$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/B2EA4BAA29EB11F1A56364AEA0833773.roa File: B2EA4BAA29EB11F1A56364AEA0833773.roa (raw, json) Hash identifier: XQNkvoydP9vTUe+C3PI0Tnr80hKhR4TEoYvN4cz8V1A= Subject key identifier: EA:1A:FA:19:D1:4D:F9:4A:01:F8:B6:5C:6D:38:76:DC:AE:1A:C8:B1 Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Certificate serial: 0146 Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/B2EA4BAA29EB11F1A56364AEA0833773.roa Signing time: Tue 28 Jul 2026 19:40:04 +0000 ROA not before: Tue 28 Jul 2026 19:40:04 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 17676 IP address blocks: 63.223.70.0/24 maxlen: 24 63.223.99.0/24 maxlen: 24 63.223.117.0/24 maxlen: 24 63.223.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Validity Not Before: Jul 28 19:40:04 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a690594-8049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:c9:d0:75:c5:e9:40:0a:28:ae:77:ac:91: 27:44:83:27:c2:2c:0e:04:bf:2a:dc:5c:db:a6:53: 44:9f:c7:82:ca:02:f6:57:58:b9:8e:d5:1e:3b:70: 39:b8:8b:3b:d7:af:5a:90:2f:99:74:08:b8:5b:d3: 8c:6c:8b:5b:11:39:c2:86:a5:c6:c6:e3:99:64:27: 78:07:39:0a:2f:09:f1:2a:25:fd:9a:92:b0:1f:20: 7a:93:cd:46:3d:9f:d5:64:65:2d:06:56:1b:e8:f0: 9a:73:0b:76:00:6d:64:26:31:ab:40:30:23:d2:d7: 15:ef:71:29:b8:18:96:98:b6:f4:ae:00:38:df:69: d9:51:f9:9e:c2:a8:61:fb:be:d1:41:e1:f3:fc:4f: d7:92:8e:e7:05:66:fa:48:a8:89:85:83:37:b2:bb: 74:d1:5a:b1:9b:5d:7f:e0:7d:d8:26:78:3e:be:fc: 3f:fe:8a:f0:70:92:1d:49:b3:23:b8:3d:96:5c:26: 99:df:19:30:06:ef:d3:09:9a:1a:c6:f9:ea:60:64: 51:d9:a3:38:00:68:cf:d2:40:38:f1:50:a6:6a:99: 54:af:2c:b9:f2:a3:5d:ff:53:7e:a2:a2:cf:2b:07: e3:f5:29:03:bb:8c:1e:ef:8e:18:46:40:cf:5a:94: 63:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1A:FA:19:D1:4D:F9:4A:01:F8:B6:5C:6D:38:76:DC:AE:1A:C8:B1 X509v3 Authority Key Identifier: keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/B2EA4BAA29EB11F1A56364AEA0833773.roa sbgp-ipAddrBlock: critical IPv4: 63.223.70.0/24 63.223.99.0/24 63.223.117.0/24 63.223.123.0/24 Signature Algorithm: sha256WithRSAEncryption a5:1f:c8:35:4f:02:f9:76:eb:95:0a:d5:a6:b0:a4:40:56:aa: b6:bf:e8:00:ac:b3:c2:58:35:20:db:fd:45:d0:eb:b6:55:f5: 85:11:70:c4:09:ca:fc:4d:3a:db:b7:e1:b0:bc:2a:2b:f4:31: 34:f3:7c:40:91:b5:f5:99:cc:06:8f:f9:99:58:15:72:04:44: 4e:d3:a3:c1:c0:25:03:fe:05:4c:2a:3f:79:91:ea:f8:ef:3f: 91:73:73:a0:c0:3b:3c:6f:42:a8:1a:82:53:ea:c1:34:58:58: 1a:25:7c:ec:1d:48:ee:a0:01:5a:19:34:28:7c:1b:3c:f1:e8: ef:ad:f2:b5:5b:e6:b9:ca:aa:5a:ba:a4:c5:0c:e6:8b:96:a2: 04:30:50:88:95:f1:61:33:26:92:b8:24:0e:75:6b:97:b5:e9: 15:67:ad:3f:8a:52:bf:ab:57:17:36:ae:a2:f9:2a:4e:d7:f6: 9e:6c:00:79:c6:88:d9:bd:81:16:a7:84:9b:31:5c:ff:a4:7d: c1:c6:7e:2d:e5:fd:6f:8e:90:60:cc:f0:ec:63:11:e5:dc:fa: 53:fe:85:0b:2e:fe:cc:6b:48:49:a3:2b:7a:f4:d7:66:df:ca: e1:b3:9d:8f:81:50:e2:37:88:38:7e:58:47:82:d9:ad:ff:30: 4b:82:66:74 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDNEN0IxNUJENzdEOUI5NzRFMzczNThEQTc1NERGRUE5 MjkxRTY4M0EwHhcNMjYwNzI4MTk0MDA0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5MDU5NC04MDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqTJ0HXF6UAKKK53rJEnRIMnwiwOBL8q3FzbplNEn8eCygL2V1i5jtUeO3A5 uIs7169akC+ZdAi4W9OMbItbETnChqXGxuOZZCd4BzkKLwnxKiX9mpKwHyB6k81G PZ/VZGUtBlYb6PCacwt2AG1kJjGrQDAj0tcV73EpuBiWmLb0rgA432nZUfmewqhh +77RQeHz/E/Xko7nBWb6SKiJhYM3srt00Vqxm11/4H3YJng+vvw//orwcJIdSbMj uD2WXCaZ3xkwBu/TCZoaxvnqYGRR2aM4AGjP0kA48VCmaplUryy58qNd/1N+oqLP Kwfj9SkDu4we744YRkDPWpRjuQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFOoa+hnR TflKAfi2XG04dtyuGsixMB8GA1UdIwQYMBaAFD17Fb132bl043NY2nVN/qkpHmg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9GRDM3MkU0QTI5 NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9QWHNWdlhmWnVYVGpjMWphZFUzLXFTa2Vh RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA0QTkvRkQzNzJFNEEyOTQ1MTFGMUE3QUEzRUJEODRFRTUyOEUvQjJFQTRCQUEy OUVCMTFGMUE1NjM2NEFFQTA4MzM3NzMucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAP99GAwQAP99jAwQAP991AwQAP997MA0GCSqGSIb3DQEBCwUAA4IB AQClH8g1TwL5duuVCtWmsKRAVqq2v+gArLPCWDUg2/1F0Ou2VfWFEXDECcr8TTrb t+GwvCor9DE083xAkbX1mcwGj/mZWBVyBERO06PBwCUD/gVMKj95ker47z+Rc3Og wDs8b0KoGoJT6sE0WFgaJXzsHUjuoAFaGTQofBs88ejvrfK1W+a5yqpauqTFDOaL lqIEMFCIlfFhMyaSuCQOdWuXtekVZ60/ilK/q1cXNq6i+SpO1/aebAB5xojZvYEW p4SbMVz/pH3Bxn4t5f1vjpBgzPDsYxHl3PpT/oULLv7Ma0hJoyt69Ndm38rhs52P gVDiN4g4flhHgtmt/zBLgmZ0 -----END CERTIFICATE-----Generated at Wed Jul 29 05:13:38 2026 by rpki-client