$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/5E035B480E8C11F0AD0C273AC4F9AE02.roa File: 5E035B480E8C11F0AD0C273AC4F9AE02.roa (raw, json) Hash identifier: kCEezTEQ4QTv9xSQ0C7yjDH41PuNBiuueoxL4+ZM2G0= Subject key identifier: 20:84:2F:96:C2:90:CC:26:41:BA:FB:4A:4E:14:09:8E:5E:D2:8B:92 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3DC1 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/5E035B480E8C11F0AD0C273AC4F9AE02.roa Signing time: Thu 06 Aug 2026 15:12:20 +0000 ROA not before: Thu 06 Aug 2026 15:12:20 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 38661 IP address blocks: 101.79.0.0/22 maxlen: 24 101.79.72.0/22 maxlen: 24 101.79.136.0/23 maxlen: 24 101.79.240.0/21 maxlen: 24 101.79.248.0/22 maxlen: 24 101.79.254.0/23 maxlen: 24 110.4.104.0/22 maxlen: 24 180.210.60.0/22 maxlen: 24 182.252.140.0/22 maxlen: 24 182.252.176.0/21 maxlen: 24 210.4.220.0/22 maxlen: 24 211.172.228.0/22 maxlen: 24 211.172.232.0/22 maxlen: 24 211.236.160.0/22 maxlen: 24 211.236.168.0/21 maxlen: 24 211.236.180.0/22 maxlen: 24 211.236.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 14:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15809 (0x3dc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Aug 6 15:12:20 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a74a454-3388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d1:43:af:bd:b0:80:97:0e:39:f1:70:a6:cb: 6a:6e:87:e7:70:fc:a2:57:c1:37:f9:64:49:4a:3a: 1e:fc:10:aa:e1:53:3c:18:df:d5:3c:a3:c7:b1:af: bb:4c:19:8a:1d:a2:9b:48:f9:1a:60:cd:33:92:48: 3d:b0:80:2c:da:13:b2:5b:1c:91:6a:a4:6d:9c:c7: 30:4c:ca:86:ff:31:0c:e9:31:1f:b5:e8:44:9c:0f: 52:a4:66:f1:dd:4e:0f:36:0f:0c:0a:c1:c6:75:7e: 19:a6:33:05:93:bc:81:8f:e9:69:fc:62:b1:33:99: 5a:5f:ff:2f:0e:13:df:cf:0d:da:c6:f4:e4:47:9d: 39:51:6f:d3:6c:ec:2d:08:e3:2a:7e:55:49:6c:53: 5c:92:5b:88:7a:92:86:2f:db:cf:72:d8:7c:9b:cc: 37:9f:8d:35:c7:bf:db:fd:10:dd:d4:d0:7c:69:1e: 9e:5f:a6:5f:49:2d:13:9a:f3:f9:1a:e2:61:dd:38: 4c:69:4e:30:38:e5:5a:75:af:d4:45:8c:b5:1d:9a: 70:21:56:2e:2b:83:5d:f1:b8:32:59:36:b5:ab:f9: 0c:11:08:92:61:9a:35:2b:e3:b3:73:58:54:79:d2: 53:70:33:e7:ee:19:ce:20:a1:19:84:4f:c9:06:97: 69:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:84:2F:96:C2:90:CC:26:41:BA:FB:4A:4E:14:09:8E:5E:D2:8B:92 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/5E035B480E8C11F0AD0C273AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 101.79.0.0/22 101.79.72.0/22 101.79.136.0/23 101.79.240.0-101.79.251.255 