$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/2F14B290801B11F0989DCE76C4F9AE02.roa File: 2F14B290801B11F0989DCE76C4F9AE02.roa (raw, json) Hash identifier: car3+0AuT/DxwtWfPZqhcplFaS0iE8HtUQGh8tESllM= Subject key identifier: A4:DF:F5:EC:F8:CC:58:2E:FA:E3:62:51:EE:93:84:27:23:8F:24:FC Certificate issuer: /CN=A9142DC9/serialNumber=EB4B59335E8321745F776B020CE524CF73991FED Certificate serial: BA Authority key identifier: EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/2F14B290801B11F0989DCE76C4F9AE02.roa Signing time: Sat 01 Aug 2026 09:57:08 +0000 ROA not before: Sat 01 Aug 2026 09:57:08 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 150142 IP address blocks: 49.213.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 06:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DC9, serialNumber=EB4B59335E8321745F776B020CE524CF73991FED Validity Not Before: Aug 1 09:57:08 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a6dc2f4-2c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:90:fb:06:5b:8b:25:2b:d3:a6:5e:26:a8:5e: c0:b7:22:35:55:06:83:9b:79:f0:1c:e0:32:61:01: 6e:2b:79:4e:29:23:8c:b9:a3:e3:da:53:4e:25:dc: 3d:90:3e:c6:94:ed:87:c6:5d:d6:f9:71:39:d7:d3: c9:d1:94:c4:70:5d:c7:c9:17:a9:b3:94:d0:79:c5: 8f:c4:71:c9:4b:e4:e5:93:a4:ff:8e:20:af:03:7c: 16:7d:73:5a:c5:4e:b4:b6:85:0b:b5:c8:53:c6:46: 3e:28:32:67:38:fe:6b:9f:03:5c:57:ca:ed:ce:85: 55:41:06:ac:0e:70:3a:e2:31:ba:92:8b:d6:56:0f: 72:48:bc:f6:b4:4b:68:68:51:c6:28:0f:b2:d6:ee: fd:bf:d9:38:e2:6e:c3:f2:76:b8:55:0a:f1:38:48: e3:a1:4c:12:20:4b:80:21:e2:84:f3:3e:84:45:e1: 49:8a:11:1e:7b:73:8e:2d:8e:9e:26:91:eb:67:fe: 65:17:a9:1b:30:58:af:45:b4:2b:29:73:7d:4a:e5: 0a:c5:5e:6e:7f:6c:a9:d1:d3:a8:9e:f7:78:3d:22: 94:26:c6:7b:97:24:e8:1b:44:af:99:bb:df:a8:21: 42:53:15:4c:b7:8f:55:18:cc:7f:63:ce:6f:ea:cb: c3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DF:F5:EC:F8:CC:58:2E:FA:E3:62:51:EE:93:84:27:23:8F:24:FC X509v3 Authority Key Identifier: keyid:EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/2F14B290801B11F0989DCE76C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 49.213.52.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:82:ca:2d:09:63:48:21:c9:66:5e:0e:6a:bd:6f:51:83:a6: 93:09:82:fd:7d:13:fc:24:bd:57:ac:0b:19:df:f3:4b:4f:ee: e8:53:b8:cc:e7:48:55:63:2f:a1:5d:2c:72:d1:c5:27:19:ef: b7:a3:76:ba:af:b3:23:9f:0d:b0:d3:9b:be:0c:3a:e3:ed:de: 5b:da:a9:75:fd:41:b9:1b:97:2d:22:8b:ca:49:8e:b0:2d:82: 8f:0c:bf:ec:a2:18:e4:27:9a:3e:20:5b:23:21:9e:42:ee:a7: 39:d7:26:c3:c0:f8:b4:11:18:d1:a0:51:5d:4d:39:d0:42:69: 04:64:6d:7d:9c:ee:a2:d1:72:e2:53:0c:39:e0:5a:1c:15:f7: 36:ae:64:2b:3a:84:43:72:e6:05:c0:ff:4d:31:16:4e:62:ec: b4:24:a6:20:7d:fa:83:2c:c1:ec:e7:d2:85:67:e7:7b:64:63: ff:a5:0d:16:9e:d5:e4:18:29:28:b8:3e:ac:dd:55:a1:04:8e: 30:2e:a4:85:c1:a2:63:82:7a:d2:7e:ba:be:f7:68:d3:43:03: 66:b8:c7:2e:08:56:4a:b9:cd:03:4a:39:74:b2:34:f2:11:37: 14:ee:61:c3:c4:2b:38:2b:9a:02:90:43:57:d2:56:7e:e8:18: cd:70:df:d7 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQzkxMTAvBgNVBAUTKEVCNEI1OTMzNUU4MzIxNzQ1Rjc3NkIwMjBDRTUyNENG NzM5OTFGRUQwHhcNMjYwODAxMDk1NzA4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTZkYzJmNC0yYzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZD7BluLJSvTpl4mqF7AtyI1VQaDm3nwHOAyYQFuK3lOKSOMuaPj2lNOJdw9 kD7GlO2Hxl3W+XE519PJ0ZTEcF3HyReps5TQecWPxHHJS+Tlk6T/jiCvA3wWfXNa xU60toULtchTxkY+KDJnOP5rnwNcV8rtzoVVQQasDnA64jG6kovWVg9ySLz2tEto aFHGKA+y1u79v9k44m7D8na4VQrxOEjjoUwSIEuAIeKE8z6EReFJihEee3OOLY6e JpHrZ/5lF6kbMFivRbQrKXN9SuUKxV5uf2yp0dOonvd4PSKUJsZ7lyToG0Svmbvf qCFCUxVMt49VGMx/Y85v6svDNQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKTf9ez4 zFgu+uNiUe6ThCcjjyT8MB8GA1UdIwQYMBaAFOtLWTNegyF0X3drAgzlJM9zmR/t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRDOS83QUY2N0M3NDdD NjExMUYwOTFEMzQxMjlDNEY5QUUwMi82MHRaTTE2RElYUmZkMnNDRE9Va3ozT1pI LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYwdFpNMTZESVhSZmQyc0NET1VrejNPWkgtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDJEQzkvN0FGNjdDNzQ3QzYxMTFGMDkxRDM0MTI5QzRGOUFFMDIvMkYxNEIyOTA4 MDFCMTFGMDk4OURDRTc2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAMdU0MA0GCSqGSIb3DQEBCwUAA4IBAQCbgsotCWNIIclmXg5qvW9R g6aTCYL9fRP8JL1XrAsZ3/NLT+7oU7jM50hVYy+hXSxy0cUnGe+3o3a6r7Mjnw2w 05u+DDrj7d5b2ql1/UG5G5ctIovKSY6wLYKPDL/sohjkJ5o+IFsjIZ5C7qc51ybD wPi0ERjRoFFdTTnQQmkEZG19nO6i0XLiUww54FocFfc2rmQrOoRDcuYFwP9NMRZO Yuy0JKYgffqDLMHs59KFZ+d7ZGP/pQ0WntXkGCkouD6s3VWhBI4wLqSFwaJjgnrS frq+92jTQwNmuMcuCFZKuc0DSjl0sjTyETcU7mHDxCs4K5oCkENX0lZ+6BjNcN/X -----END CERTIFICATE-----Generated at Sat Sep 5 08:56:30 2026 by rpki-client