$ rpki-client -vvf rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/8DFAE1DA019D11E8A7804A1EC4F9AE02.roa File: 8DFAE1DA019D11E8A7804A1EC4F9AE02.roa (raw, json) Hash identifier: +mlsrBxdIyOlCH9NElXmLFuWulBGulTkwg1yRe34F2o= Subject key identifier: E2:1D:D2:75:E8:97:DE:00:4E:F6:23:48:33:79:69:FB:CC:F9:F0:2D Certificate issuer: /CN=A918742C/serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9 Certificate serial: 174E Authority key identifier: 1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/8DFAE1DA019D11E8A7804A1EC4F9AE02.roa Signing time: Wed 20 May 2026 17:20:44 +0000 ROA not before: Wed 20 May 2026 17:20:44 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 23900 IP address blocks: 202.136.240.0/21 maxlen: 21 202.136.240.0/24 maxlen: 24 202.136.241.0/24 maxlen: 24 202.136.242.0/23 maxlen: 23 202.136.242.0/24 maxlen: 24 202.136.243.0/24 maxlen: 24 202.136.244.0/24 maxlen: 24 202.136.245.0/24 maxlen: 24 202.136.246.0/24 maxlen: 24 202.136.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 16:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5966 (0x174e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918742C, serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9 Validity Not Before: May 20 17:20:44 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a0ded6c-f751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:96:f3:05:a3:f0:e8:f0:97:29:73:6a:3e:69: e4:a1:12:15:fa:ba:7b:4f:9e:5a:12:c1:f8:bd:3e: 14:54:77:27:6a:32:8b:d1:b0:eb:10:21:b0:a2:77: 64:d2:6b:87:59:fd:29:cd:25:ff:d7:30:af:37:bf: d4:2a:92:8f:21:9d:1e:32:1b:7b:64:e1:40:34:c8: 7d:41:e1:01:91:b9:09:cb:37:8f:78:07:cd:ca:26: 02:74:90:f6:3c:f0:52:26:03:8c:70:78:b7:c0:2e: e9:b7:b6:75:e8:2c:d4:be:0c:4a:eb:85:1b:8d:03: 89:0c:87:57:3d:72:46:63:16:ed:3c:f5:77:02:bb: 44:e5:88:e1:c5:92:04:84:ba:eb:94:b0:5e:a4:af: 11:a2:d7:b7:db:95:80:18:a2:18:a1:56:dc:41:66: df:fc:a1:3c:b1:23:d1:27:bf:1f:48:09:d9:fa:9f: 0f:0e:d9:2a:d7:78:c8:23:1b:6f:66:d8:dd:c1:9a: 3a:d9:b7:bf:df:69:f9:90:45:5b:80:e2:ea:8b:34: f2:f7:e5:78:a7:dd:c9:4b:70:10:51:0c:d2:b1:94: 9c:cf:e3:3d:a8:7e:fd:49:73:8d:39:df:e9:cb:af: e2:ba:8f:7a:f4:1c:02:ea:e7:d9:51:70:6a:a2:e8: 4f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1D:D2:75:E8:97:DE:00:4E:F6:23:48:33:79:69:FB:CC:F9:F0:2D X509v3 Authority Key Identifier: keyid:1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/8DFAE1DA019D11E8A7804A1EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.136.240.0/21 Signature Algorithm: sha256WithRSAEncryption ac:13:b2:eb:71:8a:9b:6d:10:7d:b0:c1:a1:81:9c:b8:ce:e5: 94:d4:03:11:69:c0:63:84:ac:a4:e3:a3:e6:39:34:c8:6f:96: b1:6a:2a:22:bb:2e:be:d6:df:45:11:dd:36:4c:59:c1:c7:4f: c7:9f:6d:ad:97:07:b3:ba:68:f7:fd:d1:a7:8a:b1:d1:00:24: 14:a0:1f:a1:a0:dd:f3:39:92:49:51:f8:d5:cb:b5:10:af:7b: 2c:9a:1d:92:c5:4e:7c:74:52:c6:c6:d6:c9:f8:80:53:c8:c5: a3:e2:d0:7c:37:bf:7b:fe:ef:e4:9b:ce:ed:0e:6b:f7:d3:1e: 05:8a:cf:6e:1b:61:b9:43:4a:3c:8d:4e:60:50:cf:84:fb:70: fa:a7:d1:48:b1:b4:f6:13:92:48:a2:76:c3:5b:3b:d3:29:a3: 8c:69:74:9d:07:36:68:37:78:f0:5b:88:55:46:b7:46:0b:d8: d1:27:00:1d:ed:29:9b:50:24:9b:4e:06:79:a4:6f:f3:88:c5: a0:cf:36:05:9f:bc:66:02:f7:fd:d9:75:b8:8b:07:81:00:8a: d5:45:78:ee:bb:ff:7e:05:96:77:ad:9e:00:4a:7c:21:b5:ab: eb:d9:01:0a:8e:d4:b3:c7:1a:01:63:7c:71:c5:a5:4e:81:50: 08:a1:29:bf -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICF04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0MkMxMTAvBgNVBAUTKDFDM0Y5OUEwQzE4MkI1OENDNDVCODExMkYyOTFFMTJB MTUzMzMxRTkwHhcNMjYwNTIwMTcyMDQ0WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTBkZWQ2Yy1mNzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JbzBaPw6PCXKXNqPmnkoRIV+rp7T55aEsH4vT4UVHcnajKL0bDrECGwondk 0muHWf0pzSX/1zCvN7/UKpKPIZ0eMht7ZOFANMh9QeEBkbkJyzePeAfNyiYCdJD2 PPBSJgOMcHi3wC7pt7Z16CzUvgxK64UbjQOJDIdXPXJGYxbtPPV3ArtE5YjhxZIE hLrrlLBepK8Rote325WAGKIYoVbcQWbf/KE8sSPRJ78fSAnZ+p8PDtkq13jIIxtv ZtjdwZo62be/32n5kEVbgOLqizTy9+V4p93JS3AQUQzSsZScz+M9qH79SXONOd/p y6/iuo969BwC6ufZUXBqouhPhQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOId0nXo l94ATvYjSDN5afvM+fAtMB8GA1UdIwQYMBaAFBw/maDBgrWMxFuBEvKR4SoVMzHp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQyQy9GMjhDODlDNDAx OUMxMUU4OTAzNUY5MTlDNEY5QUUwMi9IRC1ab01HQ3RZekVXNEVTOHBIaEtoVXpN ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hELVpvTUdDdFl6RVc0RVM4cEhoS2hVek1lay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODc0MkMvRjI4Qzg5QzQwMTlDMTFFODkwMzVGOTE5QzRGOUFFMDIvOERGQUUxREEw MTlEMTFFOEE3ODA0QTFFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDyojwMA0GCSqGSIb3DQEBCwUAA4IBAQCsE7LrcYqbbRB9sMGhgZy4 zuWU1AMRacBjhKyk46PmOTTIb5axaioiuy6+1t9FEd02TFnBx0/Hn22tlwezumj3 /dGnirHRACQUoB+hoN3zOZJJUfjVy7UQr3ssmh2SxU58dFLGxtbJ+IBTyMWj4tB8 N797/u/km87tDmv30x4Fis9uG2G5Q0o8jU5gUM+E+3D6p9FIsbT2E5JIonbDWzvT KaOMaXSdBzZoN3jwW4hVRrdGC9jRJwAd7SmbUCSbTgZ5pG/ziMWgzzYFn7xmAvf9 2XW4iweBAIrVRXjuu/9+BZZ3rZ4ASnwhtavr2QEKjtSzxxoBY3xxxaVOgVAIoSm/ -----END CERTIFICATE-----Generated at Sat Jun 13 22:53:39 2026 by rpki-client