$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/2C7A8F5C8CE511EF96182462C4F9AE02.roa File: 2C7A8F5C8CE511EF96182462C4F9AE02.roa (raw, json) Hash identifier: xxJw6yibjCKfQCqCsaxCPOF8pMnveD+wHDnOcOwMmFE= Subject key identifier: 30:99:86:E9:55:AE:A2:D2:5A:5A:D6:A3:FF:A5:FE:16:84:9B:1F:EB Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3C53 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/2C7A8F5C8CE511EF96182462C4F9AE02.roa Signing time: Mon 09 Mar 2026 00:32:27 +0000 ROA not before: Mon 09 Mar 2026 00:32:27 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 4766 IP address blocks: 61.251.188.0/24 maxlen: 24 101.53.81.0/24 maxlen: 24 101.53.94.0/24 maxlen: 24 175.176.138.0/24 maxlen: 24 182.237.41.0/24 maxlen: 24 182.237.62.0/24 maxlen: 24 203.210.25.0/24 maxlen: 24 203.210.28.0/24 maxlen: 24 203.210.29.0/24 maxlen: 24 203.210.30.0/24 maxlen: 24 210.87.192.0/24 maxlen: 24 210.87.194.0/24 maxlen: 24 210.87.203.0/24 maxlen: 24 210.87.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15443 (0x3c53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Mar 9 00:32:27 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69ae151b-73a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:85:85:5b:cf:d2:ea:9f:d4:8e:93:b0:9d:38: c0:e3:d0:ae:29:2c:f0:6b:33:80:41:06:42:e0:c5: 8a:1e:1f:46:73:92:de:8a:3e:99:c1:ab:0c:ae:67: 68:3e:4a:e9:08:11:e8:16:79:20:39:9f:5e:6f:43: 86:e0:84:e5:43:b4:b6:d3:03:c9:80:33:88:09:ae: 37:f4:e8:f2:22:db:92:34:dd:7e:ca:b1:29:66:79: 44:96:cf:e8:41:61:51:80:4e:7b:db:3a:43:3e:ff: 19:6c:cb:62:b9:e6:98:3b:86:bf:63:2e:2f:bd:38: 43:bd:35:8b:ea:23:c1:1e:de:51:3b:87:f5:2a:81: b0:4b:ba:50:af:74:bb:4c:30:e7:34:1a:d2:a4:04: e9:c8:86:18:fe:d6:8a:55:1d:c9:3f:e0:d7:b7:7e: d7:ea:87:83:30:52:dd:e0:70:b2:b1:4a:68:22:53: 01:b9:88:4d:3c:39:3d:01:5d:15:6c:85:14:d7:84: 7c:02:a4:77:c5:ad:58:2d:70:4a:6e:39:de:cd:9f: c2:9f:4c:91:12:76:40:23:2e:c8:81:1d:84:fa:f1: 67:aa:9a:52:3c:14:d1:87:60:0f:cd:fd:22:2c:ff: 9f:01:f6:59:c7:ea:00:01:ff:4b:a7:d5:f4:6e:a0: 04:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:99:86:E9:55:AE:A2:D2:5A:5A:D6:A3:FF:A5:FE:16:84:9B:1F:EB X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/2C7A8F5C8CE511EF96182462C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.251.188.0/24 101.53.81.0/24 101.53.94.0/24 175.176.138.0/24 182.237.41.0/24 