$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/9DE65586B59711F1AB99D6F56F11F970.roa File: 9DE65586B59711F1AB99D6F56F11F970.roa (raw, json) Hash identifier: 38eVkDuTLHLQ/396GDYGDbEFVPX54+PN3xrExb8g9qQ= Subject key identifier: 1E:EF:53:B9:6C:DA:E9:C7:05:E2:13:D6:BE:AA:54:04:2E:5C:28:F8 Certificate issuer: /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Certificate serial: 030B Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/9DE65586B59711F1AB99D6F56F11F970.roa Signing time: Mon 21 Sep 2026 08:37:40 +0000 ROA not before: Mon 21 Sep 2026 08:37:40 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 150436 IP address blocks: 101.47.0.0/18 maxlen: 24 101.47.64.0/20 maxlen: 24 101.47.80.0/20 maxlen: 23 101.47.80.0/21 maxlen: 24 101.47.88.0/22 maxlen: 24 101.47.92.0/23 maxlen: 24 101.47.95.0/24 maxlen: 24 101.47.96.0/21 maxlen: 24 101.47.128.0/18 maxlen: 24 101.47.253.0/24 maxlen: 24 150.5.128.0/17 maxlen: 24 163.7.0.0/17 maxlen: 24 163.7.160.0/19 maxlen: 24 163.7.192.0/18 maxlen: 24 202.52.224.0/21 maxlen: 24 202.52.252.0/22 maxlen: 24 203.147.192.0/19 maxlen: 24 2401:4c20::/40 maxlen: 44 2401:4c20:100::/40 maxlen: 40 2401:4c20:200::/40 maxlen: 44 2401:4c20:300::/40 maxlen: 44 2401:4c20:400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 779 (0x30b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Validity Not Before: Sep 21 08:37:40 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6ab0ecd4-d614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:86:10:05:c8:1b:f1:3d:da:df:02:3d:2e:69: 30:3d:8e:31:18:40:31:e9:87:69:6d:c3:4f:eb:aa: 26:41:3d:dd:b2:19:2b:07:fc:00:c4:e1:a1:21:c4: 45:a9:3a:6f:94:05:21:4e:f9:5a:d1:b4:58:fe:f5: 57:f9:00:c8:64:64:17:d8:03:3f:e7:7e:47:79:60: d8:a5:c3:40:0c:66:57:d6:d1:89:d6:b8:f7:5c:4c: 9d:38:2d:db:4e:95:96:9a:11:85:50:cc:31:c5:0c: d0:f9:94:0c:35:83:df:b7:e4:a4:90:61:35:7f:88: 2c:20:bf:83:5a:e0:16:8e:85:85:ec:52:1b:54:e1: 2a:ad:8a:54:a3:95:49:6b:1a:3c:56:ce:92:17:09: a0:bc:2d:0b:e8:fb:c6:cc:fc:bd:1d:ba:ee:b6:b6: b0:05:57:4b:65:2c:04:d9:9e:43:bf:da:f0:47:45: 7a:4a:17:f6:25:5c:b7:70:4e:73:82:4e:5f:d1:4e: db:c1:89:11:c0:9f:c8:ce:bc:06:2a:22:97:69:b5: 94:5d:52:f8:81:6e:db:65:1f:cb:51:4f:07:1c:0d: 84:bb:d5:47:d9:87:ee:01:d4:b6:e9:37:97:bb:8e: 3d:f7:10:89:84:5f:47:89:7c:cf:ae:bd:ee:88:9c: 76:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:EF:53:B9:6C:DA:E9:C7:05:E2:13:D6:BE:AA:54:04:2E:5C:28:F8 X509v3 Authority Key Identifier: keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/9DE65586B59711F1AB99D6F56F11F970.roa sbgp-ipAddrBlock: critical IPv4: 101.47.0.0-101.47.103.255 101.47.128.0/18 101.47.253.0/24 150.5.128.0/17 163.7.0.0/17 163.7.160.0-163.7.255.255 202.52.224.0/21 