$ rpki-client -vvf rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/BDF659C4445111F0945A7E49C4F9AE02.roa File: BDF659C4445111F0945A7E49C4F9AE02.roa (raw, json) Hash identifier: AZnF8Wc4jOxGnuV3Sz1XdCo8uTaFnnB3otigZpMaNyM= Subject key identifier: A3:63:EC:2E:AB:4F:FB:FE:1C:5A:A3:C2:4B:69:06:1D:C4:6E:CD:BF Certificate issuer: /CN=A911C53A/serialNumber=B08B59E5D10705C5CB2D3CDB8565B328D502F550 Certificate serial: D2 Authority key identifier: B0:8B:59:E5:D1:07:05:C5:CB:2D:3C:DB:85:65:B3:28:D5:02:F5:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sItZ5dEHBcXLLTzbhWWzKNUC9VA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/BDF659C4445111F0945A7E49C4F9AE02.roa Signing time: Tue 07 Jul 2026 08:34:16 +0000 ROA not before: Tue 07 Jul 2026 08:34:16 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 137208 IP address blocks: 163.227.122.0/24 maxlen: 24 163.227.123.0/24 maxlen: 24 2001:df5:6740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.crl rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sItZ5dEHBcXLLTzbhWWzKNUC9VA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C53A, serialNumber=B08B59E5D10705C5CB2D3CDB8565B328D502F550 Validity Not Before: Jul 7 08:34:16 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a4cba08-88aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:47:67:2b:74:3d:9d:4b:6c:fc:0b:44:b9:00: 2b:2e:63:c0:b9:b6:42:be:bc:ed:7e:29:60:70:29: c2:78:4c:e6:6f:31:17:c1:5b:32:b2:0c:bc:e8:8a: db:aa:39:6c:a4:87:ab:db:c1:47:22:86:db:c8:6c: 5c:91:64:2d:f0:cc:98:c7:75:30:e5:34:b0:67:24: 81:8d:07:65:57:e6:b8:98:43:5f:ca:2c:59:52:18: 2f:3c:63:84:0a:e4:d4:5f:36:e7:bf:64:d3:62:1d: ad:a7:4b:8c:f5:3f:fc:06:0e:ff:48:a7:08:5c:ea: 7f:46:b0:5f:b7:90:03:02:e6:a9:57:95:c2:b7:86: ad:d6:20:0c:a1:7c:9d:f6:13:f8:f3:cd:1e:ce:87: 2d:01:68:ef:45:5a:eb:9a:93:25:e1:ee:f5:fb:6c: 35:72:50:06:61:e0:0a:05:19:e2:cb:62:56:b5:e4: cf:ca:0b:13:71:19:87:44:fe:a1:60:57:24:df:29: 52:4b:81:19:8c:84:69:0e:0a:d1:56:10:52:27:91: 49:8b:82:9d:25:d1:c0:04:72:94:51:fd:cf:96:2a: a1:f3:c9:94:19:ad:63:54:c3:dc:00:14:df:69:b7: 3c:10:a6:d0:2b:bb:9d:47:14:7d:60:3e:32:87:e6: cc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:63:EC:2E:AB:4F:FB:FE:1C:5A:A3:C2:4B:69:06:1D:C4:6E:CD:BF X509v3 Authority Key Identifier: keyid:B0:8B:59:E5:D1:07:05:C5:CB:2D:3C:DB:85:65:B3:28:D5:02:F5:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sItZ5dEHBcXLLTzbhWWzKNUC9VA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/BDF659C4445111F0945A7E49C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 