$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/64541796EA9411F0ABDAFDB7536F56BC.roa File: 64541796EA9411F0ABDAFDB7536F56BC.roa (raw, json) Hash identifier: LfrfJE4GCJTuQpJ4ikr13wkm3Sw1L46scRrVgactbXQ= Subject key identifier: 2E:E1:C3:43:9E:56:17:AE:5F:00:B6:4C:DF:A9:89:17:E4:BD:87:48 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3C97 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/64541796EA9411F0ABDAFDB7536F56BC.roa Signing time: Wed 29 Apr 2026 01:06:23 +0000 ROA not before: Wed 29 Apr 2026 01:06:22 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 139648 IP address blocks: 61.107.200.0/22 maxlen: 24 101.53.82.0/24 maxlen: 24 101.53.83.0/24 maxlen: 24 119.59.0.0/20 maxlen: 20 119.59.0.0/24 maxlen: 24 119.59.1.0/24 maxlen: 24 119.59.2.0/24 maxlen: 24 119.59.3.0/24 maxlen: 24 119.59.4.0/24 maxlen: 24 119.59.5.0/24 maxlen: 24 119.59.6.0/24 maxlen: 24 119.59.7.0/24 maxlen: 24 119.59.8.0/24 maxlen: 24 119.59.9.0/24 maxlen: 24 119.59.10.0/24 maxlen: 24 119.59.11.0/24 maxlen: 24 119.59.12.0/24 maxlen: 24 119.59.13.0/24 maxlen: 24 119.59.14.0/24 maxlen: 24 119.59.15.0/24 maxlen: 24 119.59.16.0/24 maxlen: 24 119.59.17.0/24 maxlen: 24 119.59.19.0/24 maxlen: 24 119.59.20.0/24 maxlen: 24 119.59.21.0/24 maxlen: 24 119.59.22.0/24 maxlen: 24 119.59.23.0/24 maxlen: 24 182.237.50.0/24 maxlen: 24 182.237.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15511 (0x3c97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Apr 29 01:06:22 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69f1598e-ae3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:17:8e:da:c9:34:aa:9a:c5:24:1b:49:b9:b1: 30:f3:8f:0b:46:b6:3d:e1:f7:70:81:82:4e:81:06: e5:c3:af:2f:82:83:68:ad:f3:db:bc:ba:14:34:f6: 43:21:14:5a:ff:29:47:7e:5a:b0:71:e8:3d:2b:3c: 5e:cf:ee:63:ce:cd:e3:c6:fe:f7:fd:c5:25:5e:ac: 53:8c:a8:b3:fe:29:ff:08:14:e3:dc:3a:f2:db:5d: 0f:aa:6a:fa:a0:7b:85:ce:25:6c:6b:de:97:4b:1b: 3c:62:fb:a4:f3:c7:9c:c2:8b:0e:a4:91:10:d6:6c: 5e:65:cd:aa:c0:a7:26:05:9e:24:b2:bc:39:da:aa: 4d:5d:3e:c5:58:c8:be:fc:b7:44:7a:9a:d2:a6:d8: ae:06:66:65:b3:fd:c1:71:b5:1e:b9:43:29:21:72: 44:1f:19:1b:92:0d:3e:3f:3f:20:75:6c:4a:3c:77: 2f:12:0e:33:07:b3:fb:70:1f:81:b7:40:72:dc:f9: 5b:46:21:ea:31:d7:12:f7:b4:fa:a6:e2:e4:9b:55: e6:67:17:6f:e3:c8:1d:be:9a:3a:f9:11:6f:7a:50: db:2c:ef:47:99:d8:40:1b:93:88:b0:16:d1:f2:e0: b9:42:62:69:68:f6:b5:b3:e2:8e:65:d9:34:2c:f5: fb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E1:C3:43:9E:56:17:AE:5F:00:B6:4C:DF:A9:89:17:E4:BD:87:48 