$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/10D95E50A1AF11F1849D3D556A11F970.roa File: 10D95E50A1AF11F1849D3D556A11F970.roa (raw, json) Hash identifier: tYua26G+kdn4CLojSQx7m3vT8QdZrZKXIWziRj29iaY= Subject key identifier: B9:7B:43:4D:FE:50:D7:D2:07:0B:C8:B6:F1:52:B0:3E:8D:9B:B3:E8 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3E18 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/10D95E50A1AF11F1849D3D556A11F970.roa Signing time: Thu 27 Aug 2026 00:34:30 +0000 ROA not before: Thu 27 Aug 2026 00:34:30 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 9318 IP address blocks: 49.128.200.0/24 maxlen: 24 49.128.211.0/24 maxlen: 24 101.53.89.0/24 maxlen: 24 101.55.35.0/24 maxlen: 24 103.7.32.0/24 maxlen: 24 103.124.100.0/22 maxlen: 24 112.196.211.0/24 maxlen: 24 124.66.217.0/24 maxlen: 24 124.66.219.0/24 maxlen: 24 175.176.143.0/24 maxlen: 24 182.237.58.0/24 maxlen: 24 203.173.110.0/24 maxlen: 24 203.173.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 14:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15896 (0x3e18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Aug 27 00:34:30 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a8f8616-456c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1b:9e:3f:12:b2:aa:46:f6:5b:65:af:2f:db: bd:22:4f:f1:24:12:76:23:0b:d7:40:66:61:01:f9: bf:6e:77:44:e1:07:63:c6:a3:9c:e4:33:35:72:dc: 2e:cc:52:9a:9a:3c:34:78:21:cf:51:2b:c8:41:ae: 59:ca:52:97:a9:ca:98:73:3f:8f:84:d5:00:19:1a: 46:f7:c3:b7:a4:15:06:67:a9:e5:1f:da:60:24:ad: 45:25:c6:19:f9:05:56:6c:58:78:20:69:c3:3a:68: f4:f9:a7:f8:92:b3:17:60:cc:a0:5d:32:e2:d2:98: a0:dd:1b:77:5e:20:ff:f2:17:8a:2a:fa:94:a4:32: 90:5a:5e:43:9c:00:7f:84:5e:a0:46:fa:db:c4:24: 2a:cb:c0:54:f9:d4:5b:9f:aa:4e:93:af:fa:2a:47: d6:04:88:8b:11:64:9a:e2:8a:df:da:1a:0b:c6:dd: e0:1f:14:3e:9e:78:3e:5a:de:45:69:2c:32:d4:bb: 3c:a7:4e:2d:6b:68:9e:a5:c1:8a:4d:57:54:9c:c1: 7a:2a:f8:e0:19:1a:a2:a9:92:41:f3:80:51:5e:c6: 2b:96:bb:3a:c4:01:b6:0c:02:4a:fe:57:54:08:4b: 19:39:22:14:30:5e:5d:1f:90:6a:57:a5:a7:7e:03: 79:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7B:43:4D:FE:50:D7:D2:07:0B:C8:B6:F1:52:B0:3E:8D:9B:B3:E8 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/10D95E50A1AF11F1849D3D556A11F970.roa sbgp-ipAddrBlock: critical IPv4: 49.128.200.0/24 49.128.211.0/24 101.53.89.0/24 101.55.35.0/24 103.7.32.0/24 