$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/4F7540B64BE311F096B8CE67C4F9AE02.roa File: 4F7540B64BE311F096B8CE67C4F9AE02.roa (raw, json) Hash identifier: h48gp7I4fb+7u4ZAxP6VW8RmMJ5sbPGA2wHENEc0Ems= Subject key identifier: BB:BE:5D:20:B0:75:30:B0:F0:C3:DA:EC:94:6E:C9:88:F8:BD:C7:CC Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 0BCB Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/4F7540B64BE311F096B8CE67C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:01:04 +0000 ROA not before: Mon 23 Feb 2026 00:59:19 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 149175 IP address blocks: 61.15.72.0/22 maxlen: 22 61.15.76.0/22 maxlen: 22 61.15.80.0/22 maxlen: 22 61.15.86.0/24 maxlen: 24 61.15.88.0/22 maxlen: 24 61.15.97.0/24 maxlen: 24 203.168.221.0/24 maxlen: 24 203.168.238.0/24 maxlen: 24 203.168.244.0/24 maxlen: 24 203.168.245.0/24 maxlen: 24 203.168.246.0/24 maxlen: 24 203.168.247.0/24 maxlen: 24 203.168.248.0/24 maxlen: 24 203.168.249.0/24 maxlen: 24 203.168.250.0/24 maxlen: 24 203.168.251.0/24 maxlen: 24 203.168.253.0/24 maxlen: 24 203.168.255.0/24 maxlen: 24 222.167.36.0/22 maxlen: 22 222.167.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3019 (0xbcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Validity Not Before: Feb 23 00:59:19 2026 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a48cf0-84a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:e8:a6:aa:06:75:92:e5:93:ae:61:26:c5: 34:f8:96:af:ae:e9:fe:78:bf:ed:85:69:f6:74:ce: da:22:ed:50:3a:8f:78:3c:a9:52:ff:2f:37:a1:11: 19:00:70:c6:1d:84:fd:b1:41:de:ad:8c:bf:d1:a7: 19:d3:77:5e:9b:1a:2c:ea:dd:c5:d7:ef:d6:c5:bf: 7b:c0:95:e3:67:ea:34:18:ce:49:89:61:f5:c6:e4: 19:bd:4e:33:63:9d:02:f1:46:87:d7:fc:78:bd:f3: a7:87:a0:c3:0f:7f:9f:ff:10:c7:17:53:b7:9f:98: da:37:8a:30:40:73:66:b5:e0:c9:a2:d0:bf:23:ce: b8:51:d6:07:0d:cf:be:0a:f3:52:92:54:83:f9:66: 80:90:90:0a:e4:2a:d7:59:5c:f0:1e:cf:3a:36:e8: bf:cc:e7:c3:3b:2b:34:9f:98:f5:58:71:aa:e4:95: 3b:ea:f5:62:1e:b2:45:51:8d:81:e3:96:74:e8:a7: 57:12:b8:2b:33:fb:1b:d6:33:19:06:68:36:54:45: 9d:5c:c6:b9:7e:9b:6f:a6:26:4a:78:6b:58:46:f5: 8a:4a:f0:d0:b3:11:79:7f:38:29:76:b5:52:59:12: 50:fc:43:4b:f0:86:59:15:b1:d5:18:47:cd:05:9a: 4d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BE:5D:20:B0:75:30:B0:F0:C3:DA:EC:94:6E:C9:88:F8:BD:C7:CC X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/4F7540B64BE311F096B8CE67C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.15.72.0-61.15.83.255 