$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/7EF7457CACCD11F19F8398F66811F970.roa File: 7EF7457CACCD11F19F8398F66811F970.roa (raw, json) Hash identifier: 05+3hZWGor2rz0Kju646oiaVDVscsIH6UNvSgbt/8ik= Subject key identifier: 4B:DE:51:57:B7:D9:2B:67:12:34:68:80:2E:3E:81:09:5F:6D:33:89 Certificate issuer: /CN=A9143DE2/serialNumber=DF6D002BBCABA250D2AE6B4454E3CBFD67D2C7EA Certificate serial: 0A91 Authority key identifier: DF:6D:00:2B:BC:AB:A2:50:D2:AE:6B:44:54:E3:CB:FD:67:D2:C7:EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/7EF7457CACCD11F19F8398F66811F970.roa Signing time: Thu 10 Sep 2026 04:10:02 +0000 ROA not before: Thu 10 Sep 2026 04:10:02 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 137453 IP address blocks: 49.0.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.crl rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2705 (0xa91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DE2, serialNumber=DF6D002BBCABA250D2AE6B4454E3CBFD67D2C7EA Validity Not Before: Sep 10 04:10:02 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6aa22d9a-7129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8a:b7:e1:89:06:c0:84:13:d1:b9:39:cc:9a: 1b:35:a2:df:eb:32:0b:a4:16:ff:07:40:58:36:89: 64:e6:34:25:2f:cc:f2:80:04:f0:5f:52:ce:e5:13: 20:73:37:5d:ff:d3:39:e1:31:47:e5:20:55:ee:3f: 6f:d3:bb:00:4b:f0:f4:e9:67:7d:2b:ca:a1:c1:03: 4f:95:6d:c6:56:cc:96:f5:30:13:9b:41:08:c5:e0: fd:c6:58:6a:32:da:fc:fe:8d:f7:3e:65:0a:e2:fa: 93:b9:0d:08:79:9c:a9:5e:a9:72:a7:34:e3:00:12: c4:e4:35:60:0f:f1:d2:b0:58:f1:bc:73:34:c7:d1: 4e:78:39:7b:41:3f:fa:93:88:71:5b:1c:a2:c6:b4: dd:9e:91:41:3e:92:d5:4f:55:05:51:40:00:f9:5c: df:5f:ab:84:15:6f:5c:8f:d2:69:d6:6a:fe:75:c9: 8e:ba:57:b3:36:51:f2:38:52:a1:8f:21:b3:1b:50: d2:55:f6:98:61:15:06:bd:ea:e8:5e:db:41:17:62: a0:d1:b1:55:86:69:d7:5e:4d:dd:24:dd:6c:df:ba: 8f:8b:be:ad:8b:ec:49:f5:b8:c9:ff:d8:82:2c:fa: 77:98:cd:70:2d:cd:59:3e:9d:e4:c7:9a:51:24:72: 9d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DE:51:57:B7:D9:2B:67:12:34:68:80:2E:3E:81:09:5F:6D:33:89 X509v3 Authority Key Identifier: keyid:DF:6D:00:2B:BC:AB:A2:50:D2:AE:6B:44:54:E3:CB:FD:67:D2:C7:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/7EF7457CACCD11F19F8398F66811F970.roa sbgp-ipAddrBlock: critical IPv4: 49.0.5.