$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/D7A7F3FEE18711F0A8B43181426F56BC.roa File: D7A7F3FEE18711F0A8B43181426F56BC.roa (raw, json) Hash identifier: Z/SrkSQ3T+H42p10G5ggeapuYQPaVSS5Kle4HYUjqBc= Subject key identifier: 3D:03:34:E1:39:05:AB:E8:4B:9C:DC:73:88:9B:51:9A:EE:33:56:3A Certificate issuer: /CN=A9149C62/serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A Certificate serial: 0145 Authority key identifier: CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/D7A7F3FEE18711F0A8B43181426F56BC.roa Signing time: Mon 15 Jun 2026 06:37:15 +0000 ROA not before: Mon 15 Jun 2026 06:37:15 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 152690 IP address blocks: 163.61.48.0/24 maxlen: 24 202.37.166.0/24 maxlen: 24 2401:dfa0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149C62, serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A Validity Not Before: Jun 15 06:37:15 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a2f9d9b-028c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ae:d7:72:1f:15:c4:4c:24:bf:a1:bd:7f:cc: f9:ac:1b:80:f2:05:c7:95:69:5a:cb:c8:f9:46:6d: 35:9e:23:5e:07:b3:7e:c7:5a:fa:a9:6f:a2:c9:c5: 88:f5:03:0f:6b:de:35:67:0a:bb:47:fe:28:7d:05: 51:ec:99:60:a1:30:99:f6:3e:cf:66:fd:99:f5:0b: 97:45:e3:b6:9c:64:74:7f:4c:b8:89:d2:47:2b:a5: 94:83:e8:a3:51:3f:e9:68:db:be:d2:e5:2e:e9:c8: 8c:44:74:b9:c1:8a:95:8a:9a:71:dd:93:66:02:2f: a2:63:cd:bb:ad:f3:04:4a:80:90:1f:e3:aa:99:32: 72:25:7b:7a:89:2e:3a:92:bc:28:68:77:09:f4:ad: 08:5a:24:6a:38:5e:73:97:17:df:47:3b:d6:f6:79: b7:eb:69:4b:bc:76:f2:40:a5:71:00:e5:64:ed:2b: b1:d2:18:22:ca:fa:af:49:1f:7b:33:3f:a1:a0:88: 28:25:6d:e4:8f:9c:eb:0d:6f:2d:cf:fd:f6:fe:67: 6d:4a:c8:9a:ae:7f:12:24:cc:68:2a:ed:90:ed:14: 6f:e3:a1:32:c9:9c:1b:fe:aa:80:af:12:86:f8:b4: a7:c1:28:ad:55:76:aa:13:d2:7f:a0:de:3f:2e:62: c0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:03:34:E1:39:05:AB:E8:4B:9C:DC:73:88:9B:51:9A:EE:33:56:3A X509v3 Authority Key Identifier: keyid:CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/D7A7F3FEE18711F0A8B43181426F56BC.roa sbgp-ipAddrBlock: critical IPv4: 163.61.48.0/24 202.37.166.0/24 IPv6: 2401:dfa0::/32 Signature Algorithm: sha256WithRSAEncryption 30:8c:e6:f0:a0:b6:b8:52:18:65:bf:ed:09:fe:af:76:17:5f: dc:00:ce:56:c4:f4:de:0e:13:f4:bb:ca:04:77:9b:e8:c4:c9: 46:df:85:6b:1e:8a:0c:06:72:2f:a0:9b:f3:5b:a6:a2:83:4e: 82:91:a6:ef:3d:24:cb:87:c7:16:74:a0:7b:2f:b0:1f:f3:07: a5:aa:dd:7b:c1:f3:c9:36:46:49:4a:9a:4a:7d:c5:e1:85:71: 69:22:18:c7:7a:7d:8a:09:07:51:b3:ad:85:94:ac:35:4c:c3: a5:41:18:1d:ae:c0:f6:0d:2c:97:0c:78:d9:da:a0:80:55:94: f3:dc:f8:6c:86:09:8a:0d:f0:e6:53:bb:c6:a0:af:65:ed:8f: 6d:28:c5:dc:0a:c2:ab:0f:44:f8:2b:a2:2e:2f:63:6a:e0:5d: d3:72:a9:39:dd:f4:9f:6c:d2:1a:db:46:f9:80:31:bb:c6:0c: 8d:21:5c:20:1c:d2:7e:cb:88:5e:9f:14:5c:08:de:27:1f:17: 3a:1e:74:43:8b:04:a8:0a:6f:4f:dc:5d:eb:47:15:a4:70:55: ad:5e:c0:77:76:b0:5c:3c:d9:f3:b0:7e:60:c3:0f:31:25:b9: cb:76:f1:3e:78:80:61:82:ba:b9:5d:7c:a2:fe:fa:4b:95:74: e8:17:0c:c4 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDNjIxMTAvBgNVBAUTKENGODA0QTZGM0Q4NkExOTcxM0E0RTg4NkQ1OTdCNERD NjQ0NTY4NkEwHhcNMjYwNjE1MDYzNzE1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTJmOWQ5Yi0wMjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoK7Xch8VxEwkv6G9f8z5rBuA8gXHlWlay8j5Rm01niNeB7N+x1r6qW+iycWI 9QMPa941Zwq7R/4ofQVR7JlgoTCZ9j7PZv2Z9QuXReO2nGR0f0y4idJHK6WUg+ij UT/paNu+0uUu6ciMRHS5wYqVippx3ZNmAi+iY827rfMESoCQH+OqmTJyJXt6iS46 krwoaHcJ9K0IWiRqOF5zlxffRzvW9nm362lLvHbyQKVxAOVk7Sux0hgiyvqvSR97 Mz+hoIgoJW3kj5zrDW8tz/32/mdtSsiarn8SJMxoKu2Q7RRv46EyyZwb/qqArxKG +LSnwSitVXaqE9J/oN4/LmLAqQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFD0DNOE5 BavoS5zcc4ibUZruM1Y6MB8GA1UdIwQYMBaAFM+ASm89hqGXE6TohtWXtNxkRWhq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUM2Mi84NEY0NkI2ODk4 MTUxMUVGQTRCRDNENTdDNEY5QUUwMi96NEJLYnoyR29aY1RwT2lHMVplMDNHUkZh R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o0QktiejJHb1pjVHBPaUcxWmUwM0dSRmFHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlDNjIvODRGNDZCNjg5ODE1MTFFRkE0QkQzRDU3QzRGOUFFMDIvRDdBN0YzRkVF MTg3MTFGMEE4QjQzMTgxNDI2RjU2QkMucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQAoz0wAwQAyiWmMA0EAgACMAcDBQAkAd+gMA0GCSqGSIb3DQEBCwUA A4IBAQAwjObwoLa4Uhhlv+0J/q92F1/cAM5WxPTeDhP0u8oEd5voxMlG34VrHooM BnIvoJvzW6aig06CkabvPSTLh8cWdKB7L7Af8welqt17wfPJNkZJSppKfcXhhXFp IhjHen2KCQdRs62FlKw1TMOlQRgdrsD2DSyXDHjZ2qCAVZTz3PhshgmKDfDmU7vG oK9l7Y9tKMXcCsKrD0T4K6IuL2Nq4F3Tcqk53fSfbNIa20b5gDG7xgyNIVwgHNJ+ y4henxRcCN4nHxc6HnRDiwSoCm9P3F3rRxWkcFWtXsB3drBcPNnzsH5gww8xJbnL dvE+eIBhgrq5XXyi/vpLlXToFwzE -----END CERTIFICATE-----Generated at Fri Jul 24 12:14:16 2026 by rpki-client