$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/17EC9B8AB18B11F1B198EBDF6911F970.roa File: 17EC9B8AB18B11F1B198EBDF6911F970.roa (raw, json) Hash identifier: Wm/+KvW7BYvppPw9yKSV8+WE9nUR1tD6vS1t41CpcV8= Subject key identifier: A1:7C:F8:56:95:C9:3F:09:66:0C:51:E3:C3:AD:65:B3:70:C7:3E:0C Certificate issuer: /CN=A913E32A/serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543 Certificate serial: 275C Authority key identifier: C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/17EC9B8AB18B11F1B198EBDF6911F970.roa Signing time: Wed 16 Sep 2026 04:57:18 +0000 ROA not before: Wed 16 Sep 2026 04:57:18 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 150371 IP address blocks: 203.124.38.0/24 maxlen: 24 203.124.49.0/24 maxlen: 24 203.124.55.0/24 maxlen: 24 203.124.58.0/24 maxlen: 24 203.124.61.0/24 maxlen: 24 203.124.62.0/24 maxlen: 24 210.56.5.0/24 maxlen: 24 210.56.18.0/24 maxlen: 24 210.56.22.0/24 maxlen: 24 210.56.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 15:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10076 (0x275c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E32A, serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543 Validity Not Before: Sep 16 04:57:18 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6aaa21ae-4fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3c:d2:c2:3e:5c:b6:0d:2b:27:91:16:e9:20: b9:ff:20:98:c4:6e:b8:71:3e:42:28:ca:f6:71:af: 0d:a6:7b:1e:4c:95:ab:1b:23:03:ce:cb:cd:a5:ed: 9c:66:a7:98:d9:b7:70:9a:73:72:43:2b:2a:69:60: c6:34:15:81:aa:ac:b4:1d:4f:8e:7d:8e:6d:03:91: 14:f1:e7:cd:7a:18:c2:9e:9f:a6:a7:78:57:17:3d: b2:bd:83:b7:98:a5:ef:99:25:82:d1:35:96:69:54: 2f:54:b3:65:a9:39:24:48:4a:5b:2b:41:ad:8e:2c: ce:a2:3a:3b:c8:13:50:03:26:d7:c8:79:d1:e3:c1: 1e:32:3b:56:66:e6:23:92:e4:91:34:68:8d:b9:51: 04:9e:9b:58:f0:15:6c:82:be:f2:f2:eb:f8:ec:37: 96:d2:56:2f:ee:17:05:8f:04:4a:6f:80:67:20:ca: 64:58:49:01:b8:0b:de:ff:90:fa:f2:8f:3e:ec:85: c0:d3:db:87:13:5a:a9:58:a8:f7:5b:db:ae:79:a8: d0:78:89:02:6a:6e:13:20:f1:2e:4e:54:f7:63:6e: 3a:55:23:1d:05:fe:8c:ff:e2:aa:2d:7b:4f:f3:33: 90:3e:05:88:ab:1c:fc:05:57:23:76:80:ed:d5:00: d1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7C:F8:56:95:C9:3F:09:66:0C:51:E3:C3:AD:65:B3:70:C7:3E:0C X509v3 Authority Key Identifier: keyid:C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/17EC9B8AB18B11F1B198EBDF6911F970.roa sbgp-ipAddrBlock: critical IPv4: 203.124.38.0/24 203.124.49.0/24 203.124.55.0/24 203.124.58.0/24 203.124.61.0-203.124.62.255 210.56.5.0/24 210.56.18.0/24 210.56.22.0/24 210.56.26.0/24 Signature Algorithm: