$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/63C97CBAC49E11EBAC936D7AC4F9AE02.roa File: 63C97CBAC49E11EBAC936D7AC4F9AE02.roa (raw, json) Hash identifier: kkS8+JqG0jays5vdA1cYp8CR+s315r8vJEVpcCgrkxw= Subject key identifier: 1D:E4:C8:85:FA:78:90:80:15:E1:D9:62:F7:F1:79:65:D2:C4:C2:BC Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 2753 Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/63C97CBAC49E11EBAC936D7AC4F9AE02.roa Signing time: Thu 16 Jul 2026 16:15:48 +0000 ROA not before: Thu 16 Jul 2026 16:15:48 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 4657 IP address blocks: 202.156.4.0/24 maxlen: 24 202.156.8.0/24 maxlen: 24 202.156.9.0/24 maxlen: 24 202.156.10.0/24 maxlen: 24 202.156.16.0/20 maxlen: 24 202.156.32.0/19 maxlen: 24 2404:e800:de00::/48 maxlen: 48 2404:e800:de00::/64 maxlen: 64 2404:e800:de00:1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10067 (0x2753) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Jul 16 16:15:48 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a5903b4-0bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:21:97:cb:cf:60:e4:4d:a3:a1:f0:a8:13:01: 41:2a:7e:e8:04:b1:ac:32:26:5b:fd:cc:c9:6b:c5: e7:7a:7c:fd:19:2c:bb:92:0d:5b:9b:e0:bc:da:a3: 49:9b:33:a5:61:e7:d6:0d:92:4b:e1:16:35:b3:6c: a6:5d:be:fe:cb:33:34:a1:75:d2:24:6c:a3:49:42: 3b:b8:f0:ef:9e:b4:e9:a8:32:4b:47:34:68:cd:8a: 4a:2a:21:80:22:b8:8b:00:19:f2:c3:0c:a8:63:f4: c9:62:52:c4:43:5d:e5:da:ae:e0:48:46:d1:c6:77: d9:3f:6f:86:bb:70:9d:b1:88:a9:b6:6b:c0:5f:7b: f8:70:b7:36:92:5c:7f:6a:86:19:93:23:a7:b0:fc: 0b:79:bc:04:0e:31:f8:cd:8e:98:a8:0d:74:d9:09: 92:09:73:22:a5:22:06:bb:64:43:f2:c5:98:63:20: 6c:fb:72:40:3a:5d:9a:aa:0c:89:18:30:4a:9c:69: 90:9f:f8:7e:b6:bb:6a:f8:9a:c8:e9:f1:37:ff:3a: 02:6c:65:38:62:98:31:84:2f:a2:43:04:26:2d:50: 57:aa:4f:cd:75:9c:77:64:9b:08:91:bd:45:68:19: 4e:67:10:32:8d:bb:71:b2:99:dd:f6:be:98:92:40: 37:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E4:C8:85:FA:78:90:80:15:E1:D9:62:F7:F1:79:65:D2:C4:C2:BC X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/63C97CBAC49E11EBAC936D7AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.156.4.0/24 202.156.8.0-202.156.10.255 202.156.16.0-202.156.63.255 IPv6: 2404:e800:de00::/48 Signature Algorithm: sha256WithRSAEncryption 30:29:6b:87:d6:4f:1c:a0:a9:04:ac:22:6f:74:5e:42:b7:63: 27:c5:ba:6e:29:e7:39:48:62:ef:cc:c9:a4:76:eb:64:16:e5: db:89:01:bf:c6:23:b9:3d:c5:0a:ee:e1:9e:20:cc:be:fa:85: 58:17:8a:ac:10:f1:95:94:68:96:30:b9:68:f8:03:6b:af:b1: 21:8e:36:dc:0c:6e:b7:ac:5d:c2:ba:29:33:66:d1:2e:37:6f: 4f:fa:bd:79:5e:11:b9:3f:23:01:bc:c8:80:4a:a7:95:82:e7: b5:f7:bf:a8:d7:52:21:8c:65:15:ba:22:af:dd:6b:89:2f:e7: 2c:1e:d0:e3:43:bb:ff:bb:34:43:7f:94:4f:be:6d:c2:24:73: f8:da:e2:ba:7a:d8:ca:01:f8:aa:54:80:37:fc:ae:81:e5:05: 15:95:b5:76:00:d4:20:1b:f3:77:9e:a0:6f:96:a1:63:d8:e3: 5e:06:36:5a:c6:fa:77:8d:05:ad:b4:84:a9:4b:5f:f0:cf:3c: 0e:46:d3:50:c0:7e:50:da:3f:00:df:23:de:c2:13:a9:7e:27: 1c:23:82:c6:5c:19:bf:37:69:c2:2e:54:63:a4:6b:9c:e9:bc: d2:0a:5b:47:c0:c7:e5:c3:d0:55:a7:1d:f8:9b:a2:53:2c:b7: 0a:6f:44:e6 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgICJ1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjYwNzE2MTYxNTQ4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU5MDNiNC0wYmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSGXy89g5E2jofCoEwFBKn7oBLGsMiZb/czJa8Xnenz9GSy7kg1bm+C82qNJ mzOlYefWDZJL4RY1s2ymXb7+yzM0oXXSJGyjSUI7uPDvnrTpqDJLRzRozYpKKiGA IriLABnywwyoY/TJYlLEQ13l2q7gSEbRxnfZP2+Gu3CdsYiptmvAX3v4cLc2klx/ aoYZkyOnsPwLebwEDjH4zY6YqA102QmSCXMipSIGu2RD8sWYYyBs+3JAOl2aqgyJ GDBKnGmQn/h+trtq+JrI6fE3/zoCbGU4YpgxhC+iQwQmLVBXqk/NdZx3ZJsIkb1F aBlOZxAyjbtxspnd9r6YkkA3awIDAQABo4ICjTCCAokwHQYDVR0OBBYEFB3kyIX6 eJCAFeHZYvfxeWXSxMK8MB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUVFNTMvMzg1MTE4NDA0NTg4MTFFNTlCMkQ4MzcxQzRGOUFFMDIvNjNDOTdDQkFD NDlFMTFFQkFDOTM2RDdBQzRGOUFFMDIucm9hMEwGCCsGAQUFBwEHAQH/BD0wOzAo BAIAATAiAwQAypwEMAwDBAPKnAgDBADKnAowDAMEBMqcEAMEBsqcADAPBAIAAjAJ AwcAJAToAN4AMA0GCSqGSIb3DQEBCwUAA4IBAQAwKWuH1k8coKkErCJvdF5Ct2Mn xbpuKec5SGLvzMmkdutkFuXbiQG/xiO5PcUK7uGeIMy++oVYF4qsEPGVlGiWMLlo +ANrr7EhjjbcDG63rF3CuikzZtEuN29P+r15XhG5PyMBvMiASqeVgue197+o11Ih jGUVuiKv3WuJL+csHtDjQ7v/uzRDf5RPvm3CJHP42uK6etjKAfiqVIA3/K6B5QUV lbV2ANQgG/N3nqBvlqFj2ONeBjZaxvp3jQWttISpS1/wzzwORtNQwH5Q2j8A3yPe whOpficcI4LGXBm/N2nCLlRjpGuc6bzSCltHwMflw9BVpx34m6JTLLcKb0Tm -----END CERTIFICATE-----Generated at Tue Jul 21 13:27:16 2026 by rpki-client