$ rpki-client -vvvf rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/6156245AD26F11EFB6D7116EC4F9AE02.roa File: 6156245AD26F11EFB6D7116EC4F9AE02.roa (raw, json) Hash identifier: wJAftg5ZzVLal7S6mz0iDBoMoLtgeIdIo6mgoo0U/U0= Subject key identifier: 8D:D2:86:05:8C:74:4B:0D:92:A5:5F:28:C4:BA:99:9B:DE:C6:45:FB Certificate issuer: /CN=A9184AB8/serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827 Certificate serial: 0147 Authority key identifier: 1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/6156245AD26F11EFB6D7116EC4F9AE02.roa Signing time: Fri 28 Aug 2026 09:24:23 +0000 ROA not before: Fri 28 Aug 2026 09:24:23 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 136988 IP address blocks: 23.106.240.0/21 maxlen: 21 23.106.240.0/24 maxlen: 24 23.106.241.0/24 maxlen: 24 23.106.242.0/24 maxlen: 24 23.106.243.0/24 maxlen: 24 23.106.244.0/24 maxlen: 24 23.106.245.0/24 maxlen: 24 23.106.246.0/24 maxlen: 24 23.106.247.0/24 maxlen: 24 172.255.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Sep 2026 05:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184AB8, serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827 Validity Not Before: Aug 28 09:24:23 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a9153c7-944f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1b:67:1b:6b:8a:a6:11:74:ec:79:41:0d:3a: 7f:25:e9:c5:ef:98:29:ff:90:dd:57:d9:64:c5:ef: 77:67:54:54:53:d8:5c:0d:a3:32:43:5a:3b:08:61: 40:25:fb:4c:bb:03:4f:55:15:4f:05:c7:95:a4:0d: 82:6c:f3:69:0d:47:a5:68:bf:92:f6:13:4c:cf:89: 45:e4:98:ad:0e:55:55:7e:de:3c:c8:43:a7:6b:b8: 52:0b:b7:90:85:c2:79:bb:7f:55:c4:36:f6:ca:91: b3:19:86:d9:15:6d:3e:06:02:4a:20:b9:91:8d:f2: 8c:b4:e3:c2:ab:ac:4a:92:b7:f2:ec:b5:22:ce:d6: 40:b8:a7:45:db:f8:c6:6b:7c:b4:61:8b:46:67:88: 45:da:54:5e:3a:e5:c8:56:ff:50:c7:67:19:d0:01: bd:1b:31:26:b8:3f:50:42:cf:40:43:fc:26:c0:fb: 17:28:da:ad:9e:41:f4:b3:9f:c2:93:e1:4c:d7:35: 71:7f:97:b3:94:f3:a5:85:75:57:c7:d1:cb:c8:92: ec:dc:d3:3b:5d:c8:72:27:b6:1e:99:df:b9:d9:b0: 8f:64:27:d6:28:d3:b7:c9:2d:a6:ac:f7:0a:f9:81: 99:83:af:61:40:fb:c6:e5:eb:78:6e:71:3b:d7:90: 86:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D2:86:05:8C:74:4B:0D:92:A5:5F:28:C4:BA:99:9B:DE:C6:45:FB X509v3 Authority Key Identifier: keyid:1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/6156245AD26F11EFB6D7116EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 23.106.240.0/21 172.255.214.0/23 Signature Algorithm: sha256WithRSAEncryption 89:55:aa:1d:50:61:02:29:42:d6:3a:33:d5:62:59:43:cc:d9: c8:84:a3:b1:3f:22:8b:c0:0f:0b:50:84:7b:aa:c7:54:27:f7: 41:5a:98:eb:36:d3:d0:24:df:90:91:4c:18:58:2c:c5:8f:6e: d0:17:4f:75:32:47:0b:5e:21:24:3a:14:85:0c:db:aa:ef:89: 45:e7:fc:18:68:06:10:13:62:ed:65:bb:e0:d6:29:cd:b2:1c: 14:fa:14:c0:6a:30:03:92:32:49:2e:c1:72:d6:33:88:93:c1: eb:1e:f2:7c:9d:3f:fb:62:91:7f:a3:ca:e8:a8:e3:14:d0:28: 2a:4f:40:8a:88:cd:d0:59:1c:ff:1e:0d:93:c2:37:0f:d9:ce: ba:43:87:8b:13:55:e8:c6:51:e9:2e:94:73:52:ea:b6:c8:d5: 35:a5:a4:61:bd:7a:3f:5c:c8:06:1e:87:4d:95:e1:fd:42:f0: 8d:4e:31:9a:a5:5d:5f:75:7c:f8:1a:b3:d0:de:89:ea:de:1d: 47:4e:43:28:39:aa:29:e6:78:2c:5d:95:5e:5f:c3:a3:2b:94: 1a:f6:0e:a9:34:4b:a2:0f:43:5c:33:77:0e:a9:a6:60:fc:85: 6c:f7:89:2d:2c:eb:78:80:1f:a4:d7:32:67:59:3c:5b:cf:47: 51:8c:bd:13 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRBQjgxMTAvBgNVBAUTKDFBNkVCNzVCMkI0NzEzNjBFRDVBOTI1QzM1MUNDNDBD MTk0MTY4MjcwHhcNMjYwODI4MDkyNDIzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTkxNTNjNy05NDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0htnG2uKphF07HlBDTp/JenF75gp/5DdV9lkxe93Z1RUU9hcDaMyQ1o7CGFA JftMuwNPVRVPBceVpA2CbPNpDUelaL+S9hNMz4lF5JitDlVVft48yEOna7hSC7eQ hcJ5u39VxDb2ypGzGYbZFW0+BgJKILmRjfKMtOPCq6xKkrfy7LUiztZAuKdF2/jG a3y0YYtGZ4hF2lReOuXIVv9Qx2cZ0AG9GzEmuD9QQs9AQ/wmwPsXKNqtnkH0s5/C k+FM1zVxf5ezlPOlhXVXx9HLyJLs3NM7XchyJ7Yemd+52bCPZCfWKNO3yS2mrPcK +YGZg69hQPvG5et4bnE715CGOQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFI3ShgWM dEsNkqVfKMS6mZvexkX7MB8GA1UdIwQYMBaAFBput1srRxNg7VqSXDUcxAwZQWgn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEFCOC8zMzA5NkVDOEQx QjAxMUVGOEMyMEREMzJDNEY5QUUwMi9HbTYzV3l0SEUyRHRXcEpjTlJ6RURCbEJh Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dtNjNXeXRIRTJEdFdwSmNOUnpFREJsQmFDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODRBQjgvMzMwOTZFQzhEMUIwMTFFRjhDMjBERDMyQzRGOUFFMDIvNjE1NjI0NUFE MjZGMTFFRkI2RDcxMTZFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQDF2rwAwQBrP/WMA0GCSqGSIb3DQEBCwUAA4IBAQCJVaodUGECKULW OjPVYllDzNnIhKOxPyKLwA8LUIR7qsdUJ/dBWpjrNtPQJN+QkUwYWCzFj27QF091 MkcLXiEkOhSFDNuq74lF5/wYaAYQE2LtZbvg1inNshwU+hTAajADkjJJLsFy1jOI k8HrHvJ8nT/7YpF/o8roqOMU0CgqT0CKiM3QWRz/Hg2TwjcP2c66Q4eLE1XoxlHp LpRzUuq2yNU1paRhvXo/XMgGHodNleH9QvCNTjGapV1fdXz4GrPQ3onq3h1HTkMo Oaop5ngsXZVeX8OjK5Qa9g6pNEuiD0NcM3cOqaZg/IVs94ktLOt4gB+k1zJnWTxb z0dRjL0T -----END CERTIFICATE-----Generated at Fri Sep 11 01:10:48 2026 by rpki-client