$ rpki-client -vvvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/654665EA197611F09D2B1C76C4F9AE02.roa File: 654665EA197611F09D2B1C76C4F9AE02.roa (raw, json) Hash identifier: aK8dqHQhP2CUMG60oejQ+2Rxxxws0ICOGcDSSEAi96I= Subject key identifier: B5:20:DB:D9:CB:19:25:7A:53:77:2F:BA:83:F6:8C:A9:C4:94:B9:19 Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Certificate serial: 0933 Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/654665EA197611F09D2B1C76C4F9AE02.roa Signing time: Fri 24 Jul 2026 17:30:03 +0000 ROA not before: Fri 24 Jul 2026 17:30:03 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 58889 IP address blocks: 45.64.136.0/24 maxlen: 24 45.64.138.0/24 maxlen: 24 45.64.139.0/24 maxlen: 24 2401:1980::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 16:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2355 (0x933) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9, serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Validity Not Before: Jul 24 17:30:03 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a63a11b-8999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:a2:6e:f7:c4:63:bb:6a:2c:12:87:26:14: 95:b6:02:bf:65:cf:6d:8c:e2:20:ee:76:89:70:c6: 74:29:cf:4e:e9:d8:3e:8a:1a:b7:63:87:08:99:82: 29:4a:75:3e:c9:91:0f:65:42:c4:6f:c0:a3:ab:7d: 57:88:12:5f:b2:09:7e:bb:f6:e2:81:4d:2a:22:4f: a7:c2:38:1d:69:c3:36:63:36:1c:f1:d4:bd:49:67: 99:12:2f:0d:76:94:28:1b:7a:24:75:1c:90:f2:41: 18:c9:70:4e:d4:0a:c5:ce:e7:07:c4:5b:58:89:8e: 00:8a:d1:6d:ab:26:2e:57:54:c4:0b:3a:26:e5:13: c5:4f:aa:45:ed:4b:f3:e1:a8:f0:11:fc:f9:c0:66: f2:96:8c:d5:14:be:20:f9:e8:15:24:8d:0a:db:1b: bb:95:75:cb:3d:c5:34:33:84:5c:4b:3e:b6:9c:eb: f0:c4:ef:10:c5:f1:98:ef:86:bd:b0:83:7c:fc:39: fc:ca:ed:63:36:da:e9:d7:75:76:18:f6:a4:a0:78: 9a:e5:5d:c1:ec:55:c4:f4:68:2f:27:ae:04:7c:ce: 66:73:24:46:b7:84:e2:cb:7e:33:a7:94:b0:5a:76: 7c:33:fa:d8:bc:90:df:e6:fe:37:cc:27:58:d0:71: 29:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:20:DB:D9:CB:19:25:7A:53:77:2F:BA:83:F6:8C:A9:C4:94:B9:19 X509v3 Authority Key Identifier: keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/654665EA197611F09D2B1C76C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.64.136.0/24 45.64.138.0/23 IPv6: 2401:1980::/32 Signature Algorithm: sha256WithRSAEncryption 04:81:b3:ac:0b:29:b4:1d:72:39:ac:ab:85:ac:a1:f9:44:b6: 0d:8b:8a:98:cf:da:a1:04:fb:8b:f1:c0:5f:c9:75:b8:2e:5a: 0e:41:ea:8c:f4:05:d9:00:23:61:21:1e:f0:44:93:b9:29:a5: 54:f1:a1:bb:cf:49:c5:8c:18:c4:32:d3:17:ba:86:79:fb:53: cf:fc:49:da:91:9d:9d:08:f3:ef:55:41:8a:d3:ab:e7:9f:20: a4:46:5d:ff:ef:29:2d:a6:1c:84:41:4f:17:1e:4e:c7:66:cb: c9:58:a1:3c:44:93:94:b4:2a:86:9b:e6:2d:1c:54:21:40:6c: 71:24:8f:ca:50:05:44:a0:06:0e:c0:97:33:8f:b2:ed:e3:fe: 41:6b:cc:a7:50:3b:84:14:58:59:d1:d0:26:a3:10:1b:e3:c6: 97:db:0d:80:ac:24:8a:b5:91:a1:9e:b2:e8:55:04:1e:57:ae: 5b:19:d0:11:be:cf:d1:06:76:94:13:3e:78:42:91:56:8f:ec: 73:3b:65:4c:d3:c7:86:0b:27:d0:1a:77:bc:ef:3d:f5:69:2f: 49:53:c6:a4:0a:eb:42:72:b7:45:ec:25:5b:5b:de:7f:f7:f6: 28:a6:3b:e1:07:1d:8d:df:fe:8b:2e:d6:31:32:4d:40:04:18: 04:94:e8:77 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDUyODJBNDY0MkFGN0QzNTc5OTI5MUJCQTQ0N0VBMTQy NTFBNEQ1RkMwHhcNMjYwNzI0MTczMDAzWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYzYTExYi04OTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9OibvfEY7tqLBKHJhSVtgK/Zc9tjOIg7naJcMZ0Kc9O6dg+ihq3Y4cImYIp SnU+yZEPZULEb8Cjq31XiBJfsgl+u/bigU0qIk+nwjgdacM2YzYc8dS9SWeZEi8N dpQoG3okdRyQ8kEYyXBO1ArFzucHxFtYiY4AitFtqyYuV1TECzom5RPFT6pF7Uvz 4ajwEfz5wGbylozVFL4g+egVJI0K2xu7lXXLPcU0M4RcSz62nOvwxO8QxfGY74a9 sIN8/Dn8yu1jNtrp13V2GPakoHia5V3B7FXE9GgvJ64EfM5mcyRGt4Tiy34zp5Sw WnZ8M/rYvJDf5v43zCdY0HEp+wIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFLUg29nL GSV6U3cvuoP2jKnElLkZMB8GA1UdIwQYMBaAFFKCpGQq99NXmSkbukR+oUJRpNX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAxZVpLUnU2Ukg2aFFsR2sx ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvS2taQ3IzMDFlWktSdTZSSDZoUWxHazFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTgyRDkvMEVEQTZENUVDRERBMTFFN0JERUE4QzJCQzRGOUFFMDIvNjU0NjY1RUEx OTc2MTFGMDlEMkIxQzc2QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQALUCIAwQBLUCKMA0EAgACMAcDBQAkARmAMA0GCSqGSIb3DQEBCwUA A4IBAQAEgbOsCym0HXI5rKuFrKH5RLYNi4qYz9qhBPuL8cBfyXW4LloOQeqM9AXZ ACNhIR7wRJO5KaVU8aG7z0nFjBjEMtMXuoZ5+1PP/EnakZ2dCPPvVUGK06vnnyCk Rl3/7yktphyEQU8XHk7HZsvJWKE8RJOUtCqGm+YtHFQhQGxxJI/KUAVEoAYOwJcz j7Lt4/5Ba8ynUDuEFFhZ0dAmoxAb48aX2w2ArCSKtZGhnrLoVQQeV65bGdARvs/R BnaUEz54QpFWj+xzO2VM08eGCyfQGne87z31aS9JU8akCutCcrdF7CVbW95/9/Yo pjvhBx2N3/6LLtYxMk1ABBgElOh3 -----END CERTIFICATE-----Generated at Sat Sep 5 03:18:22 2026 by rpki-client