$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/EBD46B4A9FBF11F19246D1DD5211F970.roa File: EBD46B4A9FBF11F19246D1DD5211F970.roa (raw, json) Hash identifier: 35CSobwx3CJSzjVqfVhK7LBnxTx7Ipo3cg0/6OZm4OI= Subject key identifier: 40:7D:B4:31:8E:73:9E:A0:E7:8F:63:2D:FC:75:2F:1A:94:9C:97:5B Certificate issuer: /CN=A9161857/serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Certificate serial: 0113 Authority key identifier: DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/EBD46B4A9FBF11F19246D1DD5211F970.roa Signing time: Mon 24 Aug 2026 13:30:07 +0000 ROA not before: Mon 24 Aug 2026 13:30:07 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 153913 IP address blocks: 124.198.240.0/24 maxlen: 24 124.198.242.0/24 maxlen: 24 124.198.243.0/24 maxlen: 24 124.198.244.0/24 maxlen: 24 124.198.245.0/24 maxlen: 24 124.198.246.0/24 maxlen: 24 124.198.248.0/24 maxlen: 24 203.169.6.0/24 maxlen: 24 203.169.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Validity Not Before: Aug 24 13:30:07 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a8c475f-471a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d4:6d:07:84:81:98:4d:eb:46:12:a3:8f:90: b3:7d:38:78:9f:5d:ef:b8:24:80:6f:bd:b6:5f:28: ae:eb:bb:bb:d1:83:f5:ef:10:1d:5d:7f:b9:7b:1f: fd:c6:42:d3:f1:02:14:76:0d:02:35:4f:7a:c6:82: 9b:fc:48:40:0f:6a:9d:24:9d:59:aa:49:73:78:e8: bf:59:cd:cb:a6:04:88:93:6b:e2:7d:3d:f9:94:d6: b9:93:22:6b:2c:7e:62:f2:39:15:3f:5e:c2:64:ce: 45:cc:41:c3:cf:a2:92:8f:1c:74:ca:ba:e6:71:e5: d6:b3:fb:00:ba:3b:7c:4b:72:34:16:3c:ad:6a:13: bc:ac:5a:de:9c:12:87:a5:c3:66:7e:37:6b:4d:a6: c4:f2:d6:9a:cd:8c:11:76:fc:ca:21:61:14:87:d1: 22:cb:bc:7e:1e:db:af:60:68:25:15:e3:e3:e0:7f: d8:5e:f8:b2:21:5d:dc:ba:a6:c5:20:0a:c9:b3:45: 25:3d:aa:ad:94:3f:0b:1f:2b:f2:da:6f:08:f3:6d: e3:8d:83:0c:83:1b:29:f7:33:38:fd:66:e0:f6:7f: 35:0f:1a:5f:79:b5:ca:d1:1c:8b:ad:3b:70:bf:2e: 13:d1:a9:d1:45:1e:77:85:59:56:25:64:59:87:af: 32:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7D:B4:31:8E:73:9E:A0:E7:8F:63:2D:FC:75:2F:1A:94:9C:97:5B X509v3 Authority Key Identifier: keyid:DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/EBD46B4A9FBF11F19246D1DD5211F970.roa sbgp-ipAddrBlock: critical IPv4: 124.198.240.0/24 124.198.242.0-124.198.246.255 124.198.248.0/24 203.169.6.