$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/97DE828061E211F0A89DA027C4F9AE02.roa File: 97DE828061E211F0A89DA027C4F9AE02.roa (raw, json) Hash identifier: yr7/I5ujycjYBwKXnT1v5/kJ6p0zOkn7dTHfduMauOU= Subject key identifier: 89:C2:07:C2:5D:94:F3:BA:29:7C:50:EC:AC:CB:1B:35:A0:F5:08:A8 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3DA5 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/97DE828061E211F0A89DA027C4F9AE02.roa Signing time: Thu 06 Aug 2026 15:11:26 +0000 ROA not before: Thu 06 Aug 2026 15:11:26 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 151349 IP address blocks: 45.250.221.0/24 maxlen: 24 45.250.222.0/24 maxlen: 24 45.250.223.0/24 maxlen: 24 61.251.181.0/24 maxlen: 24 61.251.183.0/24 maxlen: 24 203.173.97.0/24 maxlen: 24 203.173.98.0/24 maxlen: 24 203.173.99.0/24 maxlen: 24 203.173.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Aug 2026 15:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15781 (0x3da5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Aug 6 15:11:26 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a74a41d-9126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2b:f1:e6:4e:e0:ca:02:dc:2c:c0:3e:80:cc: 1a:30:e6:1f:48:90:66:c9:9a:76:91:83:60:aa:c0: 3e:ec:68:93:39:13:b4:5f:fd:46:b1:d8:a0:54:0f: 8b:0a:8f:02:b4:ae:db:5c:5b:df:7c:7f:3a:c2:41: 25:93:b3:e1:6c:3a:84:fd:43:09:f0:2b:52:79:2d: f2:39:63:32:9d:8e:ce:cd:2a:ae:4a:36:7c:b0:d8: 0c:8a:1f:1c:50:fb:68:12:26:87:88:6c:17:19:46: 49:25:78:c8:e4:85:a7:e2:0f:d8:4b:69:25:30:f6: 64:07:e5:37:bb:f0:6d:83:3d:59:c9:48:fa:a7:6e: 33:6a:ef:f3:5c:56:78:76:f1:d3:1a:f7:98:ce:e0: 18:71:f1:5b:21:00:d5:61:5b:76:b2:5f:a4:60:21: c2:e4:a6:b5:8c:81:3f:da:2c:85:b2:d6:2b:07:e9: f1:f3:f9:43:35:26:64:60:f3:66:a8:13:6b:f9:a9: 51:4f:01:3e:57:63:15:ac:e7:35:ae:ac:5e:d7:d8: 0b:43:9a:49:cb:d6:d7:f7:95:6c:7d:60:36:e3:9e: 04:32:e6:77:73:a6:c4:77:47:71:2c:da:11:d3:5b: 0a:2a:7c:18:82:b0:af:7a:01:20:d2:cc:d4:f9:72: a2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C2:07:C2:5D:94:F3:BA:29:7C:50:EC:AC:CB:1B:35:A0:F5:08:A8 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/97DE828061E211F0A89DA027C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.250.221.0-45.250.223.255 61.251.181.0/24 61.251.183.0/24 203.173.97.0-203.173.100.255 Signature Algorithm: sha256WithRSAEncryption 95:07:fe:86:26:ac:f0:38:7e:45:49:b7:38:7e:ec:d7:d8:fe: af:26:73:09:5a:a1:50:15:75:d4:26:32:e3:74:a5:bb:53:2c: 3f:03:71:e6:0b:c2:ac:72:77:09:61:94:0b:fe:9f:34:cc:27: 0b:b3:59:6b:d7:5e:14:25:f8:22:4b:11:c2:e8:d2:51:88:d0: 7e:7b:cf:b9:81:59:92:f6:60:98:f9:62:7e:9f:d6:b9:20:c2: 6b:b9:2a:b8:ff:77:43:29:e8:84:3a:50:69:b6:fc:09:a0:42: 01:db:c1:13:58:25:05:f4:f3:d5:1b:35:b6:3b:02:68:d5:11: f3:d9:8c:f3:1b:63:97:19:be:f0:91:e1:ee:5c:8c:64:de:dc: d6:b4:d8:9f:41:18:84:e4:b9:29:fd:93:1e:25:54:88:16:17: 9f:d5:14:b6:31:e3:6e:e7:b5:9c:ff:8e:05:c2:a7:ce:5e:c1: 08:69:c2:43:24:4d:48:5a:e6:d1:f4:61:41:ec:24:0e:eb:82: f7:c7:2d:bd:24:da:a6:dd:ca:4e:2d:f7:1b:9c:38:fd:28:a0: 7d:d8:ea:52:2e:f6:f5:21:98:6e:f6:e4:86:24:12:7b:b3:1d: 2a:ee:6a:d7:da:6a:62:8a:e0:f7:63:37:07:17:74:f7:6b:7f: 0c:98:72:39 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICPaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwODA2MTUxMTI2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc0YTQxZC05MTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Cvx5k7gygLcLMA+gMwaMOYfSJBmyZp2kYNgqsA+7GiTORO0X/1GsdigVA+L Co8CtK7bXFvffH86wkElk7PhbDqE/UMJ8CtSeS3yOWMynY7OzSquSjZ8sNgMih8c UPtoEiaHiGwXGUZJJXjI5IWn4g/YS2klMPZkB+U3u/Btgz1ZyUj6p24zau/zXFZ4 dvHTGveYzuAYcfFbIQDVYVt2sl+kYCHC5Ka1jIE/2iyFstYrB+nx8/lDNSZkYPNm qBNr+alRTwE+V2MVrOc1rqxe19gLQ5pJy9bX95VsfWA2454EMuZ3c6bEd0dxLNoR 01sKKnwYgrCvegEg0szU+XKiuQIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFInCB8Jd lPO6KXxQ7KzLGzWg9QioMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvOTdERTgyODA2 MUUyMTFGMEE4OURBMDI3QzRGOUFFMDIucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAu BAIAATAoMAwDBAAt+t0DBAUt+sADBAA9+7UDBAA9+7cwDAMEAMutYQMEAMutZDAN BgkqhkiG9w0BAQsFAAOCAQEAlQf+hias8Dh+RUm3OH7s19j+ryZzCVqhUBV11CYy 43Slu1MsPwNx5gvCrHJ3CWGUC/6fNMwnC7NZa9deFCX4IksRwujSUYjQfnvPuYFZ kvZgmPlifp/WuSDCa7kquP93QynohDpQabb8CaBCAdvBE1glBfTz1Rs1tjsCaNUR 89mM8xtjlxm+8JHh7lyMZN7c1rTYn0EYhOS5Kf2THiVUiBYXn9UUtjHjbue1nP+O BcKnzl7BCGnCQyRNSFrm0fRhQewkDuuC98ctvSTapt3KTi33G5w4/SigfdjqUi72 9SGYbvbkhiQSe7MdKu5q19pqYorg92M3Bxd092t/DJhyOQ== -----END CERTIFICATE-----Generated at Sat Aug 8 10:06:20 2026 by rpki-client