$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/DD7CA58EA23F11EDBCDB6D73C4F9AE02.roa File: DD7CA58EA23F11EDBCDB6D73C4F9AE02.roa (raw, json) Hash identifier: CzrJ5PoscnPJXcdPQru0LSL38khcMwxqYo2Sgh7sIpY= Subject key identifier: 65:7C:D6:6E:38:C1:64:4D:7D:98:F1:2C:E8:58:DA:93:4B:CF:C0:7A Certificate issuer: /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73 Certificate serial: 071E Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/DD7CA58EA23F11EDBCDB6D73C4F9AE02.roa Signing time: Sat 04 Jul 2026 23:23:49 +0000 ROA not before: Sat 04 Jul 2026 23:23:49 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 38296 IP address blocks: 203.185.97.0/24 maxlen: 24 203.185.100.0/24 maxlen: 24 203.185.129.0/24 maxlen: 24 203.185.130.0/23 maxlen: 23 203.185.130.0/24 maxlen: 24 203.185.131.0/24 maxlen: 24 203.185.132.0/22 maxlen: 22 203.185.132.0/23 maxlen: 23 203.185.132.0/24 maxlen: 24 203.185.133.0/24 maxlen: 24 203.185.134.0/23 maxlen: 23 203.185.134.0/24 maxlen: 24 203.185.135.0/24 maxlen: 24 203.185.136.0/24 maxlen: 24 203.185.137.0/24 maxlen: 24 203.185.138.0/24 maxlen: 24 203.185.139.0/24 maxlen: 24 203.185.140.0/24 maxlen: 24 203.185.141.0/24 maxlen: 24 203.185.142.0/24 maxlen: 24 203.185.143.0/24 maxlen: 24 203.185.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:53:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1822 (0x71e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91840A8, serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73 Validity Not Before: Jul 4 23:23:49 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a499605-b42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fe:2d:0a:2b:c4:4f:c1:44:38:7e:79:ef:de: a3:23:44:8b:2a:87:30:00:53:56:60:1e:79:c6:41: 8f:b5:2b:f7:9a:0f:52:f1:a3:e9:36:a7:e5:2f:d4: 90:b7:ae:a8:af:64:79:12:e7:59:60:cb:c0:28:53: cc:4c:9d:88:59:2f:97:29:8a:ae:b8:b9:65:e9:6e: 85:27:c8:80:75:17:e0:d0:53:47:3d:0d:96:1c:d7: 8e:3e:6c:65:4e:74:ec:af:e9:ee:97:7c:23:58:7d: 89:3c:dc:8c:0b:4b:07:1a:e9:d0:51:de:54:a5:37: 81:22:13:f6:e6:de:a8:d2:32:26:a8:7c:7f:8b:35: 50:37:00:a0:28:5b:6f:68:9e:a2:0e:13:27:9a:59: 0b:fe:14:ba:73:ef:ea:be:75:8c:a8:de:47:61:17: 95:e1:b7:61:ca:97:35:93:bf:82:5d:06:2d:54:e6: d3:fd:4d:d0:ba:b9:1a:13:ec:80:7e:c2:f8:da:ee: 07:65:49:83:5d:f5:21:fc:61:56:b7:24:cc:81:e7: b8:dd:c0:c0:69:ac:2d:eb:da:25:d3:52:aa:84:ce: 33:72:59:87:b3:25:57:da:7d:95:0e:79:76:02:33: 7b:cb:43:59:a0:91:5f:40:b9:c6:aa:ee:9e:ca:cd: 64:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7C:D6:6E:38:C1:64:4D:7D:98:F1:2C:E8:58:DA:93:4B:CF:C0:7A X509v3 Authority Key Identifier: keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/DD7CA58EA23F11EDBCDB6D73C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.185.97.0/24 