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/64541796EA9411F0ABDAFDB7536F56BC.roa sbgp-ipAddrBlock: critical IPv4: 61.107.200.0/22 101.53.82.0/23 119.59.0.0-119.59.17.255 119.59.19.0-119.59.23.255 182.237.50.0/23 Signature Algorithm: sha256WithRSAEncryption df:aa:f3:fb:8e:5a:4b:0f:18:52:8b:7f:19:26:a9:e3:ba:84: 4f:55:bd:83:27:27:e7:20:a5:2c:a5:03:95:3a:82:62:5d:08: 77:b5:6e:41:da:d1:6c:47:31:a2:51:11:75:04:3d:51:89:8b: 21:13:23:ec:5f:77:e7:29:1e:d9:28:ff:56:ab:39:55:1c:ee: 89:5f:4e:35:85:1b:8b:b4:01:34:3f:2a:7e:93:66:f7:08:32: be:f8:92:fb:ee:12:85:8f:59:4b:9d:c5:af:21:82:73:a0:4e: 3e:67:d7:4b:40:c4:80:8b:b1:6d:de:33:95:c6:a1:54:74:3b: f4:b5:6d:70:6e:2c:4d:c5:c9:2f:b1:7b:1e:20:36:f3:0c:2b: aa:56:05:f5:64:dc:ed:ad:72:04:42:a0:12:4f:ce:f4:c1:94: 05:38:d6:19:76:fa:53:19:66:28:8a:4e:e3:2b:15:a5:5b:28: ef:28:47:c3:8e:23:91:61:c7:62:d3:93:89:08:89:88:1e:20: 59:1f:c0:62:90:bf:3c:d2:72:43:71:4b:28:14:c4:31:d0:c8: 24:f1:e3:5a:8b:9c:0e:ba:76:0c:ee:77:db:dc:40:1c:35:56: 76:cb:0f:aa:64:6e:7f:9d:ef:51:38:55:07:8a:45:e4:8d:3b: 37:e4:e2:e6 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICPJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwNDI5MDEwNjIyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWYxNTk4ZS1hZTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuReO2sk0qprFJBtJubEw848LRrY94fdwgYJOgQblw68vgoNorfPbvLoUNPZD IRRa/ylHflqwceg9Kzxez+5jzs3jxv73/cUlXqxTjKiz/in/CBTj3Dry210Pqmr6 oHuFziVsa96XSxs8Yvuk88ecwosOpJEQ1mxeZc2qwKcmBZ4ksrw52qpNXT7FWMi+ /LdEeprSptiuBmZls/3BcbUeuUMpIXJEHxkbkg0+Pz8gdWxKPHcvEg4zB7P7cB+B t0By3PlbRiHqMdcS97T6puLkm1XmZxdv48gdvpo6+RFvelDbLO9HmdhAG5OIsBbR 8uC5QmJpaPa1s+KOZdk0LPX7VQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFC7hw0Oe VheuXwC2TN+piRfkvYdIMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNjQ1NDE3OTZF QTk0MTFGMEFCREFGREI3NTM2RjU2QkMucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAz BAIAATAtAwQCPWvIAwQBZTVSMAsDAwB3OwMEAXc7EDAMAwQAdzsTAwQDdzsQAwQB tu0yMA0GCSqGSIb3DQEBCwUAA4IBAQDfqvP7jlpLDxhSi38ZJqnjuoRPVb2DJyfn IKUspQOVOoJiXQh3tW5B2tFsRzGiURF1BD1RiYshEyPsX3fnKR7ZKP9WqzlVHO6J X041hRuLtAE0Pyp+k2b3CDK++JL77hKFj1lLncWvIYJzoE4+Z9dLQMSAi7Ft3jOV xqFUdDv0tW1wbixNxckvsXseIDbzDCuqVgX1ZNztrXIEQqAST870wZQFONYZdvpT GWYoik7jKxWlWyjvKEfDjiORYcdi05OJCImIHiBZH8BikL880nJDcUsoFMQx0Mgk 8eNai5wOunYM7nfb3EAcNVZ2yw+qZG5/ne9ROFUHikXkjTs35OLm -----END CERTIFICATE-----Generated at Wed May 13 01:21:39 2026 by rpki-client