$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/9D5E6AF8600F11EE98AFFB11C4F9AE02.roa File: 9D5E6AF8600F11EE98AFFB11C4F9AE02.roa (raw, json) Hash identifier: c5aWBlcIDnTGh4RdQ9p1TD+NOw3Gco6ypJ6kC5acwYM= Subject key identifier: BC:91:8F:EB:A4:17:94:3B:7D:C4:52:05:6E:BA:50:33:3C:FB:7E:3A Certificate issuer: /CN=A9194C0D/serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3 Certificate serial: 0253 Authority key identifier: A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/9D5E6AF8600F11EE98AFFB11C4F9AE02.roa Signing time: Sat 03 Oct 2026 03:51:45 +0000 ROA not before: Sat 03 Oct 2026 03:51:45 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 134090 IP address blocks: 66.203.240.0/21 maxlen: 24 131.149.248.0/22 maxlen: 24 148.222.0.0/21 maxlen: 21 148.222.0.0/22 maxlen: 24 148.222.4.0/22 maxlen: 24 216.235.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 02:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 595 (0x253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C0D, serialNumber=A2CD10A47ED723E1C48B5F50D680CF4F67FCB1D3 Validity Not Before: Oct 3 03:51:45 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ac07bd1-b1c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:21:9f:fb:cf:e2:76:2f:cc:78:70:53:1d:bf: 48:17:62:83:27:f4:fa:94:43:60:8a:08:79:18:7b: 4c:85:2a:f9:8b:4b:59:d8:91:0e:ca:a1:6a:4f:72: ea:0d:b9:85:9e:47:3a:6f:19:db:40:c1:5c:a9:f7: 2e:07:17:8a:b2:9e:ff:66:2a:af:89:3f:ad:72:99: 60:ad:c8:9a:8b:9e:94:bb:6b:c4:6f:92:21:6e:af: 21:b6:a6:52:2a:8d:b3:fc:92:7b:69:ec:9f:0d:97: 9c:b2:c6:d9:64:c8:04:01:91:29:b6:a1:29:05:2d: 6f:8e:e2:90:c7:ec:ca:5d:d0:75:38:a6:65:9f:94: 3d:1f:06:52:85:25:bf:4b:f6:eb:91:2f:63:46:9a: d6:f2:f0:4f:54:f9:01:db:b0:09:ea:61:0b:57:5b: 2a:b3:0e:24:6b:5c:f3:1d:26:e9:ce:01:75:64:8f: 44:18:ef:1a:7b:51:5a:21:19:3c:9a:f5:dd:ab:af: fd:27:01:25:4e:45:28:96:90:c1:4b:88:eb:33:5a: e5:32:bb:7d:64:f6:1e:06:48:61:fb:3e:4a:44:0e: 64:ef:9b:6c:b2:42:49:9b:a0:45:42:a7:66:72:20: b0:c0:ea:ed:69:cc:1e:48:a5:94:8e:30:47:fa:cd: d5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:91:8F:EB:A4:17:94:3B:7D:C4:52:05:6E:BA:50:33:3C:FB:7E:3A X509v3 Authority Key Identifier: keyid:A2:CD:10:A4:7E:D7:23:E1:C4:8B:5F:50:D6:80:CF:4F:67:FC:B1:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/os0QpH7XI-HEi19Q1oDPT2f8sdM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/os0QpH7XI-HEi19Q1oDPT2f8sdM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/A470785E575411EE940CD954C4F9AE02/9D5E6AF8600F11EE98AFFB11C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 66.203.240.0/21 131.149.248.0/22 148.222.0.0/21 216.235.244.