$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/F9ED3D7AACA711F1B77415A05D11F970.roa File: F9ED3D7AACA711F1B77415A05D11F970.roa (raw, json) Hash identifier: RAO95CIL2yCb68mO03gA4Ngj7C2KBbCMEZ/LyQmTvIQ= Subject key identifier: 66:DC:E6:7F:F3:DA:5D:53:A9:59:D0:3F:7B:8F:D9:90:04:68:C5:36 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3E90 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/F9ED3D7AACA711F1B77415A05D11F970.roa Signing time: Tue 22 Sep 2026 23:47:52 +0000 ROA not before: Tue 22 Sep 2026 23:47:52 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 216138 IP address blocks: 49.128.214.0/24 maxlen: 24 61.251.184.0/24 maxlen: 24 101.53.67.0/24 maxlen: 24 101.53.79.0/24 maxlen: 24 101.53.83.0/24 maxlen: 24 101.53.85.0/24 maxlen: 24 103.6.75.0/24 maxlen: 24 112.196.196.0/24 maxlen: 24 112.196.198.0/24 maxlen: 24 112.196.204.0/24 maxlen: 24 112.196.205.0/24 maxlen: 24 112.196.210.0/24 maxlen: 24 112.196.213.0/24 maxlen: 24 112.196.216.0/24 maxlen: 24 112.196.217.0/24 maxlen: 24 112.196.221.0/24 maxlen: 24 124.66.209.0/24 maxlen: 24 182.237.56.0/24 maxlen: 24 182.237.57.0/24 maxlen: 24 182.237.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16016 (0x3e90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Sep 22 23:47:52 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6ab313a8-8dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:70:bf:d5:25:0c:2e:33:06:65:01:3f:d9: d3:2f:1d:e9:92:57:2a:6e:c2:57:f1:c8:c1:67:63: 2f:7a:bd:b2:70:ee:4d:6b:0e:ca:13:85:4e:8b:00: 51:68:12:e1:be:0d:54:d1:fb:80:69:f1:49:a4:f6: 0d:60:48:7f:1e:df:67:fb:ef:68:33:bf:e6:b0:f5: 75:7c:bb:c7:f4:cd:eb:92:62:92:3a:85:21:07:7a: dd:51:30:79:15:f6:77:6f:02:56:de:e5:ad:c0:ad: 48:4b:31:d3:70:7a:75:9a:6c:b3:1e:f3:10:bb:0f: 6a:cb:63:e4:e1:a2:c8:21:cc:a1:0e:28:98:fe:8c: 91:6f:4f:77:2b:ec:4e:ec:25:41:4f:ff:74:b5:89: d0:a9:61:c5:dd:c1:a2:da:60:a9:44:b0:79:a4:b8: 2d:09:7a:8d:27:c8:bb:ff:46:6a:7a:7a:14:52:6d: 71:54:15:55:31:17:6f:38:76:80:3a:13:e8:a4:23: bc:fc:5a:93:70:e5:9f:06:67:02:db:84:c7:a7:8b: e6:1f:c3:94:6c:43:e9:e4:fd:d6:9b:08:9f:aa:f5: f7:ac:19:de:49:62:92:f6:22:e0:37:60:94:84:f3: a5:5d:8f:8f:93:28:4e:c8:f8:4a:58:45:bc:af:67: eb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DC:E6:7F:F3:DA:5D:53:A9:59:D0:3F:7B:8F:D9:90:04:68:C5:36 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/F9ED3D7AACA711F1B77415A05D11F970.roa sbgp-ipAddrBlock: critical IPv4: 49.128.214.0/24 61.251.184.0/24 101.53.67.0/24 