$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/2E2443CE29CF11F1ADED11F996833773.roa File: 2E2443CE29CF11F1ADED11F996833773.roa (raw, json) Hash identifier: CUdsm2mFfeKj9DQNrRmyZB/PxWbcx2rZQKOcjvWuC0Q= Subject key identifier: 52:02:B8:E1:FF:A9:D5:38:1D:2D:DD:0B:27:77:F1:0D:80:B5:8B:81 Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Certificate serial: 015B Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/2E2443CE29CF11F1ADED11F996833773.roa Signing time: Tue 28 Jul 2026 19:40:52 +0000 ROA not before: Tue 28 Jul 2026 19:40:52 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 4760 IP address blocks: 205.252.144.0/21 maxlen: 21 206.161.64.0/20 maxlen: 20 207.176.96.0/20 maxlen: 20 207.226.0.0/20 maxlen: 24 209.9.192.0/20 maxlen: 20 209.9.192.0/24 maxlen: 24 209.9.193.0/24 maxlen: 24 209.9.194.0/24 maxlen: 24 209.9.195.0/24 maxlen: 24 209.9.196.0/24 maxlen: 24 209.9.197.0/24 maxlen: 24 209.9.198.0/23 maxlen: 24 209.9.200.0/24 maxlen: 24 209.9.201.0/24 maxlen: 24 209.9.202.0/24 maxlen: 24 209.9.203.0/24 maxlen: 24 209.9.204.0/24 maxlen: 24 209.9.205.0/24 maxlen: 24 209.9.206.0/24 maxlen: 24 209.9.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Validity Not Before: Jul 28 19:40:52 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a6905c4-cceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:13:b5:a0:7e:26:7a:bb:19:d2:a3:5e:f7:b8: 17:18:8a:a4:4e:cb:08:82:e2:24:e0:14:fd:86:91: 75:5c:a9:7b:6b:e3:33:55:0b:55:3e:26:43:c5:d2: 2e:08:17:2e:91:fe:38:15:c2:bd:b6:ce:57:e7:a3: 32:1a:91:21:88:bf:4a:0d:71:fd:40:e1:b6:d5:c7: 13:2b:d6:bb:f8:11:87:ef:19:2c:e6:7a:54:9c:57: af:69:8c:fe:57:28:62:fe:79:fd:24:a5:ee:d3:15: 8e:54:1e:a5:0a:62:42:c7:64:39:01:e4:d9:1d:4c: dd:54:d2:9f:05:db:5f:21:c1:95:13:b3:dd:74:13: 87:e1:9c:f7:3c:fe:ee:0f:b9:61:89:8e:e7:40:77: d9:57:73:ff:99:55:ef:1a:e3:5a:37:ff:05:db:3e: 34:80:54:f3:81:95:1d:fc:e5:95:ef:d2:20:76:6f: 08:6c:dd:d0:dc:26:38:d2:06:af:97:01:f0:78:9a: 7c:c3:91:e7:bc:e9:cf:60:3a:09:ca:ee:24:13:2a: 68:ab:38:7f:80:e1:2f:59:7f:0c:03:45:a0:d4:81: f5:4d:86:78:9e:8f:b2:61:e9:5b:c0:d1:84:0a:ca: 75:82:0e:4f:71:0f:1a:cd:b3:44:a1:70:98:f5:8c: 84:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:02:B8:E1:FF:A9:D5:38:1D:2D:DD:0B:27:77:F1:0D:80:B5:8B:81 X509v3 Authority Key Identifier: keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/2E2443CE29CF11F1ADED11F996833773.roa sbgp-ipAddrBlock: critical IPv4: 205.252.144.0/21 206.161.64.0/20 207.176.96.0/20 