$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EE7D5645A5D11EB9B234479C4F9AE02.roa File: 3EE7D5645A5D11EB9B234479C4F9AE02.roa (raw, json) Hash identifier: nnzOEmhjdrQo2SFZuzXADxvbHDiYX8qzF8sQ36qlQUI= Subject key identifier: 0F:C5:7F:8D:1D:98:BA:87:76:3C:42:83:23:3D:71:B9:2F:69:03:51 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3BD2 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EE7D5645A5D11EB9B234479C4F9AE02.roa Signing time: Mon 06 Jul 2026 15:10:21 +0000 ROA not before: Mon 06 Jul 2026 15:10:21 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 131460 IP address blocks: 61.90.227.0/24 maxlen: 24 119.46.128.0/24 maxlen: 24 119.46.129.0/24 maxlen: 24 119.46.199.0/24 maxlen: 24 119.46.249.0/24 maxlen: 24 203.144.132.0/24 maxlen: 24 203.144.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15314 (0x3bd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 6 15:10:21 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a4bc55d-c854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b7:c0:44:3b:68:86:f5:d2:39:45:84:be:28: 71:02:2c:ca:a2:9c:03:4d:29:1a:6d:02:a3:38:7e: 0d:ae:75:09:af:63:0a:c8:b1:8f:93:af:88:8a:bd: 25:69:92:9b:29:49:9a:1e:1f:e2:9b:53:9b:1e:27: 4e:1e:19:69:ec:ba:46:f6:03:16:c7:18:2e:41:24: 89:c1:41:01:9c:8f:08:53:e3:b8:20:82:f3:74:bb: 63:61:25:ce:dd:a9:c7:fd:55:b3:80:c0:b8:12:26: bf:86:50:09:77:b1:46:20:93:fd:65:8f:10:89:ec: 47:9e:6a:0b:f1:20:91:f7:3b:4e:bb:a8:46:40:c9: 05:44:0f:80:71:10:a6:20:fa:4b:8e:ab:75:c5:20: 46:25:ee:be:69:aa:e0:be:cf:80:e9:94:43:e5:eb: 7a:ce:33:92:98:7a:6d:57:4e:5f:ec:f3:1a:17:ef: b9:cf:4d:7d:59:70:50:84:f5:86:29:5e:77:37:26: 02:07:e0:0b:9b:69:1f:47:0d:28:27:bb:f2:97:4b: 8f:e3:49:2e:db:18:f2:8a:4b:30:6b:c7:a7:26:0a: ca:9b:d9:3e:d4:bb:a9:61:a4:17:70:7a:a3:f3:2d: 1e:1a:07:1d:7c:26:01:33:5d:fe:ee:33:a2:dc:38: 73:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C5:7F:8D:1D:98:BA:87:76:3C:42:83:23:3D:71:B9:2F:69:03:51 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EE7D5645A5D11EB9B234479C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.90.227.0/24 119.46.128.0/23 119.46.199.0/24 119.46.249.0/24 203.144.132.0/24 203.144.213.0/24 Signature Algorithm: sha256WithRSAEncryption 87:63:a8:de:3b:41:23:56:1c:0c:a0:e2:98:23:13:06:58:72: d9:ea:b0:78:0b:1d:82:3d:4d:5c:07:03:bb:29:71:bf:18:c8: 81:e4:96:7f:45:f4:f0:5d:8d:d5:5c:24:4c:ca:ef:52:ca:d8: c6:5a:d8:5c:83:ad:76:53:e7:69:0c:51:c7:85:08:61:9a:b7: 61:1f:8f:87:f2:6e:06:ac:cc:e4:e7:19:b4:57:f2:d4:ca:7f: 47:8b:d3:2d:f9:58:d9:2b:b8:2d:1c:53:dc:ac:6e:aa:3e:7a: 4e:80:98:6d:ab:88:bb:dc:0e:45:55:93:2b:8b:16:71:77:46: 9f:53:a4:cf:db:cc:7c:ea:66:f4:0a:d8:d7:6f:50:07:a2:de: 29:e1:71:a0:81:f1:c1:57:2b:80:44:5b:b9:c2:13:6d:a0:05: 1e:97:b4:bb:a5:56:35:17:24:f2:29:ab:61:82:83:0e:f5:35: 01:f0:81:e1:8b:55:d2:6b:27:10:72:b3:cd:7b:f1:1f:9f:4b: c1:8f:7c:57:97:90:7b:f2:0a:2e:86:de:2c:05:65:9e:6a:c7: a1:1b:93:30:3b:f3:10:95:ed:c0:24:23:bc:45:34:15:56:af: b7:21:ae:56:17:fe:e0:07:a9:7c:e6:cd:81:d5:da:5b:55:fe: 37:b0:7e:b1 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICO9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjYwNzA2MTUxMDIxWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiYzU1ZC1jODU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmLfARDtohvXSOUWEvihxAizKopwDTSkabQKjOH4NrnUJr2MKyLGPk6+Iir0l aZKbKUmaHh/im1ObHidOHhlp7LpG9gMWxxguQSSJwUEBnI8IU+O4IILzdLtjYSXO 3anH/VWzgMC4Eia/hlAJd7FGIJP9ZY8QiexHnmoL8SCR9ztOu6hGQMkFRA+AcRCm IPpLjqt1xSBGJe6+aargvs+A6ZRD5et6zjOSmHptV05f7PMaF++5z019WXBQhPWG KV53NyYCB+ALm2kfRw0oJ7vyl0uP40ku2xjyikswa8enJgrKm9k+1LupYaQXcHqj 8y0eGgcdfCYBM13+7jOi3DhzSQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFA/Ff40d mLqHdjxCgyM9cbkvaQNRMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvM0VFN0Q1NjQ1 QTVEMTFFQjlCMjM0NDc5QzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAATAkAwQAPVrjAwQBdy6AAwQAdy7HAwQAdy75AwQAy5CEAwQAy5DVMA0GCSqG SIb3DQEBCwUAA4IBAQCHY6jeO0EjVhwMoOKYIxMGWHLZ6rB4Cx2CPU1cBwO7KXG/ GMiB5JZ/RfTwXY3VXCRMyu9SytjGWthcg612U+dpDFHHhQhhmrdhH4+H8m4GrMzk 5xm0V/LUyn9Hi9Mt+VjZK7gtHFPcrG6qPnpOgJhtq4i73A5FVZMrixZxd0afU6TP 28x86mb0CtjXb1AHot4p4XGggfHBVyuARFu5whNtoAUel7S7pVY1FyTyKathgoMO 9TUB8IHhi1XSaycQcrPNe/Efn0vBj3xXl5B78gouht4sBWWeasehG5MwO/MQle3A JCO8RTQVVq+3Ia5WF/7gB6l85s2B1dpbVf43sH6x -----END CERTIFICATE-----Generated at Tue Jul 21 19:38:19 2026 by rpki-client