$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/44F74E28527B11F1839642F0C3833773.roa File: 44F74E28527B11F1839642F0C3833773.roa (raw, json) Hash identifier: /JNc6Wv+zs1/R9+qqa5fdq8hQYI6Ko0dtG5Z0mX8T4A= Subject key identifier: 34:E2:8C:8D:1D:58:74:18:98:2A:38:4E:D3:2B:E5:8A:46:50:42:D5 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3CEA Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/44F74E28527B11F1839642F0C3833773.roa Signing time: Mon 18 May 2026 05:45:40 +0000 ROA not before: Mon 18 May 2026 05:45:40 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135120 IP address blocks: 45.120.64.0/24 maxlen: 24 45.120.67.0/24 maxlen: 24 121.0.111.0/24 maxlen: 24 203.210.16.0/24 maxlen: 24 203.210.17.0/24 maxlen: 24 203.210.18.0/23 maxlen: 24 203.210.20.0/24 maxlen: 24 203.210.22.0/24 maxlen: 24 203.210.23.0/24 maxlen: 24 203.210.26.0/24 maxlen: 24 203.210.27.0/24 maxlen: 24 203.210.31.0/24 maxlen: 24 210.87.193.0/24 maxlen: 24 210.87.195.0/24 maxlen: 24 210.87.196.0/24 maxlen: 24 210.87.197.0/24 maxlen: 24 210.87.199.0/24 maxlen: 24 210.87.204.0/24 maxlen: 24 210.87.208.0/21 maxlen: 24 210.87.216.0/22 maxlen: 24 210.87.220.0/24 maxlen: 24 210.87.221.0/24 maxlen: 24 210.87.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 May 2026 14:22:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15594 (0x3cea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: May 18 05:45:40 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6a0aa784-9492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8c:59:5f:57:82:8e:72:9e:7b:65:eb:fc:7b: e9:ac:c8:6c:dd:b1:d2:08:1f:d0:8d:c8:b0:5f:d4: ce:b6:22:11:12:01:1e:4d:cb:dd:61:64:28:f1:84: 4e:55:ea:93:19:e7:6e:4b:bc:13:30:fa:6e:fa:7d: 6d:77:a9:e4:d6:2b:f1:25:0c:87:68:9e:a3:3e:80: f4:4e:bc:ba:b0:12:2b:ff:6b:4e:6f:18:75:72:53: 85:62:5c:4d:c8:46:8c:5a:92:60:37:d9:63:07:96: 81:c4:3c:52:47:4b:76:58:31:f4:bd:55:f2:9e:04: 38:21:13:de:4d:dd:9c:cc:c6:b0:17:08:88:20:c1: c0:99:ea:81:46:af:b7:71:e3:77:7b:3a:4b:8f:cd: 2d:30:b7:0e:f7:04:8b:73:a2:88:0b:b3:32:fe:ea: c4:60:47:5e:dc:de:5c:8d:54:45:dd:fd:3e:a9:60: e5:3c:34:e8:0f:50:39:46:8f:0e:64:d3:7c:ea:c7: ff:f1:48:cd:0b:64:8d:e6:a6:b1:a1:46:2d:30:45: 41:34:ab:ff:2b:c7:44:f3:85:31:3c:f1:8b:bd:74: 96:01:8c:63:c3:f0:2d:7f:44:86:1c:52:21:97:86: 66:d4:8b:7b:ac:16:ef:df:21:e3:8e:6a:85:b2:6d: d3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E2:8C:8D:1D:58:74:18:98:2A:38:4E:D3:2B:E5:8A:46:50:42:D5 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/44F74E28527B11F1839642F0C3833773.roa