$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4B4B1D3EF7F111F0B599D7DF686F56BC.roa File: 4B4B1D3EF7F111F0B599D7DF686F56BC.roa (raw, json) Hash identifier: mJGRj9XW36PykwcBlmuS7L6SQEHYi6t8RGU3/IwwS/0= Subject key identifier: 13:5D:B9:10:91:BB:76:5A:9B:F5:5F:54:0B:06:0C:B8:FD:EA:C2:7F Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3C47 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4B4B1D3EF7F111F0B599D7DF686F56BC.roa Signing time: Wed 04 Mar 2026 00:43:55 +0000 ROA not before: Wed 04 Mar 2026 00:43:55 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 9318 IP address blocks: 49.128.200.0/24 maxlen: 24 49.128.211.0/24 maxlen: 24 101.55.35.0/24 maxlen: 24 103.7.32.0/24 maxlen: 24 124.66.217.0/24 maxlen: 24 124.66.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 14:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15431 (0x3c47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Mar 4 00:43:55 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a7804b-de7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:14:ad:89:9a:a8:c0:f5:a7:ae:42:72:7d:55: c0:2d:b6:81:e0:81:1e:56:47:53:3a:32:ac:0d:b3: 25:59:6e:ce:24:ac:16:62:a5:21:a3:ae:fd:75:d7: 96:f5:11:3e:be:13:14:d3:1b:55:e8:4c:37:69:71: 12:52:be:26:97:55:af:af:52:7c:ea:30:1d:d6:b0: 21:31:dd:db:32:8a:62:68:a3:6e:e0:33:5d:6a:07: 56:ff:a8:e6:7b:90:ac:bf:cb:2f:ac:e8:35:47:02: 2b:ca:e2:4a:94:b9:96:eb:2f:61:34:84:17:e4:19: 28:64:e5:e1:15:f4:5b:ee:e1:44:5e:3d:80:83:87: 28:5e:e3:e0:ab:4d:d5:0a:39:61:d4:6a:d8:3d:38: 21:ea:55:3e:c7:cc:07:77:d2:75:45:02:9f:5c:11: 5e:1d:77:b1:ff:cf:d8:c0:66:88:7f:81:54:35:96: 43:cf:23:26:48:66:da:92:68:2a:3c:41:42:36:cd: 23:cc:3a:52:0e:1d:23:27:8a:81:4b:28:c6:88:d4: f4:c7:7f:5c:1b:f2:f6:6e:30:7c:fd:fb:b7:9c:af: 19:8a:c4:ae:ad:85:1f:4d:29:94:fd:ab:82:56:01: 24:9b:6d:41:94:ae:d8:54:a6:94:7b:52:73:1d:d2: 7f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5D:B9:10:91:BB:76:5A:9B:F5:5F:54:0B:06:0C:B8:FD:EA:C2:7F X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4B4B1D3EF7F111F0B599D7DF686F56BC.roa sbgp-ipAddrBlock: critical IPv4: 49.128.200.0/24 49.128.211.0/24 101.55.35.0/24 103.7.32.0/24 124.66.217.0/24 124.66.219.0/24 Signature Algorithm: sha256WithRSAEncryption c8:9a:74:71:5b:2d:6e:e4:8d:87:20:2c:d1:37:64:a8:9b:07: 4c:83:af:07:5e:f9:e3:e9:2b:5f:80:13:a0:65:eb:42:51:d9: ef:21:f1:63:d0:67:08:42:f9:e4:cf:17:44:a3:c6:6d:a2:8b: ad:b2:97:23:a7:1e:05:1a:a7:3b:77:ff:b4:c1:d8:e9:f3:27: 6f:1b:4d:53:ae:95:ea:73:44:10:cd:9c:6a:c3:72:1b:67:3e: 53:70:b4:ee:c3:1f:f2:49:3c:04:22:24:a3:4c:0f:d4:7c:38: fe:20:bf:ee:09:75:ab:f3:d2:7e:e6:b6:56:0c:e5:6e:cf:57: 36:8a:e9:a3:af:61:86:f1:2c:fc:59:d2:60:a4:67:26:30:f4: ec:d4:ef:5f:a2:b1:5e:8e:e5:67:d7:42:56:bb:c8:fc:97:eb: 13:35:b8:3e:45:9d:5f:f2:96:77:d3:f3:ae:5c:b7:7b:09:6d: 48:4a:1b:33:dc:11:b1:d8:76:89:3f:aa:0c:92:7a:19:17:69: 4c:0f:c2:45:58:04:4c:88:c3:00:a4:86:33:fd:3f:cf:e3:35: 3e:2f:7c:01:60:94:e1:4b:f3:5e:76:ef:7b:e6:f7:f2:d7:24: ba:9a:89:55:da:e5:3d:db:95:52:83:44:b2:05:df:ff:46:5d: 12:57:e9:d6 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICPEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwMzA0MDA0MzU1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE3ODA0Yi1kZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBStiZqowPWnrkJyfVXALbaB4IEeVkdTOjKsDbMlWW7OJKwWYqUho679ddeW 9RE+vhMU0xtV6Ew3aXESUr4ml1Wvr1J86jAd1rAhMd3bMopiaKNu4DNdagdW/6jm e5Csv8svrOg1RwIryuJKlLmW6y9hNIQX5BkoZOXhFfRb7uFEXj2Ag4coXuPgq03V Cjlh1GrYPTgh6lU+x8wHd9J1RQKfXBFeHXex/8/YwGaIf4FUNZZDzyMmSGbakmgq PEFCNs0jzDpSDh0jJ4qBSyjGiNT0x39cG/L2bjB8/fu3nK8ZisSurYUfTSmU/auC VgEkm21BlK7YVKaUe1JzHdJ/vwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFBNduRCR u3Zam/VfVAsGDLj96sJ/MB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNEI0QjFEM0VG N0YxMTFGMEI1OTlEN0RGNjg2RjU2QkMucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAATAkAwQAMYDIAwQAMYDTAwQAZTcjAwQAZwcgAwQAfELZAwQAfELbMA0GCSqG SIb3DQEBCwUAA4IBAQDImnRxWy1u5I2HICzRN2SomwdMg68HXvnj6StfgBOgZetC UdnvIfFj0GcIQvnkzxdEo8Ztooutspcjpx4FGqc7d/+0wdjp8ydvG01TrpXqc0QQ zZxqw3IbZz5TcLTuwx/ySTwEIiSjTA/UfDj+IL/uCXWr89J+5rZWDOVuz1c2iumj r2GG8Sz8WdJgpGcmMPTs1O9forFejuVn10JWu8j8l+sTNbg+RZ1f8pZ30/OuXLd7 CW1IShsz3BGx2HaJP6oMknoZF2lMD8JFWARMiMMApIYz/T/P4zU+L3wBYJThS/Ne du975vfy1yS6molV2uU925VSg0SyBd//Rl0SV+nW -----END CERTIFICATE-----Generated at Sat Mar 21 12:03:09 2026 by rpki-client