$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/E33945D6B0ED11E5B7779F44C4F9AE02.roa File: E33945D6B0ED11E5B7779F44C4F9AE02.roa (raw, json) Hash identifier: vVuI5scmnpoPSrcTwhxxR+hl6leJwJVgbaLFPIHUZ9g= Subject key identifier: 72:30:05:41:D8:F8:BF:D0:9B:B6:3F:40:99:AD:4D:B9:E9:5A:CF:C6 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2D8E Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/E33945D6B0ED11E5B7779F44C4F9AE02.roa Signing time: Fri 10 Jul 2026 16:15:12 +0000 ROA not before: Fri 10 Jul 2026 16:15:12 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 17741 IP address blocks: 114.31.96.0/21 maxlen: 21 202.44.75.0/24 maxlen: 24 2401:2800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11662 (0x2d8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: Jul 10 16:15:12 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a511a8f-cd0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0b:23:d6:13:37:41:17:bb:45:ce:9c:1c:de: 5f:10:50:97:d7:ff:45:13:91:4c:71:f2:3e:62:3b: 42:0b:06:b1:56:a7:12:0b:b4:3a:6e:54:6f:bb:42: 4c:17:b9:2f:35:75:37:65:ce:4f:7b:dc:cb:52:17: 30:eb:dd:f5:ed:90:0d:53:21:94:5d:86:09:ec:e3: 82:d3:79:9b:9a:d9:1f:a6:29:b5:0d:b7:4e:e5:8b: de:33:49:9a:6c:4b:c1:65:e7:30:00:ee:ce:7a:df: 63:12:61:a3:db:e0:7f:84:f2:07:03:fa:fb:49:6b: 8d:09:51:f2:21:3d:d9:47:ec:e2:1b:7e:98:02:f6: 86:59:b1:61:fa:f3:8f:7c:6f:e6:4f:d7:4c:c3:d7: 34:9f:25:9b:c4:64:3e:23:67:01:46:04:55:a4:91: 11:dc:50:89:4c:f0:96:4f:92:ed:2c:5a:78:bd:3c: ce:a7:82:4b:89:3f:2e:98:37:a3:f9:f9:05:57:d1: 11:ee:df:68:8d:0e:72:70:85:b0:af:bc:3f:f7:cd: dc:d8:96:9b:30:ea:aa:27:ba:5c:f5:5e:32:b7:86: ed:04:51:12:ce:4d:81:19:e4:3d:03:6b:f8:f2:d2: f3:7d:61:42:20:9c:f9:0e:7d:9a:89:be:a4:fa:f1: b5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:30:05:41:D8:F8:BF:D0:9B:B6:3F:40:99:AD:4D:B9:E9:5A:CF:C6 X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/E33945D6B0ED11E5B7779F44C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 114.31.96.0/21 202.44.75.0/24 IPv6: 2401:2800::/32 Signature Algorithm: sha256WithRSAEncryption 27:65:df:9a:98:cd:07:f4:15:d6:1b:1e:97:fc:4c:82:31:81: d7:2b:fc:05:9c:ae:85:5f:87:ad:09:dd:28:8e:ce:e0:dd:ca: ba:fc:30:a5:5f:53:bc:a8:79:9e:4c:1a:a1:30:4d:54:a0:56: 1e:bc:b4:e5:cc:49:9e:23:b3:ad:c7:16:cc:11:2a:86:58:dd: 8e:1a:db:63:bb:02:93:fa:cc:f0:14:14:3a:aa:69:d3:18:6a: 24:04:7c:33:be:3f:c5:51:8a:0d:34:e9:db:b7:a2:88:8a:da: 0a:b9:14:8e:f6:81:13:2f:73:26:48:5c:18:21:eb:e1:66:55: 41:00:f9:90:c0:79:c9:e5:29:5c:02:6e:fa:e3:f3:0a:09:10: c1:46:f6:78:0d:c8:29:26:af:a6:81:b6:2e:9b:00:a4:c8:de: 3d:bd:1c:84:4d:c6:7e:b9:bb:77:66:93:59:b8:01:97:24:08: 60:6c:b0:d6:96:fb:16:d1:1c:dc:1f:83:8d:9b:a0:ed:b9:8b: 88:70:27:82:be:7f:f8:f0:c3:aa:2d:eb:7d:d8:9d:f9:4b:4c: ae:a3:09:cb:2d:5b:fe:c1:f6:92:4c:54:f8:79:b2:b7:5e:ff: a3:6b:25:75:6a:a5:48:8e:97:44:e1:a3:10:74:bf:f9:57:a1: e7:27:72:a9 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICLY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjYwNzEwMTYxNTEyWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTUxMWE4Zi1jZDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwsj1hM3QRe7Rc6cHN5fEFCX1/9FE5FMcfI+YjtCCwaxVqcSC7Q6blRvu0JM F7kvNXU3Zc5Pe9zLUhcw69317ZANUyGUXYYJ7OOC03mbmtkfpim1DbdO5YveM0ma bEvBZecwAO7Oet9jEmGj2+B/hPIHA/r7SWuNCVHyIT3ZR+ziG36YAvaGWbFh+vOP fG/mT9dMw9c0nyWbxGQ+I2cBRgRVpJER3FCJTPCWT5LtLFp4vTzOp4JLiT8umDej +fkFV9ER7t9ojQ5ycIWwr7w/983c2JabMOqqJ7pc9V4yt4btBFESzk2BGeQ9A2v4 8tLzfWFCIJz5Dn2aib6k+vG1vwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFHIwBUHY +L/Qm7Y/QJmtTbnpWs/GMB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhBQzQvMjA2QkM4NkNBRTZBMTFFMzkzNzlENTUwNTkxMUVBMzIvRTMzOTQ1RDZC MEVEMTFFNUI3Nzc5RjQ0QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQDch9gAwQAyixLMA0EAgACMAcDBQAkASgAMA0GCSqGSIb3DQEBCwUA A4IBAQAnZd+amM0H9BXWGx6X/EyCMYHXK/wFnK6FX4etCd0ojs7g3cq6/DClX1O8 qHmeTBqhME1UoFYevLTlzEmeI7OtxxbMESqGWN2OGttjuwKT+szwFBQ6qmnTGGok BHwzvj/FUYoNNOnbt6KIitoKuRSO9oETL3MmSFwYIevhZlVBAPmQwHnJ5SlcAm76 4/MKCRDBRvZ4DcgpJq+mgbYumwCkyN49vRyETcZ+ubt3ZpNZuAGXJAhgbLDWlvsW 0RzcH4ONm6DtuYuIcCeCvn/48MOqLet92J35S0yuownLLVv+wfaSTFT4ebK3Xv+j ayV1aqVIjpdE4aMQdL/5V6HnJ3Kp -----END CERTIFICATE-----Generated at Fri Jul 24 15:58:44 2026 by rpki-client