$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/2C7A8F5C8CE511EF96182462C4F9AE02.roa File: 2C7A8F5C8CE511EF96182462C4F9AE02.roa (raw, json) Hash identifier: UHrlLnbIwWOnmJlaCwccbSeU7kGtmIyGxB1SAkhb+s4= Subject key identifier: DD:F2:38:F3:05:E9:67:CD:98:64:6D:7E:7E:CB:61:1D:1B:A9:00:46 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3CF0 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/2C7A8F5C8CE511EF96182462C4F9AE02.roa Signing time: Mon 18 May 2026 06:01:28 +0000 ROA not before: Mon 18 May 2026 06:01:28 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 4766 IP address blocks: 61.251.188.0/24 maxlen: 24 101.53.81.0/24 maxlen: 24 101.53.88.0/24 maxlen: 24 101.53.94.0/24 maxlen: 24 175.176.138.0/24 maxlen: 24 182.237.41.0/24 maxlen: 24 182.237.62.0/24 maxlen: 24 203.173.99.0/24 maxlen: 24 203.173.111.0/24 maxlen: 24 203.210.25.0/24 maxlen: 24 203.210.28.0/24 maxlen: 24 203.210.29.0/24 maxlen: 24 203.210.30.0/24 maxlen: 24 210.87.192.0/24 maxlen: 24 210.87.194.0/24 maxlen: 24 210.87.203.0/24 maxlen: 24 210.87.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 14:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15600 (0x3cf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: May 18 06:01:28 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6a0aab38-0234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c8:c3:08:e6:c0:da:e9:16:06:00:52:b2:e4: 8f:6b:3f:12:50:ce:19:e9:09:66:87:46:84:38:a8: 4f:d0:db:ba:3b:65:61:08:33:74:5e:b7:d5:03:0c: 45:44:fd:c0:42:73:50:8a:54:81:22:23:97:84:03: 7c:f7:c1:10:11:96:1a:68:8e:a3:fe:ae:ed:1c:1d: 79:ab:50:45:0f:ec:2f:76:86:2b:a9:f6:b3:03:cd: 99:62:52:61:0f:1f:2a:ba:9d:e9:9a:54:cb:a9:16: 1a:53:c9:13:fa:e1:58:a4:ea:b6:e2:ae:c9:4c:ff: 40:8f:69:0f:86:ba:63:53:1e:29:b6:5d:33:4e:2a: d4:cf:2d:af:d4:48:8f:d2:24:a1:48:61:03:87:2f: 9c:3c:ea:e5:c4:77:4d:37:27:83:6a:3c:93:5d:4b: 5c:4f:d2:62:0f:80:c9:11:8f:b6:5b:ff:aa:96:e1: 48:52:e0:a0:7d:db:56:72:fa:c1:17:ea:e5:c3:50: d4:78:25:f3:f4:70:e8:b3:e8:ac:b7:6c:dc:30:1e: 04:57:75:6b:68:5d:33:be:46:4a:29:c1:d5:5b:24: 0a:8c:d9:d5:6a:41:a3:e4:72:cd:d2:df:cb:76:39: e8:f4:e8:b7:4e:c2:a7:fe:0f:d8:e2:6c:02:47:54: 7f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F2:38:F3:05:E9:67:CD:98:64:6D:7E:7E:CB:61:1D:1B:A9:00:46 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/2C7A8F5C8CE511EF96182462C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.251.188.0/24 101.53.81.0/24 101.53.88.0/24 