$ rpki-client -vvf rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/1E50C954D4B611F098D4561EC4F9AE02.roa File: 1E50C954D4B611F098D4561EC4F9AE02.roa (raw, json) Hash identifier: 7aIkBV+3aas5G5uhevsYzrDlAsWboFwK8QPH4mndy+M= Subject key identifier: B6:73:95:AA:A7:6E:D9:6F:2E:13:DE:22:88:09:5F:DF:2B:94:20:84 Certificate issuer: /CN=A914E928/serialNumber=346C20F389DB9EDC6A1BF2F4031A9A1703BE87E1 Certificate serial: 50 Authority key identifier: 34:6C:20:F3:89:DB:9E:DC:6A:1B:F2:F4:03:1A:9A:17:03:BE:87:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NGwg84nbntxqG_L0AxqaFwO-h-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/1E50C954D4B611F098D4561EC4F9AE02.roa Signing time: Sun 01 Mar 2026 06:16:06 +0000 ROA not before: Fri 30 Jan 2026 01:16:42 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 24090 IP address blocks: 202.170.48.0/24 maxlen: 24 202.170.49.0/24 maxlen: 24 202.170.50.0/24 maxlen: 24 202.170.51.0/24 maxlen: 24 202.170.52.0/23 maxlen: 24 202.170.56.0/21 maxlen: 21 202.170.56.0/23 maxlen: 24 202.170.58.0/24 maxlen: 24 202.170.59.0/24 maxlen: 24 202.170.60.0/23 maxlen: 24 202.170.62.0/24 maxlen: 24 202.170.63.0/24 maxlen: 24 2402:2200:2000::/35 maxlen: 35 2402:2200:2a00::/40 maxlen: 40 2402:2200:4000::/36 maxlen: 36 2402:2200:5000::/36 maxlen: 36 2402:2200:6000::/36 maxlen: 36 2402:2200:7000::/36 maxlen: 36 2402:2200:a000::/35 maxlen: 35 2402:2200:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.crl rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NGwg84nbntxqG_L0AxqaFwO-h-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E928, serialNumber=346C20F389DB9EDC6A1BF2F4031A9A1703BE87E1 Validity Not Before: Jan 30 01:16:42 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a3d9a6-229e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:93:25:f6:77:19:94:c5:e8:88:b0:63:01:6e: c9:70:8a:a8:c5:aa:66:38:91:9b:1b:a8:5e:50:43: 69:8d:d9:d7:b8:34:1e:be:96:7b:f3:d2:f2:51:6a: 3a:52:42:1d:6a:ff:f9:9c:66:b4:60:3f:c4:bd:3b: 9d:60:cd:de:72:05:fc:b1:c9:be:5e:6f:17:cf:8b: b9:52:42:71:37:f3:1f:55:7b:51:2e:94:df:b1:2e: 3a:8a:2a:f0:34:8c:1f:df:d1:c1:1c:96:19:2a:6d: d7:66:5b:80:a5:ff:00:36:1b:f9:d1:39:e6:9f:34: 5f:43:d1:e1:43:9e:9e:6e:e1:88:87:d9:c8:de:23: d0:ec:f9:f0:17:21:59:70:41:5d:bf:6c:3a:f2:e5: f2:bc:ea:48:26:94:35:8f:bf:de:67:fb:b7:a7:4e: 3b:db:88:51:75:d0:53:24:58:dd:4b:da:c1:59:c0: 95:59:d9:7a:42:92:da:d9:64:fb:c0:41:a7:3d:29: bf:be:4c:e2:9a:ba:e3:c8:c2:4c:f0:14:b7:38:80: 43:00:73:ca:53:bf:1a:f3:f8:90:36:0a:bf:56:3c: 6a:7f:ea:9f:67:69:6e:0a:65:22:b3:2f:7f:5b:71: dd:df:0d:93:2b:a5:52:b7:0d:bf:c7:b0:27:c8:0f: 2f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:73:95:AA:A7:6E:D9:6F:2E:13:DE:22:88:09:5F:DF:2B:94:20:84 X509v3 Authority Key Identifier: keyid:34:6C:20:F3:89:DB:9E:DC:6A:1B:F2:F4:03:1A:9A:17:03:BE:87:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NGwg84nbntxqG_L0AxqaFwO-h-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/1E50C954D4B611F098D4561EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.170.48.0-202.170.53.255 202.170.56.0/21 IPv6: 2402:2200:2000::-2402:2200:7fff:ffff:ffff:ffff:ffff:ffff 2402:2200:a000::/35 Signature Algorithm: sha256WithRSAEncryption 8b:7e:10:af:40:3f:d8:df:c7:f6:fc:46:7a:4a:ab:ad:f2:dd: 45:ef:a6:50:53:66:59:16:08:a1:e6:ca:84:71:15:5e:2b:75: dd:df:13:08:06:74:91:be:cc:26:08:e0:94:6b:97:01:d8:78: ca:6a:2c:0e:65:94:6d:d3:fe:47:bd:68:28:0d:5a:af:0c:88: 33:5b:b9:3c:95:66:bf:6b:bd:19:15:59:91:f8:67:b1:df:e2: 9e:d4:06:39:73:2c:a0:0d:b9:4c:47:95:2c:ea:22:9b:c0:f5: 2b:9b:5e:39:5c:fb:24:ba:ab:68:ce:d6:19:1e:a9:d9:62:06: 3f:5e:28:66:31:2d:f3:52:e2:ae:62:c6:3a:32:39:2a:34:56: c6:1a:e9:3c:ae:d0:50:d0:4a:f7:62:90:ec:1f:ef:fd:a2:fb: 70:03:31:6e:29:40:05:62:d1:d2:89:b6:1d:74:b0:04:67:88: a3:93:56:2b:4c:72:0f:4b:80:26:d1:67:24:15:4f:38:9d:26: 52:5c:96:3d:51:18:5b:4e:79:d4:df:96:52:d7:dc:f1:76:8d: 3f:1e:94:34:f9:75:5a:e0:51:ac:e4:d2:18:7e:fa:27:a1:dd: 05:7f:8d:3a:4f:e9:6b:59:46:0f:5c:03:6d:49:4a:ab:76:9a: 74:91:15:cf -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTkyODExMC8GA1UEBRMoMzQ2QzIwRjM4OURCOUVEQzZBMUJGMkY0MDMxQTlBMTcw M0JFODdFMTAeFw0yNjAxMzAwMTE2NDJaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkOWE2LTIyOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCokyX2dxmUxeiIsGMBbslwiqjFqmY4kZsbqF5QQ2mN2de4NB6+lnvz0vJRajpS Qh1q//mcZrRgP8S9O51gzd5yBfyxyb5ebxfPi7lSQnE38x9Ve1EulN+xLjqKKvA0 jB/f0cEclhkqbddmW4Cl/wA2G/nROeafNF9D0eFDnp5u4YiH2cjeI9Ds+fAXIVlw QV2/bDry5fK86kgmlDWPv95n+7enTjvbiFF10FMkWN1L2sFZwJVZ2XpCktrZZPvA Qac9Kb++TOKauuPIwkzwFLc4gEMAc8pTvxrz+JA2Cr9WPGp/6p9naW4KZSKzL39b cd3fDZMrpVK3Db/HsCfIDy8HAgMBAAGjggKQMIICjDAdBgNVHQ4EFgQUtnOVqqdu 2W8uE94iiAlf3yuUIIQwHwYDVR0jBBgwFoAUNGwg84nbntxqG/L0AxqaFwO+h+Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFOTI4Lzg5QTYwQTBDQzlE NTExRjA4OTdGREQ0RkM0RjlBRTAyL05Hd2c4NG5ibnR4cUdfTDBBeHFhRndPLWgt RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkd3Zzg0bmJudHhxR19MMEF4cWFGd08taC1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTkyOC84OUE2MEEwQ0M5RDUxMUYwODk3RkRENEZDNEY5QUUwMi8xRTUwQzk1NEQ0 QjYxMUYwOThENDU2MUVDNEY5QUUwMi5yb2EwTwYIKwYBBQUHAQcBAf8EQDA+MBoE AgABMBQwDAMEBMqqMAMEAcqqNAMEA8qqODAgBAIAAjAaMBADBgUkAiIAIAMGByQC IgAAAwYFJAIiAKAwDQYJKoZIhvcNAQELBQADggEBAIt+EK9AP9jfx/b8RnpKq63y 3UXvplBTZlkWCKHmyoRxFV4rdd3fEwgGdJG+zCYI4JRrlwHYeMpqLA5llG3T/ke9 aCgNWq8MiDNbuTyVZr9rvRkVWZH4Z7Hf4p7UBjlzLKANuUxHlSzqIpvA9SubXjlc +yS6q2jO1hkeqdliBj9eKGYxLfNS4q5ixjoyOSo0VsYa6Tyu0FDQSvdikOwf7/2i +3ADMW4pQAVi0dKJth10sARniKOTVitMcg9LgCbRZyQVTzidJlJclj1RGFtOedTf llLX3PF2jT8elDT5dVrgUazk0hh++ieh3QV/jTpP6WtZRg9cA21JSqt2mnSRFc8= -----END CERTIFICATE-----Generated at Mon Mar 2 10:51:07 2026 by rpki-client