$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/E507094286EE11F19E006003A7EE528E.roa File: E507094286EE11F19E006003A7EE528E.roa (raw, json) Hash identifier: nsWM9yKzF5tc+ZfDYi+OoEdvVrdphbJD92x8fp+aXT4= Subject key identifier: 21:69:44:D0:DD:D7:11:3A:95:A8:14:0C:A4:74:93:A1:83:F0:26:07 Certificate issuer: /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Certificate serial: 258B Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/E507094286EE11F19E006003A7EE528E.roa Signing time: Thu 23 Jul 2026 23:33:23 +0000 ROA not before: Thu 23 Jul 2026 23:33:23 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 132730 IP address blocks: 103.24.32.0/22 maxlen: 24 103.224.28.0/22 maxlen: 24 103.231.60.0/22 maxlen: 22 103.231.60.0/24 maxlen: 24 103.231.61.0/24 maxlen: 24 103.231.62.0/24 maxlen: 24 103.231.63.0/24 maxlen: 24 163.53.28.0/22 maxlen: 24 2406:b100::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 23:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9611 (0x258b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169CD3, serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Validity Not Before: Jul 23 23:33:23 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a62a4c3-470c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:12:c1:34:5c:21:68:8e:51:10:46:da:a7:c6: 58:aa:fd:22:7f:5f:66:ee:e2:2f:60:6f:dc:98:ec: 19:31:22:4e:fe:49:94:53:f7:da:99:89:44:be:e1: a7:97:03:1a:2c:43:4f:a9:f7:3a:98:ce:1e:cb:79: ef:4e:38:4f:ff:1c:47:72:0d:70:0a:a2:b2:47:1f: a6:74:77:77:e7:16:cd:a7:69:8d:0e:07:98:1c:dd: b7:f5:2b:4b:fd:19:a9:6a:45:b2:90:bf:e3:5e:98: 72:c0:0d:88:5d:ec:e3:1e:20:f6:c4:de:a8:39:e8: 8a:ed:f8:9f:01:29:6d:50:1c:a3:a4:5e:b5:6c:9f: a5:cf:0a:b6:6e:5a:ee:f6:13:27:0e:30:01:e2:58: 15:60:7c:b3:c0:81:c3:9b:53:39:b8:77:2e:5d:ef: fb:08:0e:0e:e1:19:3e:b2:a5:e7:91:76:e7:4b:01: 8b:74:15:eb:63:3d:3a:22:68:cf:e2:fe:bd:e7:a1: 15:a5:1f:45:6f:be:59:f0:88:43:84:9c:7e:8c:5e: 6a:ff:3e:7e:d0:76:b4:67:ea:4c:99:28:26:1a:17: 4c:cd:7e:18:d8:3f:68:12:56:d4:70:6f:ab:7e:b3: 5f:47:90:03:c6:59:2a:a8:a5:9e:69:ae:ff:57:07: 28:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:69:44:D0:DD:D7:11:3A:95:A8:14:0C:A4:74:93:A1:83:F0:26:07 X509v3 Authority Key Identifier: keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/E507094286EE11F19E006003A7EE528E.roa sbgp-ipAddrBlock: critical IPv4: 103.24.32.0/22 103.224.28.0/22 103.231.60.0/22 163.53.28.0/22 IPv6: 2406:b100::/32 Signature Algorithm: sha256WithRSAEncryption b4:1f:3a:eb:50:e7:74:4d:28:96:de:15:80:ac:0c:a5:e8:b6: 