$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/5CFC71B62C1411F181024EDD95833773.roa File: 5CFC71B62C1411F181024EDD95833773.roa (raw, json) Hash identifier: YRECKHoraOf2bWRQJUd3/Y6Ug/L3op3a4wNvo/BFtlE= Subject key identifier: E2:D7:DC:72:29:21:DC:D6:78:BE:86:8B:BF:F9:36:AD:41:B1:55:8C Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Certificate serial: 0147 Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/5CFC71B62C1411F181024EDD95833773.roa Signing time: Tue 28 Jul 2026 19:40:06 +0000 ROA not before: Tue 28 Jul 2026 19:40:06 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 17984 IP address blocks: 63.222.64.0/24 maxlen: 24 63.222.144.0/21 maxlen: 21 63.222.144.0/24 maxlen: 24 63.222.145.0/24 maxlen: 24 63.222.146.0/24 maxlen: 24 63.222.147.0/24 maxlen: 24 63.222.148.0/24 maxlen: 24 63.222.149.0/24 maxlen: 24 63.222.150.0/24 maxlen: 24 63.222.151.0/24 maxlen: 24 63.222.152.0/21 maxlen: 21 63.222.152.0/24 maxlen: 24 63.222.153.0/24 maxlen: 24 63.222.154.0/24 maxlen: 24 63.222.155.0/24 maxlen: 24 63.222.156.0/24 maxlen: 24 63.222.157.0/24 maxlen: 24 63.222.158.0/24 maxlen: 24 63.222.159.0/24 maxlen: 24 63.222.160.0/21 maxlen: 21 63.222.160.0/24 maxlen: 24 63.222.161.0/24 maxlen: 24 63.222.162.0/24 maxlen: 24 63.222.163.0/24 maxlen: 24 63.222.164.0/24 maxlen: 24 63.222.165.0/24 maxlen: 24 63.222.166.0/24 maxlen: 24 63.222.167.0/24 maxlen: 24 63.223.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Validity Not Before: Jul 28 19:40:06 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a690596-02fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:03:7b:06:79:1d:5f:6b:39:e0:84:10:4b:2e: fd:95:30:84:69:f7:6d:f1:6b:bf:88:99:7c:bd:81: 03:d1:dd:8b:1a:68:6d:c4:1c:50:33:38:0e:c0:4a: 46:a7:95:c3:d9:2e:41:7a:93:a5:db:d2:ce:6e:31: ca:86:18:49:59:9d:64:3f:f3:43:d4:53:2f:29:ba: 92:8c:9e:05:68:7a:c2:f1:d0:90:7f:14:a5:01:c4: 86:56:da:d1:da:ff:0f:2c:7f:a0:f8:5f:ba:c9:cd: 1e:f1:15:1e:e9:20:cd:7a:74:69:99:7b:b2:9b:41: 53:8f:c9:aa:c0:c2:54:df:d3:89:43:ab:68:97:c8: 48:8a:b7:55:eb:e5:c8:25:c8:9d:6b:58:ac:db:10: ce:13:de:7c:37:66:35:54:18:c2:06:06:d2:7b:0d: 64:1c:99:6f:46:d4:a4:44:bd:25:96:ff:a7:e6:ec: 89:08:ea:1c:97:7d:e7:c5:b2:00:e2:56:71:68:2a: d9:40:f2:54:7a:7a:4d:54:9b:63:7b:70:9a:59:07: 6d:8f:8f:9b:a6:d7:3b:38:a2:21:48:dc:54:86:19: 24:4f:6a:0f:3e:bc:e4:df:a7:2e:07:aa:33:7f:4e: 36:ad:49:f2:ac:4c:ca:74:24:8a:4b:6a:75:b2:51: 54:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D7:DC:72:29:21:DC:D6:78:BE:86:8B:BF:F9:36:AD:41:B1:55:8C X509v3 Authority Key Identifier: keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/5CFC71B62C1411F181024EDD95833773.roa sbgp-ipAddrBlock: critical IPv4: 63.222.64.0/24 63.222.144.0-63.222.167.255 63.223.44.0/24 Signature Algorithm: sha256WithRSAEncryption 01:63:ef:2a:75:e4:13:a6:7c:ce:69:7c:03:7b:5d:54:16:66: a9:b8:2a:93:f6:a7:6e:05:1e:6e:00:8a:4f:98:0f:79:c7:70: 4e:3c:8a:16:9a:a8:e7:a1:d9:13:89:18:d4:f6:97:50:44:b7: 9b:67:d0:20:60:d4:c4:dc:67:2b:50:ff:58:33:41:02:80:c2: e3:e2:c0:3b:41:ec:5f:1f:a6:39:dd:1b:da:7b:ed:79:58:6d: bf:6e:23:83:78:99:cb:0c:df:08:f9:9e:f9:95:94:fd:00:1f: e5:bd:6e:2e:31:bd:9e:5f:6b:d3:ed:6a:72:46:63:c5:b2:7e: 28:63:22:4b:64:20:bb:62:33:8e:65:97:08:4a:13:3e:eb:15: d3:45:15:dc:86:55:b1:50:b2:08:3f:a0:88:f9:b2:49:99:0a: b4:4f:08:fb:ea:66:b4:bb:c8:1c:67:b3:18:eb:64:0e:7b:51: da:58:1e:c8:7e:c3:ca:19:2a:d6:bc:e9:59:55:d1:06:22:0b: 6d:3c:26:a0:cb:ea:25:74:a5:4e:be:d9:bc:cf:69:54:2a:0b: fe:85:8b:85:01:e2:52:1a:ed:db:3a:c0:f3:2f:f1:a8:f0:2f: 17:56:ce:f0:f4:8b:5d:c3:d1:b8:9f:ae:d9:67:57:3c:aa:c8: 2c:6d:e2:7b -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDNEN0IxNUJENzdEOUI5NzRFMzczNThEQTc1NERGRUE5 MjkxRTY4M0EwHhcNMjYwNzI4MTk0MDA2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5MDU5Ni0wMmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AN7BnkdX2s54IQQSy79lTCEafdt8Wu/iJl8vYED0d2LGmhtxBxQMzgOwEpG p5XD2S5BepOl29LObjHKhhhJWZ1kP/ND1FMvKbqSjJ4FaHrC8dCQfxSlAcSGVtrR 2v8PLH+g+F+6yc0e8RUe6SDNenRpmXuym0FTj8mqwMJU39OJQ6tol8hIirdV6+XI Jcida1is2xDOE958N2Y1VBjCBgbSew1kHJlvRtSkRL0llv+n5uyJCOocl33nxbIA 4lZxaCrZQPJUenpNVJtje3CaWQdtj4+bptc7OKIhSNxUhhkkT2oPPrzk36cuB6oz f042rUnyrEzKdCSKS2p1slFUsQIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFOLX3HIp IdzWeL6Gi7/5Nq1BsVWMMB8GA1UdIwQYMBaAFD17Fb132bl043NY2nVN/qkpHmg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9GRDM3MkU0QTI5 NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9QWHNWdlhmWnVYVGpjMWphZFUzLXFTa2Vh RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA0QTkvRkQzNzJFNEEyOTQ1MTFGMUE3QUEzRUJEODRFRTUyOEUvNUNGQzcxQjYy QzE0MTFGMTgxMDI0RUREOTU4MzM3NzMucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaAwQAP95AMAwDBAQ/3pADBAM/3qADBAA/3ywwDQYJKoZIhvcNAQELBQAD ggEBAAFj7yp15BOmfM5pfAN7XVQWZqm4KpP2p24FHm4Aik+YD3nHcE48ihaaqOeh 2ROJGNT2l1BEt5tn0CBg1MTcZytQ/1gzQQKAwuPiwDtB7F8fpjndG9p77XlYbb9u I4N4mcsM3wj5nvmVlP0AH+W9bi4xvZ5fa9PtanJGY8WyfihjIktkILtiM45llwhK Ez7rFdNFFdyGVbFQsgg/oIj5skmZCrRPCPvqZrS7yBxnsxjrZA57UdpYHsh+w8oZ Kta86VlV0QYiC208JqDL6iV0pU6+2bzPaVQqC/6Fi4UB4lIa7ds6wPMv8ajwLxdW zvD0i13D0bifrtlnVzyqyCxt4ns= -----END CERTIFICATE-----Generated at Wed Jul 29 00:58:25 2026 by rpki-client