$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/55493366013C11ED9864F33CC4F9AE02.roa File: 55493366013C11ED9864F33CC4F9AE02.roa (raw, json) Hash identifier: U+IjZMxgPEnrEU7rw7iXo1bR7Si/DV/e04ojLUsEWO4= Subject key identifier: 21:DB:16:23:12:84:D9:B6:06:FB:05:54:69:FE:B5:50:41:FA:A9:B0 Certificate issuer: /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928 Certificate serial: 09BA Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/55493366013C11ED9864F33CC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:13:44 +0000 ROA not before: Wed 17 Dec 2025 15:24:44 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 135381 IP address blocks: 202.44.217.0/24 maxlen: 24 202.44.218.0/24 maxlen: 24 202.44.229.0/24 maxlen: 24 202.44.230.0/24 maxlen: 24 202.44.231.0/24 maxlen: 24 202.44.232.0/24 maxlen: 24 202.44.233.0/24 maxlen: 24 202.44.252.0/24 maxlen: 24 202.44.254.0/24 maxlen: 24 202.44.255.0/24 maxlen: 24 203.150.118.0/24 maxlen: 24 203.150.121.0/24 maxlen: 24 203.150.122.0/24 maxlen: 24 203.150.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2490 (0x9ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928 Validity Not Before: Dec 17 15:24:44 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a48fe8-2a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e1:76:c9:34:f6:13:48:9f:ff:d0:f2:ed:0c: 95:cc:71:1f:7b:65:d9:52:f2:13:7e:69:db:a3:fc: 3a:c7:20:37:6b:cc:5c:48:bd:2b:b2:1f:d0:24:bd: ca:8b:fd:59:de:3a:6f:e4:35:2f:40:e8:57:d7:13: d9:0a:38:ab:3c:d2:86:8f:e1:5a:76:28:ac:14:f0: 03:63:84:18:9c:6f:0b:00:24:c7:39:ff:46:98:57: 2f:28:f3:aa:3a:38:76:e0:07:31:e6:b3:0d:82:1d: a2:ff:d6:78:7b:95:6e:61:a9:e6:16:d8:f4:c1:60: 5b:fa:20:30:44:8d:9a:16:ee:5a:66:2e:d3:bd:06: 06:02:b0:ec:4a:d3:72:2f:0b:b7:02:a6:1f:db:7a: 91:a6:4e:ea:d6:b2:81:76:c3:76:e4:28:8e:e6:a2: 62:a5:9e:86:cc:9d:3b:ca:13:08:dc:0c:75:ba:2e: 3b:7d:6f:5a:c4:52:4d:46:3b:78:ef:f7:5d:ba:cc: 84:b1:39:f9:c1:65:71:51:f0:6b:22:d8:90:da:c6: 46:2e:cc:20:a3:19:f5:d1:06:4a:a3:0d:b8:55:ff: 0c:47:21:2c:d3:1b:c1:ed:50:95:4f:cc:cc:54:24: e6:f8:03:35:86:b6:9e:1c:f8:68:76:53:5a:64:42: b2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DB:16:23:12:84:D9:B6:06:FB:05:54:69:FE:B5:50:41:FA:A9:B0 X509v3 Authority Key Identifier: keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/55493366013C11ED9864F33CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.44.217.0-202.44.218.255 202.44.229.0-202.44.233.255 202.44.252.0/24 202.44.254.0/23 203.150.118.0/24 203.150.121.0-203.150.122.255 203.150.175.0/24 Signature Algorithm: sha256WithRSAEncryption 42:4b:c4:12:24:21:09:ed:f0:e5:b6:56:5f:f8:64:26:a4:32: 50:4f:54:d3:e5:23:09:61:57:91:ca:9e:87:cc:9b:de:f1:cb: 0f:b5:ee:63:cb:3d:94:6b:c3:c0:50:d1:cf:de:ad:dc:b3:38: 6f:40:c2:6f:26:91:23:8e:e0:9b:55:cc:b7:5a:94:40:9f:6f: d3:e8:2f:9a:e2:de:b0:4d:3b:cc:fc:d9:a0:64:7d:50:95:1c: f2:08:9b:35:d8:5b:82:37:47:56:c3:d4:a1:8f:53:50:ce:e7: c7:af:ee:28:0f:0d:6a:e6:cc:02:da:53:b3:9d:73:74:82:90: ab:28:b6:df:f7:f8:9b:a5:d3:50:c0:6b:cc:4e:38:d7:94:a4: e5:bb:11:11:8e:ce:41:89:db:f5:58:c7:a6:dd:20:97:e3:e8: cd:d6:19:49:7f:59:01:ae:38:d2:31:cd:8f:99:ba:af:d1:9f: f5:e8:6c:49:b1:1a:ea:12:45:09:83:5f:12:e2:69:10:48:bb: db:92:76:0e:15:23:1d:29:b8:6d:71:d1:c6:fb:ec:d1:90:70: de:c9:5e:9e:c9:1a:9e:0a:cf:a4:f6:e8:85:e4:e1:68:14:31: 9f:1f:f5:79:d8:a7:c5:76:64:9b:4e:fd:93:f0:49:8e:9e:e3: c5:b8:d9:c5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgICCbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDNUQxMTAvBgNVBAUTKDIwRjI1MzFBN0JBODIxMkQyQkIwOTAwRDU3NjM3MkQz M0Y4NDY5MjgwHhcNMjUxMjE3MTUyNDQ0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGZlOC0yYTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveF2yTT2E0if/9Dy7QyVzHEfe2XZUvITfmnbo/w6xyA3a8xcSL0rsh/QJL3K i/1Z3jpv5DUvQOhX1xPZCjirPNKGj+FadiisFPADY4QYnG8LACTHOf9GmFcvKPOq Ojh24Acx5rMNgh2i/9Z4e5VuYanmFtj0wWBb+iAwRI2aFu5aZi7TvQYGArDsStNy Lwu3AqYf23qRpk7q1rKBdsN25CiO5qJipZ6GzJ07yhMI3Ax1ui47fW9axFJNRjt4 7/ddusyEsTn5wWVxUfBrItiQ2sZGLswgoxn10QZKow24Vf8MRyEs0xvB7VCVT8zM VCTm+AM1hraeHPhodlNaZEKy3QIDAQABo4ICnDCCApgwHQYDVR0OBBYEFCHbFiMS hNm2BvsFVGn+tVBB+qmwMB8GA1UdIwQYMBaAFCDyUxp7qCEtK7CQDVdjctM/hGko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1RC8zOUU3MTQ2QzJB MzMxMUVCOTI5REMwN0NDNEY5QUUwMi9JUEpUR251b0lTMHJzSkFOVjJOeTB6LUVh U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lQSlRHbnVvSVMwcnNKQU5WMk55MHotRWFTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NERDNUQvMzlFNzE0NkMyQTMzMTFFQjkyOURDMDdDQzRGOUFFMDIvNTU0OTMzNjYw MTNDMTFFRDk4NjRGMzNDQzRGOUFFMDIucm9hMFsGCCsGAQUFBwEHAQH/BEwwSjBI BAIAATBCMAwDBADKLNkDBADKLNowDAMEAMos5QMEAcos6AMEAMos/AMEAcos/gME AMuWdjAMAwQAy5Z5AwQAy5Z6AwQAy5avMA0GCSqGSIb3DQEBCwUAA4IBAQBCS8QS JCEJ7fDltlZf+GQmpDJQT1TT5SMJYVeRyp6HzJve8csPte5jyz2Ua8PAUNHP3q3c szhvQMJvJpEjjuCbVcy3WpRAn2/T6C+a4t6wTTvM/NmgZH1QlRzyCJs12FuCN0dW w9Shj1NQzufHr+4oDw1q5swC2lOznXN0gpCrKLbf9/ibpdNQwGvMTjjXlKTluxER js5Bidv1WMem3SCX4+jN1hlJf1kBrjjSMc2Pmbqv0Z/16GxJsRrqEkUJg18S4mkQ SLvbknYOFSMdKbhtcdHG++zRkHDeyV6eyRqeCs+k9uiF5OFoFDGfH/V52KfFdmSb Tv2T8EmOnuPFuNnF -----END CERTIFICATE-----Generated at Mon Mar 2 02:13:10 2026 by rpki-client