203.185.100.0/24 203.185.129.0-203.185.145.255 Signature Algorithm: sha256WithRSAEncryption 2a:e1:50:f9:56:51:f0:71:fe:3d:62:ee:32:b2:d3:64:68:b2: e7:70:e5:a5:cc:72:d4:88:bb:e0:d9:37:d8:2b:21:b5:65:07: 46:90:c8:7f:28:77:9d:b2:e9:1d:03:a2:87:5f:80:9b:ac:38: 4c:b3:6f:22:cd:6e:a5:11:19:a7:4d:29:d6:5d:dc:fc:d9:af: b8:e0:5c:b7:95:30:60:f3:c3:af:ec:fd:dc:fc:89:cb:b6:b0: fd:8a:ab:06:9e:17:53:ab:aa:7f:ef:dc:d1:c0:af:15:74:a7: e5:ce:4b:52:0a:e5:41:37:9c:11:af:0a:b0:e5:d2:42:f3:18: 0d:81:8b:32:dd:e3:db:62:20:95:58:d9:11:1c:d9:cc:d2:5d: 3d:4a:8d:7c:37:36:2c:81:3e:ec:f9:74:1c:76:93:9d:ca:64: 4a:f1:23:76:33:eb:18:5a:68:56:76:35:27:08:92:d2:4f:6d: 86:5f:d2:43:93:b2:f2:19:00:13:44:30:8a:44:e2:22:97:30: 5e:40:8f:07:4e:f9:cb:0f:12:82:19:59:ee:a8:af:e9:31:f4: b3:42:26:05:de:52:d7:32:04:f4:b2:54:54:34:c3:ee:ee:81: a4:2e:6e:14:97:7e:6a:59:2d:8e:a2:6f:e4:48:1f:f5:a5:60: b6:af:67:59 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICBx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwQTgxMTAvBgNVBAUTKEQxNDc0QzFEQTQzOUIzNEU0ODdDMjhDMjQ3MjlFNjg3 RTA5NDdENzMwHhcNMjYwNzA0MjMyMzQ5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ5OTYwNS1iNDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/4tCivET8FEOH55796jI0SLKocwAFNWYB55xkGPtSv3mg9S8aPpNqflL9SQ t66or2R5EudZYMvAKFPMTJ2IWS+XKYquuLll6W6FJ8iAdRfg0FNHPQ2WHNeOPmxl TnTsr+nul3wjWH2JPNyMC0sHGunQUd5UpTeBIhP25t6o0jImqHx/izVQNwCgKFtv aJ6iDhMnmlkL/hS6c+/qvnWMqN5HYReV4bdhypc1k7+CXQYtVObT/U3QurkaE+yA fsL42u4HZUmDXfUh/GFWtyTMgee43cDAaawt69ol01KqhM4zclmHsyVX2n2VDnl2 AjN7y0NZoJFfQLnGqu6eys1kOQIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFGV81m44 wWRNfZjxLOhY2pNLz8B6MB8GA1UdIwQYMBaAFNFHTB2kObNOSHwowkcp5ofglH1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC83MEMyRUI3QUEx OTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMwNUlmQ2pDUnlubWgtQ1Vm WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBVZE1IYVE1czA1SWZDakNSeW5taC1DVWZYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODQwQTgvNzBDMkVCN0FBMTk2MTFFQjgyMDBDRjA5QzRGOUFFMDIvREQ3Q0E1OEVB MjNGMTFFREJDREI2RDczQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaAwQAy7lhAwQAy7lkMAwDBADLuYEDBAHLuZAwDQYJKoZIhvcNAQELBQAD ggEBACrhUPlWUfBx/j1i7jKy02Rosudw5aXMctSIu+DZN9grIbVlB0aQyH8od52y 6R0DoodfgJusOEyzbyLNbqURGadNKdZd3PzZr7jgXLeVMGDzw6/s/dz8icu2sP2K qwaeF1Orqn/v3NHArxV0p+XOS1IK5UE3nBGvCrDl0kLzGA2BizLd49tiIJVY2REc 2czSXT1KjXw3NiyBPuz5dBx2k53KZErxI3Yz6xhaaFZ2NScIktJPbYZf0kOTsvIZ ABNEMIpE4iKXMF5AjwdO+csPEoIZWe6or+kx9LNCJgXeUtcyBPSyVFQ0w+7ugaQu bhSXfmpZLY6ib+RIH/WlYLavZ1k= -----END CERTIFICATE-----Generated at Fri Jul 24 01:26:26 2026 by rpki-client