sbgp-ipAddrBlock: critical IPv4: 45.120.64.0/24 45.120.67.0/24 121.0.111.0/24 203.210.16.0-203.210.20.255 203.210.22.0/23 203.210.26.0/23 203.210.31.0/24 210.87.193.0/24 210.87.195.0-210.87.197.255 210.87.199.0/24 210.87.204.0/24 210.87.208.0-210.87.222.255 Signature Algorithm: sha256WithRSAEncryption c0:91:6f:fd:ef:c6:0f:4f:26:30:ce:f4:0a:21:47:e9:99:76: e0:8c:d7:bb:f5:4b:3b:b9:63:4b:c6:aa:35:19:f6:84:f2:5a: 99:8d:fb:66:07:1a:4e:94:7d:42:1e:5e:ba:47:49:9b:21:cd: 63:34:5c:b2:8d:78:cc:a9:b8:3e:04:be:0c:54:86:88:90:38: 6d:0c:24:70:3b:44:bf:97:36:40:eb:57:c9:0a:fd:4a:8f:f5: 23:a5:dc:59:c2:d9:b8:ad:68:5a:6f:f4:a5:e3:d8:25:9c:bb: c0:be:76:3d:6c:54:45:81:c3:42:b0:5f:e6:9e:c7:4c:f2:75: 96:0c:10:f0:e6:9a:a5:0b:d0:23:60:79:2e:f7:1e:d4:db:da: 8b:6c:56:ed:75:e1:da:42:b9:9a:c6:7c:a3:9e:04:56:d0:1c: a3:6b:1e:5a:cd:d7:34:bc:b0:f7:fa:3d:33:2a:af:82:81:5e: 9a:7f:71:16:c8:fe:e3:23:67:47:a3:c6:a8:c8:3f:a3:e6:97: eb:2e:00:51:14:6c:ec:28:73:9e:1a:e4:05:39:c5:25:92:f4: c0:de:bc:9c:44:b1:d0:64:fd:da:9d:cf:a9:fc:3f:ae:b3:22: ba:c6:0a:df:bd:4f:bd:c9:3f:33:2a:55:79:a9:73:3c:c0:a0: 02:79:cf:60 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICPOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwNTE4MDU0NTQwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTBhYTc4NC05NDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4xZX1eCjnKee2Xr/HvprMhs3bHSCB/QjciwX9TOtiIREgEeTcvdYWQo8YRO VeqTGeduS7wTMPpu+n1td6nk1ivxJQyHaJ6jPoD0Try6sBIr/2tObxh1clOFYlxN yEaMWpJgN9ljB5aBxDxSR0t2WDH0vVXyngQ4IRPeTd2czMawFwiIIMHAmeqBRq+3 ceN3ezpLj80tMLcO9wSLc6KIC7My/urEYEde3N5cjVRF3f0+qWDlPDToD1A5Ro8O ZNN86sf/8UjNC2SN5qaxoUYtMEVBNKv/K8dE84UxPPGLvXSWAYxjw/Atf0SGHFIh l4Zm1It7rBbv3yHjjmqFsm3TTQIDAQABo4ICujCCArYwHQYDVR0OBBYEFDTijI0d WHQYmCo4TtMr5YpGUELVMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNDRGNzRFMjg1 MjdCMTFGMTgzOTY0MkYwQzM4MzM3NzMucm9hMHkGCCsGAQUFBwEHAQH/BGowaDBm BAIAATBgAwQALXhAAwQALXhDAwQAeQBvMAwDBATL0hADBADL0hQDBAHL0hYDBAHL 0hoDBADL0h8DBADSV8EwDAMEANJXwwMEAdJXxAMEANJXxwMEANJXzDAMAwQE0lfQ AwQA0lfeMA0GCSqGSIb3DQEBCwUAA4IBAQDAkW/978YPTyYwzvQKIUfpmXbgjNe7 9Us7uWNLxqo1GfaE8lqZjftmBxpOlH1CHl66R0mbIc1jNFyyjXjMqbg+BL4MVIaI kDhtDCRwO0S/lzZA61fJCv1Kj/UjpdxZwtm4rWhab/Sl49glnLvAvnY9bFRFgcNC sF/mnsdM8nWWDBDw5pqlC9AjYHku9x7U29qLbFbtdeHaQrmaxnyjngRW0Byjax5a zdc0vLD3+j0zKq+CgV6af3EWyP7jI2dHo8aoyD+j5pfrLgBRFGzsKHOeGuQFOcUl kvTA3rycRLHQZP3anc+p/D+usyK6xgrfvU+9yT8zKlV5qXM8wKACec9g -----END CERTIFICATE-----Generated at Mon May 25 16:42:58 2026 by rpki-client