$ rpki-client -vvf rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/7D0F62FAF3EF11EA82F3C251C4F9AE02.roa File: 7D0F62FAF3EF11EA82F3C251C4F9AE02.roa (raw, json) Hash identifier: j8uiQ1yAgz9ZEp0DuVyDJIgNZ2YjQcOMmdmTSIrRMPk= Subject key identifier: 7E:3D:40:69:AF:D8:FE:E2:1C:4A:D6:F1:5A:43:E0:48:67:12:D4:B0 Certificate issuer: /CN=A917138D/serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156 Certificate serial: 087A Authority key identifier: AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/7D0F62FAF3EF11EA82F3C251C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:22:17 +0000 ROA not before: Thu 30 Oct 2025 21:10:42 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 17458 IP address blocks: 202.44.112.0/22 maxlen: 22 202.44.113.0/24 maxlen: 24 202.44.115.0/24 maxlen: 24 203.83.48.0/21 maxlen: 21 203.83.48.0/24 maxlen: 24 203.83.49.0/24 maxlen: 24 203.83.50.0/24 maxlen: 24 203.83.51.0/24 maxlen: 24 203.83.52.0/24 maxlen: 24 203.83.53.0/24 maxlen: 24 203.83.54.0/24 maxlen: 24 203.83.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2170 (0x87a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917138D, serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156 Validity Not Before: Oct 30 21:10:42 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a42f79-49f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:10:18:ee:3b:bd:43:f2:2f:08:6b:e4:c5:49: 9b:c1:8b:28:d0:3a:8a:aa:af:91:fc:90:e5:b8:e6: 57:6b:43:41:49:84:84:da:d1:a4:c8:24:6f:77:e9: a2:8c:46:03:b7:5e:86:38:fb:a7:90:0a:95:bd:dc: a6:25:8a:44:75:03:3a:cb:4c:1f:a0:74:30:a0:52: 88:6b:8d:82:7c:65:cc:fb:80:19:ca:c3:25:a1:6a: 41:a6:8e:70:71:e9:22:74:77:81:2b:fa:ab:47:94: 60:2a:9a:56:49:ec:dd:df:c3:5b:4b:aa:72:60:32: af:ab:98:65:61:e2:6e:e3:e0:7e:f1:96:bb:70:4d: 5f:bc:14:23:55:6e:ba:96:3b:5a:71:6a:38:ff:ed: 55:be:6b:12:98:90:64:c6:b5:1a:5d:ac:4e:0f:dd: 89:93:a7:b9:22:29:6f:6b:1e:88:45:82:9a:38:b7: 5d:57:d6:4a:45:1a:6b:a6:64:c4:8a:df:e8:9c:6b: b7:a5:19:0d:5e:da:87:28:d1:79:f4:3e:37:d8:d1: 05:62:65:76:fa:f5:cd:b1:be:4c:6c:19:11:7d:7b: 17:a3:0d:4e:86:40:f1:f3:51:f0:ad:a8:2f:54:01: cd:92:80:29:3a:51:44:d0:0b:7a:81:48:4c:56:5a: 4b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3D:40:69:AF:D8:FE:E2:1C:4A:D6:F1:5A:43:E0:48:67:12:D4:B0 X509v3 Authority Key Identifier: keyid:AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/7D0F62FAF3EF11EA82F3C251C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.44.112.0/22 203.83.48.0/21 