$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/AA14FB00C70811ECBAECCC78C4F9AE02.roa File: AA14FB00C70811ECBAECCC78C4F9AE02.roa (raw, json) Hash identifier: RkUrfqNf2DLM9GOP2QwpY5DxbEqC3xiylu4xOiLmvVU= Subject key identifier: BD:F2:4A:57:87:51:37:98:10:74:0A:CD:D1:15:61:4B:47:D2:D3:D2 Certificate issuer: /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE Certificate serial: 04ED Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/AA14FB00C70811ECBAECCC78C4F9AE02.roa Signing time: Fri 04 Sep 2026 22:44:04 +0000 ROA not before: Fri 04 Sep 2026 22:44:04 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 16509 IP address blocks: 31.69.0.0/17 maxlen: 24 31.69.224.0/19 maxlen: 24 31.99.144.0/21 maxlen: 24 141.163.128.0/20 maxlen: 24 141.163.144.0/20 maxlen: 24 141.163.160.0/20 maxlen: 24 141.163.176.0/20 maxlen: 24 141.163.192.0/20 maxlen: 24 141.163.208.0/20 maxlen: 24 141.163.224.0/20 maxlen: 24 141.163.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1261 (0x4ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D6E, serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE Validity Not Before: Sep 4 22:44:04 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9b49b4-2444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dc:cf:8f:5b:66:c9:66:6c:be:d8:80:73:fe: 9c:89:5e:64:3b:a7:80:3f:ec:09:92:d4:08:34:e1: 10:7c:ff:cb:ce:77:91:22:45:90:4b:29:50:cf:12: eb:dd:36:78:47:e5:73:4c:23:56:91:2f:98:a5:0d: 3f:1f:1d:f8:65:f2:2c:21:a8:99:67:70:dd:69:f4: 1d:b3:58:7a:47:ec:8d:0d:bc:9e:c9:84:ab:36:94: 70:09:37:5f:65:42:e4:9d:88:78:5b:f7:9a:49:d2: 8a:12:bd:53:be:91:dd:77:87:ef:bc:7c:d0:f0:ae: 6d:ee:0f:23:d7:d7:2e:e4:dd:34:cc:96:e9:22:b6: 4e:a6:5e:ff:78:81:c6:e2:2f:85:42:c8:92:55:ce: f4:93:38:22:e7:8e:23:36:e9:10:1f:2b:e2:59:f5: a1:64:9f:cf:50:72:a1:1c:2e:6c:2a:d7:1e:1e:11: 41:dd:e4:d2:25:1f:e4:67:b4:dd:0c:79:28:37:42: 36:86:1f:e0:a7:5d:7d:41:bf:7c:53:74:63:0a:75: 77:c6:51:b9:3b:25:5b:cc:85:de:5c:f1:3d:d5:53: f3:3c:c5:92:20:5f:05:32:47:33:e8:bd:64:6a:51: f7:c4:ec:95:78:95:39:13:cd:56:5a:4b:54:85:db: 5b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F2:4A:57:87:51:37:98:10:74:0A:CD:D1:15:61:4B:47:D2:D3:D2 X509v3 Authority Key Identifier: keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/AA14FB00C70811ECBAECCC78C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 31.69.0.0/17 31.69.224.0/19 31.99.144.0/21 141.163.128.0/17 Signature Algorithm: sha256WithRSAEncryption 36:be:c9:02:1a:84:41:1e:b8:28:89:d2:a7:31:b0:50:88:18: 