$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/8D2B367E00B811F19583FFF36B6F56BC.roa File: 8D2B367E00B811F19583FFF36B6F56BC.roa (raw, json) Hash identifier: d+ErJjOPBEAppo6GfgXJI6u3QfOZHbOikwckj1q+MzA= Subject key identifier: 11:8C:8F:94:78:01:5F:65:07:10:90:CA:06:11:0D:6A:77:0D:65:B0 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3E2C Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/8D2B367E00B811F19583FFF36B6F56BC.roa Signing time: Thu 27 Aug 2026 01:04:39 +0000 ROA not before: Thu 27 Aug 2026 01:04:39 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 9457 IP address blocks: 49.128.209.0/24 maxlen: 24 49.128.212.0/24 maxlen: 24 101.55.67.0/24 maxlen: 24 103.6.73.0/24 maxlen: 24 103.6.75.0/24 maxlen: 24 103.12.252.0/22 maxlen: 22 112.196.198.0/24 maxlen: 24 112.196.204.0/24 maxlen: 24 112.196.216.0/24 maxlen: 24 124.66.223.0/24 maxlen: 24 210.181.0.0/22 maxlen: 22 210.181.4.0/22 maxlen: 22 210.181.12.0/22 maxlen: 22 211.242.64.0/18 maxlen: 18 211.242.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15916 (0x3e2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Aug 27 01:04:39 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a8f8d27-559d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:94:7d:ba:73:51:08:7f:a1:f5:49:4e:f7:04: e6:64:0e:cc:56:4b:2d:d9:82:ec:a1:87:c0:99:da: c8:22:6b:70:02:78:4e:36:08:f8:d7:8a:d6:b7:56: 09:c4:c8:6e:c4:d2:25:9b:4d:e6:1c:08:cd:4e:7f: c4:21:48:ab:63:d1:fe:19:83:8e:e8:fb:a2:f3:25: 1c:d7:f4:46:a4:95:f5:f3:56:32:da:23:d7:d3:fb: 22:da:4f:30:ec:00:31:5d:a2:8c:e9:a9:43:4d:2c: 95:d0:d0:b5:e4:4d:c0:1f:bb:85:1f:a2:39:c0:2c: e1:11:53:62:07:7a:21:e1:5c:41:4f:02:45:48:82: 97:74:80:f2:f6:e0:60:6c:89:f3:1c:6d:ab:8c:77: b2:99:17:e1:91:3b:d1:c4:19:b0:61:09:cb:f6:b0: fb:ec:28:01:13:22:78:7c:70:19:6a:61:ac:a7:3a: 62:ed:ff:a5:4d:a9:53:20:09:68:5b:61:f6:e1:98: e4:56:80:77:73:ad:49:be:fe:8d:52:32:f3:88:49: f7:37:53:c0:ab:c8:6c:88:39:1c:84:cc:33:7e:e3: bc:12:8a:db:a2:64:b7:cd:bc:f0:c6:b2:00:8e:e3: 82:c5:93:ee:81:48:af:61:78:0b:8c:c5:f7:67:f0: 46:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8C:8F:94:78:01:5F:65:07:10:90:CA:06:11:0D:6A:77:0D:65:B0 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/8D2B367E00B811F19583FFF36B6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 49.128.209.0/24 49.128.212.0/24 101.55.67.0/24 103.6.73.0/24 103.6.75.0/24 