$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/DD75C9BC6EDF11EF90C49A5FC4F9AE02.roa File: DD75C9BC6EDF11EF90C49A5FC4F9AE02.roa (raw, json) Hash identifier: s+l4HjUDhiiqmD/rzxp+8CMlr1Kg8Ftjq0O4yuSOPE8= Subject key identifier: F1:F6:EE:75:EE:8C:48:D3:9F:8C:6B:10:CB:FC:0B:CC:B6:8A:C1:C8 Certificate issuer: /CN=A9172506/serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488 Certificate serial: 0174 Authority key identifier: 42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/DD75C9BC6EDF11EF90C49A5FC4F9AE02.roa Signing time: Thu 16 Jul 2026 06:01:01 +0000 ROA not before: Thu 16 Jul 2026 06:01:01 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 7545 IP address blocks: 14.202.90.0/24 maxlen: 24 14.202.192.0/24 maxlen: 24 27.33.254.0/24 maxlen: 24 60.242.29.0/24 maxlen: 24 61.68.16.0/21 maxlen: 21 110.175.127.0/24 maxlen: 24 202.161.118.0/24 maxlen: 24 203.219.48.0/22 maxlen: 22 220.240.122.0/24 maxlen: 24 220.245.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 06:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172506, serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488 Validity Not Before: Jul 16 06:01:01 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a58739d-a959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:69:50:a9:79:29:a0:94:e1:73:66:1e:bd:46: eb:7f:96:69:85:b6:28:a2:29:cf:b1:ca:95:59:2b: 3f:3a:0c:a2:b9:d8:21:cd:81:24:1b:cf:e4:67:af: 5d:7c:1b:55:e1:cd:72:71:77:ad:88:79:be:a1:15: 7b:ec:f9:61:7e:96:9a:86:7a:32:50:c1:7a:0e:38: 4e:0c:e0:46:ae:27:cb:5b:78:9a:86:e2:9e:67:42: d2:95:aa:06:10:11:87:fc:23:30:9a:dd:98:e8:a3: e1:d8:45:9d:a4:d0:7a:d2:83:5e:40:d5:8f:45:11: 88:50:6e:a4:43:1a:c2:f8:c0:50:fd:f7:2e:a0:56: 25:cd:fd:cf:de:5d:42:63:15:a2:c9:22:87:c8:8d: 8c:29:cd:49:77:3f:4b:3c:3a:ba:6c:46:2a:e4:70: 3b:ff:30:e8:f3:29:6e:32:95:be:c5:91:93:29:20: 3e:b4:6d:e4:66:6a:f8:6a:15:3e:6a:eb:a7:88:d7: c6:22:89:2d:21:47:ff:7f:bb:f4:10:46:16:3d:c5: f6:ae:f1:e8:30:28:07:88:a2:c1:af:8b:38:a1:28: 7b:b6:8e:b2:5b:d9:63:83:99:15:97:0c:cd:c0:b9: 5b:04:47:d3:45:cb:03:10:ea:40:aa:94:dd:78:51: ca:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F6:EE:75:EE:8C:48:D3:9F:8C:6B:10:CB:FC:0B:CC:B6:8A:C1:C8 X509v3 Authority Key Identifier: keyid:42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/DD75C9BC6EDF11EF90C49A5FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 14.202.90.0/24 14.202.192.0/24 27.33.254.0/24 60.242.29.0/24 61.68.16.0/21 110.175.127.0/24 202.161.118.0/24 203.219.48.0/22 220.240.122.0/24 220.245.124.