$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/9427EF0A7CA411F09AE49B57C4F9AE02.roa File: 9427EF0A7CA411F09AE49B57C4F9AE02.roa (raw, json) Hash identifier: TpT4U8yHKg64HLNgX85ae6aJUp587b7Y5hN18WZtP4E= Subject key identifier: 5E:19:FD:4F:81:8F:14:B7:C5:11:5A:66:39:28:CB:7E:9E:C3:A2:3C Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Certificate serial: 3665 Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/9427EF0A7CA411F09AE49B57C4F9AE02.roa Signing time: Mon 06 Jul 2026 02:14:58 +0000 ROA not before: Mon 06 Jul 2026 02:14:58 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 7616 IP address blocks: 203.130.128.0/19 maxlen: 20 203.130.146.0/24 maxlen: 24 203.147.10.0/24 maxlen: 24 203.147.16.0/20 maxlen: 21 203.147.31.0/24 maxlen: 24 203.147.32.0/20 maxlen: 21 203.147.42.0/24 maxlen: 24 203.147.48.0/20 maxlen: 20 203.147.52.0/24 maxlen: 24 203.147.53.0/24 maxlen: 24 203.147.54.0/24 maxlen: 24 203.156.18.0/24 maxlen: 24 203.156.48.0/20 maxlen: 20 203.156.64.0/20 maxlen: 20 203.156.80.0/20 maxlen: 20 203.156.95.0/24 maxlen: 24 203.156.128.0/18 maxlen: 20 203.156.146.0/24 maxlen: 24 203.156.147.0/24 maxlen: 24 203.156.148.0/24 maxlen: 24 203.156.149.0/24 maxlen: 24 203.156.150.0/24 maxlen: 24 203.156.152.0/21 maxlen: 21 203.156.152.0/24 maxlen: 24 203.156.189.0/24 maxlen: 24 2403:bf00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13925 (0x3665) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Validity Not Before: Jul 6 02:14:58 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a4b0fa2-baaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:13:3f:e0:95:c0:54:50:a0:7f:63:41:d4:ec: 43:96:ab:f6:6a:f5:df:33:d5:f7:18:91:04:28:a7: 9a:8a:dc:c6:98:2c:3f:97:f9:c2:4e:88:57:8b:52: 71:42:f2:1e:2e:7c:65:4c:71:93:34:14:db:5b:7c: 78:c0:d6:d6:08:3d:fa:3d:f7:e2:42:20:0e:06:d8: 60:ba:7b:fb:52:b8:b5:7d:8d:c1:ce:32:ac:32:4f: a1:55:9b:fc:82:31:73:55:c7:a8:ca:ae:bc:7c:bf: 7b:9a:8a:e4:c1:ce:65:8c:3c:f2:d3:48:1d:0b:50: e9:87:10:eb:af:7f:fa:7d:c7:e0:16:8c:e1:84:c8: 2e:08:46:25:c8:c0:83:c9:a0:03:43:fe:2b:3e:71: bb:58:81:22:11:6d:f7:dc:4d:4d:50:ed:85:a2:8c: 50:87:6d:8b:35:b3:0b:4b:53:ef:58:66:1b:b6:21: 58:91:a6:d2:53:bc:db:f1:35:5e:97:f4:c1:c7:62: 0d:25:8f:30:3f:54:a7:53:56:66:ff:ef:8f:48:14: 48:e0:20:99:17:f1:2f:95:4c:9c:7e:4a:ea:d4:78: 2c:6a:ac:ff:91:ba:40:38:4b:15:ae:b2:ec:dc:99: 83:cf:76:57:c8:a0:cb:1d:1c:f3:57:7c:ef:d4:f5: 3a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:19:FD:4F:81:8F:14:B7:C5:11:5A:66:39:28:CB:7E:9E:C3:A2:3C X509v3 Authority Key Identifier: keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/9427EF0A7CA411F09AE49B57C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.130.128.0/19 203.147.10.0/24 203.147.16.0-203.147.63.255 203.156.18.0/24 203.156.48.0-203.156.95.255 203.156.128.0/18 IPv6: 2403:bf00::/32 Signature Algorithm: sha256WithRSAEncryption b6:f3:90:6d:23:c8:c8:e1:cb:db:5c:2b:59:b7:68:dc:04:44: c7:e2:12:df:65:05:bd:bc:b9:bf:45:ca:ed:25:2f:bf:47:39: b5:c2:78:47:11:38:b0:b5:89:ab:2c:2f:07:ef:29:2c:44:90: 5e:38:f5:26:ad:e9:cf:90:c3:a1:3a:63:d4:40:fe:2a:23:d9: 0f:3d:14:40:7b:71:a2:6a:1d:52:63:a1:9c:92:a2:ca:77:30: ad:69:86:83:33:9c:e1:17:6c:45:60:8c:aa:ce:a6:d6:23:2d: c6:fc:1e:a3:20:2a:3d:a0:32:22:72:be:5f:37:14:26:58:bd: ee:c9:c9:35:98:f3:73:7e:46:53:ad:ac:08:13:a4:3e:65:2e: 3a:c3:6f:3b:91:57:78:eb:bc:d1:b8:9a:f2:0e:70:a4:9e:28: 2c:08:78:8f:2f:00:e6:26:b4:aa:77:b4:52:8a:c3:14:c6:05: 04:41:0c:2c:7a:4b:14:94:78:3f:91:fa:70:23:84:0f:a2:fd: 12:17:54:32:97:38:c4:c4:b7:6b:8b:a4:10:24:59:5f:8b:77: 9e:fd:6c:93:ad:23:88:6e:68:fb:25:99:db:36:39:b5:68:df: 1f:b7:96:83:8d:dc:9b:db:05:2d:08:80:bd:ad:91:c7:89:b5: 31:ae:62:0e -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICNmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5 QzhGNjU5MEQwHhcNMjYwNzA2MDIxNDU4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiMGZhMi1iYWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRM/4JXAVFCgf2NB1OxDlqv2avXfM9X3GJEEKKeaitzGmCw/l/nCTohXi1Jx QvIeLnxlTHGTNBTbW3x4wNbWCD36PffiQiAOBthgunv7Uri1fY3BzjKsMk+hVZv8 gjFzVceoyq68fL97morkwc5ljDzy00gdC1DphxDrr3/6fcfgFozhhMguCEYlyMCD yaADQ/4rPnG7WIEiEW333E1NUO2FooxQh22LNbMLS1PvWGYbtiFYkabSU7zb8TVe l/TBx2INJY8wP1SnU1Zm/++PSBRI4CCZF/EvlUycfkrq1Hgsaqz/kbpAOEsVrrLs 3JmDz3ZXyKDLHRzzV3zv1PU6MQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFF4Z/U+B jxS3xRFaZjkoy36ew6I8MB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc4MUEvRDUyMTQyNzAxRDlCMTFFMkI4MjFGRDg5MDhCMDJDRDIvOTQyN0VGMEE3 Q0E0MTFGMDlBRTQ5QjU3QzRGOUFFMDIucm9hMFwGCCsGAQUFBwEHAQH/BE0wSzA6 BAIAATA0AwQFy4KAAwQAy5MKMAwDBATLkxADBAbLkwADBADLnBIwDAMEBMucMAME BcucQAMEBsucgDANBAIAAjAHAwUAJAO/ADANBgkqhkiG9w0BAQsFAAOCAQEAtvOQ bSPIyOHL21wrWbdo3AREx+IS32UFvby5v0XK7SUvv0c5tcJ4RxE4sLWJqywvB+8p LESQXjj1Jq3pz5DDoTpj1ED+KiPZDz0UQHtxomodUmOhnJKiyncwrWmGgzOc4Rds RWCMqs6m1iMtxvweoyAqPaAyInK+XzcUJli97snJNZjzc35GU62sCBOkPmUuOsNv O5FXeOu80bia8g5wpJ4oLAh4jy8A5ia0qne0UorDFMYFBEEMLHpLFJR4P5H6cCOE D6L9EhdUMpc4xMS3a4ukECRZX4t3nv1sk60jiG5o+yWZ2zY5tWjfH7eWg43cm9sF LQiAva2Rx4m1Ma5iDg== -----END CERTIFICATE-----Generated at Tue Jul 21 22:19:13 2026 by rpki-client