$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4B4B1D3EF7F111F0B599D7DF686F56BC.roa File: 4B4B1D3EF7F111F0B599D7DF686F56BC.roa (raw, json) Hash identifier: FA1TGplYDwYTUTgLafsH1WOeijyvnG+IPi5+5lrRtfM= Subject key identifier: A4:EB:37:45:9F:64:E8:EC:19:73:1F:22:B1:61:4A:D0:FD:8F:24:8E Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3D79 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4B4B1D3EF7F111F0B599D7DF686F56BC.roa Signing time: Fri 31 Jul 2026 15:13:03 +0000 ROA not before: Fri 31 Jul 2026 15:13:03 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 9318 IP address blocks: 49.128.200.0/24 maxlen: 24 49.128.211.0/24 maxlen: 24 101.53.89.0/24 maxlen: 24 101.55.35.0/24 maxlen: 24 103.6.73.0/24 maxlen: 24 103.6.75.0/24 maxlen: 24 103.7.32.0/24 maxlen: 24 103.124.100.0/22 maxlen: 24 112.196.211.0/24 maxlen: 24 124.66.217.0/24 maxlen: 24 124.66.219.0/24 maxlen: 24 175.176.143.0/24 maxlen: 24 182.237.58.0/24 maxlen: 24 203.173.110.0/24 maxlen: 24 203.173.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Aug 2026 02:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15737 (0x3d79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Jul 31 15:13:03 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a6cbb7f-6311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:43:3d:b3:23:e2:e9:49:0d:9c:7f:44:e7:56: b1:15:02:cc:90:0e:4c:ea:d2:6a:90:e5:98:90:35: db:3e:98:90:96:b0:17:8f:42:d7:bd:ab:bb:1e:17: 23:56:12:7a:28:59:bc:05:c6:2a:45:48:72:79:79: 01:58:29:ae:04:c8:ef:96:6d:50:e8:a6:c9:f0:14: 2a:aa:37:00:43:49:06:aa:e4:0b:b5:67:41:11:d7: fa:f0:7c:2d:e1:b2:47:69:ec:39:c3:b7:8c:c0:c8: 79:6d:e0:82:77:d2:61:87:9e:d7:e2:63:84:0b:13: 78:40:d5:5a:bf:12:5f:ba:a5:16:d3:cb:63:9f:fc: a7:8e:48:79:50:12:3c:84:98:29:7f:8f:35:28:af: 4c:f8:06:c8:97:13:a5:af:a2:81:34:4e:a6:ed:3d: 57:f7:50:c7:af:fb:53:20:ba:b4:b6:8f:6f:73:80: 71:ba:b5:d3:db:9e:98:be:7e:ab:2d:d9:df:5b:8c: 9c:20:6c:27:68:fb:d4:a8:4d:c8:73:a7:11:b3:f9: 9c:67:d0:a2:4e:21:bb:0c:93:da:70:8d:d5:0a:34: 40:cb:a6:36:a6:56:39:aa:d5:3d:74:d7:e4:d5:73: a1:73:1c:07:6b:f7:e4:c4:cc:8e:dc:59:de:d1:4e: e3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:EB:37:45:9F:64:E8:EC:19:73:1F:22:B1:61:4A:D0:FD:8F:24:8E X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4B4B1D3EF7F111F0B599D7DF686F56BC.roa sbgp-ipAddrBlock: critical IPv4: 49.128.200.0/24 49.128.211.0/24 101.53.89.0/24 