$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/70B74E2A16D811F1AFC6DD17323D8C67.roa File: 70B74E2A16D811F1AFC6DD17323D8C67.roa (raw, json) Hash identifier: t/FinXSX20SwBMUiySFrkn7ywqOOheY2Dij+qlDAY/8= Subject key identifier: 83:AC:18:93:AC:65:BF:70:09:FC:A0:60:29:C5:04:C2:B4:D1:2D:61 Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Certificate serial: 35AD Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/70B74E2A16D811F1AFC6DD17323D8C67.roa Signing time: Mon 08 Jun 2026 04:25:47 +0000 ROA not before: Mon 08 Jun 2026 04:25:47 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 2914 IP address blocks: 49.0.176.0/24 maxlen: 24 49.0.177.0/24 maxlen: 24 49.0.178.0/24 maxlen: 24 49.0.179.0/24 maxlen: 24 49.0.180.0/24 maxlen: 24 49.0.181.0/24 maxlen: 24 49.0.182.0/24 maxlen: 24 49.0.183.0/24 maxlen: 24 101.0.12.0/24 maxlen: 24 101.0.13.0/24 maxlen: 24 101.0.14.0/24 maxlen: 24 101.0.15.0/24 maxlen: 24 101.0.16.0/24 maxlen: 24 101.0.20.0/24 maxlen: 24 101.0.21.0/24 maxlen: 24 101.0.22.0/24 maxlen: 24 103.46.204.0/24 maxlen: 24 103.46.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 15:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13741 (0x35ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Validity Not Before: Jun 8 04:25:47 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a26444b-ee2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bc:bc:1e:73:ff:41:e4:4d:7b:8e:e8:48:ab: fa:4d:09:e0:f3:b8:e7:6c:78:68:a8:48:da:07:d8: 81:e0:ef:b2:db:13:b4:71:3c:e2:6f:d6:92:f9:90: 7c:6d:bc:66:00:70:ea:cf:51:a7:fc:fa:21:20:0a: 2a:55:44:44:a6:38:93:6e:db:da:72:83:4e:e5:e3: 87:63:d9:8f:c1:5c:75:38:d4:f4:e7:28:14:f8:ca: a0:7b:8f:4d:64:17:86:7b:a7:b1:59:74:c0:38:5b: a3:af:36:0b:6c:3e:cf:33:e6:1b:1e:3c:98:29:b5: df:16:9e:a3:5a:3e:c1:d7:9e:cb:be:e9:88:1d:1c: af:5f:84:0a:bd:2a:8e:d7:1b:d8:38:d6:56:4b:5d: 3d:b2:8f:04:ab:24:1b:73:53:a5:1a:60:d5:65:95: d1:a8:79:53:05:52:0b:a7:23:ed:a0:24:fb:ad:53: bd:f6:02:8c:25:d5:62:6f:2a:6c:c7:8d:ad:62:8f: 10:8f:83:71:d9:46:8a:84:82:6f:e5:21:75:11:c2: b2:74:c0:0f:2f:51:c5:31:35:b0:0a:58:c9:fb:d5: bd:a9:20:3b:24:28:8d:72:47:ab:49:67:5b:69:6d: c9:8a:24:cc:02:1c:d1:15:b3:f3:38:e2:67:27:58: b3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AC:18:93:AC:65:BF:70:09:FC:A0:60:29:C5:04:C2:B4:D1:2D:61 X509v3 Authority Key Identifier: keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/70B74E2A16D811F1AFC6DD17323D8C67.roa