$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/69EBCB546BAE11F196CCF4747547A888.roa File: 69EBCB546BAE11F196CCF4747547A888.roa (raw, json) Hash identifier: 1Gdi4BISZtZus3v8EQtLjaJq5e484jVmiTvugjuhr5E= Subject key identifier: 7E:0F:B8:34:8D:0A:33:0B:DF:2D:7B:8E:98:0E:5E:D3:C7:BC:89:2F Certificate issuer: /CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Certificate serial: 01ED Authority key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/69EBCB546BAE11F196CCF4747547A888.roa Signing time: Fri 19 Jun 2026 07:13:47 +0000 ROA not before: Fri 19 Jun 2026 07:13:47 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 38819 IP address blocks: 120.88.192.0/18 maxlen: 18 120.88.192.0/19 maxlen: 19 120.88.224.0/20 maxlen: 20 120.88.224.0/24 maxlen: 24 120.88.225.0/24 maxlen: 24 120.88.226.0/24 maxlen: 24 120.88.227.0/24 maxlen: 24 120.88.230.0/24 maxlen: 24 120.88.232.0/24 maxlen: 24 120.88.236.0/24 maxlen: 24 120.88.237.0/24 maxlen: 24 120.88.240.0/24 maxlen: 24 120.88.241.0/24 maxlen: 24 120.88.242.0/24 maxlen: 24 120.88.243.0/24 maxlen: 24 120.88.245.0/24 maxlen: 24 120.88.246.0/24 maxlen: 24 120.88.252.0/24 maxlen: 24 120.88.253.0/24 maxlen: 24 120.88.254.0/24 maxlen: 24 202.4.192.0/19 maxlen: 19 202.4.196.0/24 maxlen: 24 202.4.208.0/24 maxlen: 24 223.130.32.0/19 maxlen: 19 2405:b200::/32 maxlen: 32 2405:b200:110::/44 maxlen: 44 2405:b200:140::/44 maxlen: 44 2405:b200:150::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F7B, serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Validity Not Before: Jun 19 07:13:47 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6a34ec2b-c261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c6:8f:cb:f3:f2:63:42:41:72:59:6f:60:5b: ca:4b:9e:df:fd:1c:74:9c:00:aa:e6:e7:60:88:25: d1:06:92:58:6c:78:92:31:c0:68:04:03:ed:3a:f8: c3:36:3b:dc:e1:9e:20:51:6d:17:68:af:2e:9d:c9: 04:e2:e1:d2:a0:49:5e:cf:10:9a:24:81:a0:a7:9a: c7:c4:f9:cf:69:37:2e:19:88:ed:05:13:8c:20:07: fb:5f:e2:8c:f3:9d:0d:a0:c3:ab:b5:75:c1:16:53: 04:e6:bd:99:1e:29:f1:c5:0f:ae:0c:33:2e:46:96: 0e:08:aa:c5:c1:b0:48:d0:d6:7a:37:a8:8e:6c:9a: 9d:95:29:e7:16:19:17:d0:34:78:a3:6f:74:fe:42: d8:9a:08:75:b3:55:8d:19:46:26:b0:de:fe:ea:69: 3d:3f:f6:84:a7:c3:31:b0:fd:a4:dc:3d:c4:24:c9: 3f:3b:ac:8b:10:c3:64:34:07:92:7d:73:24:31:c0: 92:42:10:6f:a9:5c:ca:f8:74:8d:4c:40:6b:72:1c: e4:69:39:71:83:3b:63:0d:48:45:78:ed:8a:2d:7a: 42:38:71:83:4f:d8:de:f1:9d:f9:3d:cb:43:48:2f: 47:12:b7:b5:b6:1f:eb:f6:19:82:d7:21:70:56:16: ad:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0F:B8:34:8D:0A:33:0B:DF:2D:7B:8E:98:0E:5E:D3:C7:BC:89:2F X509v3 Authority Key Identifier: keyid:89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/69EBCB546BAE11F196CCF4747547A888.roa sbgp-ipAddrBlock: critical IPv4: 120.88.192.0/18 202.4.192.0/19 223.130.32.0/19 IPv6: 2405:b200::/32 Signature Algorithm: sha256WithRSAEncryption b8:1f:eb:2c:39:6e:ad:b0:15:e8:09:d3:46:18:67:71:5e:75: 86:69:37:21:b3:4b:ab:76:c2:61:ac:ef:0b:f3:de:5f:32:37: f3:dc:94:52:b8:e6:d8:96:6b:b0:60:10:e3:4f:a2:f7:9e:3d: d2:87:d0:a0:bb:ad:e9:da:be:83:78:bf:ab:c4:78:ba:e9:32: 87:b1:01:cd:f0:cc:e8:8e:a9:ab:18:d4:ef:b1:55:64:bd:67: 0f:07:05:f8:c7:2e:3d:8f:74:fc:7e:cd:91:b5:37:c8:5f:38: b4:78:fa:9b:90:71:bc:a1:2c:2f:c4:4c:05:d2:b2:f3:23:f3: c3:5a:39:cc:7c:6b:98:43:22:0a:ed:9a:21:3e:67:cb:c9:6b: f6:ae:8c:06:01:3f:5e:70:34:c0:e0:98:49:cf:f0:de:f6:28: 88:69:b3:22:d1:e1:af:c6:09:e5:42:0a:7c:af:3f:61:7f:5e: 4a:29:1f:10:18:e8:6b:d9:ac:7c:87:15:58:db:a6:56:76:11: ae:31:c4:6e:f0:6f:0c:76:47:93:ac:39:38:3a:3b:87:cd:21: d9:59:05:d7:cb:82:90:97:7a:d9:fc:a2:80:51:a0:da:c8:a2: 9e:82:78:c0:65:02:06:6e:79:3d:b0:d5:dd:90:92:b8:9a:bc: 4a:9c:1c:04 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGN0IxMTAvBgNVBAUTKDg5MEIxREVGRTg4RDU5MTk2QkNDN0I2NTI2OEM2MkU4 NkU1NEQ0NkQwHhcNMjYwNjE5MDcxMzQ3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTM0ZWMyYi1jMjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4caPy/PyY0JBcllvYFvKS57f/Rx0nACq5udgiCXRBpJYbHiSMcBoBAPtOvjD Njvc4Z4gUW0XaK8unckE4uHSoElezxCaJIGgp5rHxPnPaTcuGYjtBROMIAf7X+KM 850NoMOrtXXBFlME5r2ZHinxxQ+uDDMuRpYOCKrFwbBI0NZ6N6iObJqdlSnnFhkX 0DR4o290/kLYmgh1s1WNGUYmsN7+6mk9P/aEp8MxsP2k3D3EJMk/O6yLEMNkNAeS fXMkMcCSQhBvqVzK+HSNTEBrchzkaTlxgztjDUhFeO2KLXpCOHGDT9je8Z35PctD SC9HEre1th/r9hmC1yFwVhat7QIDAQABo4ICezCCAncwHQYDVR0OBBYEFH4PuDSN CjML3y17jpgOXtPHvIkvMB8GA1UdIwQYMBaAFIkLHe/ojVkZa8x7ZSaMYuhuVNRt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUY3Qi9BMTMxQjM5NEJC MzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldSbHJ6SHRsSm94aTZHNVUx RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRc2Q3LWlOV1JscnpIdGxKb3hpNkc1VTFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTVGN0IvQTEzMUIzOTRCQjM5MTFFRUE2NTU0MTdFQzRGOUFFMDIvNjlFQkNCNTQ2 QkFFMTFGMTk2Q0NGNDc0NzU0N0E4ODgucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQGeFjAAwQFygTAAwQF34IgMA0EAgACMAcDBQAkBbIAMA0GCSqGSIb3 DQEBCwUAA4IBAQC4H+ssOW6tsBXoCdNGGGdxXnWGaTchs0urdsJhrO8L895fMjfz 3JRSuObYlmuwYBDjT6L3nj3Sh9Cgu63p2r6DeL+rxHi66TKHsQHN8MzojqmrGNTv sVVkvWcPBwX4xy49j3T8fs2RtTfIXzi0ePqbkHG8oSwvxEwF0rLzI/PDWjnMfGuY QyIK7ZohPmfLyWv2rowGAT9ecDTA4JhJz/De9iiIabMi0eGvxgnlQgp8rz9hf15K KR8QGOhr2ax8hxVY26ZWdhGuMcRu8G8MdkeTrDk4OjuHzSHZWQXXy4KQl3rZ/KKA UaDayKKegnjAZQIGbnk9sNXdkJK4mrxKnBwE -----END CERTIFICATE-----Generated at Fri Jul 24 02:01:33 2026 by rpki-client