$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3BCB61DA01D411EFB260D83DC4F9AE02.roa File: 3BCB61DA01D411EFB260D83DC4F9AE02.roa (raw, json) Hash identifier: Qbe+zfA3xt0/SVW95lwEhCTHEr45FcwMkCu2+3sLnIk= Subject key identifier: 1B:2D:41:7B:E4:31:A2:BE:E9:56:05:6F:79:E8:62:99:C6:75:93:33 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3DC6 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3BCB61DA01D411EFB260D83DC4F9AE02.roa Signing time: Thu 06 Aug 2026 15:12:30 +0000 ROA not before: Thu 06 Aug 2026 15:12:30 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 41717 IP address blocks: 49.128.221.0/24 maxlen: 24 49.128.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 14:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15814 (0x3dc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Aug 6 15:12:30 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a74a45e-1e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9c:65:eb:91:82:82:23:12:8a:8a:0c:ca:f6: de:00:13:42:77:2e:ed:b8:2c:a1:39:03:90:ff:8b: e0:84:04:b0:ed:15:9f:d9:13:fa:6a:0d:c7:35:36: 9b:a4:78:77:f9:53:aa:d1:3c:2a:ef:2e:8a:1c:73: 1b:96:43:72:a2:7c:7d:51:6f:f9:52:43:dd:34:3e: b3:73:e9:b6:3e:53:b2:17:1e:5a:00:2d:47:77:fb: 9f:d9:4c:1b:e5:c0:64:95:f0:dc:0e:87:c8:51:39: b4:10:17:62:9a:72:2d:92:fd:ab:f5:83:3a:02:ca: 32:52:84:56:d0:b6:84:43:25:c2:79:d6:91:5b:e0: d9:3c:c2:4c:c0:89:71:a9:28:61:dc:07:89:cd:43: ca:cb:59:59:05:46:50:15:ee:ca:6d:94:44:2d:12: a1:e8:c3:5e:bf:52:6e:c8:cf:41:df:1e:9a:ab:4b: 46:03:e3:f2:06:9e:96:5c:87:a7:66:ae:f1:34:b4: c9:ab:85:07:08:24:a7:83:09:09:f0:c3:3e:60:fb: fd:d5:6a:3d:cd:9c:0d:0e:dc:9f:be:8c:be:dd:a5: 28:b3:3a:11:27:90:5a:bb:44:4c:96:3e:2d:41:9e: 54:8a:ab:d4:70:0f:3e:0f:16:b7:de:70:88:dd:0c: c7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2D:41:7B:E4:31:A2:BE:E9:56:05:6F:79:E8:62:99:C6:75:93:33 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3BCB61DA01D411EFB260D83DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 49.128.221.0-49.128.222.255 Signature Algorithm: sha256WithRSAEncryption 95:d2:13:b8:2d:87:d5:bc:c7:73:2f:e4:47:7f:f8:a0:18:d6: 48:98:bb:2b:ab:ed:38:06:58:75:41:90:31:ef:f2:3b:66:c1: 42:98:e6:96:b6:ef:28:65:24:bf:b6:85:51:41:d1:ab:ef:63: 0a:5a:0c:12:da:86:68:8c:f3:ff:4b:e6:b8:a5:a1:4b:03:09: 16:8a:77:63:a2:26:27:84:d0:16:99:29:ea:80:8a:95:64:6b: 52:79:d6:bd:1b:fb:f6:5f:3d:35:fa:b5:c4:17:57:35:a7:c0: 88:ff:46:f9:1b:ae:0b:44:b3:fb:d4:c7:10:27:19:df:4f:54: bc:69:35:ca:4f:66:8b:0a:24:3a:43:f6:1e:89:3c:fb:71:63: 31:cd:b6:77:1a:78:3e:e1:25:19:8d:06:bb:3b:80:04:aa:65: 6b:d6:47:2c:9e:e1:5b:36:9f:16:8f:b5:ab:ca:65:ec:1b:37: 05:83:97:53:bb:8b:c7:82:d7:7e:1a:23:da:77:c3:49:ce:0c: 6c:59:d6:af:8e:0f:68:1a:95:fc:0d:df:cb:ce:1f:83:a0:6c: 92:ec:6e:5b:70:76:39:1e:4f:38:40:63:e8:83:a1:69:65:92: 47:50:47:bc:fa:85:7d:8c:50:bc:e6:40:3f:24:6e:48:f9:dd: e3:05:be:6d -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICPcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwODA2MTUxMjMwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc0YTQ1ZS0xZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5xl65GCgiMSiooMyvbeABNCdy7tuCyhOQOQ/4vghASw7RWf2RP6ag3HNTab pHh3+VOq0Twq7y6KHHMblkNyonx9UW/5UkPdND6zc+m2PlOyFx5aAC1Hd/uf2Uwb 5cBklfDcDofIUTm0EBdimnItkv2r9YM6AsoyUoRW0LaEQyXCedaRW+DZPMJMwIlx qShh3AeJzUPKy1lZBUZQFe7KbZRELRKh6MNev1JuyM9B3x6aq0tGA+PyBp6WXIen Zq7xNLTJq4UHCCSngwkJ8MM+YPv91Wo9zZwNDtyfvoy+3aUoszoRJ5Bau0RMlj4t QZ5UiqvUcA8+Dxa33nCI3QzH7wIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFBstQXvk MaK+6VYFb3noYpnGdZMzMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvM0JDQjYxREEw MUQ0MTFFRkIyNjBEODNEQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBAAxgN0DBAAxgN4wDQYJKoZIhvcNAQELBQADggEBAJXSE7gth9W8 x3Mv5Ed/+KAY1kiYuyur7TgGWHVBkDHv8jtmwUKY5pa27yhlJL+2hVFB0avvYwpa DBLahmiM8/9L5riloUsDCRaKd2OiJieE0BaZKeqAipVka1J51r0b+/ZfPTX6tcQX VzWnwIj/RvkbrgtEs/vUxxAnGd9PVLxpNcpPZosKJDpD9h6JPPtxYzHNtncaeD7h JRmNBrs7gASqZWvWRyye4Vs2nxaPtavKZewbNwWDl1O7i8eC134aI9p3w0nODGxZ 1q+OD2galfwN38vOH4OgbJLsbltwdjkeTzhAY+iDoWllkkdQR7z6hX2MULzmQD8k bkj53eMFvm0= -----END CERTIFICATE-----Generated at Thu Sep 10 18:12:42 2026 by rpki-client