$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/52ABDAEA039D11EF8E96E084C4F9AE02.roa File: 52ABDAEA039D11EF8E96E084C4F9AE02.roa (raw, json) Hash identifier: xIMNQign0DGGkUtOaIrOQY6dMumWTeS9M1Z6utQYxi0= Subject key identifier: 48:C5:8D:6B:D2:E0:E4:CC:03:0D:F9:8F:02:81:5D:3F:EE:F0:D2:9D Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 2100 Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/52ABDAEA039D11EF8E96E084C4F9AE02.roa Signing time: Wed 30 Sep 2026 16:30:57 +0000 ROA not before: Wed 30 Sep 2026 16:30:57 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 136167 IP address blocks: 203.223.17.0/24 maxlen: 24 203.223.18.0/24 maxlen: 24 203.223.19.0/24 maxlen: 24 203.223.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8448 (0x2100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Sep 30 16:30:57 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd3941-c4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a5:e4:21:64:09:c2:72:59:9b:d3:86:eb:1c: 56:a9:d9:1f:35:c2:ac:5c:06:eb:bd:88:c1:31:67: c0:69:84:da:75:3d:b4:0e:5f:6f:42:d7:b3:93:14: a8:b8:cb:c9:4e:54:d8:27:17:55:dc:1b:17:61:b6: 14:47:47:d7:d8:09:9b:39:93:e5:92:8b:f6:bc:0a: 9d:46:82:18:7a:e9:05:a6:09:58:5b:6c:11:f5:ec: 23:35:58:6e:8b:d2:27:45:2a:a0:3b:31:38:18:41: 43:2f:00:0d:d7:3d:9b:13:30:3a:22:25:1e:da:9a: a6:6b:9f:e6:e1:dc:d3:ab:74:df:15:e5:45:69:87: f0:af:d8:aa:ce:c1:0d:bd:76:52:77:35:25:80:fa: a7:17:49:25:14:6c:c5:21:bf:58:90:99:a6:df:a1: d0:28:21:ae:2e:31:42:dc:c4:1b:d6:66:3e:b6:ce: ce:70:4d:3f:e7:68:4d:1a:fa:3d:3e:b7:49:37:e4: 26:57:37:64:6f:b3:cd:96:b5:3d:d0:94:06:6b:00: b2:fb:a5:bf:7c:bc:61:39:2f:b9:ff:2c:63:42:2c: 4a:44:b8:1f:2b:1e:ad:6e:31:06:96:18:8b:09:52: d8:a5:7f:c5:1e:f6:bf:8e:15:9c:94:37:e0:98:17: b6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C5:8D:6B:D2:E0:E4:CC:03:0D:F9:8F:02:81:5D:3F:EE:F0:D2:9D X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/52ABDAEA039D11EF8E96E084C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.223.17.0-203.223.20.255 Signature Algorithm: sha256WithRSAEncryption 47:d7:0d:88:15:1b:82:68:7f:4e:ca:08:98:aa:9c:b2:94:f1: 36:da:05:0c:5b:da:e0:d5:1a:83:2c:66:84:49:70:c9:64:3f: 29:31:a6:67:34:7d:f8:21:cd:f8:62:59:14:b4:99:1e:99:23: 99:4b:6c:69:43:55:19:10:0f:0d:db:42:fb:0b:4d:e3:d8:b3: 27:17:7c:15:89:6c:9c:43:6e:d3:44:c5:31:7d:72:0e:30:90: 51:08:ad:05:17:10:45:44:12:2c:c2:9e:22:91:53:72:bb:e0: bf:23:0d:33:39:b7:77:71:2c:ee:88:86:52:53:b9:7e:fb:56: dd:9d:44:ea:fe:c9:ee:d9:63:e5:a1:1e:19:9b:c7:d8:2d:bd: 61:8c:ab:01:6f:d0:ec:8b:12:b2:cb:c4:a0:39:e3:bc:0b:bc: 85:7e:65:da:e7:69:09:88:70:97:d0:de:12:8c:cb:6a:ab:5b: 98:43:dd:d4:2f:2d:8c:50:f5:97:fb:8f:fe:79:42:e7:ab:08: 7f:46:ec:67:20:33:e7:6b:0c:60:5f:6d:96:c9:1f:d1:3d:ca: f7:23:a5:f9:6a:a7:9d:b7:0c:2e:35:9b:77:32:eb:4f:92:0d: ee:95:27:81:1a:44:fc:83:56:db:b3:44:f2:c1:a6:01:a6:3e: 3f:a7:cb:83 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICIQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjYwOTMwMTYzMDU3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkMzk0MS1jNGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAraXkIWQJwnJZm9OG6xxWqdkfNcKsXAbrvYjBMWfAaYTadT20Dl9vQtezkxSo uMvJTlTYJxdV3BsXYbYUR0fX2AmbOZPlkov2vAqdRoIYeukFpglYW2wR9ewjNVhu i9InRSqgOzE4GEFDLwAN1z2bEzA6IiUe2pqma5/m4dzTq3TfFeVFaYfwr9iqzsEN vXZSdzUlgPqnF0klFGzFIb9YkJmm36HQKCGuLjFC3MQb1mY+ts7OcE0/52hNGvo9 PrdJN+QmVzdkb7PNlrU90JQGawCy+6W/fLxhOS+5/yxjQixKRLgfKx6tbjEGlhiL CVLYpX/FHva/jhWclDfgmBe2WwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFEjFjWvS 4OTMAw35jwKBXT/u8NKdMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvNTJBQkRBRUEw MzlEMTFFRjhFOTZFMDg0QzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBADL3xEDBADL3xQwDQYJKoZIhvcNAQELBQADggEBAEfXDYgVG4Jo f07KCJiqnLKU8TbaBQxb2uDVGoMsZoRJcMlkPykxpmc0ffghzfhiWRS0mR6ZI5lL bGlDVRkQDw3bQvsLTePYsycXfBWJbJxDbtNExTF9cg4wkFEIrQUXEEVEEizCniKR U3K74L8jDTM5t3dxLO6IhlJTuX77Vt2dROr+ye7ZY+WhHhmbx9gtvWGMqwFv0OyL ErLLxKA547wLvIV+ZdrnaQmIcJfQ3hKMy2qrW5hD3dQvLYxQ9Zf7j/55QuerCH9G 7GcgM+drDGBfbZbJH9E9yvcjpflqp523DC41m3cy60+SDe6VJ4EaRPyDVtuzRPLB pgGmPj+ny4M= -----END CERTIFICATE-----Generated at Wed Oct 28 11:35:27 2026 by rpki-client