$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/654665EA197611F09D2B1C76C4F9AE02.roa File: 654665EA197611F09D2B1C76C4F9AE02.roa (raw, json) Hash identifier: PBLJA9vTnSqLFKqa8yTCLUG6Hs8vS1xLoBEx3PILni4= Subject key identifier: 6B:D5:00:6B:4B:67:82:71:26:D7:7E:06:BF:81:92:F7:F5:5F:F9:48 Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Certificate serial: 0922 Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/654665EA197611F09D2B1C76C4F9AE02.roa Signing time: Tue 30 Jun 2026 17:19:55 +0000 ROA not before: Tue 30 Jun 2026 17:19:55 +0000 ROA not after: Fri 30 Oct 2026 00:00:00 +0000 asID: 58889 IP address blocks: 45.64.136.0/24 maxlen: 24 45.64.138.0/24 maxlen: 24 45.64.139.0/24 maxlen: 24 2401:1980::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 16:33:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2338 (0x922) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9, serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Validity Not Before: Jun 30 17:19:55 2026 GMT Not After : Oct 30 00:00:00 2026 GMT Subject: CN=6a43fabb-ee38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:be:e7:c0:78:e7:4b:4b:8f:db:53:bc:3f: ce:d3:4e:5e:c4:be:ec:0d:61:b2:10:72:b8:a3:c9: a4:f4:63:4e:42:5d:3b:c9:f1:54:0f:c0:ff:72:1d: 11:1c:fa:df:eb:1e:86:17:ce:91:41:08:c6:c9:0d: d7:c3:43:b1:2d:18:51:c3:d3:5e:27:ee:5a:a9:5b: b3:a3:e7:b3:a6:5f:e7:02:ce:b9:80:af:d3:e4:69: c1:61:03:f5:c1:c5:a2:8e:92:f0:95:f0:a4:41:82: e8:8e:4e:7e:5b:4c:c3:de:9d:00:48:82:1a:3c:69: 81:82:d3:ba:fe:01:d5:ef:d2:bc:51:b0:13:f3:bb: 91:cc:cf:68:d6:ed:48:67:ea:a4:e5:1e:7c:59:16: f8:dd:1b:e1:8e:69:2b:fb:80:23:16:f2:41:da:f7: e3:9e:a5:48:34:56:a4:7b:15:12:dd:81:23:8b:27: c8:c1:0c:80:75:eb:79:51:3a:19:fa:6c:1a:db:6e: fa:1c:61:53:ff:8b:c9:24:ad:9b:c2:0a:f9:c3:42: 20:4d:09:43:19:f9:e6:c0:66:13:23:04:32:6d:b3: 7f:4f:b8:23:34:4c:43:29:e7:b7:10:2c:96:b1:6a: 4a:e7:b8:bf:72:30:5c:03:03:06:1c:f2:6d:a7:78: 5d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D5:00:6B:4B:67:82:71:26:D7:7E:06:BF:81:92:F7:F5:5F:F9:48 X509v3 Authority Key Identifier: keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/654665EA197611F09D2B1C76C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.64.136.0/24 45.64.138.0/23 IPv6: 2401:1980::/32 Signature Algorithm: sha256WithRSAEncryption 83:69:d8:c0:b2:4a:14:38:57:26:b3:46:18:c8:ad:5c:ef:e3: e7:4c:1c:7a:1e:6d:a1:26:ad:fd:ef:ec:0b:53:c6:cb:c4:4d: 61:90:0c:07:40:a6:b7:6d:8a:01:9a:2c:af:c0:df:ec:60:d5: f5:cf:b8:88:9d:bd:03:e7:7a:81:36:34:2a:66:ec:df:fd:08: 96:05:a7:84:6f:3b:70:7a:40:2b:a9:74:ef:aa:24:33:a6:56: ea:1a:1d:d3:be:aa:3f:2f:ec:7e:7e:9b:07:97:08:30:08:04: a8:f0:d9:7d:b7:e1:95:c2:e6:47:1a:d3:21:f1:f4:01:04:45: 37:6d:5d:bc:36:0a:d2:14:c6:94:67:6c:6e:63:69:4c:42:5c: 66:2a:2e:6f:dd:91:7c:7e:83:ac:83:00:e0:07:10:24:d6:c1: 61:0a:03:6a:78:0f:8c:d7:c8:c6:77:36:61:aa:16:b6:1d:80: bf:6e:31:2b:b9:73:1f:d6:c9:94:6b:07:ba:21:fe:88:cf:57: 8f:d1:0a:a4:dc:a7:46:6f:1d:5e:00:9f:80:b4:54:33:2b:6a: 45:2d:b8:76:dd:60:8e:39:90:48:f5:ad:a2:7d:f2:42:cd:34: 00:b2:35:ca:92:24:c7:4f:93:50:07:b0:9e:3e:2e:97:de:44: 3d:f8:6e:29 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDUyODJBNDY0MkFGN0QzNTc5OTI5MUJCQTQ0N0VBMTQy NTFBNEQ1RkMwHhcNMjYwNjMwMTcxOTU1WhcNMjYxMDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQzZmFiYi1lZTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/G+58B450tLj9tTvD/O005exL7sDWGyEHK4o8mk9GNOQl07yfFUD8D/ch0R HPrf6x6GF86RQQjGyQ3Xw0OxLRhRw9NeJ+5aqVuzo+ezpl/nAs65gK/T5GnBYQP1 wcWijpLwlfCkQYLojk5+W0zD3p0ASIIaPGmBgtO6/gHV79K8UbAT87uRzM9o1u1I Z+qk5R58WRb43Rvhjmkr+4AjFvJB2vfjnqVINFakexUS3YEjiyfIwQyAdet5UToZ +mwa2276HGFT/4vJJK2bwgr5w0IgTQlDGfnmwGYTIwQybbN/T7gjNExDKee3ECyW sWpK57i/cjBcAwMGHPJtp3hdrwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFGvVAGtL Z4JxJtd+Br+Bkvf1X/lIMB8GA1UdIwQYMBaAFFKCpGQq99NXmSkbukR+oUJRpNX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAxZVpLUnU2Ukg2aFFsR2sx ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvS2taQ3IzMDFlWktSdTZSSDZoUWxHazFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTgyRDkvMEVEQTZENUVDRERBMTFFN0JERUE4QzJCQzRGOUFFMDIvNjU0NjY1RUEx OTc2MTFGMDlEMkIxQzc2QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQALUCIAwQBLUCKMA0EAgACMAcDBQAkARmAMA0GCSqGSIb3DQEBCwUA A4IBAQCDadjAskoUOFcms0YYyK1c7+PnTBx6Hm2hJq397+wLU8bLxE1hkAwHQKa3 bYoBmiyvwN/sYNX1z7iInb0D53qBNjQqZuzf/QiWBaeEbztwekArqXTvqiQzplbq Gh3Tvqo/L+x+fpsHlwgwCASo8Nl9t+GVwuZHGtMh8fQBBEU3bV28NgrSFMaUZ2xu Y2lMQlxmKi5v3ZF8foOsgwDgBxAk1sFhCgNqeA+M18jGdzZhqha2HYC/bjEruXMf 1smUawe6If6Iz1eP0Qqk3KdGbx1eAJ+AtFQzK2pFLbh23WCOOZBI9a2iffJCzTQA sjXKkiTHT5NQB7CePi6X3kQ9+G4p -----END CERTIFICATE-----Generated at Sat Jul 18 13:35:01 2026 by rpki-client