$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/848534FA2DDD11F1A9BF730FB5833773.roa File: 848534FA2DDD11F1A9BF730FB5833773.roa (raw, json) Hash identifier: bNsndLtWN8VMlvnxPdH+a1IWo5xT52ChFVeAYd0wX8Y= Subject key identifier: 3D:31:94:50:7F:55:46:8D:DE:63:33:5B:DC:FE:AD:92:FC:D9:37:55 Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Certificate serial: 014B Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/848534FA2DDD11F1A9BF730FB5833773.roa Signing time: Tue 28 Jul 2026 19:40:14 +0000 ROA not before: Tue 28 Jul 2026 19:40:14 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 23713 IP address blocks: 63.221.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Validity Not Before: Jul 28 19:40:14 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a69059e-7229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:65:01:a8:e9:86:a2:55:ae:c5:2c:df:dc:00: 9d:c7:ed:e0:1a:75:d1:95:01:8d:2e:00:b1:1d:79: 0b:5b:b3:21:17:22:f8:45:c3:65:d9:d1:d2:14:ae: 34:ae:a6:22:78:d4:02:74:19:46:44:71:79:0e:3a: 0e:32:98:cc:15:2f:90:8a:76:76:3c:f3:fc:6e:3b: f1:18:33:30:58:27:52:e7:a6:cb:e1:ec:2d:db:8f: 53:b5:11:f3:fb:de:01:9b:f4:88:71:b2:b7:a9:90: 1e:2c:5d:5f:84:c3:e8:33:05:9a:11:93:4b:f5:ad: 71:c2:7e:ac:65:fa:76:b7:b3:32:6d:64:5f:d9:49: e1:36:96:bb:61:cb:18:42:88:a0:a9:af:4a:59:42: 40:88:c9:16:1b:e0:09:ea:15:2f:dc:10:e8:3e:9c: 27:3d:30:a0:7f:e3:ca:c1:0a:72:44:1f:74:71:c6: 64:05:a2:c7:e4:e2:7e:88:31:56:7b:ed:a1:82:89: 22:4e:68:c8:b2:27:02:c8:52:b8:9c:6c:a5:71:6f: f7:ec:12:2d:83:7f:a0:c0:20:e5:c9:ae:59:2d:1e: ba:d1:fc:fd:27:c6:eb:2d:05:90:9e:9f:b2:36:67: ff:58:20:72:b0:da:62:76:15:2c:43:a4:da:77:7d: 34:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:31:94:50:7F:55:46:8D:DE:63:33:5B:DC:FE:AD:92:FC:D9:37:55 X509v3 Authority Key Identifier: keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/848534FA2DDD11F1A9BF730FB5833773.roa sbgp-ipAddrBlock: critical IPv4: 63.221.169.0/24 Signature Algorithm: sha256WithRSAEncryption ba:40:09:35:24:bd:84:e5:fa:98:df:a5:86:19:ec:d0:d1:3b: 00:74:ed:96:ad:da:96:98:ce:9a:f1:6a:b7:0f:f9:20:f1:63: 18:e4:90:2d:39:4a:f5:66:10:5f:fd:d8:f8:6b:4f:03:c7:92: 6d:0e:b2:0a:44:98:29:87:af:26:42:37:ab:2a:52:00:d7:91: b0:37:ad:6c:24:14:bb:ed:22:44:b3:f4:23:d5:d5:53:9d:ab: 5d:46:b9:e0:3e:b4:f3:b5:30:1a:05:33:bb:6f:25:63:fa:73: 08:ed:1c:e6:ac:6a:7a:f4:73:d6:16:d0:1d:65:04:cc:2d:7d: b2:c7:96:d7:ae:cc:27:6e:5c:19:b9:95:6a:6b:3f:f8:6d:9d: 46:a1:e6:31:0c:b6:3e:fa:11:14:71:6f:19:5e:f5:88:7c:75: 69:08:38:43:44:1d:d8:42:90:d3:24:7e:81:48:14:4e:1b:22: 48:ea:a2:73:b6:8d:b4:48:0d:7c:f3:b9:1b:b0:0c:43:38:30: 63:bc:71:f8:54:85:46:29:51:6d:73:ee:26:e4:e9:38:d8:46: 00:79:41:d3:a6:8d:26:c6:7b:25:f2:1b:9d:15:4d:d1:19:59: dc:d4:9f:18:3d:a3:49:bf:12:3d:69:9f:47:83:1a:0a:55:29: 43:ae:40:ee -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDNEN0IxNUJENzdEOUI5NzRFMzczNThEQTc1NERGRUE5 MjkxRTY4M0EwHhcNMjYwNzI4MTk0MDE0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5MDU5ZS03MjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6WUBqOmGolWuxSzf3ACdx+3gGnXRlQGNLgCxHXkLW7MhFyL4RcNl2dHSFK40 rqYieNQCdBlGRHF5DjoOMpjMFS+QinZ2PPP8bjvxGDMwWCdS56bL4ewt249TtRHz +94Bm/SIcbK3qZAeLF1fhMPoMwWaEZNL9a1xwn6sZfp2t7MybWRf2UnhNpa7YcsY Qoigqa9KWUJAiMkWG+AJ6hUv3BDoPpwnPTCgf+PKwQpyRB90ccZkBaLH5OJ+iDFW e+2hgokiTmjIsicCyFK4nGylcW/37BItg3+gwCDlya5ZLR660fz9J8brLQWQnp+y Nmf/WCBysNpidhUsQ6Tad3007QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD0xlFB/ VUaN3mMzW9z+rZL82TdVMB8GA1UdIwQYMBaAFD17Fb132bl043NY2nVN/qkpHmg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9GRDM3MkU0QTI5 NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9QWHNWdlhmWnVYVGpjMWphZFUzLXFTa2Vh RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA0QTkvRkQzNzJFNEEyOTQ1MTFGMUE3QUEzRUJEODRFRTUyOEUvODQ4NTM0RkEy REREMTFGMUE5QkY3MzBGQjU4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAP92pMA0GCSqGSIb3DQEBCwUAA4IBAQC6QAk1JL2E5fqY36WGGezQ 0TsAdO2WrdqWmM6a8Wq3D/kg8WMY5JAtOUr1ZhBf/dj4a08Dx5JtDrIKRJgph68m QjerKlIA15GwN61sJBS77SJEs/Qj1dVTnatdRrngPrTztTAaBTO7byVj+nMI7Rzm rGp69HPWFtAdZQTMLX2yx5bXrswnblwZuZVqaz/4bZ1GoeYxDLY++hEUcW8ZXvWI fHVpCDhDRB3YQpDTJH6BSBROGyJI6qJzto20SA1887kbsAxDODBjvHH4VIVGKVFt c+4m5Ok42EYAeUHTpo0mxnsl8hudFU3RGVnc1J8YPaNJvxI9aZ9HgxoKVSlDrkDu -----END CERTIFICATE-----Generated at Wed Jul 29 03:55:49 2026 by rpki-client