$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/C3290D00636F11F0A1C6DA70C4F9AE02.roa File: C3290D00636F11F0A1C6DA70C4F9AE02.roa (raw, json) Hash identifier: ISA0Y1MNiIaptJ9tTpLl0/OiQqSxEl/CZifftUJCmso= Subject key identifier: 2D:3A:DA:10:31:A9:E3:4C:1D:ED:CE:01:EA:20:CD:61:7C:BC:3B:95 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0D1C Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/C3290D00636F11F0A1C6DA70C4F9AE02.roa Signing time: Fri 14 Aug 2026 19:38:34 +0000 ROA not before: Fri 14 Aug 2026 19:38:34 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 17819 IP address blocks: 119.27.0.0/24 maxlen: 24 119.27.1.0/24 maxlen: 24 180.189.8.0/21 maxlen: 21 183.177.0.0/20 maxlen: 20 202.167.226.0/24 maxlen: 24 202.167.236.0/22 maxlen: 22 202.167.243.0/24 maxlen: 24 202.167.255.0/24 maxlen: 24 203.190.224.0/23 maxlen: 23 203.190.224.0/24 maxlen: 24 203.190.226.0/24 maxlen: 24 2407:b000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3356 (0xd1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Aug 14 19:38:34 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7f6eba-543d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e3:22:14:76:4b:37:0b:60:8f:4e:05:8a:9f: dc:0a:f1:ec:a3:f1:05:8a:ba:e1:4b:43:48:a7:7b: cc:6b:5b:da:5e:31:be:aa:29:ee:a5:ad:e5:3d:c1: 43:78:b7:2f:83:b7:0a:7d:22:e7:92:ca:b8:50:6a: a7:d6:7a:fb:d9:1c:51:1e:fc:3a:f1:90:75:ef:95: ca:11:39:ac:4f:84:23:0d:b7:09:41:1c:b9:5f:a0: 98:b4:e6:fc:a1:37:8b:19:51:2b:58:e1:7e:48:a4: b8:84:39:c9:78:4e:c7:5f:65:0a:51:d6:d3:33:85: a1:c4:3b:7e:c2:5d:25:4b:ef:6e:97:b9:85:d2:26: 64:f7:3e:73:93:4b:03:9d:20:0a:10:c0:50:8a:0a: 31:24:67:6c:d0:a9:0a:bd:67:7b:d1:e4:ce:68:6e: 1e:96:43:b4:29:54:2d:72:a9:be:cc:1d:8b:14:41: b5:99:5d:4d:8a:27:cb:bc:2a:b5:20:aa:ef:47:27: ff:4c:9d:b4:05:aa:83:42:eb:18:84:3d:ea:fb:36: f5:08:b1:76:5c:eb:03:4f:3f:ad:3d:fc:1c:91:66: dc:d7:61:c4:24:c1:08:2a:c4:7e:37:38:fd:c4:77: 4c:39:5e:f5:82:15:cf:9c:ef:02:24:c7:75:99:02: 49:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3A:DA:10:31:A9:E3:4C:1D:ED:CE:01:EA:20:CD:61:7C:BC:3B:95 X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/C3290D00636F11F0A1C6DA70C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 119.27.0.0/23 180.189.8.0/21 183.177.0.0/20 202.167.226.0/24 202.167.236.0/22 202.167.243.0/24 202.167.255.0/24 203.190.224.0-203.190.226.255 IPv6: 2407:b000::/33 Signature Algorithm: sha256WithRSAEncryption aa:98:f7:4c:1b:6b:29:80:33:7e:89:f4:74:e7:ef:97:94:16: 12:86:d0:37:8c:a6:87:5e:af:0c:8f:39:19:eb:ce:34:46:88: d5:90:77:40:e4:4f:27:7e:5f:a4:90:0d:a7:f2:f8:88:b6:8a: 3d:22:a9:d3:2e:e3:d1:bb:5d:f8:bb:8b:1a:26:9e:ff:68:a2: b6:e8:5a:42:b5:ee:21:67:b7:44:06:1e:73:d3:41:8b:4a:e9: b3:d4:ac:b0:bd:41:82:03:72:36:1a:dd:9e:b4:20:d9:bd:19: 3b:fd:eb:5f:43:1e:0a:06:c4:36:86:b4:64:e0:a3:8a:f4:ff: 27:0f:26:0c:94:f4:95:14:dd:3a:4d:c9:e9:2d:d6:8c:4a:59: 44:d3:4b:ec:d0:74:a2:f3:bf:1a:31:d7:4f:95:fd:cb:f8:d4: f8:c9:30:9c:e7:c9:3b:a1:9c:9c:d3:c6:7f:3b:4e:e6:7d:0b: 48:ef:4a:d0:92:65:7d:a8:37:59:15:da:17:3f:7f:b7:18:56: c4:f8:4d:81:a9:9c:4d:0c:b5:45:6a:7e:64:db:86:a1:32:4b: 55:cc:83:05:57:a1:b7:97:b2:81:0d:a8:f3:a7:00:ec:91:92: bf:ab:4d:7f:12:11:c7:6e:38:4a:9b:23:a2:0a:26:e9:41:35: e5:03:a4:d9 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjYwODE0MTkzODM0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdmNmViYS01NDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOMiFHZLNwtgj04Fip/cCvHso/EFirrhS0NIp3vMa1vaXjG+qinupa3lPcFD eLcvg7cKfSLnksq4UGqn1nr72RxRHvw68ZB175XKETmsT4QjDbcJQRy5X6CYtOb8 oTeLGVErWOF+SKS4hDnJeE7HX2UKUdbTM4WhxDt+wl0lS+9ul7mF0iZk9z5zk0sD nSAKEMBQigoxJGds0KkKvWd70eTOaG4elkO0KVQtcqm+zB2LFEG1mV1NiifLvCq1 IKrvRyf/TJ20BaqDQusYhD3q+zb1CLF2XOsDTz+tPfwckWbc12HEJMEIKsR+Nzj9 xHdMOV71ghXPnO8CJMd1mQJJVQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFC062hAx qeNMHe3OAeogzWF8vDuVMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThFM0YvQzI0MzIyQkE1NDQ2MTFFQThDMDU2NTFEQzRGOUFFMDIvQzMyOTBEMDA2 MzZGMTFGMEExQzZEQTcwQzRGOUFFMDIucm9hMGEGCCsGAQUFBwEHAQH/BFIwUDA+ BAIAATA4AwQBdxsAAwQDtL0IAwQEt7EAAwQAyqfiAwQCyqfsAwQAyqfzAwQAyqf/ MAwDBAXLvuADBADLvuIwDgQCAAIwCAMGByQHsAAAMA0GCSqGSIb3DQEBCwUAA4IB AQCqmPdMG2spgDN+ifR05++XlBYShtA3jKaHXq8MjzkZ6840RojVkHdA5E8nfl+k kA2n8viItoo9IqnTLuPRu134u4saJp7/aKK26FpCte4hZ7dEBh5z00GLSumz1Kyw vUGCA3I2Gt2etCDZvRk7/etfQx4KBsQ2hrRk4KOK9P8nDyYMlPSVFN06TcnpLdaM SllE00vs0HSi878aMddPlf3L+NT4yTCc58k7oZyc08Z/O07mfQtI70rQkmV9qDdZ FdoXP3+3GFbE+E2BqZxNDLVFan5k24ahMktVzIMFV6G3l7KBDajzpwDskZK/q01/ EhHHbjhKmyOiCibpQTXlA6TZ -----END CERTIFICATE-----Generated at Sat Aug 22 00:52:31 2026 by rpki-client