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:07:20:16:3b:22:03:d4:7e:a9:a3:36:7f:92:e8:f2:66:90: a1:bc:af:da:39:b4:f0:a9:ce:03:57:4a:91:b0:cd:65:64:4d: d9:76:43:b5:b5:43:58:6d:2a:5d:f4:89:9e:5f:fa:69:9c:83: 8f:6e:a5:ed:b6:df:f5:10:a0:37:cc:ac:3a:ae:cd:2e:d6:ea: 9c:bf:db:00:03:9f:73:81:be:22:29:c3:91:55:5b:c4:22:e9: 71:e5:52:36:44:cc:69:77:e3:0c:91:e6:90:db:cc:75:07:44: bf:20:57:17:38:d9:9c:6f:b0:37:58:36:8a:f4:78:b9:6d:c1: 22:93:3f:49:2b:76:07:91:5a:cc:f4:10:75:10:83:27:98:dd: 8c:32:d6:4e:04:bc:1d:cb:2a:6e:3d:aa:df:dd:97:24:41:b6: 71:aa:5c:10:c6:69:a8:cb:a3:d9:a2:f6:8c:54:90:c3:69:5b: 8f:e2:37:b2:05:86:be:8d:d1:c4:fe:ee:e5:37:61:c1:6b:44: 12:38:58:78:fa:24:6e:a9:4a:42:70:e6:78:4a:ac:53:9b:5c: 3b:3d:8d:e8:11:51:c4:8d:7e:30:89:60:05:e8:af:62:da:ce: ff:ec:2f:7d:7c:ab:e0:89:eb:cd:f9:ef:46:92:d7:e4:f0:88: bd:d0:46:29 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4NTcxMTAvBgNVBAUTKERFQTYzRTMxMDFCRjE1OTkwMjBBNDA4M0ZBMUMzRDk2 NEIyMTMwQzAwHhcNMjYwODI0MTMzMDA3WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YThjNDc1Zi00NzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmNRtB4SBmE3rRhKjj5CzfTh4n13vuCSAb722Xyiu67u70YP17xAdXX+5ex/9 xkLT8QIUdg0CNU96xoKb/EhAD2qdJJ1ZqklzeOi/Wc3LpgSIk2vifT35lNa5kyJr LH5i8jkVP17CZM5FzEHDz6KSjxx0yrrmceXWs/sAujt8S3I0FjytahO8rFrenBKH pcNmfjdrTabE8taazYwRdvzKIWEUh9Eiy7x+HtuvYGglFePj4H/YXviyIV3cuqbF IArJs0UlPaqtlD8LHyvy2m8I823jjYMMgxsp9zM4/Wbg9n81DxpfebXK0RyLrTtw vy4T0anRRR53hVlWJWRZh68y+QIDAQABo4ICejCCAnYwHQYDVR0OBBYEFEB9tDGO c56g549jLfx1LxqUnJdbMB8GA1UdIwQYMBaAFN6mPjEBvxWZAgpAg/ocPZZLITDA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTg1Ny9DQjE0QkYyNjND OTgxMUYwQUYxMjRCMzhDNEY5QUUwMi8zcVktTVFHX0Zaa0NDa0NELWh3OWxrc2hN TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxWS1NUUdfRlprQ0NrQ0QtaHc5bGtzaE1NQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjE4NTcvQ0IxNEJGMjYzQzk4MTFGMEFGMTI0QjM4QzRGOUFFMDIvRUJENDZCNEE5 RkJGMTFGMTkyNDZEMURENTIxMUY5NzAucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQAfMbwMAwDBAF8xvIDBAB8xvYDBAB8xvgDBAHLqQYwDQYJKoZIhvcN AQELBQADggEBAGwHIBY7IgPUfqmjNn+S6PJmkKG8r9o5tPCpzgNXSpGwzWVkTdl2 Q7W1Q1htKl30iZ5f+mmcg49upe223/UQoDfMrDquzS7W6py/2wADn3OBviIpw5FV W8Qi6XHlUjZEzGl34wyR5pDbzHUHRL8gVxc42ZxvsDdYNor0eLltwSKTP0krdgeR Wsz0EHUQgyeY3Ywy1k4EvB3LKm49qt/dlyRBtnGqXBDGaajLo9mi9oxUkMNpW4/i N7IFhr6N0cT+7uU3YcFrRBI4WHj6JG6pSkJw5nhKrFObXDs9jegRUcSNfjCJYAXo r2Lazv/sL318q+CJ683570aS1+TwiL3QRik= -----END CERTIFICATE-----Generated at Fri Sep 25 00:12:44 2026 by rpki-client