sha256WithRSAEncryption 51:98:1f:27:ab:1c:3b:c8:50:cd:14:ef:c7:62:6a:df:a3:7f: 4b:f1:b2:30:8f:22:31:34:2d:17:ac:72:2c:a3:cc:d3:79:d6: 8d:c9:17:8c:cb:7b:d8:53:d0:cc:f2:22:4b:65:b3:fd:a3:73: af:a6:42:f4:d1:01:2c:a3:ca:8a:ec:b9:20:e3:a5:92:cb:c8: 0f:78:60:25:b0:26:b6:4e:bd:f7:0d:88:b9:5a:2f:24:b7:56: 28:a9:74:86:d7:7b:6a:9a:55:8d:06:a4:61:4e:f5:12:f5:0c: f0:6a:85:95:b9:14:55:99:51:15:6f:d9:e8:5d:37:c6:46:d9: 3c:4f:2a:74:07:20:49:17:95:46:f0:57:96:7e:70:05:23:04: 72:d9:1c:77:16:f4:31:b6:de:80:cf:10:9c:e1:a8:11:5b:88: cf:d1:ab:53:b6:7b:4a:c1:8f:ab:bd:9c:f9:04:65:d0:87:1b: f7:be:e3:ed:68:79:67:15:93:8d:f1:44:64:a4:e9:14:30:03: b2:37:c2:2e:60:f5:5b:51:ac:3b:37:e7:6f:60:3c:b9:e4:d4: 9b:a3:1d:d9:93:6e:5d:9c:55:03:26:f6:e8:05:a8:f2:cf:3c: 14:1a:20:b5:4e:27:6f:16:ce:44:1e:9f:47:e1:37:ba:c1:97: ed:0f:eb:63 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICJ1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UzMkExMTAvBgNVBAUTKEMxQzQ2RkM0QTcxOTY5RTU4NTA0QTczNEQ0OTA0QTdC RDJGRjA1NDMwHhcNMjYwOTE2MDQ1NzE4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFhMjFhZS00ZmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTzSwj5ctg0rJ5EW6SC5/yCYxG64cT5CKMr2ca8NpnseTJWrGyMDzsvNpe2c ZqeY2bdwmnNyQysqaWDGNBWBqqy0HU+OfY5tA5EU8efNehjCnp+mp3hXFz2yvYO3 mKXvmSWC0TWWaVQvVLNlqTkkSEpbK0GtjizOojo7yBNQAybXyHnR48EeMjtWZuYj kuSRNGiNuVEEnptY8BVsgr7y8uv47DeW0lYv7hcFjwRKb4BnIMpkWEkBuAve/5D6 8o8+7IXA09uHE1qpWKj3W9uueajQeIkCam4TIPEuTlT3Y246VSMdBf6M/+KqLXtP 8zOQPgWIqxz8BVcjdoDt1QDRCQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFKF8+FaV yT8JZgxR48OtZbNwxz4MMB8GA1UdIwQYMBaAFMHEb8SnGWnlhQSnNNSQSnvS/wVD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTMyQS8xQjRGOUY5NkZB RDMxMUU0OTZDNkU4MENDNEY5QUUwMi93Y1J2eEtjWmFlV0ZCS2MwMUpCS2U5TF9C VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3djUnZ4S2NaYWVXRkJLYzAxSkJLZTlMX0JVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0UzMkEvMUI0RjlGOTZGQUQzMTFFNDk2QzZFODBDQzRGOUFFMDIvMTdFQzlCOEFC MThCMTFGMUIxOThFQkRGNjkxMUY5NzAucm9hMFcGCCsGAQUFBwEHAQH/BEgwRjBE BAIAATA+AwQAy3wmAwQAy3wxAwQAy3w3AwQAy3w6MAwDBADLfD0DBADLfD4DBADS OAUDBADSOBIDBADSOBYDBADSOBowDQYJKoZIhvcNAQELBQADggEBAFGYHyerHDvI UM0U78diat+jf0vxsjCPIjE0LResciyjzNN51o3JF4zLe9hT0MzyIktls/2jc6+m QvTRASyjyorsuSDjpZLLyA94YCWwJrZOvfcNiLlaLyS3ViipdIbXe2qaVY0GpGFO 9RL1DPBqhZW5FFWZURVv2ehdN8ZG2TxPKnQHIEkXlUbwV5Z+cAUjBHLZHHcW9DG2 3oDPEJzhqBFbiM/Rq1O2e0rBj6u9nPkEZdCHG/e+4+1oeWcVk43xRGSk6RQwA7I3 wi5g9VtRrDs3529gPLnk1JujHdmTbl2cVQMm9ugFqPLPPBQaILVOJ28WzkQen0fh N7rBl+0P62M= -----END CERTIFICATE-----Generated at Tue Sep 22 17:53:44 2026 by rpki-client