$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/63C97CBAC49E11EBAC936D7AC4F9AE02.roa File: 63C97CBAC49E11EBAC936D7AC4F9AE02.roa (raw, json) Hash identifier: PgBqaJ0zZRDKpytRezPqCUhHVoxTURvIO4uean+t4G8= Subject key identifier: BE:78:76:D6:3A:99:F5:50:28:DE:42:90:72:EE:AB:19:7A:02:A4:72 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 26E6 Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/63C97CBAC49E11EBAC936D7AC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:33:21 +0000 ROA not before: Fri 04 Jul 2025 16:22:59 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 4657 IP address blocks: 202.156.4.0/24 maxlen: 24 202.156.8.0/24 maxlen: 24 202.156.9.0/24 maxlen: 24 202.156.10.0/24 maxlen: 24 202.156.16.0/20 maxlen: 24 202.156.32.0/19 maxlen: 24 2404:e800:de00::/48 maxlen: 48 2404:e800:de00::/64 maxlen: 64 2404:e800:de00:1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9958 (0x26e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Jul 4 16:22:59 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a47861-9fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:d3:72:e8:ed:3f:5a:b2:e3:0d:e8:95:98: fe:b5:c5:90:4b:bf:40:d9:8f:08:06:4a:e6:2b:45: ed:c9:db:c1:7e:f4:50:bf:bc:47:2d:71:fb:bb:ad: bc:3f:5b:da:db:78:f8:e9:06:63:21:49:d6:c8:a2: ce:ef:ab:e5:5e:64:96:4a:be:be:34:6b:e2:ec:3b: c4:e2:ae:a7:99:47:fd:0e:b8:76:da:62:96:50:04: ec:11:c7:08:ba:69:2b:fc:6e:57:5d:5b:d4:5d:c6: 86:e3:27:ee:66:45:d1:f2:5a:57:c3:97:7f:59:43: 3f:d4:4f:7d:15:cb:02:1b:08:44:ae:d3:ce:73:e9: fc:94:b8:bc:1f:5b:43:93:d8:47:c4:91:d3:8e:5f: 02:f9:4e:26:1e:80:63:2c:3a:da:66:b5:17:b4:a2: e4:20:06:59:17:16:69:eb:28:1e:09:62:fa:9d:55: 86:2a:4b:63:3e:e0:d9:9d:1a:cf:17:17:c2:26:fe: 1d:02:75:99:de:60:72:e1:46:a8:22:82:43:eb:e9: 6b:e2:25:96:c6:cb:87:6b:bc:ea:14:ac:ff:8d:0a: 95:4c:66:59:cc:56:f0:e6:fd:8e:b7:a3:42:93:ed: 48:3e:4b:e6:e8:9b:ab:64:a3:a5:4c:4b:10:e1:b8: 40:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:78:76:D6:3A:99:F5:50:28:DE:42:90:72:EE:AB:19:7A:02:A4:72 X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/63C97CBAC49E11EBAC936D7AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.156.4.0/24 202.156.8.0-202.156.10.255 202.156.16.0-202.156.63.255 IPv6: 2404:e800:de00::/48 Signature Algorithm: sha256WithRSAEncryption 25:a8:1e:aa:89:54:e7:57:5e:fa:7c:84:ee:b8:4a:5d:b2:7e: c6:aa:08:81:72:c1:40:63:23:03:28:22:96:d8:3e:bf:d9:4d: 80:c9:4f:f2:c2:ab:5a:91:a1:ae:a2:41:4f:cc:a1:bc:34:d1: ff:7a:2c:00:4a:22:90:40:d7:78:a4:af:31:aa:a7:9c:43:51: 31:66:21:ef:37:19:f4:cb:74:f8:78:97:43:52:9b:6a:25:c4: 86:ef:21:3b:c9:fd:e7:36:af:32:2a:e0:0c:35:f7:e3:a3:0d: 9e:d1:09:16:45:48:dd:5b:c7:3c:7c:04:e4:cd:e2:f3:d6:21: b1:e9:54:65:72:dd:ee:d0:af:b2:ac:52:31:51:38:d9:fe:97: 10:2c:1f:77:30:1d:37:e3:84:f9:b9:b1:06:e3:2b:9c:dc:61: 5b:b1:29:6b:99:f8:22:d1:f7:e3:58:e6:e5:a4:a9:64:06:c5: 33:c7:31:de:8d:00:60:af:72:60:5b:e9:10:31:92:61:a7:da: 14:5e:57:74:aa:cf:82:ef:1d:c8:ca:cf:f5:6b:c3:f1:fc:4c: 1e:2f:c9:8d:3c:de:20:8d:64:f4:82:8d:31:a7:f7:37:4e:06: de:a8:fe:66:7d:03:5d:66:f4:63:3a:05:75:4f:b6:0e:c0:33: 79:0f:ad:b1 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgICJuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjUwNzA0MTYyMjU5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Nzg2MS05ZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsf/TcujtP1qy4w3olZj+tcWQS79A2Y8IBkrmK0XtydvBfvRQv7xHLXH7u628 P1va23j46QZjIUnWyKLO76vlXmSWSr6+NGvi7DvE4q6nmUf9Drh22mKWUATsEccI umkr/G5XXVvUXcaG4yfuZkXR8lpXw5d/WUM/1E99FcsCGwhErtPOc+n8lLi8H1tD k9hHxJHTjl8C+U4mHoBjLDraZrUXtKLkIAZZFxZp6ygeCWL6nVWGKktjPuDZnRrP FxfCJv4dAnWZ3mBy4UaoIoJD6+lr4iWWxsuHa7zqFKz/jQqVTGZZzFbw5v2Ot6NC k+1IPkvm6JurZKOlTEsQ4bhAcQIDAQABo4ICjTCCAokwHQYDVR0OBBYEFL54dtY6 mfVQKN5CkHLuqxl6AqRyMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUVFNTMvMzg1MTE4NDA0NTg4MTFFNTlCMkQ4MzcxQzRGOUFFMDIvNjNDOTdDQkFD NDlFMTFFQkFDOTM2RDdBQzRGOUFFMDIucm9hMEwGCCsGAQUFBwEHAQH/BD0wOzAo BAIAATAiAwQAypwEMAwDBAPKnAgDBADKnAowDAMEBMqcEAMEBsqcADAPBAIAAjAJ AwcAJAToAN4AMA0GCSqGSIb3DQEBCwUAA4IBAQAlqB6qiVTnV176fITuuEpdsn7G qgiBcsFAYyMDKCKW2D6/2U2AyU/ywqtakaGuokFPzKG8NNH/eiwASiKQQNd4pK8x qqecQ1ExZiHvNxn0y3T4eJdDUptqJcSG7yE7yf3nNq8yKuAMNffjow2e0QkWRUjd W8c8fATkzeLz1iGx6VRlct3u0K+yrFIxUTjZ/pcQLB93MB0344T5ubEG4yuc3GFb sSlrmfgi0ffjWOblpKlkBsUzxzHejQBgr3JgW+kQMZJhp9oUXld0qs+C7x3Iys/1 a8Px/EweL8mNPN4gjWT0go0xp/c3TgbeqP5mfQNdZvRjOgV1T7YOwDN5D62x -----END CERTIFICATE-----Generated at Mon Mar 2 06:32:12 2026 by rpki-client