:61:7e:3c: 46:5c:ca:6b:35:a1:c0:cf:6e:21:df:42:6b:04:15: d2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E9:1F:6C:CA:6E:BD:C5:34:CD:55:89:04:AE:5D:4A:1B:4F:62:2A X509v3 Authority Key Identifier: keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/1321A11C9DF311E99A8DE961C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.37.60.0/22 IPv6: 2001:4403:dead::/48 Signature Algorithm: sha256WithRSAEncryption b4:bc:21:f5:cd:f3:92:20:28:2a:54:e0:b0:1d:d2:bb:d2:25: b7:aa:27:aa:c8:7b:f8:75:72:b1:ef:56:23:58:59:38:d5:ac: e6:a5:04:76:8e:13:80:6a:f2:b2:67:c7:ef:33:d0:b8:cf:e1: a5:9f:81:54:6f:bb:85:b8:9a:de:fc:cc:17:06:ea:1b:ab:e7: fc:b6:6c:d2:ec:4d:c1:9e:0f:7b:ee:62:81:ce:25:ca:0b:43: 5f:5f:7e:db:63:64:b0:cb:05:e8:a2:71:2d:c0:af:eb:b3:d4: 36:11:80:86:c2:bf:29:19:60:91:aa:f1:c2:d7:ae:cf:6b:0b: 77:30:d6:a4:24:7c:0d:35:8a:7e:68:21:39:41:81:17:c6:c9: e6:63:ed:ff:d7:c6:da:3d:ce:32:4c:11:f1:d7:92:3c:74:44: 3b:72:b6:c3:61:71:21:39:65:da:47:6f:91:f9:df:19:de:e4: 1d:a8:00:60:e2:d6:d7:99:1a:19:6c:31:16:b7:a2:76:39:23: 8d:37:72:6a:28:8f:f4:64:49:f0:93:46:ee:6a:3d:11:e6:05: 28:78:97:9d:66:82:6c:3f:db:10:63:d1:2f:ed:34:55:bf:58: cd:a6:05:7d:d6:9d:35:7b:c3:85:f5:7b:22:9d:23:62:e4:6d: 05:d3:75:c0 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICGuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBRDcxMTAvBgNVBAUTKEJBRjVBREEzMkNBMEQzNENGM0NDRjUzQUJERjg2REU2 RjhFRDkwMDUwHhcNMjYwNTA4MTcyMDIwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWZlMWI1NC1iMGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngTggVgET7m9sHWBbWKxWrxjsI5axlG0UjBES84dWE2Xn3JT3mbG5qu+Y235 KU7BOypsRhi8bXejX6FscKolBTXqPDAL5E/ruoFUDogT/vpYYmy9dF/TyB38S5If pPZwI4YgcDpD8PD4TuLh9DPEt3ApSLBwzEY1AIzQBfn0mmdEGUyL9OEx6nQOTXD8 p21aJ1oD4TsRPKVVO7q70lO4/fEr0qAl72+31SuXeni0Skqjb+Q2tiu3AyU/sGmN 3uE/yKYp17Pra1V6qxsWIv3AybHvVqYXQX+wDstn3hGnj4t12GPCQXcspyEY4MVh fjxGXMprNaHAz24h30JrBBXSCQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFPTpH2zK br3FNM1ViQSuXUobT2IqMB8GA1UdIwQYMBaAFLr1raMsoNNM88z1Or34beb47ZAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkFENy9GOEJBQkFDQThC ODkxMUU3OTAxMTVDM0ZDNEY5QUUwMi91dld0b3l5ZzAwenp6UFU2dmZodDV2anRr QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V2V3RveXlnMDB6enpQVTZ2Zmh0NXZqdGtBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZBRDcvRjhCQUJBQ0E4Qjg5MTFFNzkwMTE1QzNGQzRGOUFFMDIvMTMyMUExMUM5 REYzMTFFOTlBOERFOTYxQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCyiU8MA8EAgACMAkDBwAgAUQD3q0wDQYJKoZIhvcNAQELBQADggEB ALS8IfXN85IgKCpU4LAd0rvSJbeqJ6rIe/h1crHvViNYWTjVrOalBHaOE4Bq8rJn x+8z0LjP4aWfgVRvu4W4mt78zBcG6hur5/y2bNLsTcGeD3vuYoHOJcoLQ19ffttj ZLDLBeiicS3Ar+uz1DYRgIbCvykZYJGq8cLXrs9rC3cw1qQkfA01in5oITlBgRfG yeZj7f/Xxto9zjJMEfHXkjx0RDtytsNhcSE5ZdpHb5H53xne5B2oAGDi1teZGhls MRa3onY5I403cmooj/RkSfCTRu5qPRHmBSh4l51mgmw/2xBj0S/tNFW/WM2mBX3W nTV7w4X1eyKdI2LkbQXTdcA= -----END CERTIFICATE-----Generated at Wed May 13 07:06:20 2026 by rpki-client