101.53.79.0/24 101.53.83.0/24 101.53.85.0/24 103.6.75.0/24 112.196.196.0/24 112.196.198.0/24 112.196.204.0/23 112.196.210.0/24 112.196.213.0/24 112.196.216.0/23 112.196.221.0/24 124.66.209.0/24 182.237.56.0/23 182.237.59.0/24 Signature Algorithm: sha256WithRSAEncryption ac:dd:e8:80:cf:cd:83:67:db:88:2f:82:05:15:dd:52:cb:d8: 51:40:a1:27:e2:54:0a:83:17:2a:bf:02:ac:97:7b:a9:61:e3: 7f:ba:74:9f:bd:2d:b9:fc:e7:2e:80:7e:f1:1b:32:f7:6f:49: 76:3c:01:f6:f3:e8:f8:9e:6a:c4:21:49:3c:f0:3b:94:5b:83: 0a:a5:14:5c:2f:d3:2f:33:7a:04:28:8d:5e:ca:6b:9a:bb:ea: e7:65:e3:1b:87:65:94:ee:0d:f5:d8:de:ad:e4:d8:59:a6:66: e9:37:50:46:5d:8f:1f:dd:36:87:bb:28:ff:08:92:12:54:48: f3:4e:6c:95:e8:32:84:a8:c6:1a:60:07:87:96:43:36:36:4d: a9:b4:0a:d2:5f:ee:5b:93:b3:74:b2:5d:cf:03:9c:f6:48:19: 26:c2:a5:4d:2c:18:83:8a:49:86:a8:e0:1d:35:82:82:51:f3: b0:69:70:ba:d7:95:11:b4:6a:9b:cf:20:bc:2b:c8:06:29:2e: 08:9e:93:eb:3e:52:e9:d3:92:0d:40:c6:00:fb:c8:d6:8d:5d: 02:bc:24:af:91:c3:67:2d:a9:53:50:cf:87:b5:a3:39:96:08: 60:e1:70:16:b2:1d:85:84:52:6f:54:86:cc:44:af:18:74:a2: 7d:56:7d:d6 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgICPpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwOTIyMjM0NzUyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIzMTNhOC04ZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDJwv9UlDC4zBmUBP9nTLx3pklcqbsJX8cjBZ2Mver2ycO5Naw7KE4VOiwBR aBLhvg1U0fuAafFJpPYNYEh/Ht9n++9oM7/msPV1fLvH9M3rkmKSOoUhB3rdUTB5 FfZ3bwJW3uWtwK1ISzHTcHp1mmyzHvMQuw9qy2Pk4aLIIcyhDiiY/oyRb093K+xO 7CVBT/90tYnQqWHF3cGi2mCpRLB5pLgtCXqNJ8i7/0ZqenoUUm1xVBVVMRdvOHaA OhPopCO8/FqTcOWfBmcC24THp4vmH8OUbEPp5P3WmwifqvX3rBneSWKS9iLgN2CU hPOlXY+PkyhOyPhKWEW8r2frvwIDAQABo4ICwDCCArwwHQYDVR0OBBYEFGbc5n/z 2l1TqVnQP3uP2ZAEaMU2MB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvRjlFRDNEN0FB Q0E3MTFGMUI3NzQxNUEwNUQxMUY5NzAucm9hMH8GCCsGAQUFBwEHAQH/BHAwbjBs BAIAATBmAwQAMYDWAwQAPfu4AwQAZTVDAwQAZTVPAwQAZTVTAwQAZTVVAwQAZwZL AwQAcMTEAwQAcMTGAwQBcMTMAwQAcMTSAwQAcMTVAwQBcMTYAwQAcMTdAwQAfELR AwQBtu04AwQAtu07MA0GCSqGSIb3DQEBCwUAA4IBAQCs3eiAz82DZ9uIL4IFFd1S y9hRQKEn4lQKgxcqvwKsl3upYeN/unSfvS25/OcugH7xGzL3b0l2PAH28+j4nmrE IUk88DuUW4MKpRRcL9MvM3oEKI1eymuau+rnZeMbh2WU7g312N6t5NhZpmbpN1BG XY8f3TaHuyj/CJISVEjzTmyV6DKEqMYaYAeHlkM2Nk2ptArSX+5bk7N0sl3PA5z2 SBkmwqVNLBiDikmGqOAdNYKCUfOwaXC615URtGqbzyC8K8gGKS4InpPrPlLp05IN QMYA+8jWjV0CvCSvkcNnLalTUM+HtaM5lghg4XAWsh2FhFJvVIbMRK8YdKJ9Vn3W -----END CERTIFICATE-----Generated at Thu Sep 24 14:02:20 2026 by rpki-client