$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/2C7A8F5C8CE511EF96182462C4F9AE02.roa File: 2C7A8F5C8CE511EF96182462C4F9AE02.roa (raw, json) Hash identifier: GKcyMtyGexaiJRzoVtfZ4MClnpH/+RDN5BCk/Qi59oY= Subject key identifier: 6A:67:1D:96:16:58:85:C1:5A:C0:51:C1:37:68:E7:71:0B:60:EA:96 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3DC9 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/2C7A8F5C8CE511EF96182462C4F9AE02.roa Signing time: Thu 06 Aug 2026 15:12:35 +0000 ROA not before: Thu 06 Aug 2026 15:12:35 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 4766 IP address blocks: 61.251.188.0/24 maxlen: 24 101.53.81.0/24 maxlen: 24 101.53.88.0/24 maxlen: 24 101.53.94.0/24 maxlen: 24 175.176.138.0/24 maxlen: 24 182.237.41.0/24 maxlen: 24 182.237.62.0/24 maxlen: 24 203.173.99.0/24 maxlen: 24 203.173.111.0/24 maxlen: 24 203.210.25.0/24 maxlen: 24 203.210.28.0/24 maxlen: 24 203.210.29.0/24 maxlen: 24 203.210.30.0/24 maxlen: 24 210.87.192.0/24 maxlen: 24 210.87.194.0/24 maxlen: 24 210.87.203.0/24 maxlen: 24 210.87.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15817 (0x3dc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Aug 6 15:12:35 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a74a463-a37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:38:f3:6b:52:e4:1e:f4:0d:1e:93:2e:63:f2: f5:80:8f:d1:a4:d2:cd:26:36:aa:1c:0b:38:05:f1: f9:9a:1d:15:8a:72:4c:0c:db:f1:5d:ec:05:cb:e3: e2:26:1a:8d:91:f2:6e:f2:76:b7:e6:04:94:ef:b2: 1b:87:98:40:ed:9d:45:fe:aa:b4:ca:c2:92:3e:84: 80:12:fd:54:a2:74:1e:f3:e5:73:8c:87:d4:3a:cf: cc:99:f2:95:91:4a:2f:15:e8:1c:84:52:51:9f:ba: ee:9f:d3:b3:7a:40:26:e8:f3:38:fc:af:5b:33:2f: 54:8e:d5:29:af:c8:7a:69:da:f1:56:32:75:cd:52: f8:47:38:54:60:b5:0c:37:c4:39:67:a0:57:f7:92: fa:71:95:38:29:20:d5:ae:f7:43:5f:62:51:19:af: 04:b7:c3:38:cf:23:42:5f:de:55:54:22:cf:21:c5: 6b:77:e5:8b:8c:6a:27:fd:17:f9:aa:da:8c:48:d9: a9:f5:5c:5b:02:6c:1a:9c:b1:09:f3:c0:ff:1e:c4: f3:29:fb:6d:8d:0b:57:8a:d6:4e:80:34:74:f9:1d: 68:aa:24:46:e4:47:7c:47:1a:aa:e8:a9:64:47:ca: 78:ea:07:f2:e0:ec:2f:f3:d0:01:ef:1e:01:65:db: d7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:67:1D:96:16:58:85:C1:5A:C0:51:C1:37:68:E7:71:0B:60:EA:96 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/2C7A8F5C8CE511EF96182462C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.251.188.0/24 101.53.81.0/24 101.53.88.0/24 101.53.94.0/24 175.176.138.0/24 