207.226.0.0/20 209.9.192.0/20 Signature Algorithm: sha256WithRSAEncryption 52:a1:e5:67:f1:2b:46:3f:71:81:1e:04:a7:7e:65:65:bd:ff: 40:ff:0e:62:95:24:d7:71:11:64:39:59:b3:f9:4a:31:8b:05: f3:3b:1c:f9:e6:c3:be:d9:3d:9e:9c:77:da:aa:06:97:90:f6: 04:d1:ac:f5:a4:05:1e:d9:44:01:37:6a:90:23:57:20:36:0f: 57:f0:94:4a:b8:44:c9:ba:1d:6c:8b:c6:80:25:ed:37:28:9f: 71:a9:27:1f:c7:ec:3b:0f:bd:47:ff:ab:2c:32:53:a6:3c:99: ea:8b:f6:1d:09:9a:76:5f:a2:bb:69:08:00:db:dd:80:75:48: d9:ba:48:68:a1:7e:b6:05:67:52:f0:a3:b0:ec:a4:f3:78:1f: 2b:ba:a0:e9:fc:c4:80:04:a6:8c:ae:5d:b1:e6:84:f5:5a:e2: 4e:b1:0c:a8:e4:5c:b0:a1:a6:68:19:d8:97:5a:8c:15:bd:21: 08:23:77:f8:bf:6b:15:bf:13:06:45:23:84:63:7f:3f:a2:7c: 91:de:3e:20:6e:d1:b0:fe:65:dd:bd:16:4b:67:96:5d:c1:c2: c3:7b:45:5b:f2:3f:47:00:f9:22:85:a5:83:60:ed:5d:c6:cc: 2b:e1:56:11:8f:a2:09:89:2f:94:8f:b2:03:4a:05:0b:c7:19: aa:2b:cd:0a -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDNEN0IxNUJENzdEOUI5NzRFMzczNThEQTc1NERGRUE5 MjkxRTY4M0EwHhcNMjYwNzI4MTk0MDUyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5MDVjNC1jY2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRO1oH4mersZ0qNe97gXGIqkTssIguIk4BT9hpF1XKl7a+MzVQtVPiZDxdIu CBcukf44FcK9ts5X56MyGpEhiL9KDXH9QOG21ccTK9a7+BGH7xks5npUnFevaYz+ Vyhi/nn9JKXu0xWOVB6lCmJCx2Q5AeTZHUzdVNKfBdtfIcGVE7PddBOH4Zz3PP7u D7lhiY7nQHfZV3P/mVXvGuNaN/8F2z40gFTzgZUd/OWV79Igdm8IbN3Q3CY40gav lwHweJp8w5HnvOnPYDoJyu4kEypoqzh/gOEvWX8MA0Wg1IH1TYZ4no+yYelbwNGE Csp1gg5PcQ8azbNEoXCY9YyEWwIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFFICuOH/ qdU4HS3dCyd38Q2AtYuBMB8GA1UdIwQYMBaAFD17Fb132bl043NY2nVN/qkpHmg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9GRDM3MkU0QTI5 NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9QWHNWdlhmWnVYVGpjMWphZFUzLXFTa2Vh RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA0QTkvRkQzNzJFNEEyOTQ1MTFGMUE3QUEzRUJEODRFRTUyOEUvMkUyNDQzQ0Uy OUNGMTFGMUFERUQxMUY5OTY4MzM3NzMucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQDzfyQAwQEzqFAAwQEz7BgAwQEz+IAAwQE0QnAMA0GCSqGSIb3DQEB CwUAA4IBAQBSoeVn8StGP3GBHgSnfmVlvf9A/w5ilSTXcRFkOVmz+UoxiwXzOxz5 5sO+2T2enHfaqgaXkPYE0az1pAUe2UQBN2qQI1cgNg9X8JRKuETJuh1si8aAJe03 KJ9xqScfx+w7D71H/6ssMlOmPJnqi/YdCZp2X6K7aQgA292AdUjZukhooX62BWdS 8KOw7KTzeB8ruqDp/MSABKaMrl2x5oT1WuJOsQyo5FywoaZoGdiXWowVvSEII3f4 v2sVvxMGRSOEY38/onyR3j4gbtGw/mXdvRZLZ5ZdwcLDe0Vb8j9HAPkihaWDYO1d xswr4VYRj6IJiS+Uj7IDSgULxxmqK80K -----END CERTIFICATE-----Generated at Wed Jul 29 02:13:02 2026 by rpki-client