$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa File: EF2F0372C9F211E986C3B486C4F9AE02.roa (raw, json) Hash identifier: GbvfW/6Ib8dXYNkAkbSHRCSasYlTVMWPyWuYYz80j2o= Subject key identifier: D2:B4:52:37:53:A3:A3:A9:AA:EF:8B:B2:FF:30:5D:B7:C7:B4:2F:C3 Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Certificate serial: 1EC4 Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa Signing time: Tue 16 Jun 2026 16:18:38 +0000 ROA not before: Tue 16 Jun 2026 16:18:38 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 63989 IP address blocks: 103.58.148.0/24 maxlen: 24 103.58.149.0/24 maxlen: 24 103.58.150.0/24 maxlen: 24 103.58.151.0/24 maxlen: 24 202.9.89.0/24 maxlen: 24 202.9.90.0/24 maxlen: 24 202.94.166.0/24 maxlen: 24 2402:6880:1000::/48 maxlen: 48 2402:6880:2000::/48 maxlen: 48 2402:6880:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Jul 2026 16:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7876 (0x1ec4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Validity Not Before: Jun 16 16:18:38 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a31775e-f258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ee:de:02:61:57:99:f6:85:18:1d:fa:3c:ed: 7f:fc:36:ca:16:7e:06:51:43:59:93:5c:fd:7d:8b: 79:2e:90:05:6d:93:5f:18:26:4b:53:49:11:2d:16: bf:8b:b3:81:cd:8c:02:b4:10:20:c6:8f:ae:39:c1: 79:c9:a2:9d:5f:5c:17:a1:0e:41:c8:76:c5:a6:42: d0:d7:43:43:c9:44:58:8c:c3:92:07:0c:bc:29:9a: ec:76:53:2d:27:9a:ff:0d:8d:45:c3:19:c0:3d:da: 86:22:27:92:e4:9d:0b:95:eb:49:d7:88:54:99:0d: f4:6e:16:b8:3c:6f:34:bb:56:b9:4c:cf:1f:a7:a9: 5a:8e:87:c2:34:79:a3:49:47:33:43:ad:5d:1e:65: 20:85:54:e1:28:85:98:2f:06:bd:23:4b:2d:53:7e: 88:23:a2:2a:93:28:1b:c0:40:99:74:7a:33:70:ce: 97:3f:fd:c2:0a:6c:99:30:9d:a7:4b:19:21:d3:69: c5:34:8b:4e:22:21:1f:e0:e8:c1:e3:c2:d8:51:be: db:a6:42:c3:dc:8b:30:d1:00:8d:cc:c0:1e:1a:09: b0:fc:2c:6e:1c:f7:cf:66:69:cf:71:b5:4c:2f:66: 19:ea:35:b0:f2:be:e7:62:a0:da:54:74:04:10:85: 5f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B4:52:37:53:A3:A3:A9:AA:EF:8B:B2:FF:30:5D:B7:C7:B4:2F:C3 X509v3 Authority Key Identifier: keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.58.148.0/22 202.9.89.0-202.9.90.255 202.94.166.0/24 IPv6: 2402:6880:1000::/48 2402:6880:2000::/48 2402:6880:3000::/48 Signature Algorithm: sha256WithRSAEncryption 8d:24:20:db:bb:18:98:3f:a7:9d:83:d2:8c:e9:85:d2:ef:22: 76:bb:3d:04:f5:18:ac:30:c4:19:e6:7a:a6:67:91:62:1b:f8: 0f:8f:b6:32:1a:6a:ce:20:cf:fa:fc:d5:24:60:5c:3b:76:8b: 9a:3d:7c:c4:7a:5b:25:b8:00:0d:bf:f7:8f:c2:26:f6:51:03: c2:28:02:82:25:54:cf:f7:4c:44:91:50:c7:0c:5e:ab:72:ea: 8c:53:da:7f:74:0b:5d:20:70:d8:ff:d7:97:3f:52:5a:2a:d2: 2d:fe:66:8d:ec:a4:5c:48:96:23:35:25:29:14:c7:58:c0:50: 7b:0d:09:c5:21:f7:7b:95:ae:a7:93:20:c9:ca:75:fb:ba:d0: 0e:20:6c:01:57:ad:f4:db:12:50:76:c4:a9:f9:dd:b6:2d:07: aa:2f:68:f2:fb:1c:5a:08:22:e5:94:fd:e3:51:5f:e9:a7:58: 01:2d:49:c9:42:65:b4:d1:fb:a2:d7:62:80:cb:23:43:6c:84: d4:30:33:f8:2e:52:a2:1c:3f:36:51:0d:19:2a:f0:a1:57:81: ef:58:87:70:5b:a6:f2:ae:b1:18:80:31:9c:cc:0b:00:d7:03: cb:ee:ea:dc:71:3d:15:24:8f:82:c6:ca:1f:0f:88:e9:4e:4d: 45:69:8d:fc -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICHsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4 NDQyMzY2NzkwHhcNMjYwNjE2MTYxODM4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTMxNzc1ZS1mMjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+7eAmFXmfaFGB36PO1//DbKFn4GUUNZk1z9fYt5LpAFbZNfGCZLU0kRLRa/ i7OBzYwCtBAgxo+uOcF5yaKdX1wXoQ5ByHbFpkLQ10NDyURYjMOSBwy8KZrsdlMt J5r/DY1FwxnAPdqGIieS5J0LletJ14hUmQ30bha4PG80u1a5TM8fp6lajofCNHmj SUczQ61dHmUghVThKIWYLwa9I0stU36II6IqkygbwECZdHozcM6XP/3CCmyZMJ2n Sxkh02nFNItOIiEf4OjB48LYUb7bpkLD3Isw0QCNzMAeGgmw/CxuHPfPZmnPcbVM L2YZ6jWw8r7nYqDaVHQEEIVf1QIDAQABo4IClzCCApMwHQYDVR0OBBYEFNK0UjdT o6Opqu+Lsv8wXbfHtC/DMB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzRBRDcvRTM3RUM4RTY4RjRFMTFFNjhFRTdDRTZFQzRGOUFFMDIvRUYyRjAzNzJD OUYyMTFFOTg2QzNCNDg2QzRGOUFFMDIucm9hMFYGCCsGAQUFBwEHAQH/BEcwRTAg BAIAATAaAwQCZzqUMAwDBADKCVkDBADKCVoDBADKXqYwIQQCAAIwGwMHACQCaIAQ AAMHACQCaIAgAAMHACQCaIAwADANBgkqhkiG9w0BAQsFAAOCAQEAjSQg27sYmD+n nYPSjOmF0u8idrs9BPUYrDDEGeZ6pmeRYhv4D4+2MhpqziDP+vzVJGBcO3aLmj18 xHpbJbgADb/3j8Im9lEDwigCgiVUz/dMRJFQxwxeq3LqjFPaf3QLXSBw2P/Xlz9S WirSLf5mjeykXEiWIzUlKRTHWMBQew0JxSH3e5Wup5Mgycp1+7rQDiBsAVet9NsS UHbEqfndti0Hqi9o8vscWggi5ZT941Ff6adYAS1JyUJltNH7otdigMsjQ2yE1DAz +C5Sohw/NlENGSrwoVeB71iHcFum8q6xGIAxnMwLANcDy+7q3HE9FSSPgsbKHw+I 6U5NRWmN/A== -----END CERTIFICATE-----Generated at Sun Jul 12 15:52:40 2026 by rpki-client