$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/B70AE7D20C6B11EC82638A40C4F9AE02.roa File: B70AE7D20C6B11EC82638A40C4F9AE02.roa (raw, json) Hash identifier: Rgdt1wuLAi3UMbez5u4kaLkCYd1tAFmcl73Kl72YxO4= Subject key identifier: 1B:3F:D2:82:DE:9D:9A:ED:0A:44:BC:7C:74:7B:39:CE:EA:C1:77:9C Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Certificate serial: 28DB Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/B70AE7D20C6B11EC82638A40C4F9AE02.roa Signing time: Thu 16 Jul 2026 05:28:15 +0000 ROA not before: Thu 16 Jul 2026 05:28:15 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132447 IP address blocks: 45.121.88.0/22 maxlen: 22 45.121.88.0/24 maxlen: 24 45.121.89.0/24 maxlen: 24 45.121.90.0/24 maxlen: 24 45.121.91.0/24 maxlen: 24 103.21.164.0/22 maxlen: 22 103.21.164.0/24 maxlen: 24 103.21.165.0/24 maxlen: 24 103.21.166.0/24 maxlen: 24 103.21.167.0/24 maxlen: 24 119.235.0.0/24 maxlen: 24 2405:6b00::/48 maxlen: 48 2405:6b00:64::/48 maxlen: 48 2405:6b00:65::/48 maxlen: 48 2405:6b00:66::/48 maxlen: 48 2405:6b00:67::/48 maxlen: 48 2405:6b00:68::/48 maxlen: 48 2405:6b00:69::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10459 (0x28db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Validity Not Before: Jul 16 05:28:15 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a586bef-bb3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:94:c1:1a:09:17:a5:e2:22:1c:4b:07:2f:cf: 74:0d:d8:de:5d:29:4b:aa:d0:46:5d:f9:f1:e4:29: 81:24:30:ac:ff:65:14:93:89:e3:8d:e9:aa:fd:ec: c2:aa:8c:fc:71:6e:95:4a:1c:ba:7f:ed:2d:b3:11: 13:75:08:f4:8c:b0:e0:f5:c5:70:50:ec:d8:84:43: ac:af:6b:37:8f:0e:20:a5:b7:af:b8:7d:70:bf:20: d2:f0:b6:5a:a8:a5:62:94:bb:e4:d4:50:5d:e6:fb: 0d:54:ac:61:e4:86:f6:cf:46:e3:d2:bd:e3:50:4d: 42:b7:5d:f6:da:4a:77:c6:4d:73:f7:ad:cc:02:97: f3:07:3f:21:f0:b9:ea:9c:bd:0c:93:9f:71:52:22: 05:94:6b:4e:43:dc:59:dd:e2:0d:77:4e:4b:a4:43: d2:bb:af:dc:4d:87:37:f5:09:4f:b2:71:6f:bc:af: b8:87:e8:3a:76:23:ae:6d:06:14:00:be:22:b4:4e: 28:86:7c:93:d7:ad:1c:6c:e7:1c:54:8d:e6:6f:fa: c2:97:c6:f7:a8:8a:44:6f:fd:e1:c6:58:17:33:89: 30:41:f8:ba:07:d7:e2:3d:83:44:7b:94:0e:ff:7b: 91:64:76:04:b9:ce:c7:65:57:4f:77:e8:b0:2e:d4: f5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3F:D2:82:DE:9D:9A:ED:0A:44:BC:7C:74:7B:39:CE:EA:C1:77:9C X509v3 Authority Key Identifier: keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/B70AE7D20C6B11EC82638A40C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.121.88.0/22 