$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/33A48584C92911EDAE3AB84EC4F9AE02.roa File: 33A48584C92911EDAE3AB84EC4F9AE02.roa (raw, json) Hash identifier: oPoTgdYw+Xp4zsCLRgOst4RRIJvgrTE9ExRg+Am+0NI= Subject key identifier: 52:EA:98:F2:76:A9:19:5F:59:A4:7C:2E:81:5A:A2:6D:EF:DE:F9:AB Certificate issuer: /CN=A91DD902/serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1 Certificate serial: 026F Authority key identifier: A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/33A48584C92911EDAE3AB84EC4F9AE02.roa Signing time: Fri 03 Jul 2026 03:29:08 +0000 ROA not before: Fri 03 Jul 2026 03:29:08 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 8075 IP address blocks: 202.14.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 623 (0x26f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD902, serialNumber=A674C6701E2B0CE3D107E9F236C55CEFE68768F1 Validity Not Before: Jul 3 03:29:08 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a472c84-ba1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:30:02:8e:bf:ae:9d:87:ca:d2:a0:0a:a0:6a: 6f:51:d3:2a:83:eb:37:77:01:07:55:ff:50:7c:62: ea:cf:b5:08:8a:db:51:70:e4:28:d7:c9:ac:b9:f2: e6:5f:c8:05:f8:b4:66:f3:c5:4d:fe:ae:7b:7e:80: 63:21:30:6b:e5:d1:36:76:69:fd:2a:78:19:00:f6: 25:ce:6b:8e:6e:12:31:bc:c1:e3:7f:fa:e4:26:bf: c1:f9:25:2b:b9:3e:b2:41:58:c6:f3:f0:48:17:1f: f1:06:b1:d9:59:2c:53:08:79:35:6c:e5:ad:19:fb: e9:a8:a4:94:49:2a:b2:e7:c0:84:1d:11:ff:f3:46: 3e:98:7a:62:90:22:67:b0:5f:fe:34:d8:3a:38:11: 6d:04:4e:36:ae:6e:50:60:9e:9e:67:e8:e6:bb:e4: c9:bd:09:70:e8:38:a6:4b:f7:fa:7c:4d:2b:ed:17: 63:9c:3d:3c:97:94:f4:d0:42:23:d3:b3:de:ba:fb: 18:0d:14:b4:04:54:88:13:91:cd:4d:8f:c4:e7:69: 06:7c:25:34:a1:69:c8:cf:58:50:41:67:09:9b:9b: ed:2e:72:17:9e:4b:7b:7c:ee:4b:40:3e:8e:6c:08: 9d:c1:00:0f:dc:a5:a2:98:47:40:b7:6c:9b:eb:f9: 61:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EA:98:F2:76:A9:19:5F:59:A4:7C:2E:81:5A:A2:6D:EF:DE:F9:AB X509v3 Authority Key Identifier: keyid:A6:74:C6:70:1E:2B:0C:E3:D1:07:E9:F2:36:C5:5C:EF:E6:87:68:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/pnTGcB4rDOPRB-nyNsVc7-aHaPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnTGcB4rDOPRB-nyNsVc7-aHaPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD902/570B3F8EC92611EDAF2B9D4DC4F9AE02/33A48584C92911EDAE3AB84EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.14.244.0/24 Signature Algorithm: sha256WithRSAEncryption 