$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/6D4A0AECAAA711EE9614335BC4F9AE02.roa File: 6D4A0AECAAA711EE9614335BC4F9AE02.roa (raw, json) Hash identifier: 1twMlo+JXOt6S/bU+EbCrbHYDIKFZBOCmGbY4QNuYkg= Subject key identifier: 46:D0:B3:36:73:75:9B:A8:FE:A9:47:2C:C4:FA:77:E7:4E:18:53:94 Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 211D Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/6D4A0AECAAA711EE9614335BC4F9AE02.roa Signing time: Wed 30 Sep 2026 16:32:04 +0000 ROA not before: Wed 30 Sep 2026 16:32:04 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 58519 IP address blocks: 150.223.0.0/16 maxlen: 16 202.98.194.0/23 maxlen: 23 203.189.208.0/20 maxlen: 20 223.255.252.0/24 maxlen: 24 223.255.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8477 (0x211d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Sep 30 16:32:04 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd3984-9635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:4e:89:e2:db:e5:43:06:35:65:b6:62:b0:d2: 58:ca:a7:e9:1a:11:1a:97:23:2b:4a:9e:9b:94:7b: a1:55:6a:71:de:cc:fe:92:f1:96:36:11:a6:4c:45: 61:c0:8e:b6:b2:a3:3a:c6:5f:9d:35:14:81:fc:80: a6:2e:12:c2:d4:09:d4:82:2a:07:3a:28:07:de:d0: 3e:71:7a:8d:9e:78:60:b0:22:5e:00:84:81:6b:ee: d3:a6:5e:07:58:9b:8f:bf:65:f1:61:9c:c3:02:25: ab:5f:b4:4f:d6:aa:07:c8:4c:b6:29:07:5f:84:22: 9f:74:22:e6:90:cf:a4:65:d2:d3:f4:45:bc:04:42: d8:d5:e0:f8:a4:5d:a7:29:c4:4c:32:bc:c6:22:e5: e6:3a:1b:25:2b:90:19:06:55:ac:cd:b8:5a:e1:8b: 4f:b6:5d:da:b6:35:ba:b3:c1:f0:39:72:ce:e1:6b: 31:66:09:35:0f:d6:40:73:59:39:6d:5f:a3:d6:56: 21:a7:37:46:f5:90:77:4f:16:61:6c:4f:e7:3e:c0: 28:79:59:e2:58:a2:b1:1f:37:16:10:3e:a7:c9:9b: 51:57:0d:52:2f:ef:e6:03:d8:f0:de:64:39:a3:50: 99:19:23:c7:97:f3:f9:f4:37:b0:61:2b:2d:1b:ba: 2a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D0:B3:36:73:75:9B:A8:FE:A9:47:2C:C4:FA:77:E7:4E:18:53:94 X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/6D4A0AECAAA711EE9614335BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 150.223.0.0/16 202.98.194.0/23 203.189.208.0/20 223.255.252.0/23 Signature Algorithm: sha256WithRSAEncryption 29:57:5c:71:44:4e:63:dd:18:07:8e:8a:7f:25:94:01:14:f6: 0f:36:25:1f:0c:ce:8e:40:a7:7a:43:79:a7:af:c5:41:b9:b1: 7c:19:ce:fc:6c:fd:e5:28:bd:7e:f9:6d:9c:62:dd:a7:a4:f0: 49:9a:a0:50:b2:f6:fd:a1:c5:c8:fa:a1:89:54:4a:fe:69:e1: 37:ef:26:d0:7f:11:2d:43:df:59:82:f0:89:fd:45:00:72:6b: 4f:7f:d8:09:dd:48:a7:e6:84:b6:41:b5:ba:bc:f2:af:cc:72: d6:bf:20:b0:05:31:63:9f:3d:f8:0a:eb:a7:9c:1f:ae:ad:ab: 90:6a:e3:b0:7e:a7:22:f7:a1:b6:b7:34:01:81:7d:49:72:cd: de:27:37:20:b1:b1:a1:6e:e3:f4:cf:0e:be:a5:ad:af:e5:6d: a7:01:b0:b9:4b:a1:c8:ca:46:12:17:ff:00:9f:26:1f:64:1b: e0:47:f9:71:bb:0c:65:7d:eb:e0:9d:3a:9a:bf:af:03:bf:75: a9:67:eb:d1:a0:a1:0f:d5:0e:65:f8:76:04:4d:c3:28:a2:cf: f8:79:72:aa:26:e5:3f:a3:1a:6d:f5:5f:dc:81:fd:f1:6a:5a: 6a:07:dd:72:d0:77:a2:48:8d:98:4e:f8:6d:07:4c:ad:ee:da: bc:eb:08:03 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICIR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjYwOTMwMTYzMjA0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkMzk4NC05NjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9E6J4tvlQwY1ZbZisNJYyqfpGhEalyMrSp6blHuhVWpx3sz+kvGWNhGmTEVh wI62sqM6xl+dNRSB/ICmLhLC1AnUgioHOigH3tA+cXqNnnhgsCJeAISBa+7Tpl4H WJuPv2XxYZzDAiWrX7RP1qoHyEy2KQdfhCKfdCLmkM+kZdLT9EW8BELY1eD4pF2n KcRMMrzGIuXmOhslK5AZBlWszbha4YtPtl3atjW6s8HwOXLO4WsxZgk1D9ZAc1k5 bV+j1lYhpzdG9ZB3TxZhbE/nPsAoeVniWKKxHzcWED6nyZtRVw1SL+/mA9jw3mQ5 o1CZGSPHl/P59DewYSstG7oqnQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFEbQszZz dZuo/qlHLMT6d+dOGFOUMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvNkQ0QTBBRUNB QUE3MTFFRTk2MTQzMzVCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAd BAIAATAXAwMAlt8DBAHKYsIDBATLvdADBAHf//wwDQYJKoZIhvcNAQELBQADggEB AClXXHFETmPdGAeOin8llAEU9g82JR8Mzo5Ap3pDeaevxUG5sXwZzvxs/eUovX75 bZxi3aek8EmaoFCy9v2hxcj6oYlUSv5p4TfvJtB/ES1D31mC8In9RQBya09/2And SKfmhLZBtbq88q/Mcta/ILAFMWOfPfgK66ecH66tq5Bq47B+pyL3oba3NAGBfUly zd4nNyCxsaFu4/TPDr6lra/lbacBsLlLocjKRhIX/wCfJh9kG+BH+XG7DGV96+Cd Opq/rwO/daln69GgoQ/VDmX4dgRNwyiiz/h5cqom5T+jGm31X9yB/fFqWmoH3XLQ d6JIjZhO+G0HTK3u2rzrCAM= -----END CERTIFICATE-----Generated at Mon Oct 26 22:56:32 2026 by rpki-client