$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/F49AA4A889C211EEADFCF27CC4F9AE02.roa File: F49AA4A889C211EEADFCF27CC4F9AE02.roa (raw, json) Hash identifier: u9b8xi9VJzwkucgePmf7GxJbrJFJHrJEf5pCf7m+hrw= Subject key identifier: 22:EC:08:2D:CF:E4:AA:10:98:E2:11:61:C7:04:CE:B8:99:3F:B6:E1 Certificate issuer: /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Certificate serial: 18FF Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/F49AA4A889C211EEADFCF27CC4F9AE02.roa Signing time: Thu 21 May 2026 08:59:27 +0000 ROA not before: Thu 21 May 2026 08:59:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9287 IP address blocks: 45.125.128.0/22 maxlen: 22 45.125.128.0/24 maxlen: 24 45.125.129.0/24 maxlen: 24 45.125.130.0/24 maxlen: 24 45.125.131.0/24 maxlen: 24 45.252.52.0/22 maxlen: 22 45.252.52.0/24 maxlen: 24 45.252.53.0/24 maxlen: 24 45.252.54.0/24 maxlen: 24 45.252.55.0/24 maxlen: 24 103.55.1.0/24 maxlen: 24 103.55.2.0/24 maxlen: 24 103.76.196.0/22 maxlen: 22 103.76.196.0/24 maxlen: 24 103.76.197.0/24 maxlen: 24 103.76.198.0/24 maxlen: 24 103.76.199.0/24 maxlen: 24 103.115.132.0/22 maxlen: 22 103.115.132.0/24 maxlen: 24 103.115.133.0/24 maxlen: 24 103.115.134.0/24 maxlen: 24 103.115.135.0/24 maxlen: 24 2404:3280::/32 maxlen: 32 2404:3280:1::/48 maxlen: 48 2404:3280:a::/48 maxlen: 48 2404:3280:c::/48 maxlen: 48 2404:3280:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 16:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6399 (0x18ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9FC, serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Validity Not Before: May 21 08:59:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a0ec96f-2f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0a:41:1d:0b:3c:49:e1:10:5b:b5:40:c8:02: ea:3a:b9:a1:ed:a0:a8:dc:d5:72:0e:f2:bb:7a:19: 7e:20:c1:7a:80:da:8b:ef:63:f0:44:55:38:ea:7e: 39:57:ad:dd:c6:b9:27:b9:fd:55:0b:9c:c1:25:29: 48:ed:40:d8:57:03:cf:77:39:74:e1:c7:86:84:14: 5a:52:cb:3b:bc:cf:0e:9c:99:2d:12:b1:1e:d0:38: fa:88:38:f0:6e:ad:13:47:ed:55:88:1a:92:72:9e: b0:18:f8:35:c9:ce:e2:ee:5f:a5:f0:d4:2c:19:69: 4b:56:7f:2a:1d:9c:5e:d9:a4:65:fa:52:b3:e2:5f: f8:bb:ac:20:64:f3:5f:7b:d5:b2:1e:1a:9e:53:b6: d2:22:1c:6b:19:77:ff:37:9e:e7:0b:e9:83:ce:3e: aa:06:90:51:ee:b5:85:0e:dc:f0:70:17:4c:e0:53: e9:5f:f9:f4:67:94:38:7e:7d:0e:87:fa:8e:07:24: 3c:8a:fe:76:51:95:00:4c:f7:07:a7:3c:a0:e8:10: 26:b0:ff:58:62:7f:53:8b:e4:39:1d:4d:b9:36:eb: 16:cd:c2:81:5c:d6:8e:fd:1d:ea:35:03:d3:52:11: d0:d9:60:91:34:bd:03:51:8f:7b:e7:56:32:36:64: 21:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EC:08:2D:CF:E4:AA:10:98:E2:11:61:C7:04:CE:B8:99:3F:B6:E1 X509v3 Authority Key Identifier: keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/F49AA4A889C211EEADFCF27CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.125.128.0/22 45.252.52.0/22 103.55.1.0-103.55.2.255 103.76.196.0/22 103.115.132.0/22 IPv6: 2404:3280::/32 Signature Algorithm: sha256WithRSAEncryption 59:8f:68:48:42:0f:f2:c9:ec:32:ce:15:80:57:89:e1:d2:46: df:72:9f:84:49:bd:7c:a4:fc:45:6d:e1:a2:3e:6d:17:cb:fe: 5f:7e:4f:af:1c:88:40:04:06:cd:06:49:a1:b5:77:87:94:15: 32:8f:3c:d0:6d:4c:c4:85:d5:29:cf:a9:22:87:d9:83:d4:13: e8:ef:48:d2:de:4c:d5:ff:25:2a:10:a4:5e:2e:0a:19:81:d6: 5d:6e:75:69:1a:da:56:a1:5c:a8:28:23:f4:aa:7a:83:d6:07: 9b:9d:b8:2b:16:46:17:ac:98:8a:7c:41:6f:16:64:cd:43:63: 73:fe:6c:ad:95:9c:d0:6c:89:4b:ad:7e:40:07:07:ef:5d:71: a0:05:41:d9:df:3e:b7:3b:80:e6:a6:ea:58:77:29:a2:6a:50: ef:04:69:f5:84:32:77:32:60:e5:e2:fa:f4:9a:3d:02:f3:ae: d2:20:fc:4e:d4:9f:22:8d:6f:c2:f1:4d:76:73:e0:f3:f6:5b: 42:be:6b:4c:47:20:cc:77:9b:26:02:86:0c:2f:63:51:4d:85: b2:c9:c9:42:c1:96:4e:2a:e0:37:3b:ad:54:d0:fa:62:fe:7a: e0:77:6c:89:ae:2b:5a:20:c4:e8:c0:38:a6:ce:6e:eb:36:9c: 72:db:9e:8f -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgICGP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5RkMxMTAvBgNVBAUTKDdBNkUzMDIxMDY0MkNGNEZCQjQxNzNGMzUyNzQ4RTFF QTVDMkM3QzMwHhcNMjYwNTIxMDg1OTI3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTBlYzk2Zi0yZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwpBHQs8SeEQW7VAyALqOrmh7aCo3NVyDvK7ehl+IMF6gNqL72PwRFU46n45 V63dxrknuf1VC5zBJSlI7UDYVwPPdzl04ceGhBRaUss7vM8OnJktErEe0Dj6iDjw bq0TR+1ViBqScp6wGPg1yc7i7l+l8NQsGWlLVn8qHZxe2aRl+lKz4l/4u6wgZPNf e9WyHhqeU7bSIhxrGXf/N57nC+mDzj6qBpBR7rWFDtzwcBdM4FPpX/n0Z5Q4fn0O h/qOByQ8iv52UZUATPcHpzyg6BAmsP9YYn9Ti+Q5HU25NusWzcKBXNaO/R3qNQPT UhHQ2WCRNL0DUY9751YyNmQhaQIDAQABo4ICjzCCAoswHQYDVR0OBBYEFCLsCC3P 5KoQmOIRYccEzriZP7bhMB8GA1UdIwQYMBaAFHpuMCEGQs9Pu0Fz81J0jh6lwsfD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy9DNkIwMzRBQUI4 OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3owLTdRWFB6VW5TT0hxWEN4 OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VtNHdJUVpDejAtN1FYUHpVblNPSHFYQ3g4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Q5RkMvQzZCMDM0QUFCODk5MTFFN0IyNjlCODUwQzRGOUFFMDIvRjQ5QUE0QTg4 OUMyMTFFRUFERkNGMjdDQzRGOUFFMDIucm9hME4GCCsGAQUFBwEHAQH/BD8wPTAs BAIAATAmAwQCLX2AAwQCLfw0MAwDBABnNwEDBABnNwIDBAJnTMQDBAJnc4QwDQQC AAIwBwMFACQEMoAwDQYJKoZIhvcNAQELBQADggEBAFmPaEhCD/LJ7DLOFYBXieHS Rt9yn4RJvXyk/EVt4aI+bRfL/l9+T68ciEAEBs0GSaG1d4eUFTKPPNBtTMSF1SnP qSKH2YPUE+jvSNLeTNX/JSoQpF4uChmB1l1udWka2lahXKgoI/SqeoPWB5uduCsW RhesmIp8QW8WZM1DY3P+bK2VnNBsiUutfkAHB+9dcaAFQdnfPrc7gOam6lh3KaJq UO8EafWEMncyYOXi+vSaPQLzrtIg/E7UnyKNb8LxTXZz4PP2W0K+a0xHIMx3myYC hgwvY1FNhbLJyULBlk4q4Dc7rVTQ+mL+euB3bImuK1ogxOjAOKbObus2nHLbno8= -----END CERTIFICATE-----Generated at Sat Jun 6 15:50:44 2026 by rpki-client