$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/45FE96F6A5F611EFA16E4B2FC4F9AE02.roa File: 45FE96F6A5F611EFA16E4B2FC4F9AE02.roa (raw, json) Hash identifier: 2xHsPM7bcGVz8Rr9wRjmhJDwISgV2Z6k7eJJ+IsrWxU= Subject key identifier: 90:FF:95:94:4F:69:3E:2D:1F:41:9F:1B:F7:12:C4:5E:76:0C:3F:D5 Certificate issuer: /CN=A911C53D/serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE Certificate serial: 0749 Authority key identifier: A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/45FE96F6A5F611EFA16E4B2FC4F9AE02.roa Signing time: Tue 28 Jul 2026 22:44:53 +0000 ROA not before: Tue 28 Jul 2026 22:44:53 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 141749 IP address blocks: 202.14.152.0/24 maxlen: 24 203.20.94.0/24 maxlen: 24 203.24.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 21:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1865 (0x749) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C53D, serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE Validity Not Before: Jul 28 22:44:53 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a6930e5-83e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c2:c3:b9:d3:dc:af:f2:1f:17:bf:7f:64:d3: 70:53:ea:a3:d7:45:45:3a:4d:90:17:3c:97:b3:7b: 06:50:bd:b4:dc:d0:f2:d5:2f:28:61:d3:1e:d5:ba: 4a:ff:c6:d2:17:ad:75:d5:8b:9b:83:73:8e:37:e4: 37:23:0d:ed:e5:a7:96:56:6d:cc:5b:25:fc:07:d0: 35:7b:07:19:75:94:39:a6:a3:39:e6:5a:1b:6e:94: cd:58:25:e7:7d:2e:8c:2c:f8:49:ac:45:0c:58:d9: 3f:df:73:e4:dd:ff:ee:67:99:b6:2b:97:7e:a2:af: 82:38:79:04:ec:28:3f:b5:2f:00:aa:7f:d5:68:8e: 4c:6d:ea:88:81:69:d6:bb:79:df:b7:0c:29:a4:74: 4c:61:d7:ac:15:7f:8e:89:a1:26:37:b9:e6:31:90: 67:bc:77:69:4a:65:ae:c7:36:1a:3f:df:04:1f:e5: b0:b8:f7:e0:86:7c:db:e9:2a:f8:28:4a:aa:db:05: 89:9e:07:52:70:ac:ec:47:94:5c:5d:75:0a:ce:45: b6:16:12:0a:c7:f0:a9:60:98:f9:c2:89:47:7c:4d: 53:8e:9f:0f:ab:29:f3:c8:81:07:6d:81:c6:2f:11: 66:27:48:53:8c:6b:b6:11:42:ae:de:02:3a:2b:9f: 8a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FF:95:94:4F:69:3E:2D:1F:41:9F:1B:F7:12:C4:5E:76:0C:3F:D5 X509v3 Authority Key Identifier: keyid:A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/45FE96F6A5F611EFA16E4B2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.14.152.0/24 203.20.94.0/24 203.24.48.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:64:ac:88:70:d9:66:cd:c0:5d:67:55:44:49:08:2e:0e:a8: a0:6c:fb:f2:f5:b5:8c:d2:9a:8a:af:0c:34:51:7e:c9:8f:af: 44:c8:e0:b1:a5:16:2c:95:9a:cd:58:3c:5b:6d:4e:6e:5d:a3: 5a:36:d2:22:66:8e:61:5a:0e:f3:26:fc:cd:3c:0b:a9:28:33: e6:0e:01:8d:ec:fa:15:c3:78:ac:04:2e:fb:cb:fb:8a:df:f0: e9:d1:88:78:ba:b2:b9:6e:d7:c9:7e:98:d0:c5:0f:14:c2:87: e3:aa:cf:51:20:6e:08:e8:b4:6a:4c:15:30:81:f6:f1:ec:ec: c6:e3:3f:bb:7b:1b:09:fc:bf:db:06:26:00:2e:ff:f4:26:57: 03:2a:47:e8:13:51:c7:4e:17:34:04:99:24:78:92:25:27:93: b6:96:b0:47:31:5b:38:dd:2d:db:87:c2:21:93:6c:f1:4b:9d: 0f:be:d1:91:36:07:b9:a6:b6:0c:53:d9:6e:00:84:ea:12:aa: 80:18:57:9a:f1:09:9e:05:60:4b:26:e7:6c:65:ec:da:0c:26: 54:b4:3a:9c:c8:0e:fa:e8:aa:e2:00:73:84:d4:3f:bf:01:61: 27:5d:6f:c8:2c:c1:5f:2c:55:9f:07:84:0d:00:d3:2e:8b:0d: 5c:a7:d0:85 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICB0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1M0QxMTAvBgNVBAUTKEE1Qzc2M0U4QTk1RjZCOUFCMjQxMTM2MDFEQTgxNTNB MTU5MTI2RUUwHhcNMjYwNzI4MjI0NDUzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5MzBlNS04M2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MLDudPcr/IfF79/ZNNwU+qj10VFOk2QFzyXs3sGUL203NDy1S8oYdMe1bpK /8bSF6111Yubg3OON+Q3Iw3t5aeWVm3MWyX8B9A1ewcZdZQ5pqM55lobbpTNWCXn fS6MLPhJrEUMWNk/33Pk3f/uZ5m2K5d+oq+COHkE7Cg/tS8Aqn/VaI5MbeqIgWnW u3nftwwppHRMYdesFX+OiaEmN7nmMZBnvHdpSmWuxzYaP98EH+WwuPfghnzb6Sr4 KEqq2wWJngdScKzsR5RcXXUKzkW2FhIKx/CpYJj5wolHfE1Tjp8PqynzyIEHbYHG LxFmJ0hTjGu2EUKu3gI6K5+KTQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFJD/lZRP aT4tH0GfG/cSxF52DD/VMB8GA1UdIwQYMBaAFKXHY+ipX2uaskETYB2oFToVkSbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzUzRC84NEI1OEY2NjhD RkIxMUVCOURDNjJDM0JDNEY5QUUwMi9wY2RqNktsZmE1cXlRUk5nSGFnVk9oV1JK dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BjZGo2S2xmYTVxeVFSTmdIYWdWT2hXUkp1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUM1M0QvODRCNThGNjY4Q0ZCMTFFQjlEQzYyQzNCQzRGOUFFMDIvNDVGRTk2RjZB NUY2MTFFRkExNkU0QjJGQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAyg6YAwQAyxReAwQAyxgwMA0GCSqGSIb3DQEBCwUAA4IBAQAtZKyI cNlmzcBdZ1VESQguDqigbPvy9bWM0pqKrww0UX7Jj69EyOCxpRYslZrNWDxbbU5u XaNaNtIiZo5hWg7zJvzNPAupKDPmDgGN7PoVw3isBC77y/uK3/Dp0Yh4urK5btfJ fpjQxQ8Uwofjqs9RIG4I6LRqTBUwgfbx7OzG4z+7exsJ/L/bBiYALv/0JlcDKkfo E1HHThc0BJkkeJIlJ5O2lrBHMVs43S3bh8Ihk2zxS50PvtGRNge5prYMU9luAITq EqqAGFea8QmeBWBLJudsZezaDCZUtDqcyA766KriAHOE1D+/AWEnXW/ILMFfLFWf B4QNANMuiw1cp9CF -----END CERTIFICATE-----Generated at Tue Sep 22 07:40:46 2026 by rpki-client