$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/9F25E6340ECA11F0BAAE344AC4F9AE02.roa File: 9F25E6340ECA11F0BAAE344AC4F9AE02.roa (raw, json) Hash identifier: oZt0DncXTvvxAu6W6XuMxsXB6h7QjU6a+ul8Hylf5MI= Subject key identifier: 8C:E0:84:66:1A:55:08:58:73:13:E9:E1:EA:3B:CF:25:7D:FC:84:2C Certificate issuer: /CN=A91144C9/serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD Certificate serial: EB Authority key identifier: B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/9F25E6340ECA11F0BAAE344AC4F9AE02.roa Signing time: Wed 17 Jun 2026 07:36:33 +0000 ROA not before: Wed 17 Jun 2026 07:36:33 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 10099 IP address blocks: 162.219.32.0/21 maxlen: 24 162.219.84.0/24 maxlen: 24 162.245.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144C9, serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD Validity Not Before: Jun 17 07:36:33 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a324e81-7f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c8:98:5a:8d:21:ea:9d:4b:54:b8:92:8b:23: 30:c6:b0:e4:5a:e5:d6:07:fa:3b:04:d9:27:4c:69: d2:47:ee:b7:bc:dc:57:8e:de:75:1b:41:42:20:3a: 66:3c:5b:ef:15:0b:d3:a9:81:8c:33:f1:1c:b7:0d: 16:9b:db:43:c5:68:b0:95:4e:1d:8a:2a:ea:4b:1c: ff:95:d8:cc:41:8e:49:48:ba:be:37:d7:65:4d:9f: 9e:10:8e:4f:0b:8b:e7:08:dc:fc:92:f2:6e:e4:f8: b3:a0:c7:8e:c7:a8:08:be:1f:f6:ec:0e:3a:ac:23: 1f:6d:0d:6f:d3:eb:ec:57:ad:36:7c:a9:d6:d1:17: 1d:9d:11:3f:20:8d:97:4d:88:d2:f6:83:fd:5a:1b: d0:0a:67:9e:33:12:e3:f7:96:40:60:c9:79:2f:20: e0:3f:26:8e:b9:53:95:3f:37:99:54:25:42:11:2e: a8:ad:fc:0c:93:99:3f:4d:f4:9c:18:d6:83:ce:80: a5:97:7b:48:2f:38:f1:4c:65:19:51:6c:d8:f4:8d: 16:e6:0e:40:ca:ca:f6:b6:da:46:d5:94:b5:59:82: 31:d0:28:40:70:ba:ef:a0:a4:c7:53:f5:67:54:d7: cb:b4:af:d8:db:32:8d:f6:a8:ac:b8:0d:1f:ca:51: 13:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E0:84:66:1A:55:08:58:73:13:E9:E1:EA:3B:CF:25:7D:FC:84:2C X509v3 Authority Key Identifier: keyid:B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/9F25E6340ECA11F0BAAE344AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 162.219.32.0/21 162.219.84.0/24 162.245.127.0/24 Signature Algorithm: sha256WithRSAEncryption cd:89:59:62:f7:fa:c2:ed:83:24:1d:40:f8:57:c0:c7:78:07: 17:08:0a:57:78:42:71:c3:8b:6e:d8:ee:0b:89:82:a7:53:21: 53:0f:c4:ac:be:ae:ce:bc:7e:84:a8:1e:20:2b:85:72:35:9a: 9f:31:42:3c:eb:52:55:72:bf:44:e0:2c:df:60:02:8c:bc:b8: 9e:0a:0d:99:5d:c0:8d:36:1f:11:15:4c:18:44:05:a4:9e:b3: bc:5d:01:b2:cc:0e:a4:b5:1a:b7:95:48:e2:ab:8d:bf:1c:07: 1f:7e:98:30:9a:f2:0a:fe:1c:a2:76:ac:09:c0:4d:9a:8b:82: 72:a7:0f:8a:2a:76:01:3e:d5:99:05:89:34:36:83:a3:b5:f3: a4:9c:16:9c:1e:df:da:c1:79:cc:f2:f0:5e:83:41:0c:5e:18: ba:d2:ee:ed:59:ef:5c:bc:c6:ab:55:07:32:93:a2:de:10:2a: f3:3d:fa:44:fe:bf:df:37:6e:07:3a:f4:d2:b3:ac:f8:3a:9a: 2c:eb:e4:8b:51:43:8f:79:2f:19:51:ec:a9:cc:c8:08:b9:e1: 7a:3a:c1:58:88:38:8d:27:c4:42:5e:1a:5d:f4:50:25:c8:07: 9c:76:8d:86:af:f9:e0:45:41:55:6e:d4:97:ff:96:62:eb:04: fb:70:83:12 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0QzkxMTAvBgNVBAUTKEIwRDUyNUVBOTlENEM4RUM3NTYwNzEyNkE0OUVGNjcw N0JENkY0QUQwHhcNMjYwNjE3MDczNjMzWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTMyNGU4MS03ZjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsiYWo0h6p1LVLiSiyMwxrDkWuXWB/o7BNknTGnSR+63vNxXjt51G0FCIDpm PFvvFQvTqYGMM/Ectw0Wm9tDxWiwlU4diirqSxz/ldjMQY5JSLq+N9dlTZ+eEI5P C4vnCNz8kvJu5PizoMeOx6gIvh/27A46rCMfbQ1v0+vsV602fKnW0RcdnRE/II2X TYjS9oP9WhvQCmeeMxLj95ZAYMl5LyDgPyaOuVOVPzeZVCVCES6orfwMk5k/TfSc GNaDzoCll3tILzjxTGUZUWzY9I0W5g5Aysr2ttpG1ZS1WYIx0ChAcLrvoKTHU/Vn VNfLtK/Y2zKN9qisuA0fylET9QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFIzghGYa VQhYcxPp4eo7zyV9/IQsMB8GA1UdIwQYMBaAFLDVJeqZ1MjsdWBxJqSe9nB71vSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRDOS83QkEzRTcwQzBF QzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9zTlVsNnBuVXlPeDFZSEVtcEo3MmNIdlc5 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NOVWw2cG5VeU94MVlIRW1wSjcyY0h2VzlLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTQ0QzkvN0JBM0U3MEMwRUM5MTFGMEEyNkZGMTQ0QzRGOUFFMDIvOUYyNUU2MzQw RUNBMTFGMEJBQUUzNDRBQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQDotsgAwQAottUAwQAovV/MA0GCSqGSIb3DQEBCwUAA4IBAQDNiVli 9/rC7YMkHUD4V8DHeAcXCApXeEJxw4tu2O4LiYKnUyFTD8Ssvq7OvH6EqB4gK4Vy NZqfMUI861JVcr9E4CzfYAKMvLieCg2ZXcCNNh8RFUwYRAWknrO8XQGyzA6ktRq3 lUjiq42/HAcffpgwmvIK/hyidqwJwE2ai4Jypw+KKnYBPtWZBYk0NoOjtfOknBac Ht/awXnM8vBeg0EMXhi60u7tWe9cvMarVQcyk6LeECrzPfpE/r/fN24HOvTSs6z4 Opos6+SLUUOPeS8ZUeypzMgIueF6OsFYiDiNJ8RCXhpd9FAlyAecdo2Gr/ngRUFV btSX/5Zi6wT7cIMS -----END CERTIFICATE-----Generated at Fri Jul 24 04:16:40 2026 by rpki-client