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:df:c9:85:d0:d8:49:0f:ab:4a:aa:b0:b8:2c:52:02:67:cb: 6c:4d:8e:c1:a2:20:04:d2:a7:4e:53:d9:52:0e:76:df:55:17: f8:6a:98:98:75:8d:d7:ed:23:de:6d:70:d7:51:d4:5f:1a:aa: 04:1d:ab:c4:fc:9f:58:52:af:1b:b1:24:92:33:33:ab:9d:bc: 6c:1a:f1:d1:37:52:f3:a9:c4:ca:d4:ea:b8:a2:e1:58:c2:a0: 23:1b:93:57:7d:49:c2:e4:d8:5f:ad:88:43:6e:6f:53:8f:d0: 62:5e:9c:a1:d6:02:07:00:21:41:cc:e9:a7:c5:52:2f:76:72: fc:76:de:d8:fd:11:9c:80:61:82:f7:6c:cc:8a:b2:0f:3e:21: 0c:d6:d4:40:78:1b:db:6f:5d:24:55:55:c8:f0:b1:96:a4:fe: 58:71:52:ed:1b:3f:85:f2:cb:e3:7c:a7:41:2d:9c:35:eb:46: 68:d5:f1:76:ab:45:7d:52:6b:ca:ce:62:d6:e0:23:db:3b:47: f9:0e:e6:5c:f5:79:6b:d5:80:36:43:15:96:2a:a6:d7:f3:71: ba:4c:9f:0c:f2:5f:20:e8:b8:6e:fa:82:c6:a4:ab:c9:14:f6: 37:99:c5:d3:ef:7c:12:19:50:a3:0b:27:b8:74:b8:99:23:72: 03:18:e4:a3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNERTIxMTAvBgNVBAUTKERGNkQwMDJCQkNBQkEyNTBEMkFFNkI0NDU0RTNDQkZE NjdEMkM3RUEwHhcNMjYwOTEwMDQxMDAyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEyMmQ5YS03MTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Iq34YkGwIQT0bk5zJobNaLf6zILpBb/B0BYNolk5jQlL8zygATwX1LO5RMg czdd/9M54TFH5SBV7j9v07sAS/D06Wd9K8qhwQNPlW3GVsyW9TATm0EIxeD9xlhq Mtr8/o33PmUK4vqTuQ0IeZypXqlypzTjABLE5DVgD/HSsFjxvHM0x9FOeDl7QT/6 k4hxWxyixrTdnpFBPpLVT1UFUUAA+VzfX6uEFW9cj9Jp1mr+dcmOulezNlHyOFKh jyGzG1DSVfaYYRUGveroXttBF2Kg0bFVhmnXXk3dJN1s37qPi76ti+xJ9bjJ/9iC LPp3mM1wLc1ZPp3kx5pRJHKd3wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEveUVe3 2StnEjRogC4+gQlfbTOJMB8GA1UdIwQYMBaAFN9tACu8q6JQ0q5rRFTjy/1n0sfq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RFMi9EMjE4REQ1MjhF OTcxMUVBOEMyREU1MzdDNEY5QUUwMi8zMjBBSzd5cm9sRFNybXRFVk9QTF9XZlN4 LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMyMEFLN3lyb2xEU3JtdEVWT1BMX1dmU3gtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDNERTIvRDIxOERENTI4RTk3MTFFQThDMkRFNTM3QzRGOUFFMDIvN0VGNzQ1N0NB Q0NEMTFGMTlGODM5OEY2NjgxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAMQAFMA0GCSqGSIb3DQEBCwUAA4IBAQAO38mF0NhJD6tKqrC4LFIC Z8tsTY7BoiAE0qdOU9lSDnbfVRf4apiYdY3X7SPebXDXUdRfGqoEHavE/J9YUq8b sSSSMzOrnbxsGvHRN1LzqcTK1Oq4ouFYwqAjG5NXfUnC5NhfrYhDbm9Tj9BiXpyh 1gIHACFBzOmnxVIvdnL8dt7Y/RGcgGGC92zMirIPPiEM1tRAeBvbb10kVVXI8LGW pP5YcVLtGz+F8svjfKdBLZw160Zo1fF2q0V9UmvKzmLW4CPbO0f5DuZc9Xlr1YA2 QxWWKqbX83G6TJ8M8l8g6Lhu+oLGpKvJFPY3mcXT73wSGVCjCye4dLiZI3IDGOSj -----END CERTIFICATE-----Generated at Fri Sep 11 11:49:59 2026 by rpki-client