163.227.122.0/23 IPv6: 2001:df5:6740::/48 Signature Algorithm: sha256WithRSAEncryption c0:a6:02:30:2e:d2:bf:dd:80:2c:0d:b6:82:21:83:74:1d:d3: cd:bd:be:1a:84:8c:32:0f:4b:0a:6a:ee:53:5a:1a:5f:da:b8: 20:e4:87:32:ef:0a:ff:bb:80:d0:3e:c1:9c:60:43:f6:c3:67: cf:4c:c0:fc:c7:bd:a9:44:77:2c:c7:52:05:ab:c3:a0:a4:28: 2c:9f:62:7b:ce:b5:bb:be:af:8a:14:e7:c7:d7:71:20:da:24: c8:20:20:1f:fb:38:01:ba:16:85:ef:12:ca:62:b3:d4:bc:3a: ea:da:5f:6c:b9:ef:16:5f:55:6e:fe:ed:32:b2:68:45:79:ef: e8:0c:4d:ef:67:b6:9d:71:cb:df:f1:9e:49:41:15:cb:e8:8f: 2f:db:e0:7c:13:96:ca:f8:59:de:d2:fe:54:af:69:b6:b9:53: d1:f6:55:a3:2b:c9:04:4e:84:3b:20:20:3c:91:3d:da:20:84: b7:56:da:e3:3b:f5:33:f2:8b:dd:ad:6f:a6:8c:94:bc:0b:fa: 8b:2f:f2:46:76:72:24:76:b6:d5:0d:13:53:15:85:a2:28:28: c3:7e:3e:d9:87:07:f1:80:05:10:ef:04:24:12:a0:cc:0a:1f: 0e:ed:c1:6f:24:ea:49:24:cc:e5:83:1b:bc:be:d3:49:4d:6e: 8a:4e:2e:2f -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1M0ExMTAvBgNVBAUTKEIwOEI1OUU1RDEwNzA1QzVDQjJEM0NEQjg1NjVCMzI4 RDUwMkY1NTAwHhcNMjYwNzA3MDgzNDE2WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRjYmEwOC04OGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUdnK3Q9nUts/AtEuQArLmPAubZCvrztfilgcCnCeEzmbzEXwVsysgy86Irb qjlspIer28FHIobbyGxckWQt8MyYx3Uw5TSwZySBjQdlV+a4mENfyixZUhgvPGOE CuTUXzbnv2TTYh2tp0uM9T/8Bg7/SKcIXOp/RrBft5ADAuapV5XCt4at1iAMoXyd 9hP4880ezoctAWjvRVrrmpMl4e71+2w1clAGYeAKBRniy2JWteTPygsTcRmHRP6h YFck3ylSS4EZjIRpDgrRVhBSJ5FJi4KdJdHABHKUUf3Pliqh88mUGa1jVMPcABTf abc8EKbQK7udRxR9YD4yh+bM6QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKNj7C6r T/v+HFqjwktpBh3Ebs2/MB8GA1UdIwQYMBaAFLCLWeXRBwXFyy0824VlsyjVAvVQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzUzQS80NzQ1MDU2RTQ0 NTExMUYwQTA5RThBMjRDNEY5QUUwMi9zSXRaNWRFSEJjWExMVHpiaFdXektOVUM5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NJdFo1ZEVIQmNYTExUemJoV1d6S05VQzlWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUM1M0EvNDc0NTA1NkU0NDUxMTFGMEEwOUU4QTI0QzRGOUFFMDIvQkRGNjU5QzQ0 NDUxMTFGMDk0NUE3RTQ5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBo+N6MA8EAgACMAkDBwAgAQ31Z0AwDQYJKoZIhvcNAQELBQADggEB AMCmAjAu0r/dgCwNtoIhg3Qd0829vhqEjDIPSwpq7lNaGl/auCDkhzLvCv+7gNA+ wZxgQ/bDZ89MwPzHvalEdyzHUgWrw6CkKCyfYnvOtbu+r4oU58fXcSDaJMggIB/7 OAG6FoXvEspis9S8OuraX2y57xZfVW7+7TKyaEV57+gMTe9ntp1xy9/xnklBFcvo jy/b4HwTlsr4Wd7S/lSvaba5U9H2VaMryQROhDsgIDyRPdoghLdW2uM79TPyi92t b6aMlLwL+osv8kZ2ciR2ttUNE1MVhaIoKMN+PtmHB/GABRDvBCQSoMwKHw7twW8k 6kkkzOWDG7y+00lNbopOLi8= -----END CERTIFICATE-----Generated at Fri Jul 24 01:42:45 2026 by rpki-client