61.15.86.0/24 61.15.88.0/22 61.15.97.0/24 203.168.221.0/24 203.168.238.0/24 203.168.244.0-203.168.251.255 203.168.253.0/24 203.168.255.0/24 222.167.36.0-222.167.40.255 Signature Algorithm: sha256WithRSAEncryption 19:4e:20:1e:de:26:65:2b:61:1f:82:eb:e9:69:90:2e:b7:a0: 7e:47:f6:d4:a8:e9:d3:c8:00:b8:43:59:af:91:69:19:8c:bf: 93:34:89:2e:4d:1a:29:7f:00:12:4e:5f:c0:90:c0:23:95:4d: 4a:d8:24:da:6e:b7:98:81:26:aa:c2:7d:a7:d9:f0:28:5e:a1: e5:54:a0:ad:57:b5:c4:ab:77:90:d3:c4:91:25:27:e6:72:04: 17:db:fd:03:45:c6:26:59:a6:8f:1a:90:5b:3d:26:53:7c:d9: a9:a4:1d:e5:be:a6:ba:c7:d9:55:f8:50:e5:c3:5c:20:f7:d4: b8:9f:bd:44:8b:5e:f5:24:92:55:a5:ae:84:71:ab:f2:e7:00: 53:4a:d1:97:1e:fa:af:c1:6c:c9:c6:5b:c6:d3:5c:89:4a:01: 70:89:28:2a:4b:92:3c:62:c8:90:5f:30:ee:a1:0a:23:7c:60: 78:4f:78:36:4e:3c:92:cc:fe:f4:89:e9:ce:94:b0:29:d5:1a: 2f:44:92:7f:98:2e:ad:61:69:14:d0:50:33:71:ae:51:3b:cd: 13:c6:c5:a7:5c:e9:2c:37:aa:cc:74:53:1e:65:60:5f:a4:0f: 8e:5a:00:42:4c:1b:7b:3c:8e:74:d5:c9:3d:c8:a5:92:13:09: 73:4a:ae:79 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgICC8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjYwMjIzMDA1OTE5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGNmMC04NGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHTopqoGdZLlk65hJsU0+Javrun+eL/thWn2dM7aIu1QOo94PKlS/y83oREZ AHDGHYT9sUHerYy/0acZ03demxos6t3F1+/Wxb97wJXjZ+o0GM5JiWH1xuQZvU4z Y50C8UaH1/x4vfOnh6DDD3+f/xDHF1O3n5jaN4owQHNmteDJotC/I864UdYHDc++ CvNSklSD+WaAkJAK5CrXWVzwHs86Nui/zOfDOys0n5j1WHGq5JU76vViHrJFUY2B 45Z06KdXErgrM/sb1jMZBmg2VEWdXMa5fptvpiZKeGtYRvWKSvDQsxF5fzgpdrVS WRJQ/ENL8IZZFbHVGEfNBZpNIQIDAQABo4ICrjCCAqowHQYDVR0OBBYEFLu+XSCw dTCw8MPa7JRuyYj4vcfMMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvNEY3NTQwQjY0 QkUzMTFGMDk2QjhDRTY3QzRGOUFFMDIucm9hMG0GCCsGAQUFBwEHAQH/BF4wXDBa BAIAATBUMAwDBAM9D0gDBAI9D1ADBAA9D1YDBAI9D1gDBAA9D2EDBADLqN0DBADL qO4wDAMEAsuo9AMEAsuo+AMEAMuo/QMEAMuo/zAMAwQC3qckAwQA3qcoMA0GCSqG SIb3DQEBCwUAA4IBAQAZTiAe3iZlK2EfguvpaZAut6B+R/bUqOnTyAC4Q1mvkWkZ jL+TNIkuTRopfwASTl/AkMAjlU1K2CTabreYgSaqwn2n2fAoXqHlVKCtV7XEq3eQ 08SRJSfmcgQX2/0DRcYmWaaPGpBbPSZTfNmppB3lvqa6x9lV+FDlw1wg99S4n71E i171JJJVpa6Ecavy5wBTStGXHvqvwWzJxlvG01yJSgFwiSgqS5I8YsiQXzDuoQoj fGB4T3g2TjySzP70ienOlLAp1RovRJJ/mC6tYWkU0FAzca5RO80TxsWnXOksN6rM dFMeZWBfpA+OWgBCTBt7PI501ck9yKWSEwlzSq55 -----END CERTIFICATE-----Generated at Mon Mar 2 13:49:44 2026 by rpki-client