$ rpki-client -vvf rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/9E194914B3EC11EE8B2EE910C4F9AE02.roa File: 9E194914B3EC11EE8B2EE910C4F9AE02.roa (raw, json) Hash identifier: 8SqapDtzV8gP+3KIVS1rPzQhCDf8h1pmDU5PztyzjBY= Subject key identifier: 6B:DB:53:3E:E9:C0:AC:4E:BD:D3:D5:E3:B0:8B:E9:71:05:D2:BE:C6 Certificate issuer: /CN=A91805CE/serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A Certificate serial: 01F3 Authority key identifier: 72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/9E194914B3EC11EE8B2EE910C4F9AE02.roa Signing time: Wed 01 Jul 2026 05:30:35 +0000 ROA not before: Wed 01 Jul 2026 05:30:35 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 9463 IP address blocks: 202.74.128.0/22 maxlen: 22 202.74.132.0/22 maxlen: 22 202.74.136.0/22 maxlen: 22 202.74.140.0/22 maxlen: 22 202.74.147.0/24 maxlen: 24 202.74.148.0/24 maxlen: 24 202.74.149.0/24 maxlen: 24 202.74.150.0/24 maxlen: 24 202.74.152.0/23 maxlen: 23 202.74.152.0/24 maxlen: 24 202.74.153.0/24 maxlen: 24 202.74.154.0/23 maxlen: 23 202.74.154.0/24 maxlen: 24 202.74.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91805CE, serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A Validity Not Before: Jul 1 05:30:35 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a44a5fb-d41d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4f:16:96:ff:df:d9:ed:9a:4c:27:09:80:13: d0:0e:12:01:2e:1d:87:e8:25:a8:16:3f:21:bd:11: c1:c6:7f:96:5a:8f:82:4c:2e:cd:ff:18:c5:73:bb: b5:ff:5e:fb:d3:93:32:81:4f:94:40:f9:7e:1c:cb: b4:0a:29:6e:de:e6:53:53:a8:db:36:31:6c:4e:b1: 3b:d1:b7:1b:d9:37:f3:31:2a:8d:6e:6c:a6:fd:c5: 3a:e3:74:7e:3b:df:60:50:b5:48:38:cf:9c:48:6f: dc:4f:18:56:6e:6a:03:eb:d3:ae:5e:78:a8:dd:5f: 36:32:da:8f:05:08:7b:a3:95:e2:04:5b:58:13:ad: d5:03:ea:29:e0:70:8e:c1:86:a7:cb:ad:99:40:77: e8:41:bb:f5:c1:3b:62:91:4a:4b:3f:bd:5b:05:6a: 6e:fb:b3:67:61:cd:08:e1:9e:c5:91:be:85:6d:cd: fb:d7:31:4e:5d:11:52:63:e5:58:d3:f9:53:93:a7: 82:bc:b0:e1:fa:02:d6:af:bf:cd:ec:06:e3:14:5b: 52:56:af:76:47:2d:c9:cc:1c:50:fa:31:3e:1d:38: f5:8c:fd:12:e0:a2:61:01:9e:99:ab:90:f1:93:14: df:70:5b:4b:cd:21:da:f3:70:44:62:27:33:ea:64: c6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DB:53:3E:E9:C0:AC:4E:BD:D3:D5:E3:B0:8B:E9:71:05:D2:BE:C6 X509v3 Authority Key Identifier: keyid:72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/9E194914B3EC11EE8B2EE910C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.74.128.0/20 202.74.147.0-202.74.150.255 202.74.152.0/22 