$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/E3805652C5D511F1A3A23DEB3511F970.roa File: E3805652C5D511F1A3A23DEB3511F970.roa (raw, json) Hash identifier: u9GrkrjV/2yDgo3UGBkaRvxl5uzDAFmgGH1xnivtXYA= Subject key identifier: 26:A0:18:E9:B0:00:0E:01:DE:D1:91:03:25:1A:A4:B1:84:80:F2:56 Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 0F03 Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/E3805652C5D511F1A3A23DEB3511F970.roa Signing time: Mon 12 Oct 2026 00:43:06 +0000 ROA not before: Mon 12 Oct 2026 00:43:06 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 218797 IP address blocks: 61.15.192.0/24 maxlen: 24 61.15.194.0/24 maxlen: 24 61.18.161.0/24 maxlen: 24 61.18.163.0/24 maxlen: 24 61.18.165.0/24 maxlen: 24 61.18.171.0/24 maxlen: 24 61.18.173.0/24 maxlen: 24 61.18.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 06:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3843 (0xf03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Validity Not Before: Oct 12 00:43:06 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6acc2d1a-35a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:15:33:a6:e4:5f:bc:24:b4:65:93:d5:b8:ff: 75:c3:26:98:4e:d9:ce:dd:77:4d:eb:52:d8:fc:78: a0:7b:05:45:b4:aa:53:d3:2a:cd:72:63:40:ff:cc: 6f:db:45:96:d4:be:1f:53:19:62:11:d2:59:d2:e9: 1e:df:c4:a9:2f:00:41:9b:64:57:7b:43:d8:46:72: 7b:fc:f9:fd:8a:07:58:e5:45:17:19:77:37:81:a7: b4:f7:aa:40:ff:0b:4e:de:7d:d0:35:26:46:5c:95: 35:7b:dc:e4:0d:b9:87:32:69:8d:83:d7:1b:ca:98: 0d:2b:e3:b5:4b:87:18:bc:f6:93:b6:4c:5e:b2:2a: 34:23:17:54:d9:61:70:71:5c:8e:4b:fc:59:e8:b1: d2:7e:51:f3:d2:a3:be:cf:2e:b0:81:cc:a9:6a:91: 68:16:00:cf:92:f5:bd:17:f8:46:a9:83:7d:96:e0: 9e:75:98:67:7d:3a:4d:96:df:b3:e7:d9:db:92:f0: d5:95:9c:ac:2d:f1:b5:c0:20:c7:4d:ab:40:af:a7: 9a:c7:0e:06:79:1a:02:13:09:b7:fb:2c:2a:9f:bb: bc:ac:30:ec:d0:e6:3b:67:6e:3d:d0:05:c3:4a:0c: 04:7a:25:90:23:5f:f0:6b:9c:83:e5:bb:64:d9:b1: 51:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A0:18:E9:B0:00:0E:01:DE:D1:91:03:25:1A:A4:B1:84:80:F2:56 X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/E3805652C5D511F1A3A23DEB3511F970.roa sbgp-ipAddrBlock: critical IPv4: 61.15.192.0/24 61.15.194.0/24 61.18.161.0/24 61.18.163.0/24 61.18.165.0/24 61.18.171.0/24 61.18.173.0/24 61.18.175.0/24 Signature Algorithm: sha256WithRSAEncryption 96:5d:59:90:b1:7b:8d:a6:7f:0c:20:09:f1:e4:c7:13:b8:d6: 38:03:55:8c:6c:44:eb:42:c6:3a:59:46:63:65:b4:e2:4c:9d: 11:4b:48:3b:9e:4e:a2:df:bc:a7:c4:68:bc:ea:ce:4b:35:94: e2:89:2b:bb:df:c9:09:a7:da:ab:5e:02:79:5f:5c:ac:de:fc: 92:de:c5:87:92:12:d8:38:81:6f:f3:fc:6a:f6:ed:94:46:aa: a8:2b:be:dc:9c:ac:ef:86:d5:f5:71:97:43:0b:e1:79:18:1c: 63:55:66:43:cc:f1:a9:51:51:d6:20:b2:f6:17:51:1f:78:0e: 9c:e2:84:2f:94:e3:f8:75:ba:6f:37:56:7e:d3:35:95:b0:e7: 4a:59:a2:de:47:8d:40:71:c2:5b:d9:04:9f:9d:23:da:76:ba: be:9f:c3:7d:e5:ca:42:15:6f:7f:e6:c7:49:4a:96:ff:af:61: db:44:c1:ef:4a:db:9f:10:18:38:b0:ff:d1:b9:41:fb:7d:50: 41:18:21:89:3d:6f:ce:3c:af:c5:04:9e:f0:ea:47:45:73:38: 00:a2:76:22:93:ac:6c:c8:d7:b2:7d:e5:07:aa:fa:64:79:92: 38:98:6c:4a:3c:1b:11:f0:7e:20:bb:d7:33:68:ba:07:2a:f4: ca:9b:1a:d2 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgICDwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjYxMDEyMDA0MzA2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YWNjMmQxYS0zNWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1BUzpuRfvCS0ZZPVuP91wyaYTtnO3XdN61LY/HigewVFtKpT0yrNcmNA/8xv 20WW1L4fUxliEdJZ0uke38SpLwBBm2RXe0PYRnJ7/Pn9igdY5UUXGXc3gae096pA /wtO3n3QNSZGXJU1e9zkDbmHMmmNg9cbypgNK+O1S4cYvPaTtkxesio0IxdU2WFw cVyOS/xZ6LHSflHz0qO+zy6wgcypapFoFgDPkvW9F/hGqYN9luCedZhnfTpNlt+z 59nbkvDVlZysLfG1wCDHTatAr6eaxw4GeRoCEwm3+ywqn7u8rDDs0OY7Z2490AXD SgwEeiWQI1/wa5yD5btk2bFRNQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFCagGOmw AA4B3tGRAyUapLGEgPJWMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvRTM4MDU2NTJD NUQ1MTFGMUEzQTIzREVCMzUxMUY5NzAucm9hMEkGCCsGAQUFBwEHAQH/BDowODA2 BAIAATAwAwQAPQ/AAwQAPQ/CAwQAPRKhAwQAPRKjAwQAPRKlAwQAPRKrAwQAPRKt AwQAPRKvMA0GCSqGSIb3DQEBCwUAA4IBAQCWXVmQsXuNpn8MIAnx5McTuNY4A1WM bETrQsY6WUZjZbTiTJ0RS0g7nk6i37ynxGi86s5LNZTiiSu738kJp9qrXgJ5X1ys 3vyS3sWHkhLYOIFv8/xq9u2URqqoK77cnKzvhtX1cZdDC+F5GBxjVWZDzPGpUVHW ILL2F1EfeA6c4oQvlOP4dbpvN1Z+0zWVsOdKWaLeR41AccJb2QSfnSPadrq+n8N9 5cpCFW9/5sdJSpb/r2HbRMHvStufEBg4sP/RuUH7fVBBGCGJPW/OPK/FBJ7w6kdF czgAonYik6xsyNeyfeUHqvpkeZI4mGxKPBsR8H4gu9czaLoHKvTKmxrS -----END CERTIFICATE-----Generated at Sun Oct 25 20:56:27 2026 by rpki-client