101.55.35.0/24 103.6.73.0/24 103.6.75.0/24 103.7.32.0/24 103.124.100.0/22 112.196.211.0/24 124.66.217.0/24 124.66.219.0/24 175.176.143.0/24 182.237.58.0/24 203.173.110.0/24 203.173.122.0/24 Signature Algorithm: sha256WithRSAEncryption 09:4c:58:ff:3e:1e:e7:39:6a:3c:9e:ec:1f:97:7b:a0:de:13: 66:46:14:17:92:ce:ae:3d:74:b5:ff:ea:c8:35:d8:68:fe:e2: a7:10:c9:ef:37:16:21:cf:9f:5b:31:4f:bd:ed:b9:d0:d5:a6: b9:ec:53:b7:7e:85:ab:2e:8b:cc:10:25:4a:06:25:5f:34:3d: bf:8a:b7:4f:da:5e:ee:d9:c3:c8:57:40:30:99:8e:7e:9f:fc: 3b:fc:ce:37:6b:40:70:0b:22:af:39:05:c6:f1:f0:9a:f6:70: 48:63:f1:54:27:4e:37:80:95:0e:9f:38:dc:7e:b7:5b:fd:62: 30:c7:63:ae:67:a8:03:64:30:98:bb:9b:ef:d4:55:9a:e8:34: a4:c9:b9:fb:61:3c:a4:0c:ce:a8:68:84:47:2d:22:79:ee:6d: 23:f3:b3:04:8b:c2:bd:d3:e9:88:91:aa:0a:22:21:b2:4e:bc: 85:3c:c5:de:d3:25:38:c3:ab:38:a5:32:dd:66:25:0c:e5:79: 3d:d5:a2:df:4c:97:66:7a:bf:e8:ee:22:d3:7b:5e:4e:13:16: 45:c7:03:ee:b2:7d:53:c6:b8:b0:5a:00:03:12:ba:59:fb:1f: dd:62:47:11:f8:b6:df:ff:07:f0:6e:75:74:19:52:2a:a3:02: c7:55:10:b3 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgICPXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwNzMxMTUxMzAzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTZjYmI3Zi02MzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8UM9syPi6UkNnH9E51axFQLMkA5M6tJqkOWYkDXbPpiQlrAXj0LXvau7Hhcj VhJ6KFm8BcYqRUhyeXkBWCmuBMjvlm1Q6KbJ8BQqqjcAQ0kGquQLtWdBEdf68Hwt 4bJHaew5w7eMwMh5beCCd9Jhh57X4mOECxN4QNVavxJfuqUW08tjn/ynjkh5UBI8 hJgpf481KK9M+AbIlxOlr6KBNE6m7T1X91DHr/tTILq0to9vc4BxurXT256Yvn6r LdnfW4ycIGwnaPvUqE3Ic6cRs/mcZ9CiTiG7DJPacI3VCjRAy6Y2plY5qtU9dNfk 1XOhcxwHa/fkxMyO3Fne0U7j9wIDAQABo4ICtDCCArAwHQYDVR0OBBYEFKTrN0Wf ZOjsGXMfIrFhStD9jySOMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNEI0QjFEM0VG N0YxMTFGMEI1OTlEN0RGNjg2RjU2QkMucm9hMHMGCCsGAQUFBwEHAQH/BGQwYjBg BAIAATBaAwQAMYDIAwQAMYDTAwQAZTVZAwQAZTcjAwQAZwZJAwQAZwZLAwQAZwcg AwQCZ3xkAwQAcMTTAwQAfELZAwQAfELbAwQAr7CPAwQAtu06AwQAy61uAwQAy616 MA0GCSqGSIb3DQEBCwUAA4IBAQAJTFj/Ph7nOWo8nuwfl3ug3hNmRhQXks6uPXS1 /+rINdho/uKnEMnvNxYhz59bMU+97bnQ1aa57FO3foWrLovMECVKBiVfND2/irdP 2l7u2cPIV0AwmY5+n/w7/M43a0BwCyKvOQXG8fCa9nBIY/FUJ043gJUOnzjcfrdb /WIwx2OuZ6gDZDCYu5vv1FWa6DSkybn7YTykDM6oaIRHLSJ57m0j87MEi8K90+mI kaoKIiGyTryFPMXe0yU4w6s4pTLdZiUM5Xk91aLfTJdmer/o7iLTe15OExZFxwPu sn1TxriwWgADErpZ+x/dYkcR+Lbf/wfwbnV0GVIqowLHVRCz -----END CERTIFICATE-----Generated at Tue Aug 4 12:20:38 2026 by rpki-client