103.124.100.0/22 112.196.211.0/24 124.66.217.0/24 124.66.219.0/24 175.176.143.0/24 182.237.58.0/24 203.173.110.0/24 203.173.122.0/24 Signature Algorithm: sha256WithRSAEncryption 60:31:66:d2:2f:db:cc:05:f4:62:4f:01:d6:82:40:21:2b:a7: 64:d7:93:c3:3e:1b:06:ce:b0:b3:8c:88:d0:8f:48:27:aa:9e: 83:b2:39:69:61:28:05:90:39:81:8e:5d:63:55:62:e0:2b:92: 4b:59:75:93:84:4f:14:b8:24:59:9a:e4:eb:5b:a4:3f:36:78: 17:b0:2d:65:cb:27:7d:86:b6:38:f2:fc:32:01:66:51:a8:8e: db:7d:3e:ef:c2:ca:85:46:ab:38:21:77:c4:05:09:a3:b9:7c: fa:6f:b0:3d:bd:61:1b:0c:db:d7:dc:81:96:1d:a6:c4:4e:d6: 7f:4e:e1:17:5b:f3:1b:67:3a:a8:63:53:7f:88:80:59:b7:0b: 57:54:53:dc:55:e5:88:5f:b9:e9:6c:95:87:d5:35:53:e5:f1: a3:99:10:05:11:aa:bd:75:66:a2:73:90:29:6f:ac:9f:4a:35: b8:a0:ac:83:0b:b6:70:97:73:56:c6:3c:49:02:b8:c8:b8:33: 29:4f:ad:3c:bb:86:ac:87:86:7e:69:37:5f:34:d2:be:47:39: 68:95:2b:41:a7:14:11:28:4d:dc:88:70:e2:a3:9d:c4:77:56: 93:09:39:31:a4:70:dc:b8:b2:de:e5:b1:a2:d2:73:e4:f6:36: 54:b8:4e:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICPhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwODI3MDAzNDMwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YThmODYxNi00NTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRuePxKyqkb2W2WvL9u9Ik/xJBJ2IwvXQGZhAfm/bndE4QdjxqOc5DM1ctwu zFKamjw0eCHPUSvIQa5ZylKXqcqYcz+PhNUAGRpG98O3pBUGZ6nlH9pgJK1FJcYZ +QVWbFh4IGnDOmj0+af4krMXYMygXTLi0pig3Rt3XiD/8heKKvqUpDKQWl5DnAB/ hF6gRvrbxCQqy8BU+dRbn6pOk6/6KkfWBIiLEWSa4orf2hoLxt3gHxQ+nng+Wt5F aSwy1Ls8p04ta2iepcGKTVdUnMF6KvjgGRqiqZJB84BRXsYrlrs6xAG2DAJK/ldU CEsZOSIUMF5dH5BqV6WnfgN5RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLl7Q03+ UNfSBwvItvFSsD6Nm7PoMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvMTBEOTVFNTBB MUFGMTFGMTg0OUQzRDU1NkExMUY5NzAucm9hMGcGCCsGAQUFBwEHAQH/BFgwVjBU BAIAATBOAwQAMYDIAwQAMYDTAwQAZTVZAwQAZTcjAwQAZwcgAwQCZ3xkAwQAcMTT AwQAfELZAwQAfELbAwQAr7CPAwQAtu06AwQAy61uAwQAy616MA0GCSqGSIb3DQEB CwUAA4IBAQBgMWbSL9vMBfRiTwHWgkAhK6dk15PDPhsGzrCzjIjQj0gnqp6Dsjlp YSgFkDmBjl1jVWLgK5JLWXWThE8UuCRZmuTrW6Q/NngXsC1lyyd9hrY48vwyAWZR qI7bfT7vwsqFRqs4IXfEBQmjuXz6b7A9vWEbDNvX3IGWHabETtZ/TuEXW/MbZzqo Y1N/iIBZtwtXVFPcVeWIX7npbJWH1TVT5fGjmRAFEaq9dWaic5Apb6yfSjW4oKyD C7Zwl3NWxjxJArjIuDMpT608u4ash4Z+aTdfNNK+RzlolStBpxQRKE3ciHDio53E d1aTCTkxpHDcuLLe5bGi0nPk9jZUuE7F -----END CERTIFICATE-----Generated at Thu Sep 10 18:11:37 2026 by rpki-client