$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/AEDDE1EE556B11EFA5FB1569C4F9AE02.roa File: AEDDE1EE556B11EFA5FB1569C4F9AE02.roa (raw, json) Hash identifier: xMJXOqvAMG5TD2hbvlqzUJJYRLCDemupNItYZ2pd+WI= Subject key identifier: E5:C6:8E:D0:01:5C:0C:48:6C:CB:B8:9E:50:0E:8C:EB:CF:F8:0C:88 Certificate issuer: /CN=A9173D12/serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2 Certificate serial: 01B9 Authority key identifier: 5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/AEDDE1EE556B11EFA5FB1569C4F9AE02.roa Signing time: Wed 09 Sep 2026 04:55:16 +0000 ROA not before: Wed 09 Sep 2026 04:55:16 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 9435 IP address blocks: 203.0.206.0/24 maxlen: 24 203.0.207.0/24 maxlen: 24 203.0.208.0/24 maxlen: 24 203.0.209.0/24 maxlen: 24 203.21.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 04:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D12, serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2 Validity Not Before: Sep 9 04:55:16 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aa0e6b4-a147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e2:e3:d6:2f:12:5b:ac:c5:75:ec:1a:37:2c: e4:88:ad:b1:7c:31:9b:b9:02:70:7b:e9:4d:f9:60: 16:08:7b:ba:e9:2c:66:13:57:6c:09:1e:a5:d9:4c: 36:63:d6:09:4b:a5:e8:d6:06:5b:ca:0a:af:e2:99: ac:8a:14:3c:90:8d:30:9f:3b:10:fc:bb:aa:a1:7d: e2:31:03:39:72:d5:92:5e:fd:4a:9a:36:95:42:83: 80:9d:45:2f:59:4a:74:10:34:b6:2d:5d:09:d9:2e: c8:93:f7:fc:53:89:b2:44:3b:91:b2:24:30:b4:1e: cb:1e:24:7b:c0:d7:b9:ad:39:f9:91:14:62:4c:6e: 8b:00:ea:f5:27:56:68:57:2e:0f:f2:41:57:4e:fe: be:7c:06:13:b8:f3:23:ca:d4:8a:05:4c:e0:9a:05: b6:c0:b3:46:e8:60:31:9d:f5:4c:a5:44:88:b0:bb: cc:60:e3:fd:66:24:7f:b5:a0:20:b5:29:ed:65:8e: 1f:62:00:a2:f5:ea:ef:55:a5:26:c2:69:ef:49:06: 93:e8:67:6f:28:b8:45:5b:a5:22:1b:9a:ce:d6:8e: 61:f4:2d:5b:df:01:55:39:69:a7:c6:29:01:0f:7f: 62:b7:6e:32:05:b6:2b:82:91:9e:84:48:cb:99:c4: 06:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C6:8E:D0:01:5C:0C:48:6C:CB:B8:9E:50:0E:8C:EB:CF:F8:0C:88 X509v3 Authority Key Identifier: keyid:5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/AEDDE1EE556B11EFA5FB1569C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.0.206.0-203.0.209.255 203.21.152.0/23 Signature Algorithm: sha256WithRSAEncryption bf:80:15:c8:73:3f:81:8a:ad:f9:0b:ab:b2:60:da:29:4f:99: 74:5c:97:21:be:11:3d:5f:dc:e9:47:ac:10:94:a9:2e:42:d2: 8d:93:eb:4a:4c:cd:b1:dd:5a:91:41:76:c6:b7:bd:75:fc:bc: d1:99:98:87:7c:ec:a0:17:4d:dd:b5:86:60:75:1c:78:da:a3: f1:0c:29:a2:05:a3:5b:b4:40:69:75:c3:e8:e3:fe:ed:e7:b5: aa:03:23:ad:12:ae:8d:1b:e7:c3:fe:90:e2:22:27:f8:04:c5: c5:b2:6e:cc:ed:fc:17:be:47:ae:7c:6a:04:0c:a2:fe:74:57: db:f9:2a:8f:78:9f:b1:c5:09:cb:9e:c8:f8:9e:39:4a:cf:22: 39:93:7b:25:3f:d6:65:3c:eb:64:f2:6c:2d:ed:a7:8d:a2:0f: c7:2e:63:a8:61:5e:3e:e5:01:2e:c0:de:cc:eb:1d:a2:bd:82: ea:0a:65:f1:d5:88:5e:be:8f:a2:ee:6f:2b:e7:c8:c2:24:dd: a3:f7:66:2c:65:05:65:64:c3:c8:13:48:fb:a0:66:cc:fc:9e: 92:b6:9b:18:02:95:06:5f:b0:6e:d7:70:77:9b:dd:c1:d5:62: b1:7b:58:56:1b:86:8f:fa:7d:cf:09:cf:89:2f:1f:43:f1:9f: a0:1e:40:cc -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNEMTIxMTAvBgNVBAUTKDVBOEI2MUJDNTNBMzI0RDdBMkI0RjQxNTNEMDc3NDZF QzJBMzM1RDIwHhcNMjYwOTA5MDQ1NTE2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEwZTZiNC1hMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOLj1i8SW6zFdewaNyzkiK2xfDGbuQJwe+lN+WAWCHu66SxmE1dsCR6l2Uw2 Y9YJS6Xo1gZbygqv4pmsihQ8kI0wnzsQ/LuqoX3iMQM5ctWSXv1KmjaVQoOAnUUv WUp0EDS2LV0J2S7Ik/f8U4myRDuRsiQwtB7LHiR7wNe5rTn5kRRiTG6LAOr1J1Zo Vy4P8kFXTv6+fAYTuPMjytSKBUzgmgW2wLNG6GAxnfVMpUSIsLvMYOP9ZiR/taAg tSntZY4fYgCi9ervVaUmwmnvSQaT6GdvKLhFW6UiG5rO1o5h9C1b3wFVOWmnxikB D39it24yBbYrgpGehEjLmcQGGwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFOXGjtAB XAxIbMu4nlAOjOvP+AyIMB8GA1UdIwQYMBaAFFqLYbxToyTXorT0FT0HdG7CozXS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0QxMi9BQjg5MzRGMjUy QzQxMUVGOERERkQ1M0ZDNEY5QUUwMi9Xb3RodkZPakpOZWl0UFFWUFFkMGJzS2pO ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dvdGh2Rk9qSk5laXRQUVZQUWQwYnNLak5kSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzNEMTIvQUI4OTM0RjI1MkM0MTFFRjhEREZENTNGQzRGOUFFMDIvQUVEREUxRUU1 NTZCMTFFRkE1RkIxNTY5QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBAHLAM4DBAHLANADBAHLFZgwDQYJKoZIhvcNAQELBQADggEBAL+A FchzP4GKrfkLq7Jg2ilPmXRclyG+ET1f3OlHrBCUqS5C0o2T60pMzbHdWpFBdsa3 vXX8vNGZmId87KAXTd21hmB1HHjao/EMKaIFo1u0QGl1w+jj/u3ntaoDI60Sro0b 58P+kOIiJ/gExcWybszt/Be+R658agQMov50V9v5Ko94n7HFCcueyPieOUrPIjmT eyU/1mU862TybC3tp42iD8cuY6hhXj7lAS7A3szrHaK9guoKZfHViF6+j6Lubyvn yMIk3aP3ZixlBWVkw8gTSPugZsz8npK2mxgClQZfsG7XcHeb3cHVYrF7WFYbho/6 fc8Jz4kvH0Pxn6AeQMw= -----END CERTIFICATE-----Generated at Thu Sep 24 02:43:53 2026 by rpki-client