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:56:95:91:fd:10:34:7f:67:35:37:3c:80:a9:b7:95:00:41: 31:40:1d:6a:93:de:c9:d6:f7:2a:5c:db:bf:6a:a0:b3:2b:21: e7:bd:99:97:69:51:44:82:c2:ea:eb:c3:58:19:e4:6b:d7:dd: e1:15:41:22:e7:96:5f:88:0e:05:5b:5a:03:8d:4e:a5:7f:55: 52:89:c4:69:45:b6:03:c5:85:8d:57:e6:ef:52:94:e8:e0:0b: eb:0f:5c:b9:84:88:6e:4c:63:3c:81:42:c1:d6:d1:df:83:97: 99:3d:16:4d:36:91:41:b0:cf:82:8f:7d:b5:d3:de:e6:1e:09: 51:81:0b:9c:fd:4e:6a:c9:37:fa:a1:6d:0d:86:96:01:ca:2f: 3c:59:9e:cb:62:97:41:48:21:12:c3:70:1f:b0:60:4f:f4:04: de:7a:18:21:71:3d:92:42:b4:fa:d3:9e:aa:4a:e0:0f:7a:3a: b1:96:e3:a9:46:7c:3b:77:d0:fe:06:81:e1:5d:61:f9:64:0e: cf:72:59:61:9e:05:6d:17:3a:72:a6:90:6a:93:7c:e7:f1:69: 28:ab:38:a1:c6:3a:fa:4f:4b:67:4c:30:6a:5f:c9:b5:10:d0: 75:96:95:98:70:3d:cd:b1:96:da:45:65:cc:f7:03:c8:30:63: ac:67:bc:3c -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI1MDYxMTAvBgNVBAUTKDQyQkIwRjNDMTg0N0U2NThCQkU0MTQxODQ5NENFODlD RThFMzQ0ODgwHhcNMjYwNzE2MDYwMTAxWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YTU4NzM5ZC1hOTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlmlQqXkpoJThc2YevUbrf5ZphbYooinPscqVWSs/OgyiudghzYEkG8/kZ69d fBtV4c1ycXetiHm+oRV77PlhfpaahnoyUMF6DjhODOBGrifLW3iahuKeZ0LSlaoG EBGH/CMwmt2Y6KPh2EWdpNB60oNeQNWPRRGIUG6kQxrC+MBQ/fcuoFYlzf3P3l1C YxWiySKHyI2MKc1Jdz9LPDq6bEYq5HA7/zDo8yluMpW+xZGTKSA+tG3kZmr4ahU+ auuniNfGIoktIUf/f7v0EEYWPcX2rvHoMCgHiKLBr4s4oSh7to6yW9ljg5kVlwzN wLlbBEfTRcsDEOpAqpTdeFHKiwIDAQABo4ICljCCApIwHQYDVR0OBBYEFPH27nXu jEjTn4xrEMv8C8y2isHIMB8GA1UdIwQYMBaAFEK7DzwYR+ZYu+QUGElM6Jzo40SI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjUwNi9CMDQ5MDhDRTZF REUxMUVGQUFDMkNCNURDNEY5QUUwMi9RcnNQUEJoSDVsaTc1QlFZU1V6b25PampS SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Fyc1BQQmhINWxpNzVCUVlTVXpvbk9qalJJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI1MDYvQjA0OTA4Q0U2RURFMTFFRkFBQzJDQjVEQzRGOUFFMDIvREQ3NUM5QkM2 RURGMTFFRjkwQzQ5QTVGQzRGOUFFMDIucm9hMFUGCCsGAQUFBwEHAQH/BEYwRDBC BAIAATA8AwQADspaAwQADsrAAwQAGyH+AwQAPPIdAwQDPUQQAwQAbq9/AwQAyqF2 AwQCy9swAwQA3PB6AwQC3PV8MA0GCSqGSIb3DQEBCwUAA4IBAQBPVpWR/RA0f2c1 NzyAqbeVAEExQB1qk97J1vcqXNu/aqCzKyHnvZmXaVFEgsLq68NYGeRr193hFUEi 55ZfiA4FW1oDjU6lf1VSicRpRbYDxYWNV+bvUpTo4AvrD1y5hIhuTGM8gULB1tHf g5eZPRZNNpFBsM+Cj321097mHglRgQuc/U5qyTf6oW0NhpYByi88WZ7LYpdBSCES w3AfsGBP9ATeehghcT2SQrT6056qSuAPejqxluOpRnw7d9D+BoHhXWH5ZA7Pcllh ngVtFzpyppBqk3zn8Wkoqzihxjr6T0tnTDBqX8m1ENB1lpWYcD3NsZbaRWXM9wPI MGOsZ7w8 -----END CERTIFICATE-----Generated at Wed Jul 22 03:05:44 2026 by rpki-client