$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/AEDDE1EE556B11EFA5FB1569C4F9AE02.roa File: AEDDE1EE556B11EFA5FB1569C4F9AE02.roa (raw, json) Hash identifier: n63w+PRH+exx1Tia7y9fECkACXwZFVDh6LD1+pm5ssc= Subject key identifier: BD:2B:E5:60:D9:64:9E:E8:33:B6:4F:D9:BF:E9:B2:04:6B:CF:CE:94 Certificate issuer: /CN=A9173D12/serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2 Certificate serial: 018B Authority key identifier: 5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/AEDDE1EE556B11EFA5FB1569C4F9AE02.roa Signing time: Sat 04 Jul 2026 09:02:14 +0000 ROA not before: Sat 04 Jul 2026 09:02:13 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 9435 IP address blocks: 203.0.207.0/24 maxlen: 24 203.0.208.0/24 maxlen: 24 203.0.209.0/24 maxlen: 24 203.21.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 05:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D12, serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2 Validity Not Before: Jul 4 09:02:13 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6a48cc15-6418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b5:85:0a:60:4e:93:49:52:e0:9d:60:10:a0: 29:07:0e:ab:8f:77:6e:ed:8d:bb:59:eb:82:89:2a: cb:87:dd:8a:62:ac:d8:6d:df:eb:68:a7:c7:2f:e0: 3e:73:06:2b:b3:08:9a:05:2d:b0:98:88:f2:b9:0d: 82:47:4a:02:05:9b:61:2c:b4:8f:70:ef:03:04:e7: b0:7b:e1:63:6b:2e:b5:df:ff:42:ac:02:28:ea:97: 81:93:ee:08:b9:6e:29:89:15:4b:c7:95:f4:b8:cd: db:71:cb:2d:07:b6:8d:ff:5b:ce:f4:65:d4:d0:3a: a3:4f:12:00:b1:90:d4:50:b6:0e:de:23:7b:40:2c: f4:95:ba:6f:fc:20:09:86:d0:23:0a:99:32:f9:f5: 82:ca:98:0d:e7:f7:ff:ca:58:d5:f5:59:2a:4d:3a: ba:5e:a4:c2:0b:78:37:45:fa:2a:61:6b:94:76:af: 32:2d:7b:bb:3c:87:d1:a8:5d:46:7e:69:56:5c:c0: 7c:37:85:7f:0f:b2:f5:df:0b:4e:1f:3c:df:cc:52: 12:72:f9:f7:ac:58:42:41:83:94:63:13:92:67:2c: 2b:70:75:29:6b:19:01:d3:b8:02:56:0c:bc:0b:20: 48:7b:ce:fb:1d:22:26:73:a0:69:4b:2b:5f:0b:f5: 81:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2B:E5:60:D9:64:9E:E8:33:B6:4F:D9:BF:E9:B2:04:6B:CF:CE:94 X509v3 Authority Key Identifier: keyid:5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/AEDDE1EE556B11EFA5FB1569C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.0.207.0-203.0.209.255 203.21.152.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:f4:21:37:ff:42:a9:36:18:14:b7:90:f1:06:b5:44:c6:99: 35:d9:07:ce:51:38:7b:3b:b7:bf:cf:fd:4d:d7:d2:56:20:67: bc:e5:69:eb:b6:9a:ad:d5:29:f2:a5:28:3a:9f:84:e5:73:b8: ad:ca:d3:6a:ba:0a:90:0a:40:eb:4c:49:a3:b2:6c:19:4f:25: f6:39:78:bb:26:b4:1d:33:2e:9a:50:b3:55:c3:21:2e:46:6c: 5a:a4:59:57:e3:16:f0:e2:c6:c7:86:c6:e4:d8:8f:43:7a:46: 90:6e:89:07:81:fd:d1:82:db:13:9e:fa:8e:83:5f:09:7f:e0: 17:c1:22:ac:59:1f:72:ee:33:17:11:64:c8:84:aa:61:b1:5d: 6c:59:ba:a8:d8:43:6a:a0:f4:91:d2:16:2e:f7:03:36:22:c2: 25:2d:21:41:f7:06:22:bf:a7:b2:ba:4c:69:ef:e5:44:ff:62: 45:28:f5:3f:bb:eb:26:02:9a:42:0c:e6:d1:d6:8c:14:e7:b1: ce:50:bf:4a:b7:09:c8:ad:72:f8:ea:48:ff:90:76:3b:48:e7: 54:11:c3:b4:79:82:64:c9:cb:9a:1a:78:e5:1b:4b:e8:13:77: 3a:b6:d7:e2:37:c3:84:83:a0:2d:8e:d1:56:00:b7:b1:9f:9f: 4d:72:8a:58 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNEMTIxMTAvBgNVBAUTKDVBOEI2MUJDNTNBMzI0RDdBMkI0RjQxNTNEMDc3NDZF QzJBMzM1RDIwHhcNMjYwNzA0MDkwMjEzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ4Y2MxNS02NDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjLWFCmBOk0lS4J1gEKApBw6rj3du7Y27WeuCiSrLh92KYqzYbd/raKfHL+A+ cwYrswiaBS2wmIjyuQ2CR0oCBZthLLSPcO8DBOewe+Fjay613/9CrAIo6peBk+4I uW4piRVLx5X0uM3bccstB7aN/1vO9GXU0DqjTxIAsZDUULYO3iN7QCz0lbpv/CAJ htAjCpky+fWCypgN5/f/yljV9VkqTTq6XqTCC3g3RfoqYWuUdq8yLXu7PIfRqF1G fmlWXMB8N4V/D7L13wtOHzzfzFIScvn3rFhCQYOUYxOSZywrcHUpaxkB07gCVgy8 CyBIe877HSImc6BpSytfC/WBUQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFL0r5WDZ ZJ7oM7ZP2b/psgRrz86UMB8GA1UdIwQYMBaAFFqLYbxToyTXorT0FT0HdG7CozXS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0QxMi9BQjg5MzRGMjUy QzQxMUVGOERERkQ1M0ZDNEY5QUUwMi9Xb3RodkZPakpOZWl0UFFWUFFkMGJzS2pO ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dvdGh2Rk9qSk5laXRQUVZQUWQwYnNLak5kSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzNEMTIvQUI4OTM0RjI1MkM0MTFFRjhEREZENTNGQzRGOUFFMDIvQUVEREUxRUU1 NTZCMTFFRkE1RkIxNTY5QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBADLAM8DBAHLANADBAHLFZgwDQYJKoZIhvcNAQELBQADggEBAG70 ITf/Qqk2GBS3kPEGtUTGmTXZB85ROHs7t7/P/U3X0lYgZ7zlaeu2mq3VKfKlKDqf hOVzuK3K02q6CpAKQOtMSaOybBlPJfY5eLsmtB0zLppQs1XDIS5GbFqkWVfjFvDi xseGxuTYj0N6RpBuiQeB/dGC2xOe+o6DXwl/4BfBIqxZH3LuMxcRZMiEqmGxXWxZ uqjYQ2qg9JHSFi73AzYiwiUtIUH3BiK/p7K6TGnv5UT/YkUo9T+76yYCmkIM5tHW jBTnsc5Qv0q3CcitcvjqSP+QdjtI51QRw7R5gmTJy5oaeOUbS+gTdzq21+I3w4SD oC2O0VYAt7Gfn01yilg= -----END CERTIFICATE-----Generated at Mon Jul 6 20:09:22 2026 by rpki-client