$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/229CD24AF9FB11EB8CFF5E7DC4F9AE02.roa File: 229CD24AF9FB11EB8CFF5E7DC4F9AE02.roa (raw, json) Hash identifier: isBZNB2qni+n28qvlewtSZ2yvgYjLDrr3WrGtGkQ8nE= Subject key identifier: 55:EF:0C:4F:7B:C5:C7:9D:28:FF:6C:B8:94:64:F3:8D:B1:EA:14:9B Certificate issuer: /CN=A9185D6E/serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E Certificate serial: 068F Authority key identifier: 95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/229CD24AF9FB11EB8CFF5E7DC4F9AE02.roa Signing time: Fri 04 Sep 2026 22:43:58 +0000 ROA not before: Fri 04 Sep 2026 22:43:58 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 394808 IP address blocks: 104.161.234.0/23 maxlen: 24 104.161.252.0/24 maxlen: 24 104.161.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D6E, serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E Validity Not Before: Sep 4 22:43:58 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9b49ae-9b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7d:c5:80:65:55:ea:42:fa:b6:8e:21:22:7f: de:f5:bf:65:d1:fc:cf:49:93:56:32:f1:83:cf:0c: c1:98:6c:ff:46:92:f3:9d:97:86:a9:9f:b5:2d:25: 57:fe:76:9c:44:22:26:72:00:d4:69:95:cb:ee:be: 94:bc:55:df:11:c5:16:fd:e2:65:87:ac:cc:f7:00: e0:19:f3:b3:26:ca:2a:d8:bd:c1:a0:c8:bb:00:27: 62:33:ed:d1:ac:dc:a2:12:4a:24:77:23:f6:02:83: f5:7b:bb:5b:46:e3:e5:4e:fd:f1:88:fe:2e:91:68: a1:ca:f5:50:45:6b:d1:69:3c:d9:d5:48:7a:7f:4e: 5a:a5:f8:50:14:14:c5:42:21:c1:c7:c7:bc:7d:b6: e1:83:83:ec:ac:77:99:79:2e:3f:de:7e:0b:fe:0a: 85:85:b0:90:37:58:4d:59:20:44:99:dd:d4:eb:cb: 15:3a:fe:e5:81:71:97:7e:f3:3b:a1:2c:89:e6:db: 85:5f:0b:24:50:13:5a:51:b6:5c:23:14:fa:c8:17: 4a:bd:16:1a:e8:d4:eb:4b:91:48:ca:67:9b:6d:1f: c3:06:d9:14:56:51:95:a2:a1:98:31:77:23:a6:11: 53:54:80:0c:f2:dd:63:a9:bd:be:f8:eb:91:51:02: fe:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EF:0C:4F:7B:C5:C7:9D:28:FF:6C:B8:94:64:F3:8D:B1:EA:14:9B X509v3 Authority Key Identifier: keyid:95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/229CD24AF9FB11EB8CFF5E7DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 104.161.234.0/23 104.161.252.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:d7:77:61:10:9e:5a:c7:eb:e4:09:d8:42:c3:ce:90:cf:1f: 01:e4:6c:c4:16:d7:46:a6:62:70:a4:aa:3a:5c:7f:01:53:86: 1e:6e:a7:cb:95:6c:a4:bc:ac:0b:c0:2a:5d:db:78:0d:27:d3: 87:cf:e4:b0:cf:96:69:cc:76:bd:bb:6b:4c:d0:65:9d:9b:1e: fb:cb:4c:2a:27:ba:86:52:c8:c5:f5:d5:a4:c2:bb:35:09:0e: e4:d7:b2:b9:d5:b7:a2:ce:3d:c2:b2:af:e8:b8:d6:21:32:b3: 28:d7:7a:43:81:24:42:e2:4c:68:4b:00:a6:d8:c6:70:0e:05: 62:f0:0d:55:73:66:11:20:6b:ff:85:23:5f:c4:e1:d5:94:57: ed:b9:09:4b:16:2f:02:a1:83:93:36:17:76:5c:d2:69:6f:a7: 91:09:ac:6a:bf:93:0b:63:f3:6d:b1:c3:9a:eb:0f:f4:8d:02: 2d:99:c0:d4:90:9f:52:dd:b9:10:e2:11:fd:f7:a2:55:9c:d7: 53:c4:45:f6:77:df:74:6b:34:f3:22:ba:da:48:b7:0e:ec:86: a1:da:87:59:d5:be:e0:52:87:f5:3a:e7:46:89:0d:0c:1b:00: fb:92:73:35:99:ca:ac:3f:58:b0:84:42:1d:bf:83:a7:5d:8b: 88:38:9e:8c -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENkUxMTAvBgNVBAUTKDk1MjRFQTlCODIzQzIwRkE3ODkyM0JFNjY2N0UxNEY2 QzRDM0I0N0UwHhcNMjYwOTA0MjI0MzU4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTliNDlhZS05YjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu33FgGVV6kL6to4hIn/e9b9l0fzPSZNWMvGDzwzBmGz/RpLznZeGqZ+1LSVX /nacRCImcgDUaZXL7r6UvFXfEcUW/eJlh6zM9wDgGfOzJsoq2L3BoMi7ACdiM+3R rNyiEkokdyP2AoP1e7tbRuPlTv3xiP4ukWihyvVQRWvRaTzZ1Uh6f05apfhQFBTF QiHBx8e8fbbhg4PsrHeZeS4/3n4L/gqFhbCQN1hNWSBEmd3U68sVOv7lgXGXfvM7 oSyJ5tuFXwskUBNaUbZcIxT6yBdKvRYa6NTrS5FIymebbR/DBtkUVlGVoqGYMXcj phFTVIAM8t1jqb2++OuRUQL+cQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFFXvDE97 xcedKP9suJRk842x6hSbMB8GA1UdIwQYMBaAFJUk6puCPCD6eJI75mZ+FPbEw7R+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS80Q0JGRjRBRURG RjExMUVCODk0RjMwNjdDNEY5QUUwMi9sU1RxbTRJOElQcDRranZtWm40VTlzVER0 SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xTVHFtNEk4SVBwNGtqdm1abjRVOXNURHRINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODVENkUvNENCRkY0QUVERkYxMTFFQjg5NEYzMDY3QzRGOUFFMDIvMjI5Q0QyNEFG OUZCMTFFQjhDRkY1RTdEQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBaKHqAwQBaKH8MA0GCSqGSIb3DQEBCwUAA4IBAQA/13dhEJ5ax+vk CdhCw86Qzx8B5GzEFtdGpmJwpKo6XH8BU4YebqfLlWykvKwLwCpd23gNJ9OHz+Sw z5ZpzHa9u2tM0GWdmx77y0wqJ7qGUsjF9dWkwrs1CQ7k17K51beizj3Csq/ouNYh MrMo13pDgSRC4kxoSwCm2MZwDgVi8A1Vc2YRIGv/hSNfxOHVlFftuQlLFi8CoYOT Nhd2XNJpb6eRCaxqv5MLY/NtscOa6w/0jQItmcDUkJ9S3bkQ4hH996JVnNdTxEX2 d990azTzIrraSLcO7Iah2odZ1b7gUof1OudGiQ0MGwD7knM1mcqsP1iwhEIdv4On XYuIOJ6M -----END CERTIFICATE-----Generated at Tue Sep 22 05:53:10 2026 by rpki-client