$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/23852F72273711F1B6AB5B98AD833773.roa File: 23852F72273711F1B6AB5B98AD833773.roa (raw, json) Hash identifier: ektQBShXJ5BEKzyA8visW0s0Qg76mbW8+8RclzWr6k4= Subject key identifier: 34:E0:E3:49:9A:1A:72:C2:7F:00:DB:22:19:36:C4:1F:3A:EC:B7:B8 Certificate issuer: /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Certificate serial: 02CA Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/23852F72273711F1B6AB5B98AD833773.roa Signing time: Wed 27 May 2026 03:33:21 +0000 ROA not before: Wed 27 May 2026 03:33:21 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 64079 IP address blocks: 101.47.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 714 (0x2ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Validity Not Before: May 27 03:33:21 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a166601-5a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:90:41:f3:51:45:45:b7:23:64:e7:b1:9c:39: fb:38:c3:45:71:a3:34:30:eb:f2:2a:f2:f4:10:f6: d5:da:f0:c5:34:49:c4:63:b4:93:7c:0a:6b:2c:7c: 74:3b:5e:06:e4:71:8f:14:26:a7:14:a5:05:f4:6f: 90:38:a2:b5:70:99:71:21:4e:03:8a:c2:b8:c9:26: e6:62:fc:4b:06:b4:3a:66:b4:f5:ef:03:04:1e:63: f2:6c:61:f3:e6:bd:c1:43:f3:c0:50:47:e5:22:66: 76:c8:02:a5:52:dd:b1:d4:ff:cb:6a:73:0b:a8:e6: 2b:0a:03:79:07:ba:bd:5a:7a:b6:66:8b:86:00:4f: 06:f7:ce:06:70:77:8e:fb:63:14:bd:a5:d3:3b:73: c0:63:e7:d0:05:5a:6a:d4:98:cc:50:e5:07:6f:b7: a5:90:54:55:74:4e:97:55:57:e3:42:51:f8:54:be: d2:60:fa:7e:12:df:df:bf:c9:b7:b9:61:64:75:70: 4c:7a:19:ef:98:3c:51:d1:f3:3a:2d:7d:47:39:8e: 9d:4c:a0:56:69:75:40:0f:4b:a5:b7:26:26:19:12: 65:30:2b:16:65:f5:8e:f8:be:d1:6f:58:63:90:c8: fc:74:72:e1:a1:7f:cc:dd:2e:53:30:08:cb:7e:b8: 3b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E0:E3:49:9A:1A:72:C2:7F:00:DB:22:19:36:C4:1F:3A:EC:B7:B8 X509v3 Authority Key Identifier: keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/23852F72273711F1B6AB5B98AD833773.roa sbgp-ipAddrBlock: critical IPv4: 101.47.189.0/24 Signature Algorithm: sha256WithRSAEncryption 30:5d:25:65:25:59:3a:a8:93:7b:41:e7:02:17:be:51:f5:4c: e0:70:86:6b:83:e2:7d:34:34:d9:00:7f:4a:31:1c:95:60:9d: 1c:09:e9:90:2a:86:5a:ed:de:a9:dc:b5:92:24:01:78:37:93: 82:55:72:e4:6c:05:aa:01:6e:77:5f:7b:9a:ab:eb:2d:c8:03: d3:96:04:db:ee:bd:43:90:49:1f:de:df:4a:9f:1f:57:31:c9: d9:3d:af:46:54:45:15:91:04:5b:f1:ba:53:24:70:d2:30:dd: ca:1e:16:1f:da:ac:a7:ea:1b:3a:1b:11:f2:76:a4:50:a5:61: 8f:06:72:db:71:5f:eb:48:fb:e5:91:de:9f:db:43:93:13:6a: 43:c8:de:a1:f6:6b:84:ee:b2:e4:a2:f6:7e:bf:8b:e6:4c:cd: 9a:5f:f9:d1:56:67:11:60:9d:01:b9:7c:f8:05:59:47:fc:e2: a8:c3:5c:e5:be:9e:37:a8:a7:c3:8c:4c:66:e4:16:f7:38:e1: 86:ab:6d:28:b9:6e:d4:04:ae:b1:70:81:d9:e0:b3:52:87:a0: 7e:2c:ce:8a:31:13:a6:15:c2:fd:8f:86:c9:14:95:46:81:3a: 74:29:e3:e4:c1:d6:37:27:47:c2:d7:80:cf:10:10:2f:9c:e6: ef:0d:91:f1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDU0MkI5NEQ4NjI1Q0Y3MTE5NjRGRDEzNzQxMjk1RDI3 QUQ3QTkwMDQwHhcNMjYwNTI3MDMzMzIxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTE2NjYwMS01YTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmZBB81FFRbcjZOexnDn7OMNFcaM0MOvyKvL0EPbV2vDFNEnEY7STfAprLHx0 O14G5HGPFCanFKUF9G+QOKK1cJlxIU4DisK4ySbmYvxLBrQ6ZrT17wMEHmPybGHz 5r3BQ/PAUEflImZ2yAKlUt2x1P/LanMLqOYrCgN5B7q9Wnq2ZouGAE8G984GcHeO +2MUvaXTO3PAY+fQBVpq1JjMUOUHb7elkFRVdE6XVVfjQlH4VL7SYPp+Et/fv8m3 uWFkdXBMehnvmDxR0fM6LX1HOY6dTKBWaXVAD0ultyYmGRJlMCsWZfWO+L7Rb1hj kMj8dHLhoX/M3S5TMAjLfrg7nQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDTg40ma GnLCfwDbIhk2xB867Le4MB8GA1UdIwQYMBaAFFQrlNhiXPcRlk/RN0EpXSetepAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC8xNjFENEMwQUU0 Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4R1dUOUUzUVNsZEo2MTZr QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDdVUyR0pjOXhHV1Q5RTNRU2xkSjYxNmtBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0I1MjAvMTYxRDRDMEFFNENBMTFFREE0MTRFMjU5QzRGOUFFMDIvMjM4NTJGNzIy NzM3MTFGMUI2QUI1Qjk4QUQ4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZS+9MA0GCSqGSIb3DQEBCwUAA4IBAQAwXSVlJVk6qJN7QecCF75R 9UzgcIZrg+J9NDTZAH9KMRyVYJ0cCemQKoZa7d6p3LWSJAF4N5OCVXLkbAWqAW53 X3uaq+styAPTlgTb7r1DkEkf3t9Knx9XMcnZPa9GVEUVkQRb8bpTJHDSMN3KHhYf 2qyn6hs6GxHydqRQpWGPBnLbcV/rSPvlkd6f20OTE2pDyN6h9muE7rLkovZ+v4vm TM2aX/nRVmcRYJ0BuXz4BVlH/OKow1zlvp43qKfDjExm5Bb3OOGGq20ouW7UBK6x cIHZ4LNSh6B+LM6KMROmFcL9j4bJFJVGgTp0KePkwdY3J0fC14DPEBAvnObvDZHx -----END CERTIFICATE-----Generated at Sat Jun 13 22:22:59 2026 by rpki-client