$ rpki-client -vvf rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/42D4C3BC0D0611EFA3ECB057C4F9AE02.roa File: 42D4C3BC0D0611EFA3ECB057C4F9AE02.roa (raw, json) Hash identifier: TpZhfpxoeZ5Vy6rLuOC4zEvPNXUjG+kKX05v5r1kVJ4= Subject key identifier: A6:73:D0:1E:47:61:B6:CD:1F:E1:85:F5:0D:F8:60:51:78:02:D9:7E Certificate issuer: /CN=A9161099/serialNumber=03A02E2F5DABF0FF3938628BC4FF5FB61653F045 Certificate serial: 0187 Authority key identifier: 03:A0:2E:2F:5D:AB:F0:FF:39:38:62:8B:C4:FF:5F:B6:16:53:F0:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/42D4C3BC0D0611EFA3ECB057C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:02:41 +0000 ROA not before: Mon 10 Nov 2025 02:50:16 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 121.127.32.0/24 maxlen: 24 202.157.180.0/23 maxlen: 24 2401:cb60::/48 maxlen: 48 2401:cb60:1::/48 maxlen: 48 2401:cb60:2::/48 maxlen: 48 2401:cb60:3::/48 maxlen: 48 2401:cb60:4::/48 maxlen: 48 2401:cb60:5::/48 maxlen: 48 2401:cb60:6::/48 maxlen: 48 2401:cb60:7::/48 maxlen: 48 2401:cb60:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.crl rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161099, serialNumber=03A02E2F5DABF0FF3938628BC4FF5FB61653F045 Validity Not Before: Nov 10 02:50:16 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a59881-b925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:94:59:a5:16:14:d9:3f:bb:d2:1e:77:ce:3c: d9:bb:3d:b2:e9:ca:f1:0f:bd:a2:43:b1:ea:27:7b: 18:6d:66:f1:24:32:ed:25:a3:44:34:23:7c:d9:ba: ea:68:be:75:9c:93:bc:da:e9:c8:d0:ad:c2:57:e0: 54:14:6e:b0:a8:8d:10:3f:35:55:79:b0:2d:27:e8: b4:de:b6:31:a5:41:a4:82:3f:67:d5:9b:55:b9:e2: a8:06:f7:e5:3d:a3:7a:5d:d3:5c:43:9b:ab:8d:18: 5f:4f:19:0a:08:98:7e:7f:db:b1:7e:ab:46:d7:37: a3:61:17:f4:e9:ae:3f:06:35:97:fa:62:0a:a2:5b: 75:06:b8:92:f5:a0:95:e0:41:b5:07:e9:ea:ed:a3: ba:34:ea:f3:10:4b:de:53:6e:30:70:a0:4b:94:42: a7:85:1f:98:26:94:99:da:69:96:be:b9:a0:43:c4: 24:2d:9e:f0:d2:6c:6f:b7:aa:6f:03:48:97:03:b2: 39:36:be:5f:22:ae:91:74:f4:8d:92:a2:f9:f4:ad: 99:86:c5:9b:8a:bf:3e:0f:14:80:f1:b7:49:52:f2: 5c:e1:e2:27:b7:ea:cb:e1:63:c1:57:de:62:96:81: 76:6e:ba:42:ff:f2:87:21:e1:c6:28:01:94:93:5e: a7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:73:D0:1E:47:61:B6:CD:1F:E1:85:F5:0D:F8:60:51:78:02:D9:7E X509v3 Authority Key Identifier: keyid:03:A0:2E:2F:5D:AB:F0:FF:39:38:62:8B:C4:FF:5F:B6:16:53:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/42D4C3BC0D0611EFA3ECB057C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 121.127.32.0/24 202.157.180.0/23 IPv6: 