$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/375E8232C13411F0A297231CC4F9AE02.roa File: 375E8232C13411F0A297231CC4F9AE02.roa (raw, json) Hash identifier: Vk4rtcyT+sEg6r9C5XD5asADCupwzxSQL05nWxyvlEU= Subject key identifier: B0:1A:72:EF:82:B8:E4:77:B0:D1:EF:75:DC:90:F6:77:B7:DB:A1:17 Certificate issuer: /CN=A9161857/serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Certificate serial: E5 Authority key identifier: DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/375E8232C13411F0A297231CC4F9AE02.roa Signing time: Fri 19 Jun 2026 07:37:27 +0000 ROA not before: Fri 19 Jun 2026 07:37:27 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 153913 IP address blocks: 124.198.240.0/24 maxlen: 24 124.198.241.0/24 maxlen: 24 124.198.242.0/24 maxlen: 24 124.198.243.0/24 maxlen: 24 124.198.244.0/24 maxlen: 24 124.198.245.0/24 maxlen: 24 124.198.246.0/24 maxlen: 24 203.169.6.0/24 maxlen: 24 203.169.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:25:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Validity Not Before: Jun 19 07:37:27 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a34f1b6-2a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a9:32:33:6a:b6:9d:a9:d6:82:5a:02:94:a4: 2d:51:be:f6:9e:6e:7a:37:91:1c:4e:59:5a:ea:76: 84:59:97:53:e8:ac:30:9d:8d:31:eb:cb:fe:7a:8f: f9:3b:ee:60:36:77:8f:8a:73:96:ca:b7:16:bc:cb: 07:21:fc:20:2a:54:f9:d7:16:5b:2e:c8:8c:ed:39: 69:e8:23:65:bf:34:92:5f:f6:c6:33:13:7b:ee:c1: f9:87:d2:50:bf:cc:f8:6f:ec:9e:26:19:f8:d8:95: c1:57:c3:85:4f:b0:69:aa:62:07:04:b0:8b:51:ab: 42:cd:9d:0c:1c:58:01:30:d8:04:f8:1a:25:1b:c3: f0:90:67:d0:f9:4a:fe:b2:0c:53:14:8d:70:9d:3c: 3d:db:a9:f8:bf:37:09:a8:46:fd:ee:b9:db:99:45: d5:b0:57:56:31:fe:ec:1f:b1:fb:5b:69:75:78:98: d9:ca:2d:9a:2f:27:8f:c4:df:ce:93:3d:fd:3a:ce: 1e:7f:65:39:d1:40:8e:eb:7a:f7:1c:39:76:2a:d8: 55:bf:09:19:b1:bb:67:31:8e:11:87:6e:a1:b5:3d: f6:c0:96:d6:60:ce:71:36:0b:4d:63:df:5a:54:0d: d6:90:86:3e:ab:3f:c2:42:27:e7:9b:97:97:dd:f0: 25:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1A:72:EF:82:B8:E4:77:B0:D1:EF:75:DC:90:F6:77:B7:DB:A1:17 X509v3 Authority Key Identifier: keyid:DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/375E8232C13411F0A297231CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 124.198.240.0-124.198.246.255 203.169.6.0/23 Signature Algorithm: sha256WithRSAEncryption 29:68:4e:99:0e:cb:fd:fa:c9:d0:00:8f:5d:6c:ba:4c:f5:b6: 