$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/E88FA9C050EC11EDA7DA9346C4F9AE02.roa File: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (raw, json) Hash identifier: BHU+XdA8SETbOhTyvEane5KN/5p33K/aqdiI/9ZtYsM= Subject key identifier: CA:3F:3A:98:5C:EB:24:FD:20:03:B2:A6:F1:E8:8F:F7:4B:D0:95:C7 Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 269E Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/E88FA9C050EC11EDA7DA9346C4F9AE02.roa Signing time: Mon 20 Jul 2026 16:16:36 +0000 ROA not before: Mon 20 Jul 2026 16:16:36 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 14499 IP address blocks: 112.198.24.0/24 maxlen: 24 112.198.25.0/24 maxlen: 24 222.127.107.0/24 maxlen: 24 222.127.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 16:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9886 (0x269e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Jul 20 16:16:36 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a5e49e4-2797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fb:97:33:7b:10:53:07:45:af:1c:90:c5:62: ca:c5:02:ec:81:99:0e:af:b3:da:79:1c:37:34:c2: 57:1b:19:79:ce:73:6b:7b:6b:74:b5:ca:7c:77:71: bd:03:c8:05:89:6c:db:e1:ce:77:16:72:5d:32:99: 7f:90:09:43:a4:8a:62:06:0e:68:e6:ca:08:de:a3: be:86:8b:0c:1e:6c:ab:2c:c8:02:2f:35:84:be:7c: 7c:cf:51:83:c8:bc:a5:6a:39:aa:d5:60:83:d7:68: f8:38:be:7d:d2:5e:8a:37:6e:24:7b:a3:46:d8:3f: cc:50:8e:48:df:a9:e3:6b:3c:5e:c3:2a:be:12:a1: 49:f9:33:8b:8c:ca:74:ca:2f:c4:cc:fa:4a:91:0f: f8:2a:23:49:c3:d0:c0:c6:aa:51:c5:ae:09:f1:2f: 3c:b3:af:00:6a:4d:3f:4f:de:71:4a:fe:f6:74:bf: 9a:0c:e8:ea:a2:3f:d1:d7:5f:fb:9d:e5:c0:71:7d: 25:be:9c:84:fb:d5:c6:8f:cc:69:b4:de:7b:a8:c2: f1:98:c9:c6:8e:c9:a3:40:02:fe:b1:42:f7:d4:1b: b9:2e:aa:8c:d4:fc:84:86:31:1f:de:a6:24:a2:ad: 6e:46:83:e3:a4:7a:42:98:0b:0b:3f:12:ee:21:41: bd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3F:3A:98:5C:EB:24:FD:20:03:B2:A6:F1:E8:8F:F7:4B:D0:95:C7 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/E88FA9C050EC11EDA7DA9346C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 112.198.24.0/23 222.127.107.0/24 222.127.141.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:6f:e5:2d:56:e2:e8:b2:e7:cf:35:73:fd:c5:52:7e:6d:85: 36:19:f3:7d:c4:f1:a8:47:9c:ba:38:28:7a:d5:b1:63:2d:a4: cf:2d:02:ee:29:a1:9b:7d:f9:2d:5b:15:3b:52:23:10:9e:8e: 2d:e8:0e:3c:ba:91:78:be:c9:4b:75:ca:b2:7b:f3:73:b2:da: 3d:50:5a:50:21:df:4b:e6:93:ac:a4:da:df:9e:3c:e3:b9:97: 01:ad:6c:c6:ca:11:cd:1e:cb:dd:50:ab:07:5e:de:3b:f1:d9: 08:65:d3:ed:73:83:10:ea:dd:68:8f:fc:dc:f0:e1:86:cd:bf: 9a:e0:d1:73:49:94:aa:64:31:b0:21:84:14:b3:8f:82:bf:bd: 32:64:1b:1a:b4:90:1b:7b:60:31:19:2b:7d:ae:91:3b:f0:02: 23:0e:4c:55:9c:b4:e3:f5:06:e1:2a:2d:59:d2:b9:13:f4:02: 02:27:02:99:53:ef:b4:d7:87:6b:e3:39:4a:a7:8d:4c:b2:aa: e6:5d:2d:3e:b3:1c:74:0c:1e:28:35:d9:8b:bd:07:5a:d8:15: 6e:46:a3:2c:ec:ff:71:f2:f8:67:24:4e:69:70:41:68:5a:a7: 40:b6:8d:31:49:88:29:bf:00:3d:a2:09:cb:f0:63:f4:ae:35: 5b:49:65:09 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICJp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjYwNzIwMTYxNjM2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTVlNDllNC0yNzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfuXM3sQUwdFrxyQxWLKxQLsgZkOr7PaeRw3NMJXGxl5znNre2t0tcp8d3G9 A8gFiWzb4c53FnJdMpl/kAlDpIpiBg5o5soI3qO+hosMHmyrLMgCLzWEvnx8z1GD yLylajmq1WCD12j4OL590l6KN24ke6NG2D/MUI5I36njazxewyq+EqFJ+TOLjMp0 yi/EzPpKkQ/4KiNJw9DAxqpRxa4J8S88s68Aak0/T95xSv72dL+aDOjqoj/R11/7 neXAcX0lvpyE+9XGj8xptN57qMLxmMnGjsmjQAL+sUL31Bu5LqqM1PyEhjEf3qYk oq1uRoPjpHpCmAsLPxLuIUG94QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFMo/Ophc 6yT9IAOypvHoj/dL0JXHMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvRTg4RkE5QzA1 MEVDMTFFREE3REE5MzQ2QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBcMYYAwQA3n9rAwQA3n+NMA0GCSqGSIb3DQEBCwUAA4IBAQCab+Ut VuLosufPNXP9xVJ+bYU2GfN9xPGoR5y6OCh61bFjLaTPLQLuKaGbffktWxU7UiMQ no4t6A48upF4vslLdcqye/Nzsto9UFpQId9L5pOspNrfnjzjuZcBrWzGyhHNHsvd UKsHXt478dkIZdPtc4MQ6t1oj/zc8OGGzb+a4NFzSZSqZDGwIYQUs4+Cv70yZBsa tJAbe2AxGSt9rpE78AIjDkxVnLTj9QbhKi1Z0rkT9AICJwKZU++014dr4zlKp41M sqrmXS0+sxx0DB4oNdmLvQda2BVuRqMs7P9x8vhnJE5pcEFoWqdAto0xSYgpvwA9 ognL8GP0rjVbSWUJ -----END CERTIFICATE-----Generated at Tue Jul 21 20:31:54 2026 by rpki-client