$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/46FEF7041E0111E9A590C837C4F9AE02.roa File: 46FEF7041E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: aJWY0iAM8bGncSNGpQ74HFZFuxYTEqOn1DFD72Wxu3s= Subject key identifier: A5:B5:31:4C:1E:DF:E2:DF:CA:A7:D2:BD:3A:5C:CA:F7:A7:DE:63:DB Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3C10 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/46FEF7041E0111E9A590C837C4F9AE02.roa Signing time: Mon 06 Jul 2026 15:12:26 +0000 ROA not before: Mon 06 Jul 2026 15:12:26 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 37992 IP address blocks: 61.90.234.0/24 maxlen: 24 61.90.235.0/24 maxlen: 24 61.90.236.0/24 maxlen: 24 61.90.237.0/24 maxlen: 24 119.46.188.0/24 maxlen: 24 119.46.189.0/24 maxlen: 24 119.46.190.0/24 maxlen: 24 119.46.191.0/24 maxlen: 24 119.46.235.0/24 maxlen: 24 119.46.236.0/24 maxlen: 24 119.46.237.0/24 maxlen: 24 119.46.238.0/24 maxlen: 24 2001:fb0:100e::/48 maxlen: 48 2001:fb0:100f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15376 (0x3c10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 6 15:12:26 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a4bc5da-9668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:59:43:ab:50:9b:39:b7:5a:54:c6:3e:e5:1a: 5d:9e:2d:9a:c6:7c:4b:24:63:ba:16:66:f5:fd:c1: f3:39:a0:93:30:29:06:94:27:e3:99:85:43:c0:58: dc:04:3f:c2:7a:d1:a2:d2:4c:a0:08:de:f2:41:3f: fe:b1:1d:09:eb:6a:59:81:3d:dc:e7:0c:8f:70:76: d5:81:f0:dd:cd:99:a0:f0:a1:f6:eb:7f:9a:6e:ba: a8:d2:bc:27:5d:de:6f:ce:ff:03:d2:78:7d:33:15: 14:08:9f:39:03:6f:2a:de:b2:9e:ee:f9:8a:3e:27: 06:f0:0a:27:c8:84:fa:74:77:0d:90:71:b3:e2:f5: fe:60:d2:1e:e7:76:a5:9c:3b:99:a7:cc:dc:da:b8: 8d:d9:26:57:6c:fc:54:fa:f2:c1:0a:72:57:66:ca: fd:a7:7a:15:ef:bc:7e:03:af:08:b2:61:7b:32:4c: e1:19:03:98:3a:93:87:82:da:b0:73:95:ac:f1:ef: 93:ef:8d:09:75:a5:ff:18:1a:4c:c7:83:fc:3c:12: 43:04:93:4b:89:c8:b8:bb:50:23:f7:0f:3f:6e:3d: 18:ab:b4:15:d8:f5:c7:83:d0:64:02:8c:83:a8:83: d3:fc:ca:8b:95:d3:ac:43:2c:cf:06:25:05:63:44: 33:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B5:31:4C:1E:DF:E2:DF:CA:A7:D2:BD:3A:5C:CA:F7:A7:DE:63:DB X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/46FEF7041E0111E9A590C837C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.90.234.0-61.90.237.255 119.46.188.0/22 119.46.235.0-119.46.238.255 IPv6: 2001:fb0:100e::/47 Signature Algorithm: sha256WithRSAEncryption 6c:15:b0:5c:6b:c1:d9:59:30:b5:7d:e0:cd:40:6d:43:4b:53: 0a:3a:51:11:1a:8b:35:76:8f:11:20:43:3c:57:d6:dc:73:cb: 99:58:ee:22:f7:98:30:33:67:c9:e7:4d:be:74:1e:c0:23:75: 22:61:1c:8b:c2:ae:92:54:82:cc:43:0f:b0:ba:8f:65:ca:7c: a0:f6:51:fb:41:d1:72:b9:53:ab:30:2e:6e:ab:37:bc:1b:26: ea:04:4a:43:f3:70:b3:b5:3c:eb:5c:13:55:62:1a:f5:2f:80: 5a:e7:65:45:68:f3:9f:c1:28:00:37:d0:70:90:0c:4d:14:70: 31:2a:61:f3:01:48:00:cc:8e:6e:7a:df:1d:63:de:1b:d8:32: 48:54:61:e3:4d:88:2a:94:26:a1:68:37:f4:cd:a2:80:23:b7: c1:f8:5c:ac:49:91:c5:e9:d0:c2:36:de:23:57:46:36:2a:a0: 07:01:cf:9c:5c:ed:e3:d0:08:e7:ae:4a:03:a8:8f:fb:d6:17: 38:7a:af:87:bd:64:04:b4:8a:32:2a:5b:17:0b:29:9a:14:c4: 22:51:3e:2c:c3:ab:55:6c:8e:14:9c:fc:ee:78:d8:5c:59:69: bc:90:ab:7d:9c:3c:e8:36:a7:59:bd:ae:54:2b:66:38:db:17: 39:0c:41:14 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgICPBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjYwNzA2MTUxMjI2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiYzVkYS05NjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm1lDq1CbObdaVMY+5Rpdni2axnxLJGO6Fmb1/cHzOaCTMCkGlCfjmYVDwFjc BD/CetGi0kygCN7yQT/+sR0J62pZgT3c5wyPcHbVgfDdzZmg8KH263+abrqo0rwn Xd5vzv8D0nh9MxUUCJ85A28q3rKe7vmKPicG8AonyIT6dHcNkHGz4vX+YNIe53al nDuZp8zc2riN2SZXbPxU+vLBCnJXZsr9p3oV77x+A68IsmF7MkzhGQOYOpOHgtqw c5Ws8e+T740JdaX/GBpMx4P8PBJDBJNLici4u1Aj9w8/bj0Yq7QV2PXHg9BkAoyD qIPT/MqLldOsQyzPBiUFY0QzmwIDAQABo4ICjTCCAokwHQYDVR0OBBYEFKW1MUwe 3+LfyqfSvTpcyven3mPbMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNDZGRUY3MDQx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMEwGCCsGAQUFBwEHAQH/BD0wOzAo BAIAATAiMAwDBAE9WuoDBAE9WuwDBAJ3LrwwDAMEAHcu6wMEAHcu7jAPBAIAAjAJ AwcBIAEPsBAOMA0GCSqGSIb3DQEBCwUAA4IBAQBsFbBca8HZWTC1feDNQG1DS1MK OlERGos1do8RIEM8V9bcc8uZWO4i95gwM2fJ502+dB7AI3UiYRyLwq6SVILMQw+w uo9lynyg9lH7QdFyuVOrMC5uqze8GybqBEpD83CztTzrXBNVYhr1L4Ba52VFaPOf wSgAN9BwkAxNFHAxKmHzAUgAzI5uet8dY94b2DJIVGHjTYgqlCahaDf0zaKAI7fB +FysSZHF6dDCNt4jV0Y2KqAHAc+cXO3j0AjnrkoDqI/71hc4eq+HvWQEtIoyKlsX CymaFMQiUT4sw6tVbI4UnPzueNhcWWm8kKt9nDzoNqdZva5UK2Y42xc5DEEU -----END CERTIFICATE-----Generated at Tue Jul 21 19:38:26 2026 by rpki-client