sbgp-ipAddrBlock: critical IPv4: 49.0.176.0/21 101.0.12.0-101.0.16.255 101.0.20.0-101.0.22.255 103.46.204.0/24 103.46.207.0/24 Signature Algorithm: sha256WithRSAEncryption 09:f3:73:17:76:46:27:8f:14:91:87:96:3a:2e:48:d7:45:10: 49:26:b5:27:d1:3c:20:26:61:42:4d:eb:6a:84:47:80:ab:df: 83:81:ad:d3:41:f0:9f:63:b4:c9:49:5f:e1:1d:a1:5c:98:5e: 07:b2:c2:4e:89:66:68:d1:47:46:11:0f:e9:15:22:e1:d1:9b: ba:cf:aa:12:c8:f2:ce:b8:ec:52:02:4c:96:6e:22:4d:80:ec: 14:0d:61:43:20:84:f2:47:5a:50:b7:d7:dc:8c:cb:9f:31:87: 53:7e:85:27:0b:b7:ae:85:6e:cc:9d:b6:1a:ad:82:06:75:69: 7a:45:8a:18:e9:12:4f:5e:1a:d5:b3:9d:cf:1c:d8:fc:5c:e4: e8:cf:b5:ec:2e:15:03:ce:97:4d:61:a1:80:46:ef:c9:48:cf: d4:d8:61:c3:f3:53:dc:3a:0f:8f:a5:bb:9e:30:2c:2f:f4:ac: 33:63:d2:2a:13:df:53:a6:02:19:97:f3:9f:c2:1c:a0:41:43: b6:50:fb:92:7e:8c:73:e3:e0:4c:03:6a:fa:11:70:0d:66:1a: 76:a3:45:95:de:ee:6c:13:1a:82:60:14:11:dc:45:bc:e8:7e: 6a:d9:ea:43:b0:79:8f:7f:51:ca:d3:2f:e2:9e:1d:62:d8:1e: 2c:94:d3:08 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgICNa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB NUE4NTQ1MjEwHhcNMjYwNjA4MDQyNTQ3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTI2NDQ0Yi1lZTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLy8HnP/QeRNe47oSKv6TQng87jnbHhoqEjaB9iB4O+y2xO0cTzib9aS+ZB8 bbxmAHDqz1Gn/PohIAoqVUREpjiTbtvacoNO5eOHY9mPwVx1ONT05ygU+Mqge49N ZBeGe6exWXTAOFujrzYLbD7PM+YbHjyYKbXfFp6jWj7B157LvumIHRyvX4QKvSqO 1xvYONZWS109so8EqyQbc1OlGmDVZZXRqHlTBVILpyPtoCT7rVO99gKMJdVibyps x42tYo8Qj4Nx2UaKhIJv5SF1EcKydMAPL1HFMTWwCljJ+9W9qSA7JCiNckerSWdb aW3JiiTMAhzRFbPzOOJnJ1iziQIDAQABo4ICiDCCAoQwHQYDVR0OBBYEFIOsGJOs Zb9wCfygYCnFBMK00S1hMB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTRFMDMvM0Y0OEYyMjQxREE2MTFFMjlBMDc1RDlEMDhCMDJDRDIvNzBCNzRFMkEx NkQ4MTFGMUFGQzZERDE3MzIzRDhDNjcucm9hMEcGCCsGAQUFBwEHAQH/BDgwNjA0 BAIAATAuAwQDMQCwMAwDBAJlAAwDBABlABAwDAMEAmUAFAMEAGUAFgMEAGcuzAME AGcuzzANBgkqhkiG9w0BAQsFAAOCAQEACfNzF3ZGJ48UkYeWOi5I10UQSSa1J9E8 ICZhQk3raoRHgKvfg4Gt00Hwn2O0yUlf4R2hXJheB7LCTolmaNFHRhEP6RUi4dGb us+qEsjyzrjsUgJMlm4iTYDsFA1hQyCE8kdaULfX3IzLnzGHU36FJwu3roVuzJ22 Gq2CBnVpekWKGOkST14a1bOdzxzY/Fzk6M+17C4VA86XTWGhgEbvyUjP1Nhhw/NT 3DoPj6W7njAsL/SsM2PSKhPfU6YCGZfzn8IcoEFDtlD7kn6Mc+PgTANq+hFwDWYa dqNFld7ubBMagmAUEdxFvOh+atnqQ7B5j39RytMv4p4dYtgeLJTTCA== -----END CERTIFICATE-----Generated at Sat Jun 13 10:36:12 2026 by rpki-client