$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/E33945D6B0ED11E5B7779F44C4F9AE02.roa File: E33945D6B0ED11E5B7779F44C4F9AE02.roa (raw, json) Hash identifier: ihG6N7QFwm0XDvC2GLafH4eo/h3mkm9Smxv2CwczyKQ= Subject key identifier: 58:B6:A1:4B:5F:53:1F:53:8E:A0:7B:D4:29:35:DB:A9:62:8B:E5:8B Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2DB6 Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/E33945D6B0ED11E5B7779F44C4F9AE02.roa Signing time: Fri 18 Sep 2026 02:22:30 +0000 ROA not before: Fri 18 Sep 2026 02:22:30 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 17741 IP address blocks: 114.31.96.0/21 maxlen: 21 114.31.101.0/24 maxlen: 24 114.31.102.0/24 maxlen: 24 202.44.75.0/24 maxlen: 24 2401:2800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 15:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11702 (0x2db6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: Sep 18 02:22:30 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6aaca066-8e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:e8:95:e8:ed:18:7a:24:94:42:fc:6b:6e: ec:32:96:b3:6a:d5:f7:da:a7:26:ad:1b:ba:60:d7: d4:02:11:d8:be:d4:b2:c2:b9:d4:a4:7b:9d:12:61: a0:e6:72:94:c4:9a:8e:47:cf:14:0f:79:fe:41:1c: b9:b1:8a:29:b7:07:9a:c8:5b:59:1c:5d:13:b1:32: ef:8e:d3:36:69:95:51:c7:70:86:03:c9:e9:be:bb: 53:61:22:9d:7f:f7:31:61:65:f7:9c:68:18:6a:88: 91:60:0a:81:74:97:36:ad:8d:2d:7f:d6:a0:f1:38: 8f:1f:c7:70:11:a0:21:df:7c:cf:7a:24:e1:2c:d2: de:66:cb:e3:00:5e:e7:e8:46:6a:f1:19:7a:10:74: 3b:66:5b:bf:c3:50:5e:bb:b5:a8:44:a4:73:31:ce: a1:d1:95:7a:3d:6e:e5:91:82:2d:c1:1b:3d:d8:4b: 3a:66:8a:f3:5c:a3:0b:17:37:c3:26:05:25:64:89: 54:23:09:00:e0:aa:82:87:f7:ed:b2:ba:3a:f6:8b: 5b:19:2c:7f:7d:a1:e5:de:18:72:7d:13:7e:cf:d6: d3:53:e9:5e:8d:2b:c0:42:30:8e:8c:3f:45:c3:e8: 03:fb:a7:14:5b:2b:5d:9c:30:64:22:5f:46:1a:62: d2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B6:A1:4B:5F:53:1F:53:8E:A0:7B:D4:29:35:DB:A9:62:8B:E5:8B X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/E33945D6B0ED11E5B7779F44C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 114.31.96.0/21 202.44.75.0/24 IPv6: 2401:2800::/32 Signature Algorithm: sha256WithRSAEncryption 92:40:dd:b2:95:14:81:5e:0a:be:43:1a:fb:01:bc:64:37:9a: 44:8e:8a:d8:d5:34:b2:93:6a:cd:7d:b5:40:96:70:3c:d6:dc: 4b:bb:22:fc:91:4b:fe:f4:e1:c7:f6:7e:ab:a2:b2:c7:e5:5c: 35:49:4b:a5:e2:18:a3:14:a4:5e:5e:c8:28:ce:78:9e:65:5c: 40:dd:ea:e6:db:16:76:ea:56:b4:6c:e5:fd:3c:2d:d8:37:34: e9:4b:99:13:48:dc:bd:ed:1c:33:fd:50:5a:e8:ac:bd:d3:34: 8e:fa:71:05:4e:ff:8f:89:b1:13:ed:b0:af:c9:05:11:25:f5: 99:78:4e:e9:0f:e6:06:3d:96:71:38:b4:7c:89:58:27:a8:ab: bd:ae:64:3e:ae:9f:75:f7:fb:b2:c8:a0:6b:00:b9:fa:a5:0d: b0:7e:dc:53:ef:de:33:ab:2e:1a:68:db:15:f5:01:ab:2d:18: 41:02:b4:96:2e:e1:4f:e4:c5:c3:ac:d5:87:d0:f2:74:81:9b: 8d:f7:3e:3e:c5:c7:a8:67:cf:db:1a:e5:12:bb:d1:e0:cc:ca: 93:a7:89:28:a4:37:ad:b3:95:71:e1:7c:16:a9:51:0e:b5:5c: 21:e6:71:7d:89:28:1d:5a:49:03:cf:fa:d1:51:31:21:20:49: a0:98:dc:d4 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICLbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjYwOTE4MDIyMjMwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFjYTA2Ni04ZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVXolejtGHoklEL8a27sMpazatX32qcmrRu6YNfUAhHYvtSywrnUpHudEmGg 5nKUxJqOR88UD3n+QRy5sYoptweayFtZHF0TsTLvjtM2aZVRx3CGA8npvrtTYSKd f/cxYWX3nGgYaoiRYAqBdJc2rY0tf9ag8TiPH8dwEaAh33zPeiThLNLeZsvjAF7n 6EZq8Rl6EHQ7Zlu/w1Beu7WoRKRzMc6h0ZV6PW7lkYItwRs92Es6ZorzXKMLFzfD JgUlZIlUIwkA4KqCh/ftsro69otbGSx/faHl3hhyfRN+z9bTU+lejSvAQjCOjD9F w+gD+6cUWytdnDBkIl9GGmLShQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFFi2oUtf Ux9TjqB71Ck126lii+WLMB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhBQzQvMjA2QkM4NkNBRTZBMTFFMzkzNzlENTUwNTkxMUVBMzIvRTMzOTQ1RDZC MEVEMTFFNUI3Nzc5RjQ0QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQDch9gAwQAyixLMA0EAgACMAcDBQAkASgAMA0GCSqGSIb3DQEBCwUA A4IBAQCSQN2ylRSBXgq+Qxr7AbxkN5pEjorY1TSyk2rNfbVAlnA81txLuyL8kUv+ 9OHH9n6rorLH5Vw1SUul4hijFKReXsgoznieZVxA3erm2xZ26la0bOX9PC3YNzTp S5kTSNy97Rwz/VBa6Ky90zSO+nEFTv+PibET7bCvyQURJfWZeE7pD+YGPZZxOLR8 iVgnqKu9rmQ+rp919/uyyKBrALn6pQ2wftxT794zqy4aaNsV9QGrLRhBArSWLuFP 5MXDrNWH0PJ0gZuN9z4+xceoZ8/bGuUSu9HgzMqTp4kopDets5Vx4XwWqVEOtVwh 5nF9iSgdWkkDz/rRUTEhIEmgmNzU -----END CERTIFICATE-----Generated at Mon Oct 5 13:32:17 2026 by rpki-client