18:d7:ca:88:94:e5:c9:b9:00:37:f8:df:ae:0f:a5:e5:34:5f: 38:a4:5f:a7:4d:02:bc:ef:0c:3c:ca:96:2e:db:40:1d:1b:02: b7:d6:68:97:10:64:28:3a:de:94:cc:bf:22:17:fe:26:52:99: df:97:c1:ab:c9:84:fa:44:3d:da:01:3c:7e:67:6b:0a:c8:d8: 35:dd:9a:10:e6:f5:7d:4c:e8:b1:60:88:59:58:08:cc:1b:85: 67:57:08:e8:50:39:c2:b8:61:0c:c4:1d:33:90:f6:bd:66:90: 70:75:2a:ee:18:8b:25:0f:4b:21:5c:a8:27:7d:38:12:7f:16: 23:ec:37:94:c8:47:55:0d:a9:4e:fc:80:3b:5b:e5:84:28:91: f6:dd:78:55:45:6f:6f:ea:48:6e:a7:b0:d2:c4:7b:22:36:37: 42:d3:9f:1f:61:84:8f:46:a6:ad:85:39:f2:08:ac:0a:2d:a9: 00:68:34:ec:d8:7b:0f:44:37:09:62:4c:b9:10:fd:96:34:98: 14:d2:6d:8b:72:ea:17:a9:01:f6:9a:a8:84:e7:82:0d:33:d0: 3d:86:85:69:40:22:06:7d:b4:d0:50:8a:a3:36:7b:e7:70:e5: ca:aa:0b:94:dd:fc:0e:86:43:1b:b3:c2:cb:75:30:59:f3:52: d8:23:0e:f2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ5MDIxMTAvBgNVBAUTKEE2NzRDNjcwMUUyQjBDRTNEMTA3RTlGMjM2QzU1Q0VG RTY4NzY4RjEwHhcNMjYwNzAzMDMyOTA4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ3MmM4NC1iYTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozACjr+unYfK0qAKoGpvUdMqg+s3dwEHVf9QfGLqz7UIittRcOQo18msufLm X8gF+LRm88VN/q57foBjITBr5dE2dmn9KngZAPYlzmuObhIxvMHjf/rkJr/B+SUr uT6yQVjG8/BIFx/xBrHZWSxTCHk1bOWtGfvpqKSUSSqy58CEHRH/80Y+mHpikCJn sF/+NNg6OBFtBE42rm5QYJ6eZ+jmu+TJvQlw6DimS/f6fE0r7RdjnD08l5T00EIj 07PeuvsYDRS0BFSIE5HNTY/E52kGfCU0oWnIz1hQQWcJm5vtLnIXnkt7fO5LQD6O bAidwQAP3KWimEdAt2yb6/lhyQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFLqmPJ2 qRlfWaR8LoFaom3v3vmrMB8GA1UdIwQYMBaAFKZ0xnAeKwzj0Qfp8jbFXO/mh2jx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDkwMi81NzBCM0Y4RUM5 MjYxMUVEQUYyQjlENERDNEY5QUUwMi9wblRHY0I0ckRPUFJCLW55TnNWYzctYUhh UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BuVEdjQjRyRE9QUkItbnlOc1ZjNy1hSGFQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REQ5MDIvNTcwQjNGOEVDOTI2MTFFREFGMkI5RDREQzRGOUFFMDIvMzNBNDg1ODRD OTI5MTFFREFFM0FCODRFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyg70MA0GCSqGSIb3DQEBCwUAA4IBAQAY18qIlOXJuQA3+N+uD6Xl NF84pF+nTQK87ww8ypYu20AdGwK31miXEGQoOt6UzL8iF/4mUpnfl8GryYT6RD3a ATx+Z2sKyNg13ZoQ5vV9TOixYIhZWAjMG4VnVwjoUDnCuGEMxB0zkPa9ZpBwdSru GIslD0shXKgnfTgSfxYj7DeUyEdVDalO/IA7W+WEKJH23XhVRW9v6khup7DSxHsi NjdC058fYYSPRqathTnyCKwKLakAaDTs2HsPRDcJYky5EP2WNJgU0m2LcuoXqQH2 mqiE54INM9A9hoVpQCIGfbTQUIqjNnvncOXKqguU3fwOhkMbs8LLdTBZ81LYIw7y -----END CERTIFICATE-----Generated at Tue Jul 21 04:53:16 2026 by rpki-client