$ rpki-client -vvf rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/229253A4A1F111F084328A39C4F9AE02.roa File: 229253A4A1F111F084328A39C4F9AE02.roa (raw, json) Hash identifier: aK9ms8XFrER6p5FpbdAfuu9FASk86jIAEzY+JMQ1USM= Subject key identifier: 32:86:22:58:14:6E:AD:E0:83:09:B0:09:B7:AC:73:98:1D:F4:3A:DA Certificate issuer: /CN=A9168949/serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977 Certificate serial: 01E3 Authority key identifier: 10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/229253A4A1F111F084328A39C4F9AE02.roa Signing time: Fri 17 Jul 2026 14:58:56 +0000 ROA not before: Fri 17 Jul 2026 14:58:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151781 IP address blocks: 203.20.109.0/24 maxlen: 24 2001:df3:9340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168949, serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977 Validity Not Before: Jul 17 14:58:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a5a4330-46b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:98:9e:ef:aa:a8:bb:ed:b7:f0:5a:f3:d2:d2: d2:a3:5f:49:44:ba:56:9d:4b:cc:06:70:b9:dc:f7: 58:30:28:35:32:de:1f:75:8c:ca:f8:8e:54:1e:31: e1:90:09:74:1e:19:a3:bc:3a:f9:2c:64:6e:28:50: 51:f4:d8:0f:9d:83:8c:40:83:be:4e:bb:ca:4d:88: 2c:77:38:09:c0:bd:17:25:f9:e4:f9:1e:32:a1:02: c0:23:64:21:5b:be:ac:50:29:01:df:80:83:95:f1: 8c:64:8c:4e:3c:69:8f:e8:4e:56:21:c1:a5:e4:a1: a3:dc:29:8f:34:fe:4f:8a:ee:d4:14:05:96:4d:dd: 44:28:29:e3:b4:d8:35:81:64:ba:cb:6c:64:1b:37: d8:1a:93:7d:9f:57:41:16:2d:74:a7:f3:8c:d0:68: 9a:a7:6f:f1:d4:06:5d:49:86:1e:e1:e4:aa:c8:7a: f3:2e:ba:74:d9:d9:a9:f9:5c:7d:dd:af:2d:17:1a: b5:c1:b8:1c:03:77:48:39:ae:e7:c3:1c:72:0f:bd: ae:86:c3:25:7d:29:c9:b7:65:21:95:fe:0f:42:5c: 86:b6:18:78:32:7a:5b:2e:00:f5:e6:db:4c:23:ad: 24:0a:b2:b7:7c:cb:72:d2:db:61:09:28:0b:cb:0e: af:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:86:22:58:14:6E:AD:E0:83:09:B0:09:B7:AC:73:98:1D:F4:3A:DA X509v3 Authority Key Identifier: keyid:10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/229253A4A1F111F084328A39C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.20.109.0/24 IPv6: 2001:df3:9340::/48 Signature Algorithm: sha256WithRSAEncryption 93:f4:67:69:db:bf:28:53:1e:21:66:ab:cc:53:fc:03:79:49: 5c:dd:5b:d8:a6:0d:36:82:be:db:4f:d2:f0:50:fa:56:d1:0c: 5a:44:db:12:47:23:df:09:17:18:ef:8f:50:06:a5:09:d8:02: 3e:d4:71:ba:3d:14:1f:a7:c8:6d:ed:4d:ca:8c:91:c0:b8:96: e4:64:eb:58:b0:e0:6e:21:bd:b5:0d:30:31:56:22:ff:19:30: d3:59:a6:40:4c:bc:dc:0c:f1:a9:6c:d4:27:1d:6d:c8:63:95: 23:99:13:14:f4:7d:23:83:b3:74:ff:1e:4f:11:32:a3:97:60: 14:dc:31:95:2a:8a:90:c1:68:42:e1:83:02:c7:3f:54:81:a4: 5f:cc:34:01:9c:d1:73:c8:01:8a:d9:ab:1b:29:1c:04:92:ad: c3:34:5d:ed:00:71:7c:e8:5c:f3:49:46:9a:f3:57:a5:f4:bc: 15:db:6c:72:10:99:74:2d:31:7f:e3:4a:a2:83:0e:5a:48:53: de:38:55:e7:f3:a5:a0:cc:83:56:b0:f0:61:cc:03:14:f0:5b: b2:f6:53:7d:d3:22:94:20:81:d3:4f:8c:50:76:68:fe:de:38: 11:50:5e:12:1c:10:49:26:45:26:e1:34:fa:fb:b4:2d:48:eb: e9:5f:9e:70 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5NDkxMTAvBgNVBAUTKDEwRTA1MDJGM0QzODJFOEMxNTY2RUNDQzJBMTIxQjZD NDM5REU5NzcwHhcNMjYwNzE3MTQ1ODU2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTVhNDMzMC00NmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZie76qou+238Frz0tLSo19JRLpWnUvMBnC53PdYMCg1Mt4fdYzK+I5UHjHh kAl0HhmjvDr5LGRuKFBR9NgPnYOMQIO+TrvKTYgsdzgJwL0XJfnk+R4yoQLAI2Qh W76sUCkB34CDlfGMZIxOPGmP6E5WIcGl5KGj3CmPNP5Piu7UFAWWTd1EKCnjtNg1 gWS6y2xkGzfYGpN9n1dBFi10p/OM0Giap2/x1AZdSYYe4eSqyHrzLrp02dmp+Vx9 3a8tFxq1wbgcA3dIOa7nwxxyD72uhsMlfSnJt2Uhlf4PQlyGthh4MnpbLgD15ttM I60kCrK3fMty0tthCSgLyw6viQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFDKGIlgU bq3ggwmwCbesc5gd9DraMB8GA1UdIwQYMBaAFBDgUC89OC6MFWbszCoSG2xDnel3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk0OS8zRjI0MkFDMkU0 RjMxMUVFOTkxMDE0MzhDNEY5QUUwMi9FT0JRTHowNExvd1ZadXpNS2hJYmJFT2Q2 WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VPQlFMejA0TG93Vlp1ek1LaEliYkVPZDZYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg5NDkvM0YyNDJBQzJFNEYzMTFFRTk5MTAxNDM4QzRGOUFFMDIvMjI5MjUzQTRB MUYxMTFGMDg0MzI4QTM5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAyxRtMA8EAgACMAkDBwAgAQ3zk0AwDQYJKoZIhvcNAQELBQADggEB AJP0Z2nbvyhTHiFmq8xT/AN5SVzdW9imDTaCvttP0vBQ+lbRDFpE2xJHI98JFxjv j1AGpQnYAj7Ucbo9FB+nyG3tTcqMkcC4luRk61iw4G4hvbUNMDFWIv8ZMNNZpkBM vNwM8als1CcdbchjlSOZExT0fSODs3T/Hk8RMqOXYBTcMZUqipDBaELhgwLHP1SB pF/MNAGc0XPIAYrZqxspHASSrcM0Xe0AcXzoXPNJRprzV6X0vBXbbHIQmXQtMX/j SqKDDlpIU944VefzpaDMg1aw8GHMAxTwW7L2U33TIpQggdNPjFB2aP7eOBFQXhIc EEkmRSbhNPr7tC1I6+lfnnA= -----END CERTIFICATE-----Generated at Fri Jul 24 11:16:02 2026 by rpki-client