$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/0D491000A64811EA939A7F67C4F9AE02.roa File: 0D491000A64811EA939A7F67C4F9AE02.roa (raw, json) Hash identifier: AihcOnul/rat7l3v9SLpKTdGvOueszYtqhBJ4Y0Rnoo= Subject key identifier: C7:E0:C2:38:09:AA:0F:C9:35:D0:48:CA:F5:95:A1:A2:D4:9B:44:BF Certificate issuer: /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Certificate serial: 0A3E Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/0D491000A64811EA939A7F67C4F9AE02.roa Signing time: Mon 14 Sep 2026 10:57:47 +0000 ROA not before: Mon 14 Sep 2026 10:57:46 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 59268 IP address blocks: 49.128.64.0/19 maxlen: 19 49.128.64.0/24 maxlen: 24 49.128.65.0/24 maxlen: 24 49.128.66.0/24 maxlen: 24 49.128.67.0/24 maxlen: 24 49.128.68.0/24 maxlen: 24 49.128.69.0/24 maxlen: 24 49.128.70.0/24 maxlen: 24 49.128.71.0/24 maxlen: 24 49.128.72.0/24 maxlen: 24 49.128.73.0/24 maxlen: 24 49.128.74.0/24 maxlen: 24 49.128.75.0/24 maxlen: 24 49.128.76.0/24 maxlen: 24 49.128.77.0/24 maxlen: 24 49.128.78.0/24 maxlen: 24 49.128.79.0/24 maxlen: 24 49.128.80.0/24 maxlen: 24 49.128.81.0/24 maxlen: 24 49.128.82.0/24 maxlen: 24 49.128.83.0/24 maxlen: 24 49.128.84.0/24 maxlen: 24 49.128.85.0/24 maxlen: 24 49.128.86.0/24 maxlen: 24 49.128.87.0/24 maxlen: 24 49.128.88.0/24 maxlen: 24 49.128.89.0/24 maxlen: 24 49.128.90.0/24 maxlen: 24 49.128.91.0/24 maxlen: 24 49.128.92.0/24 maxlen: 24 49.128.93.0/24 maxlen: 24 49.128.94.0/24 maxlen: 24 49.128.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2622 (0xa3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Validity Not Before: Sep 14 10:57:46 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6aa7d32a-e8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d5:30:74:62:27:94:3e:c3:51:c0:0c:7d:c3: db:9b:ae:8e:21:22:c1:f4:95:ab:41:41:19:ed:ef: f3:bc:27:a4:46:90:28:14:ec:df:8b:05:cf:4b:f5: f9:c7:b4:7d:5c:0c:d2:a6:b2:ae:87:d8:f8:91:1c: 6d:66:14:ee:21:71:f5:4e:35:42:29:56:a2:02:3a: 9f:c2:ac:78:91:51:22:f3:76:14:ee:ce:e2:19:44: 9b:19:e0:f3:72:e2:82:1d:50:f7:14:fe:d9:9d:a5: 62:2b:c1:87:cf:a1:00:44:52:f7:38:d3:f1:57:d7: ca:ad:0d:e9:97:92:e9:c9:89:d0:05:06:23:43:37: 47:aa:5f:7b:04:34:34:bb:26:78:ba:dc:e1:a9:53: f9:31:47:fa:2b:ef:5f:4e:18:52:b2:42:7b:04:16: 91:4b:44:a2:8a:bb:b1:9c:b9:bf:c4:a5:46:7b:f3: ef:79:78:f9:55:50:02:86:96:0f:84:61:a5:16:2d: f0:b5:50:5b:f6:50:ed:91:d4:95:c9:2b:aa:3d:17: 17:93:5d:e5:10:53:53:57:33:2b:4e:49:01:aa:57: 1f:e4:bc:9c:2c:85:0a:89:5c:36:f6:1c:30:67:54: 11:97:d7:cb:1c:81:c2:70:f7:7f:45:99:94:04:c1: 72:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E0:C2:38:09:AA:0F:C9:35:D0:48:CA:F5:95:A1:A2:D4:9B:44:BF