Signature Algorithm: sha256WithRSAEncryption 89:79:f7:9d:e8:1c:77:fc:ff:53:41:f0:32:d4:e9:d5:39:d3: a7:75:ac:f9:43:06:64:96:80:ce:3e:62:1e:1a:fe:0f:71:dd: 6c:c8:89:48:c9:d8:42:08:e9:26:6f:95:4f:c4:28:46:28:0f: 4f:ac:4b:0d:e9:48:54:1a:d1:2b:bd:c8:f7:76:f5:ca:c7:12: 32:ba:29:be:0b:0d:60:5b:5d:da:da:df:e7:3a:80:a1:0e:e2: ae:e5:8d:02:3d:1b:08:39:ff:f6:57:67:28:ae:1c:5c:26:30: 0e:0c:05:8c:bb:78:1c:97:ee:9d:ad:a4:d6:0c:6c:c6:27:82: be:0a:d8:4c:29:99:e5:08:72:67:89:24:98:56:0d:fb:31:0e: 0a:b3:68:8b:8f:ab:22:84:ff:c5:7b:9d:cd:fa:c2:b9:18:35: 32:da:ac:87:d3:94:92:be:1e:ec:e8:af:a0:7f:ee:69:09:19: a9:5f:a4:8b:80:31:78:8c:5f:9d:37:14:b2:09:21:7a:1d:b0: e8:f8:25:29:eb:58:77:55:ad:9e:97:3e:47:e1:5c:c1:8a:61: e0:90:46:76:75:10:6a:93:28:69:fa:f8:be:57:11:5a:09:fe: a8:a4:c4:75:cd:af:a7:c8:76:81:78:2b:75:fd:5d:69:27:ec: 61:ea:b1:05 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEzOEQxMTAvBgNVBAUTKEFFMEYwRTlFRDRBNjcwNkU5MkUxMEI3ODlCQUMyQzYy NUE1NjUxNTYwHhcNMjUxMDMwMjExMDQyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmY3OS00OWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRAY7ju9Q/IvCGvkxUmbwYso0DqKqq+R/JDluOZXa0NBSYSE2tGkyCRvd+mi jEYDt16GOPunkAqVvdymJYpEdQM6y0wfoHQwoFKIa42CfGXM+4AZysMloWpBpo5w cekidHeBK/qrR5RgKppWSezd38NbS6pyYDKvq5hlYeJu4+B+8Za7cE1fvBQjVW66 ljtacWo4/+1VvmsSmJBkxrUaXaxOD92Jk6e5Iilvax6IRYKaOLddV9ZKRRprpmTE it/onGu3pRkNXtqHKNF59D432NEFYmV2+vXNsb5MbBkRfXsXow1OhkDx81Hwragv VAHNkoApOlFE0At6gUhMVlpLnQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFH49QGmv 2P7iHErW8VpD4EhnEtSwMB8GA1UdIwQYMBaAFK4PDp7UpnBukuELeJusLGJaVlFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTM4RC80RjZFOTMxOEYz RUQxMUVBQTRBMUQ2NERDNEY5QUUwMi9yZzhPbnRTbWNHNlM0UXQ0bTZ3c1lscFdV VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JnOE9udFNtY0c2UzRRdDRtNndzWWxwV1VWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzEzOEQvNEY2RTkzMThGM0VEMTFFQUE0QTFENjREQzRGOUFFMDIvN0QwRjYyRkFG M0VGMTFFQTgyRjNDMjUxQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCyixwAwQDy1MwMA0GCSqGSIb3DQEBCwUAA4IBAQCJefed6Bx3/P9T QfAy1OnVOdOndaz5QwZkloDOPmIeGv4Pcd1syIlIydhCCOkmb5VPxChGKA9PrEsN 6UhUGtErvcj3dvXKxxIyuim+Cw1gW13a2t/nOoChDuKu5Y0CPRsIOf/2V2corhxc JjAODAWMu3gcl+6draTWDGzGJ4K+CthMKZnlCHJniSSYVg37MQ4Ks2iLj6sihP/F e53N+sK5GDUy2qyH05SSvh7s6K+gf+5pCRmpX6SLgDF4jF+dNxSyCSF6HbDo+CUp 61h3Va2elz5H4VzBimHgkEZ2dRBqkyhp+vi+VxFaCf6opMR1za+nyHaBeCt1/V1p J+xh6rEF -----END CERTIFICATE-----Generated at Mon Mar 2 11:54:16 2026 by rpki-client