$ rpki-client -vvvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/7DE09496DDD911EA90D9B84CC4F9AE02.roa File: 7DE09496DDD911EA90D9B84CC4F9AE02.roa (raw, json) Hash identifier: 08/Bns5oicGJqt6kPsNA08rh33SYBkfA62ruEUE1kTw= Subject key identifier: DF:E8:61:21:84:2F:1B:19:33:1A:68:3F:C3:05:97:78:A5:EB:17:39 Certificate issuer: /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4 Certificate serial: 0B09 Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/7DE09496DDD911EA90D9B84CC4F9AE02.roa Signing time: Fri 18 Sep 2026 08:39:01 +0000 ROA not before: Fri 18 Sep 2026 08:39:01 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 23764 IP address blocks: 63.140.3.0/24 maxlen: 24 63.140.4.0/24 maxlen: 24 63.140.5.0/24 maxlen: 24 63.140.6.0/24 maxlen: 24 63.140.7.0/24 maxlen: 24 63.140.8.0/24 maxlen: 24 63.140.9.0/24 maxlen: 24 63.140.10.0/24 maxlen: 24 63.140.11.0/24 maxlen: 24 63.140.13.0/24 maxlen: 24 63.140.14.0/24 maxlen: 24 63.140.15.0/24 maxlen: 24 69.194.160.0/24 maxlen: 24 69.194.161.0/24 maxlen: 24 69.194.162.0/24 maxlen: 24 69.194.163.0/24 maxlen: 24 69.194.164.0/24 maxlen: 24 69.194.165.0/24 maxlen: 24 69.194.166.0/24 maxlen: 24 69.194.167.0/24 maxlen: 24 69.194.168.0/24 maxlen: 24 69.194.170.0/24 maxlen: 24 69.194.171.0/24 maxlen: 24 69.194.172.0/24 maxlen: 24 69.194.173.0/24 maxlen: 24 69.194.174.0/24 maxlen: 24 69.194.175.0/24 maxlen: 24 139.190.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2825 (0xb09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917576D, serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4 Validity Not Before: Sep 18 08:39:01 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6aacf8a4-7ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5c:48:42:65:3c:cd:0f:82:a7:25:8d:b4:b5: 9b:22:03:c7:c3:f9:79:ce:ac:67:1b:77:8d:f4:97: 9f:cb:81:e5:0f:8f:c3:fd:0f:6c:11:52:0a:01:08: e6:3d:7e:04:a3:11:f3:5f:6c:f9:ab:62:62:80:42: 10:a3:ef:2f:75:df:9e:6a:48:3c:35:7b:7e:51:55: 4e:19:7d:7a:7b:b0:0f:bc:32:86:b5:bc:2f:d3:9d: cf:ae:10:dc:9d:17:1a:c0:06:eb:d9:ab:d4:19:27: b5:e6:5a:7d:5d:fa:e2:aa:3a:18:8c:80:86:54:8a: 45:32:9a:dc:9d:15:11:45:57:a1:25:d6:46:9f:08: 71:50:bb:fa:31:ae:65:8b:35:d1:39:aa:a2:db:45: 80:0b:9a:72:53:56:41:2c:95:90:4d:48:4e:7b:d9: 5b:8d:04:02:58:84:a7:50:93:1b:a9:c1:2d:6c:03: 9e:56:86:07:41:f7:b5:c4:87:27:8e:61:1e:ef:09: ec:4d:c3:cc:f3:44:f8:09:5d:d0:ea:b1:64:72:8e: 80:8c:d1:85:ce:d0:4f:c4:c1:51:6d:ec:7f:72:88: 0e:f9:bf:f6:1a:e5:f0:a3:e2:f9:43:03:77:33:91: df:ba:78:53:1a:93:55:fc:f2:9e:e7:ba:05:f3:a3: 30:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E8:61:21:84:2F:1B:19:33:1A:68:3F:C3:05:97:78:A5:EB:17:39 X509v3 Authority Key Identifier: keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/7DE09496DDD911EA90D9B84CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 