$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/03BA8B36824411EF94479387C4F9AE02.roa File: 03BA8B36824411EF94479387C4F9AE02.roa (raw, json) Hash identifier: yblVKBomAmKdFLx7E1GhA7lmIOLPIfTo5ijL1IDIgeY= Subject key identifier: E1:BF:D6:22:5F:81:11:D9:15:CB:F3:7F:20:C7:6C:8D:F2:69:73:13 Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 08C1 Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/03BA8B36824411EF94479387C4F9AE02.roa Signing time: Wed 08 Jul 2026 23:25:17 +0000 ROA not before: Wed 08 Jul 2026 23:25:17 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 55740 IP address blocks: 14.195.78.0/24 maxlen: 24 14.195.79.0/24 maxlen: 24 14.195.91.0/24 maxlen: 24 14.195.124.0/24 maxlen: 24 27.107.200.0/24 maxlen: 24 27.107.201.0/24 maxlen: 24 27.107.202.0/24 maxlen: 24 49.249.1.0/24 maxlen: 24 49.249.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 22:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2241 (0x8c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: Jul 8 23:25:17 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a4edc5d-874b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3a:d1:6d:bb:22:74:3c:11:73:f9:69:b2:f0: 03:0b:83:b1:b0:eb:0e:82:d5:a4:6e:bf:51:8e:76: dc:da:ad:63:2f:19:73:d8:8e:cf:66:32:1c:39:6b: cd:aa:85:e1:7d:49:69:f1:57:b6:f9:94:d5:bf:76: d6:d0:99:d4:d4:ad:8a:61:6d:15:aa:ee:f0:b0:e8: cd:35:fc:71:ad:48:bb:1f:e7:50:ba:62:de:91:a7: 81:19:b7:c6:c7:f5:6b:26:ad:10:0d:95:b3:27:45: 6d:f9:b7:32:9d:8e:2b:70:39:c8:53:c0:59:83:61: 8e:ad:e0:ba:f4:fa:a3:7e:0d:44:3b:aa:53:cf:16: 30:94:92:42:0f:e1:c5:df:9c:9e:ce:b9:9f:f9:a9: 3e:e2:32:1c:75:53:92:f7:d3:1a:6e:0a:84:38:0b: c0:30:12:37:a0:04:4b:f3:22:c7:da:ba:37:84:96: af:95:a0:53:6a:d5:3f:8d:17:55:c5:df:00:c7:a8: d6:ba:aa:d6:f6:18:78:50:0d:07:cc:2f:d1:d3:12: 0c:fc:d3:51:21:ec:f1:69:d6:f9:c3:12:74:2c:a2: 1e:93:06:d1:30:d7:cd:8d:1f:5d:d9:30:96:9a:65: 2a:bd:2e:bb:8f:e4:b2:39:5e:2a:a4:a9:ca:21:37: 7b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BF:D6:22:5F:81:11:D9:15:CB:F3:7F:20:C7:6C:8D:F2:69:73:13 X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/03BA8B36824411EF94479387C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 14.195.78.0/23 14.195.91.0/24 14.195.124.0/24 27.107.200.0-27.107.202.255 49.249.1.0/24 49.249.27.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:02:68:d8:da:b4:c2:1d:c5:40:d5:f3:a7:d9:fb:5d:ed:86: bd:2e:d7:35:01:a0:1b:80:9f:d3:46:18:12:5e:3d:b3:b8:7d: ad:41:12:c9:dc:08:c4:41:73:60:47:a5:ba:65:e9:b7:c9:20: ff:8a:ab:f2:7a:83:a5:70:01:0f:16:28:05:22:9d:98:a2:2c: de:dd:9b:b8:49:c7:ec:52:11:df:cf:40:b8:5f:e2:fa:86:be: 1c:16:25:0b:fd:1d:2f:0d:9b:b3:fa:0f:f7:39:34:f5:e5:c1: 33:d4:1b:76:96:30:6e:06:48:4f:e1:2c:5d:1d:99:51:80:1b: c6:1f:05:a8:1e:9b:8d:0d:3e:46:98:b7:b2:8e:c7:65:c6:dc: 34:96:80:9f:5e:8d:12:c8:72:92:66:8b:ba:20:54:f6:a0:22: 48:52:4b:86:a5:4b:64:bc:88:1d:65:79:fc:56:e5:9d:c9:77: fc:6f:26:d5:9e:f7:75:ca:c5:1d:8a:09:ea:56:07:b4:23:f0: 4c:c9:c4:fc:7f:6d:51:95:45:c4:58:19:1a:b3:d1:69:ae:00: 7c:71:f4:9f:11:87:87:61:21:bc:b6:d3:23:6c:c0:99:74:a2: 9d:17:23:d7:25:2e:db:e7:f6:d4:ad:c1:91:ce:99:77:07:27: e9:6f:c5:a4 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgICCMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjYwNzA4MjMyNTE3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTRlZGM1ZC04NzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TrRbbsidDwRc/lpsvADC4OxsOsOgtWkbr9Rjnbc2q1jLxlz2I7PZjIcOWvN qoXhfUlp8Ve2+ZTVv3bW0JnU1K2KYW0Vqu7wsOjNNfxxrUi7H+dQumLekaeBGbfG x/VrJq0QDZWzJ0Vt+bcynY4rcDnIU8BZg2GOreC69Pqjfg1EO6pTzxYwlJJCD+HF 35yezrmf+ak+4jIcdVOS99MabgqEOAvAMBI3oARL8yLH2ro3hJavlaBTatU/jRdV xd8Ax6jWuqrW9hh4UA0HzC/R0xIM/NNRIezxadb5wxJ0LKIekwbRMNfNjR9d2TCW mmUqvS67j+SyOV4qpKnKITd7ywIDAQABo4IChjCCAoIwHQYDVR0OBBYEFOG/1iJf gRHZFcvzfyDHbI3yaXMTMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEN0EvNUREQ0NDQzY5OTE1MTFFQjk2NzI3MjQzQzRGOUFFMDIvMDNCQThCMzY4 MjQ0MTFFRjk0NDc5Mzg3QzRGOUFFMDIucm9hMEUGCCsGAQUFBwEHAQH/BDYwNDAy BAIAATAsAwQBDsNOAwQADsNbAwQADsN8MAwDBAMba8gDBAAba8oDBAAx+QEDBAAx +RswDQYJKoZIhvcNAQELBQADggEBADsCaNjatMIdxUDV86fZ+13thr0u1zUBoBuA n9NGGBJePbO4fa1BEsncCMRBc2BHpbpl6bfJIP+Kq/J6g6VwAQ8WKAUinZiiLN7d m7hJx+xSEd/PQLhf4vqGvhwWJQv9HS8Nm7P6D/c5NPXlwTPUG3aWMG4GSE/hLF0d mVGAG8YfBagem40NPkaYt7KOx2XG3DSWgJ9ejRLIcpJmi7ogVPagIkhSS4alS2S8 iB1lefxW5Z3Jd/xvJtWe93XKxR2KCepWB7Qj8EzJxPx/bVGVRcRYGRqz0WmuAHxx 9J8Rh4dhIby20yNswJl0op0XI9clLtvn9tStwZHOmXcHJ+lvxaQ= -----END CERTIFICATE-----Generated at Sat Jul 18 04:09:18 2026 by rpki-client