$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/E6CA3EE4A1AF11F18A9E92636A11F970.roa File: E6CA3EE4A1AF11F18A9E92636A11F970.roa (raw, json) Hash identifier: aSDxKc+IxpEAgQbl0dF6bMLVdUExFJFm9y6SmgVA1OI= Subject key identifier: DF:32:B0:ED:2E:C8:4D:8E:49:10:DE:1F:3B:6D:D0:88:5E:10:A9:84 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3E2A Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/E6CA3EE4A1AF11F18A9E92636A11F970.roa Signing time: Thu 27 Aug 2026 01:04:05 +0000 ROA not before: Thu 27 Aug 2026 01:04:05 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 3491 IP address blocks: 49.128.209.0/24 maxlen: 24 49.128.212.0/24 maxlen: 24 101.55.67.0/24 maxlen: 24 103.6.73.0/24 maxlen: 24 124.66.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15914 (0x3e2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Aug 27 01:04:05 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a8f8d05-4c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9d:67:a7:ea:f2:55:26:aa:eb:58:e7:9c:0e: 51:c6:ca:77:b3:e5:5d:f1:d5:45:9c:50:84:20:62: 6d:6c:b0:54:33:62:80:42:6b:bb:ed:d3:be:81:ec: 44:ee:cd:15:d3:d0:3c:23:50:5f:9e:36:19:23:64: 2a:e9:1e:63:0e:79:cc:c7:a4:95:bb:d1:7a:fa:1a: 3e:d2:7a:46:6d:06:18:42:ff:51:11:8a:53:c8:30: e4:2e:b6:7a:68:ef:b0:79:f4:5b:c0:25:7a:6c:d2: 87:f9:df:1f:ff:32:27:96:62:bf:63:35:86:be:21: 99:ce:bd:48:36:9c:04:c1:72:28:3b:28:f8:7d:85: e7:bb:d3:bf:c8:a3:42:7b:fb:02:d3:dc:d8:a3:c8: 56:b9:2f:d4:40:cb:c7:87:ad:64:ad:60:97:3d:5f: 56:d1:ae:77:82:bc:75:7b:e1:14:b2:55:20:07:7c: 35:22:2a:ad:08:c3:67:0f:6a:cb:03:43:fd:d3:23: 7f:22:19:dc:2b:18:74:37:fb:77:68:5c:d4:74:72: 05:82:a7:e5:cf:2a:f0:a7:85:3c:0a:6c:f3:3d:d5: 9d:92:95:00:4c:ee:8c:11:fa:98:92:d5:78:fe:87: 1a:f9:9c:19:ca:45:1d:f1:91:15:cb:f9:49:8d:33: 94:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:32:B0:ED:2E:C8:4D:8E:49:10:DE:1F:3B:6D:D0:88:5E:10:A9:84 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/E6CA3EE4A1AF11F18A9E92636A11F970.roa sbgp-ipAddrBlock: critical IPv4: 49.128.209.0/24 49.128.212.0/24 101.55.67.0/24 103.6.73.0/24 124.66.223.0/24 Signature Algorithm: sha256WithRSAEncryption b7:3b:f9:6c:58:6c:f7:be:67:11:6e:a3:4f:16:1e:b1:89:79: 83:7a:97:08:d3:5b:fd:1a:64:8c:6a:e0:96:1a:09:03:33:f9: 29:f4:c2:07:24:e6:ea:4c:47:b4:1d:4e:57:bb:76:cf:df:07: be:72:c8:18:1f:22:b5:94:77:da:41:b6:e8:12:7c:e9:10:92: 9e:a6:e8:b5:4a:0d:fd:37:35:c3:3f:0e:d7:45:ca:5c:8f:7f: 38:8c:c8:21:0b:80:02:08:b0:c4:01:fd:46:d8:18:83:d8:91: 57:a6:5b:d1:1c:69:31:d5:1f:65:7f:82:e8:b1:2a:d4:cd:5c: 7a:e2:c4:90:f4:e9:61:ff:62:30:7d:7c:8e:72:3c:9f:6c:b1: 3d:54:f7:0d:68:db:06:96:fb:5c:07:49:6b:9f:86:7f:63:b5: 0f:f8:30:71:30:bc:02:3c:03:e9:5a:b5:f6:fc:10:6e:48:4a: d1:39:cf:c5:3f:af:af:d2:ad:3f:f3:ef:a6:59:fe:39:3a:76: 4e:45:d1:ae:10:7a:c5:b6:9f:4e:e4:33:5f:fc:8b:0f:70:d1: 70:70:64:2c:d7:77:ed:dd:ed:67:b8:ca:72:89:45:32:bb:63: b2:9e:ca:6f:f5:c4:df:a3:dc:69:35:b2:df:88:16:76:7e:dd: 1a:73:29:10 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICPiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwODI3MDEwNDA1WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YThmOGQwNS00YzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjJ1np+ryVSaq61jnnA5Rxsp3s+Vd8dVFnFCEIGJtbLBUM2KAQmu77dO+gexE 7s0V09A8I1BfnjYZI2Qq6R5jDnnMx6SVu9F6+ho+0npGbQYYQv9REYpTyDDkLrZ6 aO+wefRbwCV6bNKH+d8f/zInlmK/YzWGviGZzr1INpwEwXIoOyj4fYXnu9O/yKNC e/sC09zYo8hWuS/UQMvHh61krWCXPV9W0a53grx1e+EUslUgB3w1IiqtCMNnD2rL A0P90yN/IhncKxh0N/t3aFzUdHIFgqflzyrwp4U8CmzzPdWdkpUATO6MEfqYktV4 /oca+ZwZykUd8ZEVy/lJjTOUZQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFN8ysO0u yE2OSRDeHztt0IheEKmEMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvRTZDQTNFRTRB MUFGMTFGMThBOUU5MjYzNkExMUY5NzAucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQAMYDRAwQAMYDUAwQAZTdDAwQAZwZJAwQAfELfMA0GCSqGSIb3DQEB CwUAA4IBAQC3O/lsWGz3vmcRbqNPFh6xiXmDepcI01v9GmSMauCWGgkDM/kp9MIH JObqTEe0HU5Xu3bP3we+csgYHyK1lHfaQbboEnzpEJKepui1Sg39NzXDPw7XRcpc j384jMghC4ACCLDEAf1G2BiD2JFXplvRHGkx1R9lf4LosSrUzVx64sSQ9Olh/2Iw fXyOcjyfbLE9VPcNaNsGlvtcB0lrn4Z/Y7UP+DBxMLwCPAPpWrX2/BBuSErROc/F P6+v0q0/8++mWf45OnZORdGuEHrFtp9O5DNf/IsPcNFwcGQs13ft3e1nuMpyiUUy u2Oynspv9cTfo9xpNbLfiBZ2ft0acykQ -----END CERTIFICATE-----Generated at Fri Sep 4 22:48:18 2026 by rpki-client