$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E395A29EB8F111E98C5EE76CC4F9AE02.roa File: E395A29EB8F111E98C5EE76CC4F9AE02.roa (raw, json) Hash identifier: QRPOe7CCA7MRUIQJnFHmyDIptQepFiQ5CNXG3VysqTc= Subject key identifier: 23:02:3B:BE:AE:9D:0F:2C:99:8C:5B:07:E9:2E:6F:12:1B:91:11:7D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D173 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E395A29EB8F111E98C5EE76CC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:15:28 +0000 ROA not before: Thu 08 May 2025 15:55:53 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 10077 IP address blocks: 202.56.96.0/24 maxlen: 24 202.56.97.0/24 maxlen: 24 202.56.98.0/24 maxlen: 24 202.56.99.0/24 maxlen: 24 202.56.100.0/24 maxlen: 24 202.56.101.0/24 maxlen: 24 202.56.102.0/24 maxlen: 24 202.56.103.0/24 maxlen: 24 202.56.104.0/24 maxlen: 24 202.56.105.0/24 maxlen: 24 202.56.106.0/24 maxlen: 24 202.56.107.0/24 maxlen: 24 202.56.108.0/24 maxlen: 24 202.56.109.0/24 maxlen: 24 202.56.110.0/24 maxlen: 24 202.56.111.0/24 maxlen: 24 202.56.112.0/24 maxlen: 24 202.56.113.0/24 maxlen: 24 202.56.114.0/24 maxlen: 24 202.56.115.0/24 maxlen: 24 202.56.116.0/24 maxlen: 24 202.56.117.0/24 maxlen: 24 202.56.118.0/24 maxlen: 24 202.56.119.0/24 maxlen: 24 202.56.120.0/24 maxlen: 24 202.56.121.0/24 maxlen: 24 202.56.122.0/24 maxlen: 24 202.56.123.0/24 maxlen: 24 202.56.124.0/24 maxlen: 24 202.56.125.0/24 maxlen: 24 202.56.126.0/24 maxlen: 24 202.56.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53619 (0xd173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:55:53 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4ba80-1b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d7:4e:0d:8f:46:48:aa:7b:30:00:31:04:e3: 3e:44:59:5d:d1:cb:63:29:94:95:bf:c8:4c:65:e8: 7d:17:bc:79:0c:a3:aa:1f:d7:7e:61:62:74:b1:30: 78:3b:74:f6:81:03:b9:74:26:cb:6c:9e:47:84:8a: f9:b1:62:f1:21:a0:17:a4:c7:82:02:22:49:46:3f: 8f:f3:ff:77:2a:6b:d8:28:76:86:b2:89:c5:40:47: aa:f6:80:b8:7e:94:b6:ab:bd:de:26:e3:68:9c:e5: df:04:a1:d4:33:04:9e:91:9b:bd:29:ce:45:99:c1: b7:d0:8c:6a:3b:a7:1c:fc:3b:75:62:64:96:3a:fc: 70:d5:ce:89:86:1a:d9:97:6c:65:af:a6:ea:2a:1b: cd:74:f6:27:ba:07:f6:4c:f6:59:86:b5:3f:b6:cb: 10:58:b0:54:8f:4f:29:d3:41:20:fb:b3:dd:d6:bc: 79:5a:90:c2:60:bf:23:fa:74:42:3c:0a:79:15:d4: 4b:47:8f:5e:b3:62:22:b1:3c:26:1b:dd:f3:10:2e: f7:a4:57:9f:44:a0:e7:5d:fe:ce:b1:cb:c2:42:b0: 49:3c:36:2f:ac:16:78:84:43:c5:8b:03:d4:14:03: 