$ rpki-client -vvf rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/1E50C954D4B611F098D4561EC4F9AE02.roa File: 1E50C954D4B611F098D4561EC4F9AE02.roa (raw, json) Hash identifier: E3LVhcfeD0J03ChImIEq/U082z1Jpax4eD3kPYHgYIE= Subject key identifier: 95:9B:53:D7:35:4C:2F:1F:07:43:33:E0:2D:D8:45:82:00:9C:A4:E6 Certificate issuer: /CN=A914E928/serialNumber=346C20F389DB9EDC6A1BF2F4031A9A1703BE87E1 Certificate serial: 3E Authority key identifier: 34:6C:20:F3:89:DB:9E:DC:6A:1B:F2:F4:03:1A:9A:17:03:BE:87:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NGwg84nbntxqG_L0AxqaFwO-h-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/1E50C954D4B611F098D4561EC4F9AE02.roa Signing time: Fri 30 Jan 2026 01:16:42 +0000 ROA not before: Fri 30 Jan 2026 01:16:42 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 24090 IP address blocks: 202.170.48.0/24 maxlen: 24 202.170.49.0/24 maxlen: 24 202.170.50.0/24 maxlen: 24 202.170.51.0/24 maxlen: 24 202.170.52.0/23 maxlen: 24 202.170.56.0/21 maxlen: 21 202.170.56.0/23 maxlen: 24 202.170.58.0/24 maxlen: 24 202.170.59.0/24 maxlen: 24 202.170.60.0/23 maxlen: 24 202.170.62.0/24 maxlen: 24 202.170.63.0/24 maxlen: 24 2402:2200:2000::/35 maxlen: 35 2402:2200:2a00::/40 maxlen: 40 2402:2200:4000::/36 maxlen: 36 2402:2200:5000::/36 maxlen: 36 2402:2200:6000::/36 maxlen: 36 2402:2200:7000::/36 maxlen: 36 2402:2200:a000::/35 maxlen: 35 2402:2200:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.crl rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NGwg84nbntxqG_L0AxqaFwO-h-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Feb 2026 06:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E928, serialNumber=346C20F389DB9EDC6A1BF2F4031A9A1703BE87E1 Validity Not Before: Jan 30 01:16:42 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=697c0679-3d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cf:d8:ce:bc:fe:2b:2d:89:2e:25:27:f8:49: 13:d2:7c:b6:66:44:ea:28:78:ef:cd:94:69:e1:77: f3:9c:ec:af:3c:a9:26:e2:12:61:63:93:dd:a7:68: 67:09:76:b4:00:4d:da:b3:32:d0:20:db:44:4c:43: cb:b4:b6:c1:e4:e7:18:89:0f:a2:8e:ed:ff:ec:77: 31:f4:45:f7:78:58:09:23:ce:8d:26:4e:9f:f9:20: 90:43:36:7d:85:8e:43:9d:f3:23:8b:69:92:dd:68: 17:dc:99:db:a8:d4:cd:f0:43:53:27:1d:3a:26:71: 8d:c3:79:6d:e8:f2:1b:27:88:f8:7a:12:38:75:8f: 7d:ea:71:a8:68:bb:39:6c:0e:a6:5c:ae:3b:6a:5c: 4c:61:fc:26:00:b4:66:73:57:f6:ff:a1:da:c6:5e: 72:23:cc:16:8c:4b:16:2e:8b:d6:fe:9c:c6:f7:24: 03:fb:a6:cd:29:e4:5e:b6:31:a2:71:a6:27:96:d3: d6:72:15:f6:88:85:c5:49:29:43:64:45:17:7c:fb: 85:04:76:cc:31:81:4b:69:97:b7:ab:c0:69:fa:f6: a5:91:73:7f:43:ed:0b:cf:73:d8:aa:81:3e:72:0e: d9:53:fe:4a:ff:d3:c4:38:e4:5e:0b:32:cd:7f:ab: ea:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9B:53:D7:35:4C:2F:1F:07:43:33:E0:2D:D8:45:82:00:9C:A4:E6 X509v3 Authority Key Identifier: keyid:34:6C:20:F3:89:DB:9E:DC:6A:1B:F2:F4:03:1A:9A:17:03:BE:87:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NGwg84nbntxqG_L0AxqaFwO-h-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/1E50C954D4B611F098D4561EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.170.48.0-202.170.53.255 202.170.56.0/21 IPv6: 2402:2200:2000::-2402:2200:7fff:ffff:ffff:ffff:ffff:ffff 2402:2200:a000::/35 Signature Algorithm: sha256WithRSAEncryption 78:83:ca:05:74:d4:5c:76:50:14:30:95:2b:7d:6c:28:40:83: 0c:ff:67:5d:0c:0a:45:bd:04:d4:88:6e:b1:20:76:c3:e4:90: b8:8f:7a:1b:21:8d:f3:17:5e:5c:01:76:f7:62:4b:af:5b:eb: 58:23:6e:a4:ea:96:48:4c:0b:e9:f5:35:63:84:10:b5:d1:f3: a6:31:06:eb:c7:49:36:4a:b8:54:ac:a0:0a:54:b1:8d:4a:fc: 09:3e:cb:32:66:4d:ad:9e:1d:96:ca:41:9b:e7:eb:d8:79:12: 55:f7:75:ac:1d:59:53:9a:be:a5:a4:2b:44:fd:f8:28:c3:f8: b2:1f:a3:07:58:d0:9a:c4:24:ba:11:e4:94:77:f1:61:d6:67: 59:c2:2f:b2:94:1e:7e:07:79:99:b1:c1:6a:65:12:82:a4:56: 45:db:ad:65:fd:93:8b:c0:73:99:95:ef:9b:7e:54:57:d2:12: 82:f7:67:6b:a8:3d:6f:73:da:8a:53:53:22:d6:41:d2:92:1d: 9c:93:1c:ff:7e:9d:1a:60:f1:18:30:ec:c0:06:7a:a4:3c:03: 11:95:58:8c:2a:9e:cb:16:61:5b:06:79:f2:fc:14:32:32:9b: 59:cd:e6:85:95:02:fe:95:b6:ba:c5:98:d9:f7:fc:90:02:2d: 9d:74:12:0c -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTkyODExMC8GA1UEBRMoMzQ2QzIwRjM4OURCOUVEQzZBMUJGMkY0MDMxQTlBMTcw M0JFODdFMTAeFw0yNjAxMzAwMTE2NDJaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5N2MwNjc5LTNkN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClz9jOvP4rLYkuJSf4SRPSfLZmROooeO/NlGnhd/Oc7K88qSbiEmFjk92naGcJ drQATdqzMtAg20RMQ8u0tsHk5xiJD6KO7f/sdzH0Rfd4WAkjzo0mTp/5IJBDNn2F jkOd8yOLaZLdaBfcmduo1M3wQ1MnHTomcY3DeW3o8hsniPh6Ejh1j33qcahouzls DqZcrjtqXExh/CYAtGZzV/b/odrGXnIjzBaMSxYui9b+nMb3JAP7ps0p5F62MaJx pieW09ZyFfaIhcVJKUNkRRd8+4UEdswxgUtpl7erwGn69qWRc39D7QvPc9iqgT5y DtlT/kr/08Q45F4LMs1/q+pTAgMBAAGjggLFMIICwTAdBgNVHQ4EFgQUlZtT1zVM Lx8HQzPgLdhFggCcpOYwHwYDVR0jBBgwFoAUNGwg84nbntxqG/L0AxqaFwO+h+Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFOTI4Lzg5QTYwQTBDQzlE NTExRjA4OTdGREQ0RkM0RjlBRTAyL05Hd2c4NG5ibnR4cUdfTDBBeHFhRndPLWgt RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkd3Zzg0bmJudHhxR19MMEF4cWFGd08taC1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTkyOC84OUE2MEEwQ0M5RDUxMUYwODk3RkRENEZDNEY5QUUwMi8xRTUwQzk1NEQ0 QjYxMUYwOThENDU2MUVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBPBggrBgEFBQcBBwEB/wRA MD4wGgQCAAEwFDAMAwQEyqowAwQByqo0AwQDyqo4MCAEAgACMBowEAMGBSQCIgAg AwYHJAIiAAADBgUkAiIAoDANBgkqhkiG9w0BAQsFAAOCAQEAeIPKBXTUXHZQFDCV K31sKECDDP9nXQwKRb0E1IhusSB2w+SQuI96GyGN8xdeXAF292JLr1vrWCNupOqW SEwL6fU1Y4QQtdHzpjEG68dJNkq4VKygClSxjUr8CT7LMmZNrZ4dlspBm+fr2HkS Vfd1rB1ZU5q+paQrRP34KMP4sh+jB1jQmsQkuhHklHfxYdZnWcIvspQefgd5mbHB amUSgqRWRdutZf2Ti8BzmZXvm35UV9ISgvdna6g9b3PailNTItZB0pIdnJMc/36d GmDxGDDswAZ6pDwDEZVYjCqeyxZhWwZ58vwUMjKbWc3mhZUC/pW2usWY2ff8kAIt nXQSDA== -----END CERTIFICATE-----Generated at Fri Feb 20 00:28:02 2026 by rpki-client