202.52.252.0/22 203.147.192.0/19 IPv6: 2401:4c20::-2401:4c20:4ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 82:0e:b8:3e:62:26:66:e5:f4:5b:f7:18:e4:cf:d3:2a:7a:cf: 84:f2:9f:b0:ed:97:38:c5:85:88:d5:e3:49:76:df:89:46:c7: f2:e1:74:56:fb:64:f9:9d:ad:73:72:01:dd:3c:a2:9e:a6:00: 05:9c:a1:cb:5a:5f:23:65:f3:e0:e0:3c:fb:76:2f:9d:1f:99: 3b:0e:fb:f4:31:4f:b6:b5:e6:be:46:c5:bf:11:98:5b:30:dc: ac:97:ea:e1:d3:e8:c6:20:3c:02:d6:75:d9:46:5e:fb:51:62: 8d:e8:70:03:cc:61:b6:ad:65:2d:a0:e0:f7:e2:88:c0:9d:d0: bd:f2:b3:cb:92:fd:8b:af:33:c6:57:35:ad:7b:67:40:16:2f: 36:98:23:38:b4:3c:bf:f0:da:d2:f2:ea:1a:d7:78:ee:65:5b: b9:70:79:03:a8:9d:21:af:86:f9:3c:a1:5a:bd:b2:65:7c:39: 8c:f1:05:89:4e:0f:02:da:d3:4b:45:6c:e0:1c:f3:07:c0:66: 76:05:3d:42:11:c5:4e:b8:37:41:81:94:71:fc:2e:8e:11:02: f3:2b:b2:0d:74:69:9e:53:ea:03:e2:70:66:e4:18:94:18:9e: e1:09:e7:49:1c:82:94:d0:2b:8f:f3:cd:ca:04:af:07:a5:92: 8e:85:50:ea -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICAwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDU0MkI5NEQ4NjI1Q0Y3MTE5NjRGRDEzNzQxMjk1RDI3 QUQ3QTkwMDQwHhcNMjYwOTIxMDgzNzQwWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIwZWNkNC1kNjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6oYQBcgb8T3a3wI9LmkwPY4xGEAx6YdpbcNP66omQT3dshkrB/wAxOGhIcRF qTpvlAUhTvla0bRY/vVX+QDIZGQX2AM/535HeWDYpcNADGZX1tGJ1rj3XEydOC3b TpWWmhGFUMwxxQzQ+ZQMNYPft+SkkGE1f4gsIL+DWuAWjoWF7FIbVOEqrYpUo5VJ axo8Vs6SFwmgvC0L6PvGzPy9HbrutrawBVdLZSwE2Z5Dv9rwR0V6Shf2JVy3cE5z gk5f0U7bwYkRwJ/IzrwGKiKXabWUXVL4gW7bZR/LUU8HHA2Eu9VH2YfuAdS26TeX u4499xCJhF9HiXzPrr3uiJx2bQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFB7vU7ls 2unHBeIT1r6qVAQuXCj4MB8GA1UdIwQYMBaAFFQrlNhiXPcRlk/RN0EpXSetepAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC8xNjFENEMwQUU0 Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4R1dUOUUzUVNsZEo2MTZr QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDdVUyR0pjOXhHV1Q5RTNRU2xkSjYxNmtBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0I1MjAvMTYxRDRDMEFFNENBMTFFREE0MTRFMjU5QzRGOUFFMDIvOURFNjU1ODZC NTk3MTFGMUFCOTlENkY1NkYxMUY5NzAucm9hMHYGCCsGAQUFBwEHAQH/BGcwZTBK BAIAATBEMAsDAwBlLwMEA2UvYAMEBmUvgAMEAGUv/QMEB5YFgAMEB6MHADALAwQF owegAwMDowADBAPKNOADBALKNPwDBAXLk8AwFwQCAAIwETAPAwUFJAFMIAMGACQB TCAEMA0GCSqGSIb3DQEBCwUAA4IBAQCCDrg+YiZm5fRb9xjkz9Mqes+E8p+w7Zc4 xYWI1eNJdt+JRsfy4XRW+2T5na1zcgHdPKKepgAFnKHLWl8jZfPg4Dz7di+dH5k7 Dvv0MU+2tea+RsW/EZhbMNysl+rh0+jGIDwC1nXZRl77UWKN6HADzGG2rWUtoOD3 4ojAndC98rPLkv2LrzPGVzWte2dAFi82mCM4tDy/8NrS8uoa13juZVu5cHkDqJ0h r4b5PKFavbJlfDmM8QWJTg8C2tNLRWzgHPMHwGZ2BT1CEcVOuDdBgZRx/C6OEQLz K7INdGmeU+oD4nBm5BiUGJ7hCedJHIKU0CuP883KBK8HpZKOhVDq -----END CERTIFICATE-----Generated at Sat Sep 26 13:34:23 2026 by rpki-client