63.140.3.0-63.140.11.255 63.140.13.0-63.140.15.255 69.194.160.0-69.194.168.255 69.194.170.0-69.194.175.255 139.190.64.0/21 Signature Algorithm: sha256WithRSAEncryption 7e:38:1e:4f:06:1f:24:14:35:c1:2f:9c:f9:0a:37:5e:2c:a6: 2d:6c:da:5b:4e:18:a3:65:55:a0:87:9c:95:78:a4:86:d5:49: 86:34:d5:1b:a1:7e:de:cc:08:12:03:63:23:b0:54:80:e2:a7: 59:33:a5:49:cf:39:c4:3d:65:d2:95:e2:8b:b9:22:48:bf:0e: e8:01:0c:fe:19:01:f2:81:d9:13:4f:55:3b:59:48:2c:7f:9b: a1:a6:7d:3e:e3:58:45:0d:f0:b3:22:b5:33:d2:51:e7:c8:ac: e9:c3:f1:87:9c:d0:13:e1:c5:a6:56:6c:17:ca:8f:79:60:fd: bd:44:da:ed:e7:b1:06:da:0b:4d:ad:02:2d:9b:3c:78:1a:3c: 37:99:cb:f8:67:ee:90:81:d2:8e:07:8e:f6:17:43:82:98:86: 01:b6:19:71:0d:1a:36:66:89:3e:63:7f:69:aa:0d:8c:aa:1a: 8b:9c:00:c8:8a:b7:0f:bc:a5:36:11:21:07:cb:8f:3c:90:7f: a6:2e:dc:00:22:51:f8:e2:a7:5a:f9:4e:3a:5b:83:60:7a:1a: 52:62:1c:e3:bd:08:27:af:1c:81:75:b7:61:22:94:05:e1:97: 31:cd:27:22:d0:da:dc:0e:ae:7c:b1:84:9d:1d:3f:62:db:af: 4f:13:3f:17 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NkQxMTAvBgNVBAUTKEI3MDMxOEQ3MUFBMEU4MDQzMjRFMDEzQzMwOTdGREJD RDYwMTM0RDQwHhcNMjYwOTE4MDgzOTAxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFjZjhhNC03YWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlxIQmU8zQ+CpyWNtLWbIgPHw/l5zqxnG3eN9Jefy4HlD4/D/Q9sEVIKAQjm PX4EoxHzX2z5q2JigEIQo+8vdd+eakg8NXt+UVVOGX16e7APvDKGtbwv053PrhDc nRcawAbr2avUGSe15lp9XfriqjoYjICGVIpFMprcnRURRVehJdZGnwhxULv6Ma5l izXROaqi20WAC5pyU1ZBLJWQTUhOe9lbjQQCWISnUJMbqcEtbAOeVoYHQfe1xIcn jmEe7wnsTcPM80T4CV3Q6rFkco6AjNGFztBPxMFRbex/cogO+b/2GuXwo+L5QwN3 M5HfunhTGpNV/PKe57oF86MwjQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFN/oYSGE LxsZMxpoP8MFl3il6xc5MB8GA1UdIwQYMBaAFLcDGNcaoOgEMk4BPDCX/bzWATTU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8yRTc2N0UzMjgy Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi90d01ZMXhxZzZBUXlUZ0U4TUpmOXZOWUJO TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3R3TVkxeHFnNkFReVRnRThNSmY5dk5ZQk5OUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzU3NkQvMkU3NjdFMzI4MkNEMTFFQTg5NUM3QjVDQzRGOUFFMDIvN0RFMDk0OTZE REQ5MTFFQTkwRDlCODRDQzRGOUFFMDIucm9hMFcGCCsGAQUFBwEHAQH/BEgwRjBE BAIAATA+MAwDBAA/jAMDBAI/jAgwDAMEAD+MDQMEBD+MADAMAwQFRcKgAwQARcKo MAwDBAFFwqoDBARFwqADBAOLvkAwDQYJKoZIhvcNAQELBQADggEBAH44Hk8GHyQU NcEvnPkKN14spi1s2ltOGKNlVaCHnJV4pIbVSYY01Ruhft7MCBIDYyOwVIDip1kz pUnPOcQ9ZdKV4ou5Iki/DugBDP4ZAfKB2RNPVTtZSCx/m6GmfT7jWEUN8LMitTPS UefIrOnD8Yec0BPhxaZWbBfKj3lg/b1E2u3nsQbaC02tAi2bPHgaPDeZy/hn7pCB 0o4HjvYXQ4KYhgG2GXENGjZmiT5jf2mqDYyqGoucAMiKtw+8pTYRIQfLjzyQf6Yu 3AAiUfjip1r5Tjpbg2B6GlJiHOO9CCevHIF1t2EilAXhlzHNJyLQ2twOrnyxhJ0d P2Lbr08TPxc= -----END CERTIFICATE-----Generated at Mon Sep 21 18:19:05 2026 by rpki-client