$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/F3B36C48545411EFA3BC6B2BC4F9AE02.roa File: F3B36C48545411EFA3BC6B2BC4F9AE02.roa (raw, json) Hash identifier: 1Yn/q//XKIoyU7nYOwYtLT8tKiEy2Qn2d2N7RVj95ek= Subject key identifier: 5E:38:ED:57:FF:68:75:E0:C3:60:86:1A:96:96:A0:0C:4B:E5:9F:44 Certificate issuer: /CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E Certificate serial: 01CE Authority key identifier: 84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/F3B36C48545411EFA3BC6B2BC4F9AE02.roa Signing time: Thu 03 Sep 2026 04:55:37 +0000 ROA not before: Thu 03 Sep 2026 04:55:37 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 24005 IP address blocks: 202.170.160.0/24 maxlen: 24 202.170.161.0/24 maxlen: 24 202.170.162.0/24 maxlen: 24 202.170.163.0/24 maxlen: 24 202.170.164.0/24 maxlen: 24 202.170.165.0/24 maxlen: 24 202.170.166.0/24 maxlen: 24 202.170.167.0/24 maxlen: 24 202.170.168.0/24 maxlen: 24 202.170.169.0/24 maxlen: 24 202.170.170.0/24 maxlen: 24 202.170.171.0/24 maxlen: 24 202.170.172.0/24 maxlen: 24 202.170.173.0/24 maxlen: 24 202.170.174.0/24 maxlen: 24 202.170.175.0/24 maxlen: 24 2407:1000::/32 maxlen: 32 2407:1000:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:25:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153134, serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E Validity Not Before: Sep 3 04:55:37 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a98fdc9-d056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:06:7d:a6:46:5a:73:a4:7f:c6:07:db:2e:9f: 5f:cb:8c:a0:fd:5d:9c:89:45:7c:a5:cc:02:2c:bc: 9d:de:a3:98:26:4e:7b:52:e4:0d:a9:d6:f0:bd:da: 83:bf:bd:e6:21:44:7b:7d:58:08:b5:7e:81:81:74: 77:aa:98:00:40:26:c5:08:3c:4f:68:42:cd:51:0c: 80:07:5b:e3:36:fe:3a:dc:b7:28:9a:27:b8:36:d9: 34:54:c7:19:aa:23:8f:a8:3d:c5:d9:9e:c6:f8:6f: 5a:12:70:20:39:89:c4:68:85:3c:7c:98:86:0f:31: 02:5b:a6:ca:98:04:f5:a7:07:4b:b9:eb:12:85:a1: 6f:37:1d:23:bd:b4:c7:1d:f8:b1:55:bb:85:24:70: 8a:96:79:67:6f:4f:d0:3b:aa:44:88:7c:2f:40:7a: 01:1f:49:ab:2a:30:94:58:b3:72:b2:68:b9:ea:9a: 9b:33:df:a4:e6:ba:74:1b:e3:6e:85:02:db:e6:07: 4b:c4:ff:c3:21:c2:d1:ab:04:c8:65:b1:2f:56:4a: 83:5a:19:2b:bc:ce:17:58:f7:65:14:7c:32:43:53: f4:7c:59:34:5d:7a:4b:f0:0a:e8:a8:e1:d3:6c:c6: 26:b2:aa:68:95:54:8f:61:b8:99:c8:84:1d:41:a8: fd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:38:ED:57:FF:68:75:E0:C3:60:86:1A:96:96:A0:0C:4B:E5:9F:44 X509v3 Authority Key Identifier: keyid:84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/F3B36C48545411EFA3BC6B2BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.170.160.0/20 