2401:cb60::-2401:cb60:8:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 53:84:1f:68:56:26:47:04:a2:c8:33:45:53:dc:2d:8c:d8:7e: 2c:6c:e7:59:ab:d1:58:ca:07:ac:53:9e:4b:99:3c:b5:7b:e6: a8:80:21:5c:da:0b:b3:9c:a0:82:4c:b8:f2:5f:1b:0e:dc:5b: d0:5e:69:37:89:d1:af:ba:2e:20:f7:ff:bb:51:fe:34:7a:07: b7:a3:13:b5:c2:17:98:77:a3:75:f9:5a:83:9b:49:05:e7:7f: 1f:a9:10:f6:63:4b:7a:e3:fb:b8:24:71:ba:92:27:5b:81:2c: e2:15:61:fd:fb:57:4d:62:dd:51:78:26:0a:b2:a3:6e:87:fc: 49:ce:84:f4:fc:01:f6:97:56:08:2b:dc:02:91:be:e6:dc:4e: 8f:84:c3:71:fd:df:00:92:a8:c3:18:32:6c:38:05:c3:c4:4f: d2:f5:a2:e4:b6:d1:0d:7c:0b:e9:bc:ff:5b:4b:ef:5a:d6:af: a9:08:b5:05:98:32:89:ec:ca:96:42:d1:76:29:80:90:48:e4: 2b:ea:a5:7c:1d:5c:f7:6d:6c:48:54:40:fa:bd:a2:02:ab:b1: fc:78:0a:da:b6:b8:3e:f9:b0:fe:b6:39:86:86:75:fd:44:fd: 3c:e2:40:20:3c:08:71:c0:10:c7:b8:0f:8d:3b:00:29:c7:5a: 04:0b:94:f4 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwOTkxMTAvBgNVBAUTKDAzQTAyRTJGNURBQkYwRkYzOTM4NjI4QkM0RkY1RkI2 MTY1M0YwNDUwHhcNMjUxMTEwMDI1MDE2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTg4MS1iOTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5pRZpRYU2T+70h53zjzZuz2y6crxD72iQ7HqJ3sYbWbxJDLtJaNENCN82brq aL51nJO82unI0K3CV+BUFG6wqI0QPzVVebAtJ+i03rYxpUGkgj9n1ZtVueKoBvfl PaN6XdNcQ5urjRhfTxkKCJh+f9uxfqtG1zejYRf06a4/BjWX+mIKolt1BriS9aCV 4EG1B+nq7aO6NOrzEEveU24wcKBLlEKnhR+YJpSZ2mmWvrmgQ8QkLZ7w0mxvt6pv A0iXA7I5Nr5fIq6RdPSNkqL59K2ZhsWbir8+DxSA8bdJUvJc4eInt+rL4WPBV95i loF2brpC//KHIeHGKAGUk16nFQIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFKZz0B5H YbbNH+GF9Q34YFF4Atl+MB8GA1UdIwQYMBaAFAOgLi9dq/D/OThii8T/X7YWU/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTA5OS9GRDM2N0M3MDBE MDQxMUVGODVFNDZGNTVDNEY5QUUwMi9BNkF1TDEycjhQODVPR0tMeFA5ZnRoWlQ4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2QXVMMTJyOFA4NU9HS0x4UDlmdGhaVDhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjEwOTkvRkQzNjdDNzAwRDA0MTFFRjg1RTQ2RjU1QzRGOUFFMDIvNDJENEMzQkMw RDA2MTFFRkEzRUNCMDU3QzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAS BAIAATAMAwQAeX8gAwQByp20MBgEAgACMBIwEAMFBSQBy2ADBwAkActgAAgwDQYJ KoZIhvcNAQELBQADggEBAFOEH2hWJkcEosgzRVPcLYzYfixs51mr0VjKB6xTnkuZ PLV75qiAIVzaC7OcoIJMuPJfGw7cW9BeaTeJ0a+6LiD3/7tR/jR6B7ejE7XCF5h3 o3X5WoObSQXnfx+pEPZjS3rj+7gkcbqSJ1uBLOIVYf37V01i3VF4Jgqyo26H/EnO hPT8AfaXVggr3AKRvubcTo+Ew3H93wCSqMMYMmw4BcPET9L1ouS20Q18C+m8/1tL 71rWr6kItQWYMonsypZC0XYpgJBI5CvqpXwdXPdtbEhUQPq9ogKrsfx4Ctq2uD75 sP62OYaGdf1E/TziQCA8CHHAEMe4D407ACnHWgQLlPQ= -----END CERTIFICATE-----Generated at Thu Mar 26 11:11:48 2026 by rpki-client