31:aa:62:98:4a:09:db:86:44:73:57:31:9b:b3:0e:2e:67:77: 57:57:60:45:07:0f:ca:23:c2:d1:86:9e:5a:06:da:03:1a:aa: 2b:6f:9a:c0:65:28:5a:08:f0:aa:1b:ad:15:98:8f:92:cc:bf: e6:b2:ec:c0:d1:05:59:55:f3:c3:f7:89:d8:93:01:41:33:4d: ed:f6:da:11:ae:a5:92:1c:7a:2c:b3:f3:47:74:fa:b3:b1:86: 44:67:a1:d0:fa:c4:8b:05:ba:62:4d:dc:ea:98:75:c5:56:27: d5:b9:73:de:05:2b:6f:a1:72:3d:bd:a7:71:ba:b9:d1:f5:09: 8a:26:3c:cf:45:8f:1d:4d:41:33:9b:12:b5:44:ec:fe:52:b5: 17:d6:9a:95:84:09:5e:4e:1a:eb:5a:3f:26:be:42:a8:24:dc: 92:80:60:03:b1:e6:26:18:88:6d:f0:21:ec:3f:7b:92:02:7c: b9:cf:0f:d0:11:46:ee:d7:1d:5a:cb:d2:d7:35:da:64:26:e5: 35:41:d6:e9:38:d2:7c:7c:e0:ec:2b:64:e5:fd:ce:cb:36:88: 01:11:a1:ea:74:42:f8:58:e8:d8:52:41:ac:dc:e5:6a:ef:d4: bf:b7:48:f4 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICJYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlDRDMxMTAvBgNVBAUTKEFDNDE5MUFDM0ExQTkzOTZFNzhENjEyRjM3NERCQUND OEYyRDkxQjUwHhcNMjYwNzIzMjMzMzIzWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYyYTRjMy00NzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBLBNFwhaI5REEbap8ZYqv0if19m7uIvYG/cmOwZMSJO/kmUU/famYlEvuGn lwMaLENPqfc6mM4ey3nvTjhP/xxHcg1wCqKyRx+mdHd35xbNp2mNDgeYHN239StL /RmpakWykL/jXphywA2IXezjHiD2xN6oOeiK7fifASltUByjpF61bJ+lzwq2blru 9hMnDjAB4lgVYHyzwIHDm1M5uHcuXe/7CA4O4Rk+sqXnkXbnSwGLdBXrYz06ImjP 4v6956EVpR9Fb75Z8IhDhJx+jF5q/z5+0Ha0Z+pMmSgmGhdMzX4Y2D9oElbUcG+r frNfR5ADxlkqqKWeaa7/VwcoSwIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFCFpRNDd 1xE6lagUDKR0k6GD8CYHMB8GA1UdIwQYMBaAFKxBkaw6GpOW541hLzdNusyPLZG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNEMy84MTIyODZEMjQ3 MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1Ym5qV0V2TjAyNnpJOHRr YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JFR1JyRG9hazVibmpXRXZOMDI2ekk4dGtiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjlDRDMvODEyMjg2RDI0NzExMTFFNUE0NDk2MzM1QzRGOUFFMDIvRTUwNzA5NDI4 NkVFMTFGMTlFMDA2MDAzQTdFRTUyOEUucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCZxggAwQCZ+AcAwQCZ+c8AwQCozUcMA0EAgACMAcDBQAkBrEAMA0G CSqGSIb3DQEBCwUAA4IBAQC0HzrrUOd0TSiW3hWArAyl6LYxqmKYSgnbhkRzVzGb sw4uZ3dXV2BFBw/KI8LRhp5aBtoDGqorb5rAZShaCPCqG60VmI+SzL/msuzA0QVZ VfPD94nYkwFBM03t9toRrqWSHHoss/NHdPqzsYZEZ6HQ+sSLBbpiTdzqmHXFVifV uXPeBStvoXI9vadxurnR9QmKJjzPRY8dTUEzmxK1ROz+UrUX1pqVhAleThrrWj8m vkKoJNySgGADseYmGIht8CHsP3uSAny5zw/QEUbu1x1ay9LXNdpkJuU1QdbpONJ8 fODsK2Tl/c7LNogBEaHqdEL4WOjYUkGs3OVq79S/t0j0 -----END CERTIFICATE-----Generated at Fri Jul 24 08:08:13 2026 by rpki-client