$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/F0F715D8D91811EFAD9B2462C4F9AE02.roa File: F0F715D8D91811EFAD9B2462C4F9AE02.roa (raw, json) Hash identifier: TXS7m8u3jpVNxcKVei/wIBnu/kzPeAazyZKz1QHbBUQ= Subject key identifier: BD:08:9C:34:34:36:B2:3F:AC:78:CE:CF:F9:27:2C:52:FB:05:87:17 Certificate issuer: /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677 Certificate serial: 05DC Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/F0F715D8D91811EFAD9B2462C4F9AE02.roa Signing time: Mon 18 May 2026 23:28:55 +0000 ROA not before: Mon 18 May 2026 23:28:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 203.20.192.0/24 maxlen: 24 203.20.193.0/24 maxlen: 24 203.20.194.0/24 maxlen: 24 203.20.195.0/24 maxlen: 24 203.20.196.0/24 maxlen: 24 203.20.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1500 (0x5dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91356BB, serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677 Validity Not Before: May 18 23:28:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a0ba0b7-234b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:85:c2:f4:af:7c:9b:ce:61:28:cf:88:0c: fa:d8:27:f1:4c:f2:d4:7a:25:a4:2f:1f:d4:56:83: fa:3b:cd:fc:22:5d:3f:7a:b6:2f:fd:36:98:6b:1c: 52:f6:6b:ba:48:a5:78:13:ce:a8:70:56:eb:c6:d9: ff:ae:bf:da:bd:f6:5d:61:39:09:cf:d1:b7:ef:13: 15:eb:71:ed:fa:c5:d4:33:71:8b:c4:06:0b:20:3e: b9:da:4b:b3:28:8c:b9:ce:98:34:e1:cb:f2:0b:95: f7:b5:9d:d4:eb:9c:7e:f5:c1:93:ff:43:44:ad:0b: 21:40:17:f0:77:02:7c:a1:c8:60:0d:19:2a:a9:b5: 93:e0:eb:e9:82:e5:66:a7:ae:f7:ea:bd:05:d2:44: 45:1e:e6:9d:e9:d3:22:dc:78:5f:a9:56:44:d2:7e: 60:d0:ed:cd:77:b3:65:68:6e:05:39:a1:36:be:5c: 3d:9d:ac:6b:b7:f4:09:22:68:4f:f4:b8:73:05:21: 45:db:78:86:57:92:21:1e:e0:06:91:71:82:05:d5: d5:38:50:db:e2:1e:ea:39:31:04:73:55:b1:6e:22: e4:1f:4b:06:74:95:3e:b8:12:b7:8f:f0:03:91:55: 18:3f:65:1e:64:bb:ac:b5:60:ff:ea:d5:6f:f2:f3: a0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:08:9C:34:34:36:B2:3F:AC:78:CE:CF:F9:27:2C:52:FB:05:87:17 X509v3 Authority Key Identifier: keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/F0F715D8D91811EFAD9B2462C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.20.192.0-203.20.196.255 203.20.198.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:d2:d7:75:eb:d7:b6:4b:80:84:dd:8b:c3:ac:50:9e:f2:b1: 39:63:cc:1e:4f:f0:f2:9f:62:af:a1:93:a4:77:6b:63:4b:55: 2f:24:7b:2a:31:d5:2c:e6:67:08:5f:86:71:f9:c7:12:80:ff: 45:3e:00:d0:ba:63:63:11:b7:ad:30:26:3a:5a:3c:1d:a2:09: 58:a1:de:16:79:64:90:35:bc:03:9e:e9:dd:42:df:32:18:d8: 3c:cb:fb:22:80:91:dc:ca:2e:e3:0c:d1:ca:4d:bd:31:eb:da: a3:16:2e:09:f0:5e:fe:48:cd:fe:00:73:2a:27:99:17:89:74: aa:23:8d:b7:c1:e8:94:6d:b7:e4:2a:2c:d3:ec:80:85:1a:0f: 70:2f:53:f8:e1:a5:f7:d6:13:8f:46:f8:aa:ad:ca:20:74:a1: a9:9b:3c:93:ae:56:df:f9:f8:33:dc:39:27:b1:bf:c4:f1:b4: f8:ac:c7:2f:24:fb:f1:14:cc:4c:88:1a:1b:1d:92:f0:b9:64: 4c:b5:12:89:e0:cd:02:e8:6f:98:21:e4:76:5e:33:a8:5d:fc: 50:ea:7d:89:c7:70:3d:ec:0c:84:fb:63:c2:e1:c0:71:40:13: 80:5b:19:2b:93:fa:90:fb:06:6f:1f:c6:8a:92:c9:e1:33:f1: 7b:e1:04:fe -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICBdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2QkIxMTAvBgNVBAUTKDJDQ0ExMzU0MEYwMTNCOTNCMjNDOURGMTREOTYxN0RB NDBDQjI2NzcwHhcNMjYwNTE4MjMyODU1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTBiYTBiNy0yMzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2yFwvSvfJvOYSjPiAz62CfxTPLUeiWkLx/UVoP6O838Il0/erYv/TaYaxxS 9mu6SKV4E86ocFbrxtn/rr/avfZdYTkJz9G37xMV63Ht+sXUM3GLxAYLID652kuz KIy5zpg04cvyC5X3tZ3U65x+9cGT/0NErQshQBfwdwJ8ochgDRkqqbWT4OvpguVm p6736r0F0kRFHuad6dMi3HhfqVZE0n5g0O3Nd7NlaG4FOaE2vlw9naxrt/QJImhP 9LhzBSFF23iGV5IhHuAGkXGCBdXVOFDb4h7qOTEEc1WxbiLkH0sGdJU+uBK3j/AD kVUYP2UeZLustWD/6tVv8vOgfwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFL0InDQ0 NrI/rHjOz/knLFL7BYcXMB8GA1UdIwQYMBaAFCzKE1QPATuTsjyd8U2WF9pAyyZ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQi81Q0VBNTQ5NDE2 RDUxMUVDQTdGM0Y0NkFDNEY5QUUwMi9MTW9UVkE4Qk81T3lQSjN4VFpZWDJrRExK bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNb1RWQThCTzVPeVBKM3hUWllYMmtETEpuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzU2QkIvNUNFQTU0OTQxNkQ1MTFFQ0E3RjNGNDZBQzRGOUFFMDIvRjBGNzE1RDhE OTE4MTFFRkFEOUIyNDYyQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBAbLFMADBADLFMQDBADLFMYwDQYJKoZIhvcNAQELBQADggEBAH3S 13Xr17ZLgITdi8OsUJ7ysTljzB5P8PKfYq+hk6R3a2NLVS8keyox1SzmZwhfhnH5 xxKA/0U+ANC6Y2MRt60wJjpaPB2iCVih3hZ5ZJA1vAOe6d1C3zIY2DzL+yKAkdzK LuMM0cpNvTHr2qMWLgnwXv5Izf4AcyonmReJdKojjbfB6JRtt+QqLNPsgIUaD3Av U/jhpffWE49G+KqtyiB0oambPJOuVt/5+DPcOSexv8TxtPisxy8k+/EUzEyIGhsd kvC5ZEy1EongzQLob5gh5HZeM6hd/FDqfYnHcD3sDIT7Y8LhwHFAE4BbGSuT+pD7 Bm8fxoqSyeEz8XvhBP4= -----END CERTIFICATE-----Generated at Thu May 21 10:52:32 2026 by rpki-client