70:89:c7:c9:6d:27:4b:de:95:49:e3:39:0b:78:73: d5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:02:3B:BE:AE:9D:0F:2C:99:8C:5B:07:E9:2E:6F:12:1B:91:11:7D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E395A29EB8F111E98C5EE76CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.56.96.0/19 Signature Algorithm: sha256WithRSAEncryption a0:b4:ce:2f:38:9b:9d:5e:4e:d1:78:81:ed:b5:99:c2:2b:19: 4a:9e:18:e4:d1:23:df:98:92:74:47:03:0c:13:32:ac:7e:46: b2:91:0c:df:d6:18:b3:6e:b7:93:51:ea:d2:77:b3:5a:86:b5: b9:56:61:a9:2d:46:29:a9:e4:e5:f9:87:e9:5b:09:3a:0f:27: c1:cc:a7:e5:23:3a:e7:34:20:4d:72:aa:68:4b:9e:af:31:d9: b4:f7:e5:ef:03:8d:81:ea:fb:64:eb:10:ba:5f:fa:7c:5c:8b: 6d:a3:ca:88:50:ff:c4:30:08:8d:c2:34:0d:9b:a4:b2:4a:8e: 97:ac:11:df:73:54:15:75:68:4f:37:7b:83:63:dc:f9:42:8d: 03:5a:a4:18:0d:4f:12:49:da:ff:61:73:53:95:60:b8:43:b5: ba:cd:cf:59:e6:75:14:29:72:f6:56:ce:33:0f:20:40:3c:f2: f2:f8:e9:12:8a:cf:73:db:8a:a7:df:7e:9c:a1:2a:14:b5:c6: 67:f1:e5:e4:96:dd:c3:ac:c6:b3:61:9e:5b:90:59:d1:4d:dd: c9:0a:e2:7d:0f:27:d7:0f:75:da:32:f3:94:c3:6a:07:8f:c3: a0:28:44:0a:03:14:61:9c:20:65:5f:5f:c0:fa:31:2c:7f:68: 69:7a:fd:24 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDANFzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTU1M1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGJhODAtMWI0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANHXTg2PRkiqezAAMQTjPkRZXdHLYymUlb/ITGXofRe8eQyjqh/XfmFidLEw eDt09oEDuXQmy2yeR4SK+bFi8SGgF6THggIiSUY/j/P/dypr2Ch2hrKJxUBHqvaA uH6Utqu93ibjaJzl3wSh1DMEnpGbvSnORZnBt9CMajunHPw7dWJkljr8cNXOiYYa 2ZdsZa+m6iobzXT2J7oH9kz2WYa1P7bLEFiwVI9PKdNBIPuz3da8eVqQwmC/I/p0 QjwKeRXUS0ePXrNiIrE8Jhvd8xAu96RXn0Sg513+zrHLwkKwSTw2L6wWeIRDxYsD 1BQDcInHyW0nS96VSeM5C3hz1QkCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQjAju+ rp0PLJmMWwfpLm8SG5ERfTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0UzOTVBMjlF QjhGMTExRTk4QzVFRTc2Q0M0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBco4YDANBgkqhkiG9w0BAQsFAAOCAQEAoLTOLzibnV5O0XiB7bWZ wisZSp4Y5NEj35iSdEcDDBMyrH5GspEM39YYs263k1Hq0nezWoa1uVZhqS1GKank 5fmH6VsJOg8nwcyn5SM65zQgTXKqaEuerzHZtPfl7wONger7ZOsQul/6fFyLbaPK iFD/xDAIjcI0DZukskqOl6wR33NUFXVoTzd7g2Pc+UKNA1qkGA1PEkna/2FzU5Vg uEO1us3PWeZ1FCly9lbOMw8gQDzy8vjpEorPc9uKp99+nKEqFLXGZ/Hl5Jbdw6zG s2GeW5BZ0U3dyQrifQ8n1w912jLzlMNqB4/DoChECgMUYZwgZV9fwPoxLH9oaXr9 JA== -----END CERTIFICATE-----Generated at Mon Mar 2 11:06:50 2026 by rpki-client