$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/A3A8BCC0848C11F185E8F6A483A30FBC.roa File: A3A8BCC0848C11F185E8F6A483A30FBC.roa (raw, json) Hash identifier: hqGlc/K4gPudZqx+R0HrayMg06oXLJ1YOFYAXKXIwhY= Subject key identifier: B7:5F:2E:DA:65:69:B4:2E:73:F9:68:0E:BC:EF:E8:40:0E:F4:D8:EB Certificate issuer: /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005 Certificate serial: 1B25 Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/A3A8BCC0848C11F185E8F6A483A30FBC.roa Signing time: Mon 20 Jul 2026 22:45:00 +0000 ROA not before: Mon 20 Jul 2026 22:45:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55872 IP address blocks: 115.187.96.0/19 maxlen: 20 118.82.128.0/17 maxlen: 18 119.235.32.0/21 maxlen: 21 202.65.162.0/23 maxlen: 23 202.65.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6949 (0x1b25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005 Validity Not Before: Jul 20 22:45:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a5ea4ec-a728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:a5:3c:5e:62:9c:ee:f1:fe:67:bf:38:b7: d6:05:1a:31:b6:ab:5d:09:98:bf:1c:21:32:3b:6e: 90:28:96:7a:f2:d7:14:2b:73:47:69:e9:f1:96:77: ac:70:44:76:16:54:c6:41:e1:7f:d3:8c:42:f7:37: d3:2a:30:0f:f9:e1:1a:e7:bc:92:ea:c7:52:a5:d3: 18:5b:7f:e1:4d:e3:3e:36:e9:cb:8b:09:91:c8:52: 34:c0:51:48:75:72:1a:52:7c:7e:61:fe:04:f6:29: dd:5b:d1:a5:05:d1:86:72:b3:40:1b:da:2a:e2:bd: 78:c4:8f:0a:34:37:00:26:aa:88:98:50:72:c9:db: bb:84:dd:9e:dc:c4:09:46:41:d9:e3:87:8c:2c:bc: 81:90:c3:f5:e1:78:30:70:f8:03:e1:1a:22:bb:5f: fd:86:3f:94:32:23:0e:fe:65:cd:8b:71:6a:6a:6b: a7:73:bd:4e:79:d3:bb:75:12:bb:cc:56:16:8b:19: b2:2f:a1:bf:51:64:22:f6:60:de:4a:2a:23:dc:d8: 4a:6e:90:b1:25:ab:76:e8:7c:92:6f:0d:c4:07:30: 83:b2:90:0c:06:3b:f7:5f:67:f5:0b:c2:06:86:a4: 41:79:c7:36:b6:5d:57:f8:fe:1a:52:50:91:05:67: e5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5F:2E:DA:65:69:B4:2E:73:F9:68:0E:BC:EF:E8:40:0E:F4:D8:EB X509v3 Authority Key Identifier: keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/A3A8BCC0848C11F185E8F6A483A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 115.187.96.0/19 118.82.128.0/17 119.235.32.0/21 202.65.162.0-202.65.167.255 Signature Algorithm: sha256WithRSAEncryption 1b:7b:c4:aa:26:de:18:a1:2c:5d:3b:32:f0:a6:ee:bc:23:5f: 04:39:29:fc:54:9e:2c:bc:8f:b9:66:17:7e:be:c3:de:1c:be: 43:63:15:a4:af:88:c0:fd:62:2f:58:07:a4:60:01:ed:25:3a: 5b:78:ad:1c:40:1c:2e:2c:50:99:39:74:59:ae:42:c6:6d:20: 50:e2:38:e8:99:9e:3d:61:a1:1b:e3:d0:c6:99:8c:be:63:f3: c9:a8:c8:21:f4:69:1a:c9:9b:07:3d:4e:a6:c2:37:a9:93:2c: 1a:12:a8:b4:72:95:b4:9f:4e:b3:0c:d0:c8:7e:7c:49:b1:66: c0:d1:9b:0c:d4:fa:2f:21:6a:80:76:be:21:eb:31:5b:03:52: af:58:ff:79:f4:75:4e:18:b1:1f:b4:56:1f:0a:f4:44:01:42: 9b:cc:5d:44:6c:5c:8f:09:39:b7:3f:d7:bf:6c:3b:85:1f:2e: 96:44:70:2e:fb:14:ec:64:dd:45:07:3f:db:6d:3d:0f:77:87: 73:64:8c:a1:d5:ec:bf:c6:33:3d:85:1d:8f:df:1e:50:54:59: 61:86:ed:1c:91:00:65:b3:f4:3b:4c:a9:7a:73:41:51:6d:e7: 36:cf:dd:1a:f0:89:a3:06:c0:2a:e1:79:84:22:a4:da:78:aa: 98:47:b2:eb -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICGyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBRDcxMTAvBgNVBAUTKEJBRjVBREEzMkNBMEQzNENGM0NDRjUzQUJERjg2REU2 RjhFRDkwMDUwHhcNMjYwNzIwMjI0NTAwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTVlYTRlYy1hNzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt62lPF5inO7x/me/OLfWBRoxtqtdCZi/HCEyO26QKJZ68tcUK3NHaenxlnes cER2FlTGQeF/04xC9zfTKjAP+eEa57yS6sdSpdMYW3/hTeM+NunLiwmRyFI0wFFI dXIaUnx+Yf4E9indW9GlBdGGcrNAG9oq4r14xI8KNDcAJqqImFByydu7hN2e3MQJ RkHZ44eMLLyBkMP14XgwcPgD4Roiu1/9hj+UMiMO/mXNi3Fqamunc71OedO7dRK7 zFYWixmyL6G/UWQi9mDeSioj3NhKbpCxJat26HySbw3EBzCDspAMBjv3X2f1C8IG hqRBecc2tl1X+P4aUlCRBWflHwIDAQABo4ICejCCAnYwHQYDVR0OBBYEFLdfLtpl abQuc/loDrzv6EAO9NjrMB8GA1UdIwQYMBaAFLr1raMsoNNM88z1Or34beb47ZAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkFENy9GOEJBQkFDQThC ODkxMUU3OTAxMTVDM0ZDNEY5QUUwMi91dld0b3l5ZzAwenp6UFU2dmZodDV2anRr QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V2V3RveXlnMDB6enpQVTZ2Zmh0NXZqdGtBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZBRDcvRjhCQUJBQ0E4Qjg5MTFFNzkwMTE1QzNGQzRGOUFFMDIvQTNBOEJDQzA4 NDhDMTFGMTg1RThGNkE0ODNBMzBGQkMucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQFc7tgAwQHdlKAAwQDd+sgMAwDBAHKQaIDBAPKQaAwDQYJKoZIhvcN AQELBQADggEBABt7xKom3hihLF07MvCm7rwjXwQ5KfxUniy8j7lmF36+w94cvkNj FaSviMD9Yi9YB6RgAe0lOlt4rRxAHC4sUJk5dFmuQsZtIFDiOOiZnj1hoRvj0MaZ jL5j88moyCH0aRrJmwc9TqbCN6mTLBoSqLRylbSfTrMM0Mh+fEmxZsDRmwzU+i8h aoB2viHrMVsDUq9Y/3n0dU4YsR+0Vh8K9EQBQpvMXURsXI8JObc/179sO4UfLpZE cC77FOxk3UUHP9ttPQ93h3NkjKHV7L/GMz2FHY/fHlBUWWGG7RyRAGWz9DtMqXpz QVFt5zbP3RrwiaMGwCrheYQipNp4qphHsus= -----END CERTIFICATE-----Generated at Fri Jul 24 13:26:51 2026 by rpki-client