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:7d:40:b5:b2:7b:c8:8f:08:78:dc:dc:ef:57:94:77:1b:dd: 8c:2f:1b:2c:4f:1a:1d:f5:7d:38:e1:38:70:ce:bb:03:98:10: 42:6a:20:de:2d:c6:c8:f7:59:18:e0:d7:77:a6:cf:fa:c3:61: 4a:ee:b3:af:68:6d:f1:75:a5:c0:93:9c:fb:98:29:66:ad:e2: aa:c7:f3:af:8f:80:9b:47:2c:4e:ad:6d:20:39:9d:1e:c9:8f: c8:bb:cd:10:33:ca:91:cf:e3:4e:30:1e:45:ce:0e:e0:b3:bb: 84:bf:6b:21:6e:84:35:35:f8:29:5a:f4:98:a2:34:3c:58:26: 0f:ce:c6:e3:10:1f:ff:32:1c:f2:5f:3a:47:10:36:ae:2b:00: 61:88:ca:5b:43:5f:4b:d7:a6:e8:7d:a1:6b:06:26:49:6a:44: b0:e5:ed:a8:b0:ac:38:76:3d:77:9c:47:2b:ff:9a:fa:b5:5f: 4d:c7:6c:7e:da:54:17:10:e9:50:54:b0:5d:6c:1c:dd:2d:ef: 4d:ee:97:e1:6d:65:b0:f4:ae:fd:64:c1:3b:c8:74:97:53:a3: 3f:14:69:c1:fb:83:40:ea:78:f0:0d:55:66:d3:fd:8a:e5:7e: db:96:1f:9c:f2:88:19:68:f7:82:47:a3:d6:f4:70:fa:83:f2: a1:8a:7a:5a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDMEQxMTAvBgNVBAUTKEEyQ0QxMEE0N0VENzIzRTFDNDhCNUY1MEQ2ODBDRjRG NjdGQ0IxRDMwHhcNMjYxMDAzMDM1MTQ1WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMwN2JkMS1iMWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAliGf+8/idi/MeHBTHb9IF2KDJ/T6lENgigh5GHtMhSr5i0tZ2JEOyqFqT3Lq DbmFnkc6bxnbQMFcqfcuBxeKsp7/ZiqviT+tcplgrciai56Uu2vEb5Ihbq8htqZS Ko2z/JJ7aeyfDZecssbZZMgEAZEptqEpBS1vjuKQx+zKXdB1OKZln5Q9HwZShSW/ S/brkS9jRprW8vBPVPkB27AJ6mELV1sqsw4ka1zzHSbpzgF1ZI9EGO8ae1FaIRk8 mvXdq6/9JwElTkUolpDBS4jrM1rlMrt9ZPYeBkhh+z5KRA5k75tsskJJm6BFQqdm ciCwwOrtacweSKWUjjBH+s3VpQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFLyRj+uk F5Q7fcRSBW66UDM8+346MB8GA1UdIwQYMBaAFKLNEKR+1yPhxItfUNaAz09n/LHT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEMwRC9BNDcwNzg1RTU3 NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9vczBRcEg3WEktSEVpMTlRMW9EUFQyZjhz ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29zMFFwSDdYSS1IRWkxOVExb0RQVDJmOHNkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTRDMEQvQTQ3MDc4NUU1NzU0MTFFRTk0MENEOTU0QzRGOUFFMDIvOUQ1RTZBRjg2 MDBGMTFFRTk4QUZGQjExQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQDQsvwAwQCg5X4AwQDlN4AAwQC2Ov0MA0GCSqGSIb3DQEBCwUAA4IB AQCPfUC1snvIjwh43NzvV5R3G92MLxssTxod9X044ThwzrsDmBBCaiDeLcbI91kY 4Nd3ps/6w2FK7rOvaG3xdaXAk5z7mClmreKqx/Ovj4CbRyxOrW0gOZ0eyY/Iu80Q M8qRz+NOMB5Fzg7gs7uEv2shboQ1NfgpWvSYojQ8WCYPzsbjEB//MhzyXzpHEDau KwBhiMpbQ19L16bofaFrBiZJakSw5e2osKw4dj13nEcr/5r6tV9Nx2x+2lQXEOlQ VLBdbBzdLe9N7pfhbWWw9K79ZME7yHSXU6M/FGnB+4NA6njwDVVm0/2K5X7blh+c 8ogZaPeCR6PW9HD6g/Khinpa -----END CERTIFICATE-----Generated at Mon Oct 26 00:43:03 2026 by rpki-client