$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/AEDDE1EE556B11EFA5FB1569C4F9AE02.roa File: AEDDE1EE556B11EFA5FB1569C4F9AE02.roa (raw, json) Hash identifier: dRQb5IR1Ik64sVfC+8iIAFaKQjfuELPGIjmxvtlEAwE= Subject key identifier: A6:E6:BC:3C:FE:66:27:AA:F9:25:32:95:FE:E8:21:5A:69:49:0A:7D Certificate issuer: /CN=A9173D12/serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2 Certificate serial: 0199 Authority key identifier: 5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/AEDDE1EE556B11EFA5FB1569C4F9AE02.roa Signing time: Wed 22 Jul 2026 01:47:19 +0000 ROA not before: Wed 22 Jul 2026 01:47:19 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 9435 IP address blocks: 203.0.206.0/24 maxlen: 24 203.0.207.0/24 maxlen: 24 203.0.208.0/24 maxlen: 24 203.0.209.0/24 maxlen: 24 203.21.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:14:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D12, serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2 Validity Not Before: Jul 22 01:47:19 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6a602127-452d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6f:e3:d0:da:01:54:2b:e7:e4:92:a0:4d:e4: 3a:23:23:bc:ee:c9:4b:52:23:a1:0d:7a:61:22:87: ef:46:fd:29:19:19:ec:5c:22:fc:d7:70:59:20:df: 13:c6:89:83:52:2f:25:7a:83:7e:53:1e:be:74:60: db:99:1d:89:1a:43:fd:16:28:03:01:af:52:6e:cc: d3:32:b7:29:29:7e:57:97:89:85:4b:6d:12:3f:ec: 92:e6:07:07:77:fb:d2:52:c7:67:8e:a6:ce:53:3a: 31:dd:00:b0:2f:cf:69:a8:af:05:24:37:dd:fb:4f: 16:9d:3e:89:e1:07:44:45:b1:ce:2b:ad:3c:5f:88: 28:e2:38:87:41:37:7c:38:b5:b2:6f:38:19:48:a4: 58:a5:3d:2a:95:96:8a:3c:b8:fc:c0:bd:7d:d0:67: ff:8f:61:e0:05:f3:aa:98:ac:e7:f2:2f:5c:86:90: 3c:88:70:a0:0d:74:fe:f7:12:58:21:4a:5e:2b:1a: 31:17:bb:02:3a:74:8d:99:f4:01:95:1c:0a:29:91: 33:27:8f:45:50:62:c7:60:c9:91:0d:7f:64:c1:e6: 1a:55:8c:02:ed:4e:e0:bf:69:1d:e8:17:9f:0b:2b: f8:c9:a7:8e:5a:ee:3a:0b:e3:60:2e:af:d9:cd:fd: ff:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E6:BC:3C:FE:66:27:AA:F9:25:32:95:FE:E8:21:5A:69:49:0A:7D X509v3 Authority Key Identifier: keyid:5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/AEDDE1EE556B11EFA5FB1569C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.0.206.0-203.0.209.255 203.21.152.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:c2:e7:37:8e:3b:df:4a:07:43:13:f5:e1:76:45:1e:e7:63: 46:d5:6f:fe:a7:af:75:ce:83:06:04:e6:b2:d3:0f:80:b8:12: 55:2d:14:c6:2f:4a:10:c5:77:ad:d1:6f:fb:59:50:ce:e8:4b: ae:a1:88:f3:95:fe:bc:d0:89:f7:57:71:9a:50:8a:a1:02:48: 50:e8:19:e9:da:f8:9d:0d:00:d1:3e:73:2e:dd:51:fb:d4:b0: 97:bf:87:f2:c2:d8:de:e5:09:7a:e1:b4:65:e2:27:67:cf:31: be:23:41:56:76:64:ff:e6:75:2c:c7:dc:98:f1:94:db:64:60: b5:a0:98:9c:99:1d:3f:85:fc:67:e7:14:11:19:5e:c8:dc:57: 60:93:f8:3c:d9:44:7b:de:4f:b2:77:a0:c2:eb:09:bc:de:40: 13:da:e0:36:11:32:95:fe:b8:bb:6e:a7:e9:da:4c:75:69:75: b9:a4:5e:8c:59:c4:73:47:e3:0b:ea:a8:9a:2e:2a:93:f8:16: 65:a4:70:64:26:9f:d2:cd:76:3d:b6:01:45:c1:20:e9:5a:6c: 7c:21:26:eb:d5:f2:ed:24:42:23:80:de:15:c6:b3:06:b4:cc: b7:9f:c0:8b:db:8d:66:03:fb:f4:d5:24:78:51:08:e1:19:3b: 59:f3:96:5f -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNEMTIxMTAvBgNVBAUTKDVBOEI2MUJDNTNBMzI0RDdBMkI0RjQxNTNEMDc3NDZF QzJBMzM1RDIwHhcNMjYwNzIyMDE0NzE5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYwMjEyNy00NTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxW/j0NoBVCvn5JKgTeQ6IyO87slLUiOhDXphIofvRv0pGRnsXCL813BZIN8T xomDUi8leoN+Ux6+dGDbmR2JGkP9FigDAa9SbszTMrcpKX5Xl4mFS20SP+yS5gcH d/vSUsdnjqbOUzox3QCwL89pqK8FJDfd+08WnT6J4QdERbHOK608X4go4jiHQTd8 OLWybzgZSKRYpT0qlZaKPLj8wL190Gf/j2HgBfOqmKzn8i9chpA8iHCgDXT+9xJY IUpeKxoxF7sCOnSNmfQBlRwKKZEzJ49FUGLHYMmRDX9kweYaVYwC7U7gv2kd6Bef Cyv4yaeOWu46C+NgLq/Zzf3/0QIDAQABo4ICbjCCAmowHQYDVR0OBBYEFKbmvDz+ Zieq+SUylf7oIVppSQp9MB8GA1UdIwQYMBaAFFqLYbxToyTXorT0FT0HdG7CozXS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0QxMi9BQjg5MzRGMjUy QzQxMUVGOERERkQ1M0ZDNEY5QUUwMi9Xb3RodkZPakpOZWl0UFFWUFFkMGJzS2pO ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dvdGh2Rk9qSk5laXRQUVZQUWQwYnNLak5kSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzNEMTIvQUI4OTM0RjI1MkM0MTFFRjhEREZENTNGQzRGOUFFMDIvQUVEREUxRUU1 NTZCMTFFRkE1RkIxNTY5QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBAHLAM4DBAHLANADBAHLFZgwDQYJKoZIhvcNAQELBQADggEBAF3C 5zeOO99KB0MT9eF2RR7nY0bVb/6nr3XOgwYE5rLTD4C4ElUtFMYvShDFd63Rb/tZ UM7oS66hiPOV/rzQifdXcZpQiqECSFDoGena+J0NANE+cy7dUfvUsJe/h/LC2N7l CXrhtGXiJ2fPMb4jQVZ2ZP/mdSzH3JjxlNtkYLWgmJyZHT+F/GfnFBEZXsjcV2CT +DzZRHveT7J3oMLrCbzeQBPa4DYRMpX+uLtup+naTHVpdbmkXoxZxHNH4wvqqJou KpP4FmWkcGQmn9LNdj22AUXBIOlabHwhJuvV8u0kQiOA3hXGswa0zLefwIvbjWYD +/TVJHhRCOEZO1nzll8= -----END CERTIFICATE-----Generated at Fri Jul 24 03:06:50 2026 by rpki-client