$ rpki-client -vvf rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/88F058948E7E11EA955D1E64C4F9AE02.roa File: 88F058948E7E11EA955D1E64C4F9AE02.roa (raw, json) Hash identifier: 12BxNNG4r0fp+ny7K/GCAHiE9UmqCnqwlOwyKQlw0O8= Subject key identifier: 3A:76:EE:5C:9E:C7:F8:C9:61:91:8C:4A:32:56:15:52:BC:E2:38:E9 Certificate issuer: /CN=A914A594/serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Certificate serial: 0A18 Authority key identifier: 83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/88F058948E7E11EA955D1E64C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:49:19 +0000 ROA not before: Mon 08 Sep 2025 20:30:38 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45355 IP address blocks: 45.117.240.0/22 maxlen: 22 45.117.240.0/24 maxlen: 24 103.58.20.0/22 maxlen: 22 202.151.16.0/20 maxlen: 20 2402:1840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2584 (0xa18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A594, serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Validity Not Before: Sep 8 20:30:38 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a427bf-30fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f9:ef:84:cb:52:9d:14:0f:71:ee:41:4f:44: cb:3f:de:58:ae:bc:2a:39:83:d5:a8:66:9f:67:9c: 62:93:0a:ec:9e:d8:78:68:cc:bb:52:e6:b1:c1:5c: 1b:fe:17:90:2a:86:1c:0b:ac:f5:f2:dd:d4:9d:f0: fe:a6:43:07:3d:da:d4:d2:0a:09:f1:f9:c4:9c:43: f3:19:26:41:c7:00:5e:43:f5:51:e3:8d:9f:cf:7c: 4d:eb:20:18:1d:5a:96:aa:88:ae:ad:8d:68:f9:d2: 1c:f7:bb:54:0f:81:0c:81:45:4f:59:b8:ab:e8:4e: dc:2e:e8:28:f3:8d:45:78:d0:7c:ca:9a:f4:b7:23: 43:7e:e5:0d:92:c0:d8:c5:c0:18:f3:9a:8e:fa:e9: 1d:a4:a4:11:7e:17:40:21:76:53:71:f9:45:da:13: 81:be:c3:83:f2:f9:ad:6e:6a:fd:4a:32:90:a9:27: 49:10:ce:dd:1c:b6:63:ef:e7:86:0e:18:f0:de:e0: 99:40:75:cb:65:52:dd:f6:60:bf:24:f5:f3:3c:8a: 1b:5c:a6:9b:49:fb:e7:ca:55:4c:cc:29:60:53:e5: d2:f4:3e:85:f1:3c:62:03:44:eb:69:a0:fa:da:67: 5f:6c:1a:1e:0a:a7:74:01:80:36:4d:f7:99:41:d1: 53:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:76:EE:5C:9E:C7:F8:C9:61:91:8C:4A:32:56:15:52:BC:E2:38:E9 X509v3 Authority Key Identifier: keyid:83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/88F058948E7E11EA955D1E64C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.117.240.0/22 103.58.20.0/22 202.151.16.0/20 IPv6: 2402:1840::/32 Signature Algorithm: sha256WithRSAEncryption ba:77:7c:a7:26:6a:3d:2e:13:ca:68:72:c8:48:9c:0e:e5:f7: 13:39:ef:5a:34:83:26:01:55:b3:2a:58:65:e3:fb:cd:a4:51: 0b:10:ad:84:a1:3a:b0:fe:7d:8b:48:06:8c:85:ba:c4:bd:7e: be:23:c2:29:53:47:7b:45:ad:76:21:2a:64:c0:fa:52:14:91: 76:3c:94:29:9f:84:b2:3f:3a:26:97:33:f7:63:9c:54:ee:15: 10:61:d2:dc:fa:00:cb:96:d7:2a:d4:29:22:13:10:ba:da:83: 51:61:44:a7:94:cf:21:bb:81:64:31:0c:0c:5a:c3:62:bc:85: 6a:1e:e8:fb:0e:55:14:75:f4:4d:f1:23:b7:cd:3a:72:9e:98: 38:f8:ea:e1:03:51:f4:84:a3:8f:61:5e:5e:30:17:44:42:1d: 20:66:c1:6d:0b:08:64:c7:25:75:89:6c:e1:eb:cb:7d:e5:b1: f2:c9:7b:3b:c9:69:e2:0e:92:f6:ae:6d:96:b1:13:b1:30:82: 08:68:b6:a9:37:67:34:46:da:76:87:2f:d6:e9:99:27:64:13: 80:ec:4c:bb:c9:fc:96:8b:55:69:a0:20:40:90:a3:6e:cb:c1: b3:e0:30:5d:28:1c:3f:79:3e:aa:c1:ba:aa:0e:9f:d4:10:f4: 8c:af:d2:de -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICChgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1OTQxMTAvBgNVBAUTKDgzQ0M3MkRFN0Q1QzFGRTUzRkMxNDFGOEJDMUFDMjdC MURGMzAzQjEwHhcNMjUwOTA4MjAzMDM4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjdiZi0zMGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnfnvhMtSnRQPce5BT0TLP95YrrwqOYPVqGafZ5xikwrsnth4aMy7UuaxwVwb /heQKoYcC6z18t3UnfD+pkMHPdrU0goJ8fnEnEPzGSZBxwBeQ/VR442fz3xN6yAY HVqWqoiurY1o+dIc97tUD4EMgUVPWbir6E7cLugo841FeNB8ypr0tyNDfuUNksDY xcAY85qO+ukdpKQRfhdAIXZTcflF2hOBvsOD8vmtbmr9SjKQqSdJEM7dHLZj7+eG Dhjw3uCZQHXLZVLd9mC/JPXzPIobXKabSfvnylVMzClgU+XS9D6F8TxiA0TraaD6 2mdfbBoeCqd0AYA2TfeZQdFTrQIDAQABo4ICezCCAncwHQYDVR0OBBYEFDp27lye x/jJYZGMSjJWFVK84jjpMB8GA1UdIwQYMBaAFIPMct59XB/lP8FB+Lwawnsd8wOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU5NC81MzE3OUZGODhF N0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gtVV93VUg0dkJyQ2V4M3pB N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c4eHkzbjFjSC1VX3dVSDR2QnJDZXgzekE3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEE1OTQvNTMxNzlGRjg4RTdEMTFFQUI1RjMzMjYxQzRGOUFFMDIvODhGMDU4OTQ4 RTdFMTFFQTk1NUQxRTY0QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCLXXwAwQCZzoUAwQEypcQMA0EAgACMAcDBQAkAhhAMA0GCSqGSIb3 DQEBCwUAA4IBAQC6d3ynJmo9LhPKaHLISJwO5fcTOe9aNIMmAVWzKlhl4/vNpFEL EK2EoTqw/n2LSAaMhbrEvX6+I8IpU0d7Ra12ISpkwPpSFJF2PJQpn4SyPzomlzP3 Y5xU7hUQYdLc+gDLltcq1CkiExC62oNRYUSnlM8hu4FkMQwMWsNivIVqHuj7DlUU dfRN8SO3zTpynpg4+OrhA1H0hKOPYV5eMBdEQh0gZsFtCwhkxyV1iWzh68t95bHy yXs7yWniDpL2rm2WsROxMIIIaLapN2c0Rtp2hy/W6ZknZBOA7Ey7yfyWi1VpoCBA kKNuy8Gz4DBdKBw/eT6qwbqqDp/UEPSMr9Le -----END CERTIFICATE-----Generated at Mon Mar 2 13:26:50 2026 by rpki-client