IPv6: 2407:1000::/32 Signature Algorithm: sha256WithRSAEncryption 61:94:19:cd:14:b5:2a:13:43:56:63:0a:73:56:2b:7b:78:52: e7:fb:4f:af:bc:ac:ef:1a:8a:5e:74:f7:9f:0c:f8:d5:95:75: 50:3b:77:ef:4c:fe:ef:09:75:16:66:15:fd:f1:7b:17:37:3b: 5e:7f:46:f5:ab:52:0a:05:6e:a1:72:3d:fc:f5:d1:51:4a:c0: f9:2b:14:bc:cb:24:4d:f5:bd:5a:1f:3c:71:97:d1:3f:3a:57: 82:1f:f2:10:b5:73:87:26:10:76:72:26:e1:f3:c7:ed:eb:40: 0a:08:2c:ad:f7:15:3a:a8:cc:37:30:a8:46:0b:be:b1:e2:1a: a7:7d:7c:1d:b2:09:55:eb:77:24:8d:ec:7f:92:03:d3:c7:9a: 11:70:f3:5b:31:8b:a7:14:4c:e8:36:21:d6:3e:60:33:50:10: e5:3f:0e:17:ba:f2:66:a3:67:65:a7:92:9b:e4:bc:8f:39:4d: 13:f6:a4:4a:39:11:c9:94:26:04:b1:47:7b:e1:30:61:76:10: ea:4c:7e:46:0c:6e:2f:45:ed:d0:46:dd:20:1f:88:4f:b0:4b: 9b:bc:ef:62:71:26:3e:81:06:4e:ec:c0:3d:e4:e6:51:a5:2b: de:6b:fa:dc:0c:2c:e4:dd:73:89:ad:27:2b:b0:b9:a8:14:69: 53:55:53:4e -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMxMzQxMTAvBgNVBAUTKDg0NDJEQzQ2MDI0MDA2MDExQUQ1Q0Y0OENEN0U0QzQ4 QkI5N0ExMUUwHhcNMjYwOTAzMDQ1NTM3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4ZmRjOS1kMDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1AZ9pkZac6R/xgfbLp9fy4yg/V2ciUV8pcwCLLyd3qOYJk57UuQNqdbwvdqD v73mIUR7fVgItX6BgXR3qpgAQCbFCDxPaELNUQyAB1vjNv463Lcomie4Ntk0VMcZ qiOPqD3F2Z7G+G9aEnAgOYnEaIU8fJiGDzECW6bKmAT1pwdLuesShaFvNx0jvbTH HfixVbuFJHCKlnlnb0/QO6pEiHwvQHoBH0mrKjCUWLNysmi56pqbM9+k5rp0G+Nu hQLb5gdLxP/DIcLRqwTIZbEvVkqDWhkrvM4XWPdlFHwyQ1P0fFk0XXpL8AroqOHT bMYmsqpolVSPYbiZyIQdQaj9rQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFF447Vf/ aHXgw2CGGpaWoAxL5Z9EMB8GA1UdIwQYMBaAFIRC3EYCQAYBGtXPSM1+TEi7l6Ee MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzEzNC9FNjVGQThBMDU0 NTMxMUVGOEFENzc0MDlDNEY5QUUwMi9oRUxjUmdKQUJnRWExYzlJelg1TVNMdVhv UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFTGNSZ0pBQmdFYTFjOUl6WDVNU0x1WG9SNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTMxMzQvRTY1RkE4QTA1NDUzMTFFRjhBRDc3NDA5QzRGOUFFMDIvRjNCMzZDNDg1 NDU0MTFFRkEzQkM2QjJCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQEyqqgMA0EAgACMAcDBQAkBxAAMA0GCSqGSIb3DQEBCwUAA4IBAQBh lBnNFLUqE0NWYwpzVit7eFLn+0+vvKzvGopedPefDPjVlXVQO3fvTP7vCXUWZhX9 8XsXNztef0b1q1IKBW6hcj389dFRSsD5KxS8yyRN9b1aHzxxl9E/OleCH/IQtXOH JhB2cibh88ft60AKCCyt9xU6qMw3MKhGC76x4hqnfXwdsglV63ckjex/kgPTx5oR cPNbMYunFEzoNiHWPmAzUBDlPw4XuvJmo2dlp5Kb5LyPOU0T9qRKORHJlCYEsUd7 4TBhdhDqTH5GDG4vRe3QRt0gH4hPsEubvO9icSY+gQZO7MA95OZRpSvea/rcDCzk 3XOJrScrsLmoFGlTVVNO -----END CERTIFICATE-----Generated at Sat Sep 26 00:17:50 2026 by rpki-client