X509v3 Authority Key Identifier: keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/0D491000A64811EA939A7F67C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 49.128.64.0/19 Signature Algorithm: sha256WithRSAEncryption a7:da:64:73:f4:fe:30:a3:a0:41:b3:47:69:73:53:64:5e:78: 6d:4d:e9:12:56:dd:69:d5:9c:77:c3:e0:5b:97:13:7a:77:1f: 8a:c6:1f:fe:61:60:a7:11:6b:5d:91:66:bf:c9:50:25:68:6a: e8:0d:22:fa:97:df:79:6a:8d:26:de:41:4a:60:e8:74:99:50: bf:77:be:13:14:73:81:c0:39:59:1a:64:2f:1f:b7:a8:ea:ad: 7d:00:fa:16:4a:88:8a:93:be:c1:8d:04:51:42:7b:18:b2:2c: 0c:3a:7a:6e:02:a8:be:02:06:23:21:b8:52:ff:24:18:22:97: dd:d9:41:47:1d:df:ca:ba:87:19:28:42:18:34:89:ee:1f:54: 9b:52:23:29:f0:64:39:62:4b:5a:36:3b:1d:08:9f:55:3d:4a: a4:9c:2d:b1:86:7e:16:bb:66:df:f1:2c:1a:e1:d0:64:3a:88: 8b:18:09:5c:b0:6e:59:f1:1c:98:f2:f9:98:ee:ac:b2:b0:d4: 1e:15:60:79:86:91:6e:f1:6d:bf:a1:37:98:b0:e5:20:5e:8c: 4e:2e:bc:bc:85:26:34:aa:7b:b4:29:e6:06:4a:ac:d9:42:5d: 07:43:18:d3:86:da:1d:11:64:e1:fa:25:40:4f:e7:b1:a7:00: 86:3b:7a:cf -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThEMEYxMTAvBgNVBAUTKDQzRTFFOEM0MjYxQ0UwN0Q0RjhFNENGQjdBM0Y4MzNG QkI0NkI4OEMwHhcNMjYwOTE0MTA1NzQ2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE3ZDMyYS1lOGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydUwdGInlD7DUcAMfcPbm66OISLB9JWrQUEZ7e/zvCekRpAoFOzfiwXPS/X5 x7R9XAzSprKuh9j4kRxtZhTuIXH1TjVCKVaiAjqfwqx4kVEi83YU7s7iGUSbGeDz cuKCHVD3FP7ZnaViK8GHz6EARFL3ONPxV9fKrQ3pl5LpyYnQBQYjQzdHql97BDQ0 uyZ4utzhqVP5MUf6K+9fThhSskJ7BBaRS0SiiruxnLm/xKVGe/PveXj5VVAChpYP hGGlFi3wtVBb9lDtkdSVySuqPRcXk13lEFNTVzMrTkkBqlcf5LycLIUKiVw29hww Z1QRl9fLHIHCcPd/RZmUBMFyQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMfgwjgJ qg/JNdBIyvWVoaLUm0S/MB8GA1UdIwQYMBaAFEPh6MQmHOB9T45M+3o/gz+7RriM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEQwRi83RDIyNzNCNEE2 NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRIMVBqa3o3ZWotRFA3dEd1 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtSG94Q1ljNEgxUGprejdlai1EUDd0R3VJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MThEMEYvN0QyMjczQjRBNjQ2MTFFQUFGOUU5MTYyQzRGOUFFMDIvMEQ0OTEwMDBB NjQ4MTFFQTkzOUE3RjY3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFMYBAMA0GCSqGSIb3DQEBCwUAA4IBAQCn2mRz9P4wo6BBs0dpc1Nk XnhtTekSVt1p1Zx3w+BblxN6dx+Kxh/+YWCnEWtdkWa/yVAlaGroDSL6l995ao0m 3kFKYOh0mVC/d74TFHOBwDlZGmQvH7eo6q19APoWSoiKk77BjQRRQnsYsiwMOnpu Aqi+AgYjIbhS/yQYIpfd2UFHHd/KuocZKEIYNInuH1SbUiMp8GQ5YktaNjsdCJ9V PUqknC2xhn4Wu2bf8Swa4dBkOoiLGAlcsG5Z8RyY8vmY7qyysNQeFWB5hpFu8W2/ oTeYsOUgXoxOLry8hSY0qnu0KeYGSqzZQl0HQxjThtodEWTh+iVAT+expwCGO3rP -----END CERTIFICATE-----Generated at Sat Sep 26 07:41:47 2026 by rpki-client