101.79.254.0/23 110.4.104.0/22 180.210.60.0/22 182.252.140.0/22 182.252.176.0/21 210.4.220.0/22 211.172.228.0-211.172.235.255 211.236.160.0/22 211.236.168.0/21 211.236.180.0-211.236.191.255 Signature Algorithm: sha256WithRSAEncryption 23:ea:3e:1e:55:4c:95:8c:82:0c:27:c1:0b:49:a0:f9:1d:98: 12:d3:50:e6:6d:df:e2:5d:d5:04:e8:45:23:ee:13:d4:68:dc: 53:93:09:27:f5:06:60:2f:25:b5:c9:ad:5f:bb:23:8e:54:3f: 1f:4e:a1:e0:74:17:6c:6e:a1:e9:b2:8a:74:37:4d:00:56:98: 1f:80:0a:9e:93:eb:b6:b1:3b:4e:0a:30:a4:44:cf:9d:28:26: 7a:50:e1:c5:92:6d:5a:80:e7:3b:c5:d1:71:43:29:7c:9f:29: b7:5d:7a:22:13:0a:36:bd:85:1e:c5:27:35:47:b3:5d:fd:7b: f4:9d:74:0e:4c:29:fd:89:2c:b4:70:2e:f3:41:96:85:a8:d0: 83:86:b6:0c:1d:6e:47:a7:6f:13:60:9a:53:23:d1:c1:9e:81: 82:03:74:98:37:b7:94:20:6b:e2:48:1b:6e:6b:e8:f4:d8:ce: c9:07:73:d6:0b:82:46:ba:2a:4c:3d:bd:e4:64:5e:2a:f4:50: 87:a9:75:37:63:dc:71:70:7d:54:7f:2c:b6:63:1a:0d:40:ff: 2d:06:d7:df:e0:a4:c6:27:0e:d5:31:2b:ba:ae:54:de:79:3b: e6:f0:a2:bb:1e:63:4c:0b:70:bf:dc:1f:6d:ac:a5:77:ef:a1: cb:a8:b8:15 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICPcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwODA2MTUxMjIwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc0YTQ1NC0zMzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9FDr72wgJcOOfFwpstqbofncPyiV8E3+WRJSjoe/BCq4VM8GN/VPKPHsa+7 TBmKHaKbSPkaYM0zkkg9sIAs2hOyWxyRaqRtnMcwTMqG/zEM6TEftehEnA9SpGbx 3U4PNg8MCsHGdX4ZpjMFk7yBj+lp/GKxM5laX/8vDhPfzw3axvTkR505UW/TbOwt COMqflVJbFNckluIepKGL9vPcth8m8w3n401x7/b/RDd1NB8aR6eX6ZfSS0TmvP5 GuJh3ThMaU4wOOVada/URYy1HZpwIVYuK4Nd8bgyWTa1q/kMEQiSYZo1K+Ozc1hU edJTcDPn7hnOIKEZhE/JBpdpBwIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFCCEL5bC kMwmQbr7Sk4UCY5e0ouSMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNUUwMzVCNDgw RThDMTFGMEFEMEMyNzNBQzRGOUFFMDIucm9hMIGFBggrBgEFBQcBBwEB/wR2MHQw cgQCAAEwbAMEAmVPAAMEAmVPSAMEAWVPiDAMAwQEZU/wAwQCZU/4AwQBZU/+AwQC bgRoAwQCtNI8AwQCtvyMAwQDtvywAwQC0gTcMAwDBALTrOQDBALTrOgDBALT7KAD BAPT7KgwDAMEAtPstAMEBtPsgDANBgkqhkiG9w0BAQsFAAOCAQEAI+o+HlVMlYyC DCfBC0mg+R2YEtNQ5m3f4l3VBOhFI+4T1GjcU5MJJ/UGYC8ltcmtX7sjjlQ/H06h 4HQXbG6h6bKKdDdNAFaYH4AKnpPrtrE7TgowpETPnSgmelDhxZJtWoDnO8XRcUMp fJ8pt116IhMKNr2FHsUnNUezXf179J10Dkwp/YkstHAu80GWhajQg4a2DB1uR6dv E2CaUyPRwZ6BggN0mDe3lCBr4kgbbmvo9NjOyQdz1guCRroqTD295GReKvRQh6l1 N2PccXB9VH8stmMaDUD/LQbX3+CkxicO1TEruq5U3nk75vCiux5jTAtwv9wfbayl d++hy6i4FQ== -----END CERTIFICATE-----Generated at Thu Sep 10 18:12:47 2026 by rpki-client