74:5f:c1:a7:37:ef:c8:ba:27:1f:3b:da:52:e2:c7:85:d3:9c: dc:06:6a:59:c7:aa:c2:52:d4:bb:40:ba:09:12:9a:08:15:48: b1:8e:33:08:97:a6:86:49:0e:9e:be:5d:1f:f7:5b:41:82:dd: 99:f7:cf:c8:68:13:42:e7:3f:2b:36:ac:4c:81:95:92:5b:84: 9b:9f:d9:4a:a6:5d:53:49:5b:6d:f6:b3:02:af:d5:1b:1f:1d: b2:26:d6:39:c9:de:55:93:b2:d9:df:a9:2c:71:bd:ee:fe:9d: d9:35:96:51:40:41:20:bd:74:1e:ea:22:0f:4a:f4:0b:e9:0a: 9f:6f:b4:6b:c6:4a:10:eb:56:0a:d4:93:cc:d4:5a:70:b2:29: 0f:98:11:15:28:8b:76:a6:35:7f:42:f3:82:93:06:83:b4:7f: d1:55:d3:81:e3:e2:b4:54:ee:26:2b:b9:8d:b5:06:c9:d3:77: 0f:60:6d:18:c2:7d:50:14:09:1f:94:ea:63:ae:e3:5d:47:9c: 39:30:14:c8:da:2e:72:07:3f:27:19:2d:97:ff:47:6a:0f:dd: 30:50:0d:f5:0c:e8:5b:6d:e0:89:e6:89:69:bd:0c:c2:da:80: 54:0b:51:ac -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICBO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENkUxMTAvBgNVBAUTKDhEMjAyMDdEMUVEQjVGNUMyRDY2M0IwQTZBMTBCQ0Q0 MEJBRDNBREUwHhcNMjYwOTA0MjI0NDA0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTliNDliNC0yNDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9zPj1tmyWZsvtiAc/6ciV5kO6eAP+wJktQINOEQfP/LzneRIkWQSylQzxLr 3TZ4R+VzTCNWkS+YpQ0/Hx34ZfIsIaiZZ3DdafQds1h6R+yNDbyeyYSrNpRwCTdf ZULknYh4W/eaSdKKEr1TvpHdd4fvvHzQ8K5t7g8j19cu5N00zJbpIrZOpl7/eIHG 4i+FQsiSVc70kzgi544jNukQHyviWfWhZJ/PUHKhHC5sKtceHhFB3eTSJR/kZ7Td DHkoN0I2hh/gp119Qb98U3RjCnV3xlG5OyVbzIXeXPE91VPzPMWSIF8FMkcz6L1k alH3xOyVeJU5E81WWktUhdtbTQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFL3ySleH UTeYEHQKzdEVYUtH0tPSMB8GA1UdIwQYMBaAFI0gIH0e219cLWY7CmoQvNQLrTre MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS9BNDZCRTU4ODg4 ODgxMUVDOTEyMzNBNzBDNEY5QUUwMi9qU0FnZlI3Ylgxd3RaanNLYWhDODFBdXRP dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2pTQWdmUjdiWDF3dFpqc0thaEM4MUF1dE90NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODVENkUvQTQ2QkU1ODg4ODg4MTFFQzkxMjMzQTcwQzRGOUFFMDIvQUExNEZCMDBD NzA4MTFFQ0JBRUNDQzc4QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQHH0UAAwQFH0XgAwQDH2OQAwQHjaOAMA0GCSqGSIb3DQEBCwUAA4IB AQA2vskCGoRBHrgoidKnMbBQiBh0X8GnN+/IuicfO9pS4seF05zcBmpZx6rCUtS7 QLoJEpoIFUixjjMIl6aGSQ6evl0f91tBgt2Z98/IaBNC5z8rNqxMgZWSW4Sbn9lK pl1TSVtt9rMCr9UbHx2yJtY5yd5Vk7LZ36kscb3u/p3ZNZZRQEEgvXQe6iIPSvQL 6Qqfb7RrxkoQ61YK1JPM1FpwsikPmBEVKIt2pjV/QvOCkwaDtH/RVdOB4+K0VO4m K7mNtQbJ03cPYG0Ywn1QFAkflOpjruNdR5w5MBTI2i5yBz8nGS2X/0dqD90wUA31 DOhbbeCJ5olpvQzC2oBUC1Gs -----END CERTIFICATE-----Generated at Sat Sep 5 01:39:25 2026 by rpki-client