103.12.252.0/22 112.196.198.0/24 112.196.204.0/24 112.196.216.0/24 124.66.223.0/24 210.181.0.0/21 210.181.12.0/22 211.242.64.0-211.242.191.255 Signature Algorithm: sha256WithRSAEncryption c6:fe:8f:a2:67:fc:ea:8e:d6:fe:04:a1:09:5c:b1:d3:01:43: 33:b1:d4:85:ad:98:e0:b4:51:98:e5:03:6e:f1:b0:92:4d:df: b6:b0:c5:19:f7:5d:ea:24:b1:e2:36:d4:1f:01:af:ad:c1:77: 0d:66:be:1a:32:9a:d2:57:f7:d1:58:a9:73:0d:04:9a:a8:a1: a6:8a:52:7d:5f:33:5a:75:a5:7a:cc:1d:ec:7d:92:00:a8:cb: dd:ce:48:46:ce:73:d4:9b:12:36:07:b9:78:91:df:05:36:f2: 80:87:c1:e3:ff:de:1d:72:4e:28:4a:b8:45:82:91:af:f8:4d: 4e:85:2c:f3:c3:f3:2b:24:46:68:3c:13:d2:61:74:11:17:6b: 97:3d:0f:a6:e9:b4:f3:11:a7:76:5d:e7:86:1a:f6:bf:3e:c3: d1:94:a2:0a:67:74:ce:ce:4d:df:aa:d6:92:68:97:b5:b7:cf: 61:f3:65:10:bf:cf:57:0b:ed:f4:86:7c:ca:61:ea:97:7f:ff: fa:2a:89:7b:cb:01:65:87:91:15:3f:39:72:e8:59:b4:32:bf: d6:29:8a:e2:b1:c7:4c:3b:c0:f5:28:0a:01:f9:22:bd:43:78: 63:0f:60:47:9c:45:39:63:a8:19:70:b7:00:81:32:dd:bd:18: a8:3c:17:28 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICPiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwODI3MDEwNDM5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YThmOGQyNy01NTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ZR9unNRCH+h9UlO9wTmZA7MVkst2YLsoYfAmdrIImtwAnhONgj414rWt1YJ xMhuxNIlm03mHAjNTn/EIUirY9H+GYOO6Pui8yUc1/RGpJX181Yy2iPX0/si2k8w 7AAxXaKM6alDTSyV0NC15E3AH7uFH6I5wCzhEVNiB3oh4VxBTwJFSIKXdIDy9uBg bInzHG2rjHeymRfhkTvRxBmwYQnL9rD77CgBEyJ4fHAZamGspzpi7f+lTalTIAlo W2H24ZjkVoB3c61Jvv6NUjLziEn3N1PAq8hsiDkchMwzfuO8EorbomS3zbzwxrIA juOCxZPugUivYXgLjMX3Z/BGDQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFBGMj5R4 AV9lBxCQygYRDWp3DWWwMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvOEQyQjM2N0Uw MEI4MTFGMTk1ODNGRkYzNkI2RjU2QkMucm9hMG8GCCsGAQUFBwEHAQH/BGAwXjBc BAIAATBWAwQAMYDRAwQAMYDUAwQAZTdDAwQAZwZJAwQAZwZLAwQCZwz8AwQAcMTG AwQAcMTMAwQAcMTYAwQAfELfAwQD0rUAAwQC0rUMMAwDBAbT8kADBAbT8oAwDQYJ KoZIhvcNAQELBQADggEBAMb+j6Jn/OqO1v4EoQlcsdMBQzOx1IWtmOC0UZjlA27x sJJN37awxRn3XeokseI21B8Br63Bdw1mvhoymtJX99FYqXMNBJqooaaKUn1fM1p1 pXrMHex9kgCoy93OSEbOc9SbEjYHuXiR3wU28oCHweP/3h1yTihKuEWCka/4TU6F LPPD8yskRmg8E9JhdBEXa5c9D6bptPMRp3Zd54Ya9r8+w9GUogpndM7OTd+q1pJo l7W3z2HzZRC/z1cL7fSGfMph6pd///oqiXvLAWWHkRU/OXLoWbQyv9YpiuKxx0w7 wPUoCgH5Ir1DeGMPYEecRTljqBlwtwCBMt29GKg8Fyg= -----END CERTIFICATE-----Generated at Sun Sep 20 16:21:57 2026 by rpki-client