101.53.94.0/24 175.176.138.0/24 182.237.41.0/24 182.237.62.0/24 203.173.99.0/24 203.173.111.0/24 203.210.25.0/24 203.210.28.0-203.210.30.255 210.87.192.0/24 210.87.194.0/24 210.87.203.0/24 210.87.223.0/24 Signature Algorithm: sha256WithRSAEncryption c2:40:f4:d6:98:93:be:8e:ed:76:e9:68:e7:67:4e:fc:99:7f: b7:95:06:e2:e9:a0:73:43:24:69:b4:0b:77:0d:eb:fe:24:a1: e7:b9:be:b2:9e:be:0a:49:69:59:85:26:45:7f:05:11:94:10: a0:f8:e3:7b:a1:b9:d0:69:b1:61:6c:5c:d4:54:50:59:2a:7d: 25:8f:a3:1e:03:69:b9:b4:32:2a:f9:89:66:13:85:0b:25:89: 73:92:b4:5d:61:3e:b9:98:9f:e4:25:a9:38:fc:b4:49:88:d6: b2:2c:b4:1b:a6:bf:65:c5:2c:c4:04:24:33:ef:b7:b9:81:8e: 55:17:2f:b9:64:a4:a8:b1:7a:ab:d7:08:2e:ee:75:58:33:54: d1:8d:ac:a9:a2:12:bf:ee:0d:72:b8:7e:10:f9:da:e2:c9:27: 8c:e5:3d:07:6f:d6:69:cc:91:cd:56:e2:71:7c:26:8a:24:45: c1:78:1a:7e:c5:bf:ba:c3:5f:a6:1a:38:23:22:5a:5d:14:18: f3:65:3c:91:fc:56:34:c3:54:c4:c1:5b:4f:c5:1b:c0:66:c7: 9d:57:63:05:00:fa:c5:f3:3c:40:d3:25:81:92:2d:af:34:d6: 03:e6:34:ea:7f:a3:d6:e5:2f:0f:61:9e:89:6f:f0:f7:12:9e: 2c:b4:a5:00 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICPPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwNTE4MDYwMTI4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTBhYWIzOC0wMjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcjDCObA2ukWBgBSsuSPaz8SUM4Z6Qlmh0aEOKhP0Nu6O2VhCDN0XrfVAwxF RP3AQnNQilSBIiOXhAN898EQEZYaaI6j/q7tHB15q1BFD+wvdoYrqfazA82ZYlJh Dx8qup3pmlTLqRYaU8kT+uFYpOq24q7JTP9Aj2kPhrpjUx4ptl0zTirUzy2v1EiP 0iShSGEDhy+cPOrlxHdNNyeDajyTXUtcT9JiD4DJEY+2W/+qluFIUuCgfdtWcvrB F+rlw1DUeCXz9HDos+ist2zcMB4EV3VraF0zvkZKKcHVWyQKjNnVakGj5HLN0t/L djno9Oi3TsKn/g/Y4mwCR1R/FQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFN3yOPMF 6WfNmGRtfn7LYR0bqQBGMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvMkM3QThGNUM4 Q0U1MTFFRjk2MTgyNDYyQzRGOUFFMDIucm9hMHsGCCsGAQUFBwEHAQH/BGwwajBo BAIAATBiAwQAPfu8AwQAZTVRAwQAZTVYAwQAZTVeAwQAr7CKAwQAtu0pAwQAtu0+ AwQAy61jAwQAy61vAwQAy9IZMAwDBALL0hwDBADL0h4DBADSV8ADBADSV8IDBADS V8sDBADSV98wDQYJKoZIhvcNAQELBQADggEBAMJA9NaYk76O7XbpaOdnTvyZf7eV BuLpoHNDJGm0C3cN6/4koee5vrKevgpJaVmFJkV/BRGUEKD443uhudBpsWFsXNRU UFkqfSWPox4Dabm0Mir5iWYThQsliXOStF1hPrmYn+QlqTj8tEmI1rIstBumv2XF LMQEJDPvt7mBjlUXL7lkpKixeqvXCC7udVgzVNGNrKmiEr/uDXK4fhD52uLJJ4zl PQdv1mnMkc1W4nF8JookRcF4Gn7Fv7rDX6YaOCMiWl0UGPNlPJH8VjTDVMTBW0/F G8Bmx51XYwUA+sXzPEDTJYGSLa801gPmNOp/o9blLw9hnolv8PcSniy0pQA= -----END CERTIFICATE-----Generated at Thu Jun 4 03:21:17 2026 by rpki-client