$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/08A84BB2A2CA11F1AA7FA5DE4011F970.roa File: 08A84BB2A2CA11F1AA7FA5DE4011F970.roa (raw, json) Hash identifier: kPtroFGsDo7VmVAOzYrhinneBWJRGu/f+EC2E/kObtA= Subject key identifier: 85:64:B1:BF:BE:E7:A3:63:9B:13:F7:09:D8:CE:77:71:EA:36:01:3F Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 0C7A Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/08A84BB2A2CA11F1AA7FA5DE4011F970.roa Signing time: Sat 29 Aug 2026 16:11:24 +0000 ROA not before: Sat 29 Aug 2026 16:11:24 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 219394 IP address blocks: 61.18.128.0/24 maxlen: 24 61.18.133.0/24 maxlen: 24 61.18.178.0/24 maxlen: 24 61.18.188.0/24 maxlen: 24 61.18.199.0/24 maxlen: 24 61.18.201.0/24 maxlen: 24 61.18.210.0/24 maxlen: 24 61.18.214.0/24 maxlen: 24 61.18.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 19:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3194 (0xc7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Validity Not Before: Aug 29 16:11:24 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a9304ac-9984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c0:47:99:4b:3d:dc:ac:62:cc:1e:e7:c9:aa: be:46:08:34:59:20:88:0a:0f:74:c5:f2:16:c8:76: 71:cb:76:7f:70:27:e4:52:e4:90:0e:37:83:6e:85: 50:53:d3:72:3c:a5:67:92:11:13:52:df:39:2f:73: cf:38:13:83:8a:cf:27:db:d0:b2:65:56:49:85:6b: 16:0e:63:d9:50:a7:61:27:cf:4b:3a:6d:3d:e1:2a: 3a:88:0e:fb:29:05:90:40:66:3e:42:43:b0:cf:2c: 07:a1:eb:03:3c:e0:4d:f2:d6:c2:fb:2b:c9:57:1b: 6b:16:13:83:f9:46:f0:dc:c4:a9:de:f2:af:10:3f: d1:45:57:8d:82:dd:34:72:5d:53:e1:ea:1e:e7:3c: e9:d0:9b:58:f9:7d:62:36:88:51:3d:dc:18:f6:f6: d5:00:6a:72:20:2a:ed:3c:ff:91:7e:5c:34:0c:31: 3e:01:aa:44:d4:a0:ea:56:b1:a1:64:42:f7:5d:81: b9:67:53:83:dc:31:c6:88:92:ee:39:0e:7a:d1:9e: 3d:9d:19:7a:5b:f2:e1:c3:5f:76:ca:1a:27:7e:a8: e3:cb:3a:49:26:72:00:47:9a:fc:f0:f4:80:76:0a: 04:02:49:6e:6d:db:48:db:e0:ea:63:7f:fb:f8:1c: b7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:64:B1:BF:BE:E7:A3:63:9B:13:F7:09:D8:CE:77:71:EA:36:01:3F X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/08A84BB2A2CA11F1AA7FA5DE4011F970.roa sbgp-ipAddrBlock: critical IPv4: 61.18.128.0/24 61.18.133.0/24 61.18.178.0/24 61.18.188.0/24 61.18.199.0/24 61.18.201.0/24 61.18.210.0/24 61.18.214.0/24 61.18.255.0/24 Signature Algorithm: sha256WithRSAEncryption 32:76:25:b5:8c:be:33:d1:e6:b9:be:c8:c8:fc:5b:98:d4:56: 8f:95:af:07:47:69:9b:63:2e:17:d3:14:d6:3b:d3:5d:91:12: 9e:f9:9b:b9:11:d6:54:0a:71:59:16:21:23:a2:7f:3a:4f:33: b5:fd:1a:98:9d:69:94:0b:46:9a:8f:a7:25:66:ab:3a:94:38: d4:1c:88:35:88:f4:8f:03:30:d8:b0:ed:6e:5a:1e:68:4e:26: 67:f7:64:3e:86:ad:49:95:b9:bf:20:0c:e6:07:e6:eb:07:a9: 99:c3:6f:d3:20:e1:d6:ae:02:bf:e0:6d:39:5d:b9:22:1d:0e: 27:5d:06:2e:05:d1:8f:fe:6b:92:90:3b:a7:46:e2:10:20:c2: 9b:28:17:dc:27:a1:9f:14:8b:86:14:d1:85:fd:b4:1b:35:d5: 26:03:cb:94:40:14:5c:16:6b:6f:85:cc:e4:e2:90:88:09:a7: 69:bd:38:d2:c1:c0:f9:a9:c0:b5:a1:22:30:a1:06:4f:3b:5f: 53:f4:89:31:4b:78:c3:06:08:b7:96:10:2d:13:6f:4e:ec:aa: 25:87:82:66:99:05:6a:9e:29:15:e2:99:8a:a6:91:21:95:a3: 37:a1:09:5e:07:e3:a7:e9:b6:02:25:46:27:73:64:b6:4e:7e: 16:50:a6:f2 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgICDHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjYwODI5MTYxMTI0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTkzMDRhYy05OTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8BHmUs93KxizB7nyaq+Rgg0WSCICg90xfIWyHZxy3Z/cCfkUuSQDjeDboVQ U9NyPKVnkhETUt85L3PPOBODis8n29CyZVZJhWsWDmPZUKdhJ89LOm094So6iA77 KQWQQGY+QkOwzywHoesDPOBN8tbC+yvJVxtrFhOD+Ubw3MSp3vKvED/RRVeNgt00 cl1T4eoe5zzp0JtY+X1iNohRPdwY9vbVAGpyICrtPP+Rflw0DDE+AapE1KDqVrGh ZEL3XYG5Z1OD3DHGiJLuOQ560Z49nRl6W/Lhw192yhonfqjjyzpJJnIAR5r88PSA dgoEAklubdtI2+DqY3/7+By3fwIDAQABo4ICkDCCAowwHQYDVR0OBBYEFIVksb++ 56NjmxP3CdjOd3HqNgE/MB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvMDhBODRCQjJB MkNBMTFGMUFBN0ZBNURFNDAxMUY5NzAucm9hME8GCCsGAQUFBwEHAQH/BEAwPjA8 BAIAATA2AwQAPRKAAwQAPRKFAwQAPRKyAwQAPRK8AwQAPRLHAwQAPRLJAwQAPRLS AwQAPRLWAwQAPRL/MA0GCSqGSIb3DQEBCwUAA4IBAQAydiW1jL4z0ea5vsjI/FuY 1FaPla8HR2mbYy4X0xTWO9NdkRKe+Zu5EdZUCnFZFiEjon86TzO1/RqYnWmUC0aa j6clZqs6lDjUHIg1iPSPAzDYsO1uWh5oTiZn92Q+hq1Jlbm/IAzmB+brB6mZw2/T IOHWrgK/4G05XbkiHQ4nXQYuBdGP/muSkDunRuIQIMKbKBfcJ6GfFIuGFNGF/bQb NdUmA8uUQBRcFmtvhczk4pCICadpvTjSwcD5qcC1oSIwoQZPO19T9IkxS3jDBgi3 lhAtE29O7Kolh4JmmQVqnikV4pmKppEhlaM3oQleB+On6bYCJUYnc2S2Tn4WUKby -----END CERTIFICATE-----Generated at Wed Sep 9 23:09:55 2026 by rpki-client