28:3d:39:b0:66:5d:52:14:19:62:9e:df:5d:f8:03:60:d9:6a: d1:d5:ec:23:ef:47:5f:62:a1:9b:e2:89:97:3a:98:01:ba:b0: 3a:92:24:e4:0c:ae:20:e6:1d:58:ef:1b:5a:65:05:45:40:8c: ab:39:32:d8:3d:e5:e8:02:ab:ee:90:3c:54:21:be:52:3d:64: ce:e1:81:d5:9f:70:ec:c0:6f:2f:c4:f9:01:32:ae:13:e6:a9: 62:3c:c9:ae:e9:d3:b2:4f:22:22:99:27:ee:bd:51:c0:08:30: 0c:40:23:bd:f3:07:80:64:5a:d1:dd:a6:44:1f:7e:f1:a1:e4: 26:f3:63:50:dc:38:4b:3b:4d:a0:69:16:c9:58:9b:0f:47:44: 7f:90:8c:49:86:7e:17:c7:63:81:06:58:21:31:c3:bd:3f:73: da:d8:46:db:db:1d:7c:36:50:31:77:0d:0b:33:4c:d6:96:12: 62:fb:66:06:00:1d:bd:4f:cc:16:87:4d:f2:e0:32:6d:71:78: 49:2c:f4:0f:83:52:a2:eb:39:20:8d:a8:7f:69:e8:04:f7:cf: f1:92:4a:fc:7a:47:95:0d:f2:af:43:6f:50:66:29:64:66:f7: 78:8c:87:e8 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4NTcxMTAvBgNVBAUTKERFQTYzRTMxMDFCRjE1OTkwMjBBNDA4M0ZBMUMzRDk2 NEIyMTMwQzAwHhcNMjYwNjE5MDczNzI3WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTM0ZjFiNi0yYTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6kyM2q2nanWgloClKQtUb72nm56N5EcTlla6naEWZdT6KwwnY0x68v+eo/5 O+5gNnePinOWyrcWvMsHIfwgKlT51xZbLsiM7Tlp6CNlvzSSX/bGMxN77sH5h9JQ v8z4b+yeJhn42JXBV8OFT7BpqmIHBLCLUatCzZ0MHFgBMNgE+BolG8PwkGfQ+Ur+ sgxTFI1wnTw926n4vzcJqEb97rnbmUXVsFdWMf7sH7H7W2l1eJjZyi2aLyePxN/O kz39Os4ef2U50UCO63r3HDl2KthVvwkZsbtnMY4Rh26htT32wJbWYM5xNgtNY99a VA3WkIY+qz/CQifnm5eX3fAl2wIDAQABo4ICbjCCAmowHQYDVR0OBBYEFLAacu+C uOR3sNHvddyQ9ne326EXMB8GA1UdIwQYMBaAFN6mPjEBvxWZAgpAg/ocPZZLITDA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTg1Ny9DQjE0QkYyNjND OTgxMUYwQUYxMjRCMzhDNEY5QUUwMi8zcVktTVFHX0Zaa0NDa0NELWh3OWxrc2hN TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxWS1NUUdfRlprQ0NrQ0QtaHc5bGtzaE1NQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjE4NTcvQ0IxNEJGMjYzQzk4MTFGMEFGMTI0QjM4QzRGOUFFMDIvMzc1RTgyMzJD MTM0MTFGMEEyOTcyMzFDQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBAR8xvADBAB8xvYDBAHLqQYwDQYJKoZIhvcNAQELBQADggEBAClo TpkOy/36ydAAj11sukz1tig9ObBmXVIUGWKe3134A2DZatHV7CPvR19ioZviiZc6 mAG6sDqSJOQMriDmHVjvG1plBUVAjKs5Mtg95egCq+6QPFQhvlI9ZM7hgdWfcOzA by/E+QEyrhPmqWI8ya7p07JPIiKZJ+69UcAIMAxAI73zB4BkWtHdpkQffvGh5Cbz Y1DcOEs7TaBpFslYmw9HRH+QjEmGfhfHY4EGWCExw70/c9rYRtvbHXw2UDF3DQsz TNaWEmL7ZgYAHb1PzBaHTfLgMm1xeEks9A+DUqLrOSCNqH9p6AT3z/GSSvx6R5UN 8q9Db1BmKWRm93iMh+g= -----END CERTIFICATE-----Generated at Fri Jul 24 10:49:09 2026 by rpki-client