$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4B4B1D3EF7F111F0B599D7DF686F56BC.roa File: 4B4B1D3EF7F111F0B599D7DF686F56BC.roa (raw, json) Hash identifier: zUllXEHiieoyySb3g3efW2j9j/BeBZgiU8kTQ0xgpEY= Subject key identifier: 8C:02:D4:04:16:DE:2B:F6:72:75:3D:B9:A0:7C:E7:5B:6A:82:BE:57 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3D09 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4B4B1D3EF7F111F0B599D7DF686F56BC.roa Signing time: Mon 15 Jun 2026 00:02:07 +0000 ROA not before: Mon 15 Jun 2026 00:02:07 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 9318 IP address blocks: 49.128.200.0/24 maxlen: 24 49.128.211.0/24 maxlen: 24 101.53.89.0/24 maxlen: 24 101.55.35.0/24 maxlen: 24 103.6.73.0/24 maxlen: 24 103.6.75.0/24 maxlen: 24 103.7.32.0/24 maxlen: 24 103.124.100.0/22 maxlen: 24 112.196.211.0/24 maxlen: 24 124.66.217.0/24 maxlen: 24 124.66.219.0/24 maxlen: 24 175.176.143.0/24 maxlen: 24 182.237.58.0/24 maxlen: 24 203.173.110.0/24 maxlen: 24 203.173.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Jun 2026 14:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15625 (0x3d09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Jun 15 00:02:07 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6a2f40ff-a8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ee:4e:c7:50:25:bc:db:3e:ff:9f:aa:50:52: fb:57:58:7c:3a:5e:d8:e2:4f:7c:c6:42:8b:89:fb: d1:9f:53:93:82:86:6a:5c:ae:b3:7f:f5:6d:8e:85: 14:c1:72:0d:ce:f5:41:5b:58:fb:19:da:c5:ea:3e: 76:cb:66:45:aa:c9:85:9f:0b:15:7a:ba:27:02:88: 05:e9:6a:33:07:be:d4:f8:ab:d8:78:e0:71:ce:b8: 85:c3:b1:0e:ac:e9:d3:1e:69:84:88:c3:38:37:ce: 2c:68:68:7e:e4:46:62:b5:41:ae:0f:3d:0f:2d:3d: 21:02:f2:5b:fd:ee:27:33:c0:53:c3:7e:aa:f1:49: d9:87:cb:13:f2:3b:1c:f5:c2:76:d3:97:d1:1a:1d: 5f:02:7a:98:03:41:bb:a1:26:b1:6a:2d:77:98:f4: 21:22:f7:2f:73:51:0c:d9:ee:80:96:40:80:04:1a: e0:8b:dd:06:97:11:6e:3c:da:98:d8:97:17:18:b3: 97:b9:e4:c1:d3:d6:0c:b5:70:0d:25:2b:4c:38:32: ba:1b:fa:ff:0c:e2:06:5b:5b:b7:30:d9:7a:ff:08: 00:24:b2:93:77:3f:47:0a:88:1e:f5:df:6c:78:9c: a8:56:5d:f5:08:9b:a0:1a:30:bc:77:aa:d9:80:95: 51:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:02:D4:04:16:DE:2B:F6:72:75:3D:B9:A0:7C:E7:5B:6A:82:BE:57 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4B4B1D3EF7F111F0B599D7DF686F56BC.roa sbgp-ipAddrBlock: critical IPv4: 49.128.200.0/24 49.128.211.0/24 101.53.89.0/24 101.55.35.0/24 