$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/ED96E29AA5CE11F1ACDCBD033411F970.roa File: ED96E29AA5CE11F1ACDCBD033411F970.roa (raw, json) Hash identifier: ETboD8H/SPOJWPUPPkIUxEyWECIq7kklKxc79MJMq8w= Subject key identifier: B5:87:3A:0C:72:9F:62:BB:EC:B6:A6:52:15:B4:1E:58:0A:CC:D7:5D Certificate issuer: /CN=A914E928/serialNumber=346C20F389DB9EDC6A1BF2F4031A9A1703BE87E1 Certificate serial: CB Authority key identifier: 34:6C:20:F3:89:DB:9E:DC:6A:1B:F2:F4:03:1A:9A:17:03:BE:87:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NGwg84nbntxqG_L0AxqaFwO-h-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/ED96E29AA5CE11F1ACDCBD033411F970.roa Signing time: Mon 14 Sep 2026 01:05:18 +0000 ROA not before: Mon 14 Sep 2026 01:05:18 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 24090 IP address blocks: 202.170.48.0/23 maxlen: 23 202.170.48.0/24 maxlen: 24 202.170.49.0/24 maxlen: 24 202.170.50.0/23 maxlen: 23 202.170.50.0/24 maxlen: 24 202.170.51.0/24 maxlen: 24 202.170.56.0/21 maxlen: 21 202.170.56.0/23 maxlen: 24 202.170.58.0/23 maxlen: 24 202.170.60.0/23 maxlen: 24 202.170.62.0/23 maxlen: 24 2402:2200:2000::/35 maxlen: 36 2402:2200:2a00::/40 maxlen: 40 2402:2200:3200::/40 maxlen: 40 2402:2200:4000::/35 maxlen: 35 2402:2200:4000::/36 maxlen: 36 2402:2200:5000::/36 maxlen: 36 2402:2200:6000::/35 maxlen: 35 2402:2200:6000::/36 maxlen: 36 2402:2200:7000::/36 maxlen: 36 2402:2200:a000::/35 maxlen: 35 2402:2200:a000::/36 maxlen: 36 2402:2200:c000::/35 maxlen: 35 2402:2200:c000::/36 maxlen: 36 2402:2200:d000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.crl rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NGwg84nbntxqG_L0AxqaFwO-h-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E928, serialNumber=346C20F389DB9EDC6A1BF2F4031A9A1703BE87E1 Validity Not Before: Sep 14 01:05:18 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6aa7484e-4b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:cc:e0:7a:51:81:4a:0e:0a:12:c8:66:58: f1:6c:3c:c8:db:e7:7f:00:cd:92:c8:8a:eb:06:b4: d4:7f:d1:2a:f3:0b:1a:cf:fa:49:58:52:00:0a:2f: cc:c2:f6:fc:eb:b2:86:2e:a1:ef:10:96:a6:81:66: 31:68:66:13:e2:2f:a7:60:66:9c:3c:b8:87:9c:0a: 23:0b:75:df:81:70:4a:e0:80:21:76:27:80:a2:b4: 5b:84:28:5b:d7:76:54:91:63:7d:07:f8:66:7a:f5: 0e:d9:e3:7e:21:c7:fb:24:6b:d5:44:82:f5:f7:8a: c9:01:45:d5:4a:73:24:e4:3e:76:ac:b7:5a:cf:25: 31:5f:f8:c4:e2:8f:f6:9a:c2:23:25:b1:06:e1:6f: fb:f6:a2:5e:e5:11:8b:2f:e3:0f:12:ce:c4:f4:d5: 42:c6:0c:21:34:61:d1:25:bc:ef:6c:71:31:d4:58: 49:f0:6b:ed:b7:d0:1f:9d:fd:8a:0c:ab:00:18:fe: 88:96:c8:d6:84:3e:cd:de:90:6b:24:05:9a:6d:4c: 04:fd:09:01:3a:92:6b:92:7d:78:1c:df:b9:44:c4: 01:a2:4c:a4:c1:0b:96:ac:b0:4e:66:40:20:78:5f: 46:cc:fb:4f:13:3e:6f:da:fa:ac:a4:d9:17:cc:50: 5e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:87:3A:0C:72:9F:62:BB:EC:B6:A6:52:15:B4:1E:58:0A:CC:D7:5D X509v3 Authority Key Identifier: keyid:34:6C:20:F3:89:DB:9E:DC:6A:1B:F2:F4:03:1A:9A:17:03:BE:87:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NGwg84nbntxqG_L0AxqaFwO-h-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/ED96E29AA5CE11F1ACDCBD033411F970.roa sbgp-ipAddrBlock: critical IPv4: 202.170.48.0/22 202.170.56.0/21 IPv6: 2402:2200:2000::-2402:2200:7fff:ffff:ffff:ffff:ffff:ffff 2402:2200:a000::-2402:2200:dfff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 78:64:5b:51:4b:a7:f6:3d:b9:81:06:61:19:21:db:91:e3:1d: ee:76:70:5c:42:6b:f7:73:8c:c1:11:94:82:59:1d:3a:a9:64: c3:12:cc:af:38:1b:d4:7c:ee:d5:ac:99:76:8d:61:4c:e0:20: cf:e3:52:87:43:b6:a3:78:d5:d2:90:6b:33:53:8d:47:d8:0d: 79:e7:b0:4c:1b:77:75:15:bb:dc:6f:c1:02:d5:bb:26:d3:53: 50:64:08:a3:52:5f:5f:0a:f2:ac:43:80:89:ef:8c:44:6b:7b: a8:5a:7b:5a:a8:ea:e9:f9:30:a1:10:34:4c:19:4e:2b:7f:31: 54:d5:7a:65:fc:42:1a:99:6e:5c:5c:36:31:ec:74:9c:e8:6f: 2d:e4:7c:ff:3e:f3:03:9e:bb:87:bd:62:cb:ae:eb:a8:dd:68: 09:ab:71:c5:a2:15:40:b9:32:b6:94:70:56:a4:3e:3a:92:c5: 60:a1:07:a4:de:a0:1b:53:c2:c2:6d:f6:e0:e6:f0:6f:fd:71: 9a:ae:17:d9:04:0a:6d:35:1e:49:2b:ef:b7:d1:64:d9:5c:03: 40:4e:bf:4d:46:c5:10:28:3a:a5:25:51:e7:a0:6c:09:7c:a7: 94:c2:cc:5c:dd:ee:1d:67:77:ed:09:a3:d4:45:c0:d8:9b:04: 40:57:47:42 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5MjgxMTAvBgNVBAUTKDM0NkMyMEYzODlEQjlFREM2QTFCRjJGNDAzMUE5QTE3 MDNCRTg3RTEwHhcNMjYwOTE0MDEwNTE4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE3NDg0ZS00YjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgrM4HpRgUoOChLIZljxbDzI2+d/AM2SyIrrBrTUf9Eq8wsaz/pJWFIACi/M wvb867KGLqHvEJamgWYxaGYT4i+nYGacPLiHnAojC3XfgXBK4IAhdieAorRbhChb 13ZUkWN9B/hmevUO2eN+Icf7JGvVRIL194rJAUXVSnMk5D52rLdazyUxX/jE4o/2 msIjJbEG4W/79qJe5RGLL+MPEs7E9NVCxgwhNGHRJbzvbHEx1FhJ8Gvtt9Afnf2K DKsAGP6IlsjWhD7N3pBrJAWabUwE/QkBOpJrkn14HN+5RMQBokykwQuWrLBOZkAg eF9GzPtPEz5v2vqspNkXzFBeVQIDAQABo4ICkjCCAo4wHQYDVR0OBBYEFLWHOgxy n2K77LamUhW0HlgKzNddMB8GA1UdIwQYMBaAFDRsIPOJ257cahvy9AMamhcDvofh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTkyOC84OUE2MEEwQ0M5 RDUxMUYwODk3RkRENEZDNEY5QUUwMi9OR3dnODRuYm50eHFHX0wwQXhxYUZ3Ty1o LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Hd2c4NG5ibnR4cUdfTDBBeHFhRndPLWgtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEU5MjgvODlBNjBBMENDOUQ1MTFGMDg5N0ZERDRGQzRGOUFFMDIvRUQ5NkUyOUFB NUNFMTFGMUFDRENCRDAzMzQxMUY5NzAucm9hMFEGCCsGAQUFBwEHAQH/BEIwQDAS BAIAATAMAwQCyqowAwQDyqo4MCoEAgACMCQwEAMGBSQCIgAgAwYHJAIiAAAwEAMG BSQCIgCgAwYFJAIiAMAwDQYJKoZIhvcNAQELBQADggEBAHhkW1FLp/Y9uYEGYRkh 25HjHe52cFxCa/dzjMERlIJZHTqpZMMSzK84G9R87tWsmXaNYUzgIM/jUodDtqN4 1dKQazNTjUfYDXnnsEwbd3UVu9xvwQLVuybTU1BkCKNSX18K8qxDgInvjERre6ha e1qo6un5MKEQNEwZTit/MVTVemX8QhqZblxcNjHsdJzoby3kfP8+8wOeu4e9Ysuu 66jdaAmrccWiFUC5MraUcFakPjqSxWChB6TeoBtTwsJt9uDm8G/9cZquF9kECm01 Hkkr77fRZNlcA0BOv01GxRAoOqUlUeegbAl8p5TCzFzd7h1nd+0Jo9RFwNibBEBX R0I= -----END CERTIFICATE-----Generated at Wed Oct 7 11:54:23 2026 by rpki-client