103.21.164.0/22 119.235.0.0/24 IPv6: 2405:6b00::/48 2405:6b00:64::-2405:6b00:69:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 25:d3:0b:81:a1:61:6f:ff:e1:a4:aa:a0:03:72:46:1f:f8:8a: bd:a1:77:a3:81:47:df:ee:fc:c9:82:68:2b:ad:1e:bc:b1:76: 74:7c:43:98:a5:c0:be:b3:a1:07:c9:e3:50:b6:2d:5c:a9:cd: 0c:50:12:e8:96:95:68:2e:2c:9f:12:72:c8:5d:40:f7:ee:5c: 71:61:15:2d:84:ae:b7:c9:6c:11:a3:93:da:0d:01:67:c4:fc: 9b:76:51:c7:79:47:48:58:2e:d3:ee:31:d0:5d:44:cc:2e:73: d4:1a:ab:82:a9:b2:81:9e:0b:e4:09:f0:3f:f0:17:75:42:88: 65:73:08:e5:ee:36:39:72:d4:0d:9b:8d:80:a7:f9:bf:f1:a2: 84:c3:16:ed:b0:5b:25:df:94:d6:35:2e:2e:73:6f:69:93:c5: a1:d9:a9:6a:2c:79:b3:6e:74:be:ee:6d:77:43:d5:1e:42:e0: 25:61:cf:d7:15:31:74:65:bd:d1:25:c5:54:3e:5b:03:4a:7c: 95:7f:f4:fc:db:58:23:a1:d3:57:4a:c8:c3:c7:49:83:98:54: 0e:bd:af:a7:f1:48:83:e1:50:0e:b0:92:b3:39:88:80:e2:f7: fe:ae:dc:c6:22:8e:f5:8e:c7:f5:90:62:20:e0:11:fb:9a:5c: bc:c6:f8:5f -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgICKNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2 QzdDMjA2NTAwHhcNMjYwNzE2MDUyODE1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU4NmJlZi1iYjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJTBGgkXpeIiHEsHL890DdjeXSlLqtBGXfnx5CmBJDCs/2UUk4njjemq/ezC qoz8cW6VShy6f+0tsxETdQj0jLDg9cVwUOzYhEOsr2s3jw4gpbevuH1wvyDS8LZa qKVilLvk1FBd5vsNVKxh5Ib2z0bj0r3jUE1Ct1322kp3xk1z963MApfzBz8h8Lnq nL0Mk59xUiIFlGtOQ9xZ3eINd05LpEPSu6/cTYc39QlPsnFvvK+4h+g6diOubQYU AL4itE4ohnyT160cbOccVI3mb/rCl8b3qIpEb/3hxlgXM4kwQfi6B9fiPYNEe5QO /3uRZHYEuc7HZVdPd+iwLtT16QIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFBs/0oLe nZrtCkS8fHR7Oc7qwXecMB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRBNkIvNzUyNDRCNjJBMTYzMTFFNEI5NjZERDBGQzRGOUFFMDIvQjcwQUU3RDIw QzZCMTFFQzgyNjM4QTQwQzRGOUFFMDIucm9hMFAGCCsGAQUFBwEHAQH/BEEwPzAY BAIAATASAwQCLXlYAwQCZxWkAwQAd+sAMCMEAgACMB0DBwAkBWsAAAAwEgMHAiQF awAAZAMHASQFawAAaDANBgkqhkiG9w0BAQsFAAOCAQEAJdMLgaFhb//hpKqgA3JG H/iKvaF3o4FH3+78yYJoK60evLF2dHxDmKXAvrOhB8njULYtXKnNDFAS6JaVaC4s nxJyyF1A9+5ccWEVLYSut8lsEaOT2g0BZ8T8m3ZRx3lHSFgu0+4x0F1EzC5z1Bqr gqmygZ4L5AnwP/AXdUKIZXMI5e42OXLUDZuNgKf5v/GihMMW7bBbJd+U1jUuLnNv aZPFodmpaix5s250vu5td0PVHkLgJWHP1xUxdGW90SXFVD5bA0p8lX/0/NtYI6HT V0rIw8dJg5hUDr2vp/FIg+FQDrCSszmIgOL3/q7cxiKO9Y7H9ZBiIOAR+5pcvMb4 Xw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:39:04 2026 by rpki-client