$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9EAB14825BB411EF849D0F44C4F9AE02.roa File: 9EAB14825BB411EF849D0F44C4F9AE02.roa (raw, json) Hash identifier: zbjBhOiyyNGdAyPxDcGC9/7CoXajE+vGGZ0ie2o+Di8= Subject key identifier: 67:FD:98:A6:0B:4B:7A:5C:11:E2:5C:CD:2D:EB:98:A6:1C:EE:53:41 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F113 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9EAB14825BB411EF849D0F44C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:56:23 +0000 ROA not before: Mon 06 Jul 2026 16:56:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136715 IP address blocks: 163.61.139.0/24 maxlen: 24 2001:df6:b500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61715 (0xf113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 16:56:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bde37-eace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4a:e7:90:c6:fd:44:cd:88:75:d9:81:5c:fd: dc:c5:9b:05:e4:0e:39:58:f2:6a:db:ad:10:53:37: 59:21:f8:33:f8:9f:24:20:0e:89:6e:a9:25:ac:32: 95:89:00:17:01:7a:22:d6:2a:0c:19:76:ae:15:7d: 7d:cc:73:b7:d6:52:34:cd:0d:46:24:75:1f:2b:2f: 83:03:1e:c8:9d:28:b3:4f:61:38:4d:65:8e:47:73: 35:43:3b:f4:db:8d:48:9a:9f:8d:1c:02:ab:8b:07: 96:3c:ce:30:11:7c:73:7c:47:d0:bc:7a:da:25:f2: b3:d2:04:d4:57:e0:1a:f1:36:31:86:9d:36:d3:5a: 37:64:44:f5:50:b9:72:32:36:11:94:63:6b:c8:3b: 25:19:87:02:91:64:d2:01:69:2c:45:76:a9:d2:1b: 53:dc:6f:79:15:9f:c9:73:5a:d1:cb:de:53:35:23: a3:b1:36:36:51:30:f5:a9:54:bf:86:0b:b0:38:44: d1:7e:55:fb:89:2a:78:89:9c:7c:44:71:44:36:88: 31:b9:d1:57:58:10:6f:d7:93:a1:78:0e:6a:8d:c6: 0d:d2:f3:af:dd:dc:34:d8:73:43:da:a5:bf:87:a4: 47:25:2c:32:3d:cc:23:da:5f:67:52:3b:85:48:a5: fd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FD:98:A6:0B:4B:7A:5C:11:E2:5C:CD:2D:EB:98:A6:1C:EE:53:41 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9EAB14825BB411EF849D0F44C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 163.61.139.0/24 IPv6: 2001:df6:b500::/48 Signature Algorithm: sha256WithRSAEncryption 39:23:24:68:45:d3:f7:80:8a:5e:79:32:b5:a7:8a:cb:4d:d8: 11:8e:17:47:d0:00:0e:55:59:16:40:fa:11:ee:75:9f:9a:27: 2b:b1:fd:56:00:cd:7b:92:8f:00:8f:fe:ad:14:c8:4d:e2:d4: 98:bd:f0:db:e6:1e:df:0f:98:22:f0:f7:0e:bd:b8:dc:86:a7: c5:53:21:35:cf:29:6d:af:9e:68:3b:0d:76:8b:24:72:40:e2: 69:6a:1d:d5:77:03:53:da:60:73:e9:48:35:81:fd:27:22:bb: 3e:c5:ba:fc:4e:25:3a:d3:f7:35:bd:c6:68:e8:4c:0b:c5:e4: 44:a0:ef:fb:a2:98:43:ee:49:4c:21:b5:4a:a9:2a:dc:28:d9: ea:db:e7:54:3b:58:39:e2:08:46:32:7b:00:73:1f:c9:e1:08: 8b:8e:43:65:f3:06:f3:57:21:4a:fe:19:de:72:13:2a:fb:cc: 8d:71:84:93:c6:86:e7:29:4e:c3:7e:5c:af:75:b7:de:49:23: 96:9b:ff:84:fb:85:ad:b4:14:2d:a3:e4:56:5d:73:73:46:f6: b3:52:7c:40:1a:b3:d6:11:c6:e4:45:a0:36:7d:73:6b:3d:e9: b9:de:8b:07:89:f0:82:6c:05:b3:f9:ad:db:ce:ea:b5:7b:0f: 58:ba:cb:e9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDAPETMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE2NTYyM1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmRlMzctZWFjZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKBK55DG/UTNiHXZgVz93MWbBeQOOVjyatutEFM3WSH4M/ifJCAOiW6pJawy lYkAFwF6ItYqDBl2rhV9fcxzt9ZSNM0NRiR1HysvgwMeyJ0os09hOE1ljkdzNUM7 9NuNSJqfjRwCq4sHljzOMBF8c3xH0Lx62iXys9IE1FfgGvE2MYadNtNaN2RE9VC5 cjI2EZRja8g7JRmHApFk0gFpLEV2qdIbU9xveRWfyXNa0cveUzUjo7E2NlEw9alU v4YLsDhE0X5V+4kqeImcfERxRDaIMbnRV1gQb9eToXgOao3GDdLzr93cNNhzQ9ql v4ekRyUsMj3MI9pfZ1I7hUil/UcCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBRn/Zim C0t6XBHiXM0t65imHO5TQTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlFQUIxNDgy NUJCNDExRUY4NDlEMEY0NEM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKM9izAPBAIAAjAJAwcAIAEN9rUAMA0GCSqGSIb3DQEBCwUAA4IB AQA5IyRoRdP3gIpeeTK1p4rLTdgRjhdH0AAOVVkWQPoR7nWfmicrsf1WAM17ko8A j/6tFMhN4tSYvfDb5h7fD5gi8PcOvbjchqfFUyE1zyltr55oOw12iyRyQOJpah3V dwNT2mBz6Ug1gf0nIrs+xbr8TiU60/c1vcZo6EwLxeREoO/7ophD7klMIbVKqSrc KNnq2+dUO1g54ghGMnsAcx/J4QiLjkNl8wbzVyFK/hnechMq+8yNcYSTxobnKU7D flyvdbfeSSOWm/+E+4WttBQto+RWXXNzRvazUnxAGrPWEcbkRaA2fXNrPem53osH ifCCbAWz+a3bzuq1ew9Yusvp -----END CERTIFICATE-----Generated at Tue Jul 21 11:14:34 2026 by rpki-client