$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/2B2C31BE3B8B11EB8D76362DC4F9AE02.roa File: 2B2C31BE3B8B11EB8D76362DC4F9AE02.roa (raw, json) Hash identifier: rcFyozuFtBU24Fj/puD3Y3gAMLE1tFWBMfsBdsY0Lgg= Subject key identifier: 3F:EB:99:DD:7C:4A:A3:93:FC:5F:70:65:3C:D2:1E:B1:40:0D:6D:4C Certificate issuer: /CN=A9147BA3/serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5 Certificate serial: 352A Authority key identifier: 8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/2B2C31BE3B8B11EB8D76362DC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:31:47 +0000 ROA not before: Wed 28 Jan 2026 15:11:33 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 55344 IP address blocks: 124.109.104.0/22 maxlen: 22 124.109.104.0/23 maxlen: 23 124.109.104.0/24 maxlen: 24 124.109.105.0/24 maxlen: 24 124.109.106.0/23 maxlen: 23 124.109.106.0/24 maxlen: 24 124.109.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 15:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13610 (0x352a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BA3, serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5 Validity Not Before: Jan 28 15:11:33 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a44dd3-675a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bd:cc:5d:cd:d2:59:22:df:48:11:c9:03:4d: 4c:17:dc:3c:05:d3:9f:a8:b0:ab:d6:a8:22:a0:b6: 93:d5:fb:8f:1e:64:54:2c:c3:89:a1:77:52:65:94: 57:1c:13:01:0c:73:48:d5:dd:fd:53:2f:16:03:d9: ce:23:1c:1a:b5:88:00:1f:b1:80:92:d2:3b:4b:70: 39:b0:ba:58:f0:7d:21:af:6b:82:99:c6:8a:95:ea: de:7d:76:41:8b:ad:95:a4:e4:da:33:2b:67:b5:30: 40:e0:80:7b:15:a5:03:e0:7e:ad:6b:a7:c8:4a:a9: 6f:3d:fb:6d:0b:9e:ee:94:b2:b6:b8:52:d1:14:76: fc:b6:0a:44:1e:91:e0:bc:23:2a:40:44:71:01:23: 7b:89:fc:6b:e7:13:63:bf:dd:ed:88:ac:d7:a6:44: ce:a4:f2:45:db:84:80:cb:e7:96:99:2c:92:f9:93: c5:65:aa:3b:4b:39:84:ee:64:3e:32:1d:28:14:15: 1e:a4:e4:4d:0e:7f:a6:a5:03:46:85:d9:fa:69:8e: ee:c5:51:c9:d0:4c:1d:34:d2:c9:82:a8:ff:ac:2c: 01:8c:eb:9c:9f:c9:4e:09:89:4d:4d:55:89:7c:0f: b1:2f:ee:85:73:dc:6c:4a:07:32:d1:4a:b6:3d:51: 5a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EB:99:DD:7C:4A:A3:93:FC:5F:70:65:3C:D2:1E:B1:40:0D:6D:4C X509v3 Authority Key Identifier: keyid:8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/2B2C31BE3B8B11EB8D76362DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 124.109.104.0/22 Signature Algorithm: sha256WithRSAEncryption 10:4b:fa:a3:d9:97:04:52:14:77:85:7c:76:d2:4a:57:e8:0b: 25:18:7e:49:7e:94:7a:2a:7f:b3:aa:77:82:e4:01:ec:be:a3: ce:d2:be:46:f2:6e:60:a8:b7:5f:10:5a:cb:67:71:26:1f:85: 96:51:93:2e:ff:a7:b8:25:34:d4:d6:3c:5c:f5:16:72:31:03: f1:a5:86:b6:46:7f:63:39:ae:f6:70:25:97:26:63:ed:48:d7: f6:bc:9b:fd:da:22:d4:b0:07:37:09:95:f4:a5:a9:56:bd:90: f9:ec:e5:bd:20:36:82:80:fb:9d:9a:e1:f2:ed:23:f8:c1:54: 36:8b:84:9c:06:ae:01:03:bf:99:84:90:c8:49:72:f9:94:3a: fc:5a:f3:d1:55:8a:91:8b:8f:51:ae:b8:c7:10:c3:6f:5a:43: 2c:29:7c:f9:f5:68:be:e5:a9:0d:01:a6:7a:07:77:32:b6:7d: f5:82:db:92:5c:3d:91:de:45:cb:44:23:32:18:2e:3b:d6:e9: ff:63:2a:dc:e7:f2:f9:1e:2a:a6:99:01:b6:66:06:bf:c6:ae: 43:13:25:f8:00:24:98:d1:a1:bd:73:09:68:3b:e1:1b:20:a1: f2:75:59:30:8c:9c:a8:32:de:b6:2b:67:e8:47:38:e1:cd:73: 39:09:76:c5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCQTMxMTAvBgNVBAUTKDhERjY5QjhDRjAyRDQ0NzJBMEUyRDJGNEVFNkU0OTMy NkQzREIwQzUwHhcNMjYwMTI4MTUxMTMzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGRkMy02NzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtr3MXc3SWSLfSBHJA01MF9w8BdOfqLCr1qgioLaT1fuPHmRULMOJoXdSZZRX HBMBDHNI1d39Uy8WA9nOIxwatYgAH7GAktI7S3A5sLpY8H0hr2uCmcaKlerefXZB i62VpOTaMytntTBA4IB7FaUD4H6ta6fISqlvPfttC57ulLK2uFLRFHb8tgpEHpHg vCMqQERxASN7ifxr5xNjv93tiKzXpkTOpPJF24SAy+eWmSyS+ZPFZao7SzmE7mQ+ Mh0oFBUepORNDn+mpQNGhdn6aY7uxVHJ0EwdNNLJgqj/rCwBjOucn8lOCYlNTVWJ fA+xL+6Fc9xsSgcy0Uq2PVFaWQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD/rmd18 SqOT/F9wZTzSHrFADW1MMB8GA1UdIwQYMBaAFI32m4zwLURyoOLS9O5uSTJtPbDF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0JBMy83N0VBN0EyNDFE QTMxMUUyOTJFNUNBOTgwOEIwMkNEMi9qZmFialBBdFJIS2c0dEwwN201Sk1tMDlz TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pmYWJqUEF0UkhLZzR0TDA3bTVKTW0wOXNNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDdCQTMvNzdFQTdBMjQxREEzMTFFMjkyRTVDQTk4MDhCMDJDRDIvMkIyQzMxQkUz QjhCMTFFQjhENzYzNjJEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCfG1oMA0GCSqGSIb3DQEBCwUAA4IBAQAQS/qj2ZcEUhR3hXx20kpX 6AslGH5JfpR6Kn+zqneC5AHsvqPO0r5G8m5gqLdfEFrLZ3EmH4WWUZMu/6e4JTTU 1jxc9RZyMQPxpYa2Rn9jOa72cCWXJmPtSNf2vJv92iLUsAc3CZX0palWvZD57OW9 IDaCgPudmuHy7SP4wVQ2i4ScBq4BA7+ZhJDISXL5lDr8WvPRVYqRi49RrrjHEMNv WkMsKXz59Wi+5akNAaZ6B3cytn31gtuSXD2R3kXLRCMyGC471un/Yyrc5/L5Hiqm mQG2Zga/xq5DEyX4ACSY0aG9cwloO+EbIKHydVkwjJyoMt62K2foRzjhzXM5CXbF -----END CERTIFICATE-----Generated at Sat Mar 28 13:40:56 2026 by rpki-client