103.6.73.0/24 103.6.75.0/24 103.7.32.0/24 103.124.100.0/22 112.196.211.0/24 124.66.217.0/24 124.66.219.0/24 175.176.143.0/24 182.237.58.0/24 203.173.110.0/24 203.173.122.0/24 Signature Algorithm: sha256WithRSAEncryption e3:23:3c:f2:7b:a3:e4:ba:15:4a:21:1a:c5:1d:ba:f5:4e:f6: e6:ce:2e:7a:1f:90:7b:c7:a5:59:6f:8b:e0:25:0b:59:e6:f4: ad:2d:b0:ee:c3:41:e9:34:71:bf:ee:f1:ab:bd:dd:bc:ec:1e: e4:e0:2c:47:10:e4:c4:02:09:8a:a2:e3:e7:2a:21:88:9f:da: 33:7e:d1:41:3d:bc:21:04:92:ee:73:53:81:47:0c:ee:92:70: 9a:04:d0:44:9b:ee:10:fa:fe:63:c4:a0:47:f3:f1:61:e9:af: cb:44:02:31:d7:e6:02:af:f8:d6:f1:c6:7d:11:bd:8d:43:ed: 1b:84:c9:76:d4:ca:ab:dd:c6:6f:09:54:6b:f4:4c:0e:92:a3: 23:67:9c:30:6f:9e:ea:26:7a:94:7b:61:cf:45:b5:8d:6c:6c: 3c:09:fc:a4:67:80:72:f4:0e:92:c1:ac:84:ee:a2:90:42:42: b9:0d:ee:22:3e:78:fd:9d:ab:eb:0b:c7:8d:3d:83:7d:05:0f: bd:78:97:b8:42:83:72:40:f5:01:56:ac:07:ec:28:d1:3d:ad: 8d:33:df:eb:65:f4:38:5e:bc:d6:f5:20:77:60:0a:4e:7f:40: b0:b0:17:ab:39:53:95:c9:d5:98:5d:02:06:e1:98:5b:ac:cd: 9d:80:00:7d -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgICPQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwNjE1MDAwMjA3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTJmNDBmZi1hOGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuO5Ox1AlvNs+/5+qUFL7V1h8Ol7Y4k98xkKLifvRn1OTgoZqXK6zf/VtjoUU wXINzvVBW1j7GdrF6j52y2ZFqsmFnwsVeronAogF6WozB77U+KvYeOBxzriFw7EO rOnTHmmEiMM4N84saGh+5EZitUGuDz0PLT0hAvJb/e4nM8BTw36q8UnZh8sT8jsc 9cJ205fRGh1fAnqYA0G7oSaxai13mPQhIvcvc1EM2e6AlkCABBrgi90GlxFuPNqY 2JcXGLOXueTB09YMtXANJStMODK6G/r/DOIGW1u3MNl6/wgAJLKTdz9HCoge9d9s eJyoVl31CJugGjC8d6rZgJVRuQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFIwC1AQW 3iv2cnU9uaB851tqgr5XMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNEI0QjFEM0VG N0YxMTFGMEI1OTlEN0RGNjg2RjU2QkMucm9hMHMGCCsGAQUFBwEHAQH/BGQwYjBg BAIAATBaAwQAMYDIAwQAMYDTAwQAZTVZAwQAZTcjAwQAZwZJAwQAZwZLAwQAZwcg AwQCZ3xkAwQAcMTTAwQAfELZAwQAfELbAwQAr7CPAwQAtu06AwQAy61uAwQAy616 MA0GCSqGSIb3DQEBCwUAA4IBAQDjIzzye6PkuhVKIRrFHbr1Tvbmzi56H5B7x6VZ b4vgJQtZ5vStLbDuw0HpNHG/7vGrvd287B7k4CxHEOTEAgmKouPnKiGIn9ozftFB PbwhBJLuc1OBRwzuknCaBNBEm+4Q+v5jxKBH8/Fh6a/LRAIx1+YCr/jW8cZ9Eb2N Q+0bhMl21Mqr3cZvCVRr9EwOkqMjZ5wwb57qJnqUe2HPRbWNbGw8CfykZ4By9A6S wayE7qKQQkK5De4iPnj9navrC8eNPYN9BQ+9eJe4QoNyQPUBVqwH7CjRPa2NM9/r ZfQ4XrzW9SB3YApOf0CwsBerOVOVydWYXQIG4ZhbrM2dgAB9 -----END CERTIFICATE-----Generated at Sat Jun 20 02:14:05 2026 by rpki-client