182.237.62.0/24 203.210.25.0/24 203.210.28.0-203.210.30.255 210.87.192.0/24 210.87.194.0/24 210.87.203.0/24 210.87.223.0/24 Signature Algorithm: sha256WithRSAEncryption c5:e3:1e:07:a9:2e:94:6f:51:3a:95:50:cf:c6:6f:18:92:06: 5a:cf:17:dd:33:8c:33:ac:4a:be:8d:36:cf:31:43:d1:bf:34: d8:ae:f6:17:0c:bd:dd:3c:cc:4a:e0:66:56:d1:ec:7f:11:e8: 42:59:fb:f5:16:76:92:b8:41:0f:41:85:96:ee:cc:de:5b:d0: 6b:65:a2:df:7e:ae:9b:d5:d2:9b:b5:26:00:a9:bc:57:ca:7d: 5b:6f:15:2c:b1:b2:f1:34:a6:c2:09:31:7b:e0:05:3e:0a:90: 69:f3:2b:ad:42:fe:69:36:40:be:7e:1d:d6:3b:97:9b:1c:97: fc:e2:06:3f:c4:44:0b:b7:76:7a:24:2f:1b:73:2c:f7:bd:e5: 85:98:57:41:9d:7e:64:47:1f:95:7b:d7:5e:a3:e5:e7:17:ef: 68:75:7b:33:64:91:eb:5d:12:69:3a:d4:fe:72:5b:0a:dd:6c: 0f:e7:02:09:da:23:4a:d9:fb:bb:8b:a8:c4:03:b7:55:58:a9: 0e:6f:7c:a5:25:3b:d4:ed:15:82:63:46:fb:88:0f:04:ff:35: 7a:82:d9:0f:4b:4a:c2:ff:3a:93:3c:7e:89:41:3a:5e:e3:49: e0:3c:05:f9:2e:c1:eb:c4:25:b4:36:f3:01:b5:d3:ef:66:a9: 78:2e:25:67 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICPFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwMzA5MDAzMjI3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFlMTUxYi03M2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIWFW8/S6p/UjpOwnTjA49CuKSzwazOAQQZC4MWKHh9Gc5Leij6ZwasMrmdo PkrpCBHoFnkgOZ9eb0OG4ITlQ7S20wPJgDOICa439OjyItuSNN1+yrEpZnlEls/o QWFRgE572zpDPv8ZbMtiueaYO4a/Yy4vvThDvTWL6iPBHt5RO4f1KoGwS7pQr3S7 TDDnNBrSpATpyIYY/taKVR3JP+DXt37X6oeDMFLd4HCysUpoIlMBuYhNPDk9AV0V bIUU14R8AqR3xa1YLXBKbjnezZ/Cn0yREnZAIy7IgR2E+vFnqppSPBTRh2APzf0i LP+fAfZZx+oAAf9Lp9X0bqAE+QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFDCZhulV rqLSWlrWo/+l/haEmx/rMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvMkM3QThGNUM4 Q0U1MTFFRjk2MTgyNDYyQzRGOUFFMDIucm9hMGkGCCsGAQUFBwEHAQH/BFowWDBW BAIAATBQAwQAPfu8AwQAZTVRAwQAZTVeAwQAr7CKAwQAtu0pAwQAtu0+AwQAy9IZ MAwDBALL0hwDBADL0h4DBADSV8ADBADSV8IDBADSV8sDBADSV98wDQYJKoZIhvcN AQELBQADggEBAMXjHgepLpRvUTqVUM/GbxiSBlrPF90zjDOsSr6NNs8xQ9G/NNiu 9hcMvd08zErgZlbR7H8R6EJZ+/UWdpK4QQ9BhZbuzN5b0Gtlot9+rpvV0pu1JgCp vFfKfVtvFSyxsvE0psIJMXvgBT4KkGnzK61C/mk2QL5+HdY7l5scl/ziBj/ERAu3 dnokLxtzLPe95YWYV0GdfmRHH5V7116j5ecX72h1ezNkketdEmk61P5yWwrdbA/n AgnaI0rZ+7uLqMQDt1VYqQ5vfKUlO9TtFYJjRvuIDwT/NXqC2Q9LSsL/OpM8folB Ol7jSeA8BfkuwevEJbQ28wG10+9mqXguJWc= -----END CERTIFICATE-----Generated at Thu Mar 26 07:12:58 2026 by rpki-client