Signature Algorithm: sha256WithRSAEncryption 24:0a:74:00:69:c7:77:9d:af:fb:5d:86:13:fc:7f:a8:33:c2: 1b:b2:f5:10:5f:6f:0e:5f:f5:f6:97:3f:03:94:a0:67:61:c6: 40:8e:dd:cb:2d:4a:05:a6:c5:fc:dc:be:0c:9b:37:b9:38:0a: 3a:69:17:5c:6b:b8:cb:0f:ca:3f:1f:78:7e:34:ec:53:0a:87: ea:e6:5e:42:45:e0:f0:88:41:c1:cb:67:0f:09:c9:27:7f:14: 72:fd:6a:35:a6:f7:fe:bf:7c:af:b0:1a:26:b0:fd:16:b1:46: c0:0f:dd:a2:00:f7:95:5e:53:a9:1d:2c:e3:73:49:bc:d4:a9: 71:18:5d:6d:ed:2a:28:f9:5e:1b:a1:dd:58:18:2c:d0:ce:17: 66:74:d3:94:9b:62:3a:ae:a7:37:65:92:e5:d7:66:6c:4b:d9: d7:7c:80:d3:a0:99:69:b8:30:62:04:b5:01:2f:db:b4:13:49: 0f:7d:10:58:da:29:75:95:11:ce:c2:bc:8c:03:25:e2:4f:d7: 87:bf:14:1b:b2:d5:b9:62:b9:89:4d:2f:d5:34:f4:79:c0:80: 1f:14:3f:a3:6e:27:af:fa:8b:f0:32:d1:72:08:9a:08:3f:99: 59:7b:8f:3b:c0:8f:3c:43:e6:17:3f:ab:a2:30:0a:58:c1:cd: 56:bd:a6:2e -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1Q0UxMTAvBgNVBAUTKDcyOTI2RkM2MEY3QzE4NEE2MUQ3M0JEMDk0QUE2QTM4 NkI2MzAwMkEwHhcNMjYwNzAxMDUzMDM1WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ0YTVmYi1kNDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw08Wlv/f2e2aTCcJgBPQDhIBLh2H6CWoFj8hvRHBxn+WWo+CTC7N/xjFc7u1 /17705MygU+UQPl+HMu0Cilu3uZTU6jbNjFsTrE70bcb2TfzMSqNbmym/cU643R+ O99gULVIOM+cSG/cTxhWbmoD69OuXnio3V82MtqPBQh7o5XiBFtYE63VA+op4HCO wYany62ZQHfoQbv1wTtikUpLP71bBWpu+7NnYc0I4Z7Fkb6Fbc371zFOXRFSY+VY 0/lTk6eCvLDh+gLWr7/N7AbjFFtSVq92Ry3JzBxQ+jE+HTj1jP0S4KJhAZ6Zq5Dx kxTfcFtLzSHa83BEYicz6mTGFQIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFGvbUz7p wKxOvdPV47CL6XEF0r7GMB8GA1UdIwQYMBaAFHKSb8YPfBhKYdc70JSqajhrYwAq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDVDRS8wRUIwOUQzNkFF NzQxMUVFOENFRDIzNUNDNEY5QUUwMi9jcEp2eGc5OEdFcGgxenZRbEtwcU9HdGpB Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwSnZ4Zzk4R0VwaDF6dlFsS3BxT0d0akFDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODA1Q0UvMEVCMDlEMzZBRTc0MTFFRThDRUQyMzVDQzRGOUFFMDIvOUUxOTQ5MTRC M0VDMTFFRThCMkVFOTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaAwQEykqAMAwDBADKSpMDBADKSpYDBALKSpgwDQYJKoZIhvcNAQELBQAD ggEBACQKdABpx3edr/tdhhP8f6gzwhuy9RBfbw5f9faXPwOUoGdhxkCO3cstSgWm xfzcvgybN7k4CjppF1xruMsPyj8feH407FMKh+rmXkJF4PCIQcHLZw8JySd/FHL9 ajWm9/6/fK+wGiaw/RaxRsAP3aIA95VeU6kdLONzSbzUqXEYXW3tKij5Xhuh3VgY LNDOF2Z005SbYjqupzdlkuXXZmxL2dd8gNOgmWm4MGIEtQEv27QTSQ99EFjaKXWV Ec7CvIwDJeJP14e/FBuy1bliuYlNL9U09HnAgB8UP6NuJ6/6i/Ay0XIImgg/mVl7 jzvAjzxD5hc/q6IwCljBzVa9pi4= -----END CERTIFICATE-----Generated at Wed Jul 29 03:09:49 2026 by rpki-client