$ rpki-client -vvvf rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/9156042083EB11ECB7EC3B76C4F9AE02.roa File: 9156042083EB11ECB7EC3B76C4F9AE02.roa (raw, json) Hash identifier: c4oJohmDLnY09FCLPOgRv0Cbh5ei/cN3Yf+COoakuH8= Subject key identifier: 00:9E:DC:BC:F9:1F:88:E7:FA:FF:17:4B:BE:02:CC:8B:50:AB:95:CA Certificate issuer: /CN=A914247C/serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Certificate serial: 0C19 Authority key identifier: D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/9156042083EB11ECB7EC3B76C4F9AE02.roa Signing time: Mon 14 Sep 2026 19:38:23 +0000 ROA not before: Mon 14 Sep 2026 19:38:23 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 24014 IP address blocks: 131.244.0.0/15 maxlen: 15 131.244.0.0/16 maxlen: 16 192.48.109.0/24 maxlen: 24 192.48.110.0/24 maxlen: 24 192.88.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3097 (0xc19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C, serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Validity Not Before: Sep 14 19:38:23 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aa84d2e-7fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ff:5a:f5:0e:8b:93:6d:2a:48:77:4a:31:59: c5:f1:f2:58:cb:dc:ad:f2:4f:25:cb:67:37:70:18: 1d:fb:65:65:33:32:02:83:af:a2:62:2d:11:18:53: 25:40:ff:ef:3b:cc:30:a3:36:42:d7:26:b4:34:19: c3:be:53:b9:67:5a:1f:1c:01:66:25:36:5b:6b:a1: 32:43:d7:e4:59:69:e5:a9:18:c0:f7:99:c1:29:1f: 88:90:48:37:bf:89:f1:07:cf:ca:2e:02:e7:11:21: 61:26:cb:75:54:bc:ab:fb:6a:3f:27:0f:2e:da:08: d1:2e:0a:eb:f4:ab:34:35:06:f2:89:e8:8e:84:56: e9:f6:fb:ab:13:6c:14:43:09:ae:9f:2c:6a:9b:4f: c5:07:89:72:67:66:fd:0a:b4:d7:96:ca:3e:df:24: 88:09:78:bb:98:1e:0c:23:40:5a:a0:bb:8b:55:a6: e6:77:89:d8:61:86:38:e1:f2:11:b5:eb:89:64:96: a9:3c:24:7b:dd:70:e8:1f:c3:f4:e9:f9:89:c2:05: d0:a2:dd:2d:11:15:16:c3:0a:eb:14:4e:08:58:cb: 6f:30:64:df:ef:f4:0a:e2:28:f9:f5:38:9f:bc:a6: a2:41:5d:2c:8a:d3:ee:d8:3f:27:7d:7c:c3:14:38: 7e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9E:DC:BC:F9:1F:88:E7:FA:FF:17:4B:BE:02:CC:8B:50:AB:95:CA X509v3 Authority Key Identifier: keyid:D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/9156042083EB11ECB7EC3B76C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 131.244.0.0/15 192.48.109.0-192.48.110.255 192.88.187.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:b7:67:b7:bc:84:c1:b5:79:bd:5e:3a:0e:3c:86:fe:ef:9f: 14:fe:d8:3a:33:51:3d:c9:39:8d:1d:ed:5e:e6:5c:fd:16:8b: af:4b:65:86:bf:63:db:0d:2c:8e:2e:f1:f2:44:70:df:85:e8: 09:95:9d:b9:64:41:a4:66:e7:d8:98:cc:e1:5e:d7:4d:84:52: f6:14:26:77:4b:96:86:eb:49:6f:b7:1e:fd:47:a1:24:37:b0: 09:b9:1f:04:f7:cc:6f:2e:4c:b2:ec:9e:52:df:79:a6:70:53: f6:59:c1:a7:1f:ac:f3:2c:35:bf:23:e7:1e:9d:89:84:01:2a: cb:89:82:22:ee:1f:9c:16:1b:7f:c8:bf:3d:b1:75:8c:39:aa: 65:34:da:c3:a7:c9:86:1c:c8:b6:1e:2c:29:b0:da:67:5d:0d: 4c:af:a8:28:a9:74:37:56:e4:96:90:c1:b3:0d:88:34:7e:8b: b1:8c:fa:81:c1:5a:c5:99:56:d4:f9:82:88:0e:ac:c9:33:95: 87:aa:63:60:74:c1:22:16:a4:85:8a:7c:d6:fc:dc:ea:da:05: cf:14:ee:b0:80:12:4b:ec:b1:e6:82:20:65:c3:ac:e1:77:69: b1:24:e2:3e:10:0f:15:86:ef:f1:75:82:2d:eb:f7:e9:74:58: 70:a6:be:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKEQ1QTAyNTA2MzRERkMwM0RDOUNGQ0FCQTk3OTUxODBG RjA1MTU4RkMwHhcNMjYwOTE0MTkzODIzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE4NGQyZS03ZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3f9a9Q6Lk20qSHdKMVnF8fJYy9yt8k8ly2c3cBgd+2VlMzICg6+iYi0RGFMl QP/vO8wwozZC1ya0NBnDvlO5Z1ofHAFmJTZba6EyQ9fkWWnlqRjA95nBKR+IkEg3 v4nxB8/KLgLnESFhJst1VLyr+2o/Jw8u2gjRLgrr9Ks0NQbyieiOhFbp9vurE2wU Qwmunyxqm0/FB4lyZ2b9CrTXlso+3ySICXi7mB4MI0BaoLuLVabmd4nYYYY44fIR teuJZJapPCR73XDoH8P06fmJwgXQot0tERUWwwrrFE4IWMtvMGTf7/QK4ij59Tif vKaiQV0sitPu2D8nfXzDFDh+VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFACe3Lz5 H4jn+v8XS74CzItQq5XKMB8GA1UdIwQYMBaAFNWgJQY038A9yc/KupeVGA/wUVj8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy84QTFDNDYxNjQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi8xYUFsQmpUZndEM0p6OHE2bDVVWURfQlJX UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFhQWxCalRmd0QzSno4cTZsNVVZRF9CUldQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDI0N0MvOEExQzQ2MTY0MzBBMTFFQTg1OENEQzc2QzRGOUFFMDIvOTE1NjA0MjA4 M0VCMTFFQ0I3RUMzQjc2QzRGOUFFMDIucm9hMDIGCCsGAQUFBwEHAQH/BCMwITAf BAIAATAZAwMBg/QwDAMEAMAwbQMEAMAwbgMEAMBYuzANBgkqhkiG9w0BAQsFAAOC AQEAbrdnt7yEwbV5vV46DjyG/u+fFP7YOjNRPck5jR3tXuZc/RaLr0tlhr9j2w0s ji7x8kRw34XoCZWduWRBpGbn2JjM4V7XTYRS9hQmd0uWhutJb7ce/UehJDewCbkf BPfMby5MsuyeUt95pnBT9lnBpx+s8yw1vyPnHp2JhAEqy4mCIu4fnBYbf8i/PbF1 jDmqZTTaw6fJhhzIth4sKbDaZ10NTK+oKKl0N1bklpDBsw2INH6LsYz6gcFaxZlW 1PmCiA6syTOVh6pjYHTBIhakhYp81vzc6toFzxTusIASS+yx5oIgZcOs4XdpsSTi PhAPFYbv8XWCLev36XRYcKa+bA== -----END CERTIFICATE-----Generated at Mon Sep 21 11:18:13 2026 by rpki-client