182.237.41.0/24 182.237.62.0/24 203.173.99.0/24 203.173.111.0/24 203.210.25.0/24 203.210.28.0-203.210.30.255 210.87.192.0/24 210.87.194.0/24 210.87.203.0/24 210.87.223.0/24 Signature Algorithm: sha256WithRSAEncryption 33:30:d9:e4:f9:fe:35:4d:cd:b8:53:d2:cc:7b:7b:d0:45:db: bb:72:44:4b:87:a7:26:f8:85:16:7c:aa:8d:f7:1a:b1:de:8c: 9c:ef:ce:4d:6b:82:c0:0e:b5:06:47:fa:ad:b6:ea:d4:be:f9: ef:09:8b:0a:30:71:d8:b9:bf:92:21:e1:76:19:d9:2c:22:ff: 00:f8:b8:1b:55:1b:3d:16:25:a7:47:68:cd:7b:c1:47:88:35: a3:c2:e7:c9:dc:68:08:96:55:87:23:b3:42:68:84:58:0a:77: 8d:4d:b5:db:f4:b1:fd:2b:3f:87:ac:02:55:c4:2b:6d:5f:29: fb:3e:89:cf:4a:f0:a4:67:09:66:d6:7f:db:3b:c3:b7:55:7e: 5d:5f:8d:7c:d0:b8:fe:a1:df:b3:fd:b1:38:47:4f:ec:29:dc: b3:b1:8b:fa:61:63:18:3f:70:ec:c7:49:42:e9:85:e2:c7:ec: 5e:c2:31:38:92:ed:b1:5b:d3:9a:fa:f1:5e:04:3e:50:06:c7: 9d:ae:cc:d0:06:13:31:a5:d1:60:42:5a:cd:bb:08:2f:95:5f: 7b:37:0b:8f:67:09:f4:c2:d9:fb:e2:e6:b0:f1:60:1d:0b:36: 8c:9d:a2:a6:7d:70:8b:94:37:84:ef:78:2f:d4:6f:27:62:92: 2b:44:ba:eb -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICPckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwODA2MTUxMjM1WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc0YTQ2My1hMzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlTjza1LkHvQNHpMuY/L1gI/RpNLNJjaqHAs4BfH5mh0VinJMDNvxXewFy+Pi JhqNkfJu8na35gSU77Ibh5hA7Z1F/qq0ysKSPoSAEv1UonQe8+VzjIfUOs/MmfKV kUovFegchFJRn7run9OzekAm6PM4/K9bMy9UjtUpr8h6adrxVjJ1zVL4RzhUYLUM N8Q5Z6BX95L6cZU4KSDVrvdDX2JRGa8Et8M4zyNCX95VVCLPIcVrd+WLjGon/Rf5 qtqMSNmp9VxbAmwanLEJ88D/HsTzKfttjQtXitZOgDR0+R1oqiRG5Ed8Rxqq6Klk R8p46gfy4Owv89AB7x4BZdvXrQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFGpnHZYW WIXBWsBRwTdo53ELYOqWMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvMkM3QThGNUM4 Q0U1MTFFRjk2MTgyNDYyQzRGOUFFMDIucm9hMHsGCCsGAQUFBwEHAQH/BGwwajBo BAIAATBiAwQAPfu8AwQAZTVRAwQAZTVYAwQAZTVeAwQAr7CKAwQAtu0pAwQAtu0+ AwQAy61jAwQAy61vAwQAy9IZMAwDBALL0hwDBADL0h4DBADSV8ADBADSV8IDBADS V8sDBADSV98wDQYJKoZIhvcNAQELBQADggEBADMw2eT5/jVNzbhT0sx7e9BF27ty REuHpyb4hRZ8qo33GrHejJzvzk1rgsAOtQZH+q226tS++e8Jiwowcdi5v5Ih4XYZ 2Swi/wD4uBtVGz0WJadHaM17wUeINaPC58ncaAiWVYcjs0JohFgKd41Ntdv0sf0r P4esAlXEK21fKfs+ic9K8KRnCWbWf9s7w7dVfl1fjXzQuP6h37P9sThHT+wp3LOx i/phYxg/cOzHSULpheLH7F7CMTiS7bFb05r68V4EPlAGx52uzNAGEzGl0WBCWs27 CC+VX3s3C49nCfTC2fvi5rDxYB0LNoydoqZ9cIuUN4TveC/UbydikitEuus= -----END CERTIFICATE-----Generated at Fri Sep 4 20:17:45 2026 by rpki-client