$ rpki-client -vvf rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/6C8EEADA8FE011F0A1C6120DC4F9AE02.roa File: 6C8EEADA8FE011F0A1C6120DC4F9AE02.roa (raw, json) Hash identifier: hpB6XWjWMWxSngM0RUJyt0B9skfR+aSywNyweLCVrOU= Subject key identifier: 78:A5:71:93:AC:EB:9E:45:EC:F2:7E:2C:DD:EB:4D:1B:A2:8E:3E:CC Certificate issuer: /CN=A915ACE2/serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F Certificate serial: CA Authority key identifier: DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/6C8EEADA8FE011F0A1C6120DC4F9AE02.roa Signing time: Sat 25 Apr 2026 07:43:20 +0000 ROA not before: Sat 25 Apr 2026 07:43:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141342 IP address blocks: 202.63.200.0/24 maxlen: 24 202.63.202.0/24 maxlen: 24 202.63.205.0/24 maxlen: 24 202.63.207.0/24 maxlen: 24 202.63.209.0/24 maxlen: 24 202.63.210.0/24 maxlen: 24 202.63.213.0/24 maxlen: 24 202.63.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 07:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ACE2, serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F Validity Not Before: Apr 25 07:43:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69ec7098-257d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:79:17:de:a2:2f:85:4f:15:47:48:90:a7:32: 73:36:86:16:1b:aa:e3:18:29:a5:6a:44:76:e3:fc: 41:06:e9:da:41:eb:e3:ce:2a:2d:dd:8b:5c:23:e0: 05:63:83:9d:a8:f9:db:42:2a:61:12:a2:7f:8b:30: a3:de:ac:3e:9b:68:d8:24:6b:f4:05:30:6f:4d:99: 57:43:22:4b:91:17:9e:52:f4:07:52:a6:69:ab:e4: 5c:9c:fa:9b:5e:bf:e0:51:98:23:d6:96:b2:35:68: 40:64:77:21:9b:2e:b8:7c:4d:ff:f3:e6:95:70:d7: 3c:60:ff:77:f0:02:76:d1:b4:3d:3e:80:ef:ac:ee: fc:23:c9:4f:64:6b:9a:60:d1:39:be:bf:39:9e:01: a5:1f:71:dd:a2:34:e0:60:99:0b:df:4f:b8:a7:43: e7:e3:4c:f2:e7:70:a6:f5:f3:ee:51:88:d7:d2:1c: ab:f1:1b:21:42:14:3b:0b:dc:35:8a:1d:ac:ee:0c: 35:dc:47:3a:63:a0:0c:77:a1:65:71:d9:2e:f3:51: a8:02:f1:45:18:ae:5c:91:71:e1:9c:e9:27:55:d3: 7a:44:77:a2:fe:03:2e:66:47:1c:11:ef:40:94:26: 14:e5:3a:6c:0d:b2:2f:bb:71:11:b6:f3:51:5e:6a: b7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A5:71:93:AC:EB:9E:45:EC:F2:7E:2C:DD:EB:4D:1B:A2:8E:3E:CC X509v3 Authority Key Identifier: keyid:DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/6C8EEADA8FE011F0A1C6120DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.63.200.0/24 202.63.202.0/24 202.63.205.0/24 202.63.207.0/24 202.63.209.0-202.63.210.255 202.63.213.0-202.63.214.255 Signature Algorithm: sha256WithRSAEncryption 6e:1e:37:67:7e:15:c2:09:2f:96:40:c6:15:a6:a2:26:4a:6e: 1f:43:20:e4:94:b3:40:18:77:0f:4b:a9:95:cb:d1:4a:e9:f5: 78:f3:98:be:48:c7:49:00:48:68:18:2a:a3:c6:f3:ab:0d:85: 23:97:9b:03:57:54:32:6a:99:10:bc:29:28:d5:2a:75:06:65: ae:c5:20:4b:da:a2:02:74:34:ab:c3:13:5e:eb:35:02:49:39: 4c:0a:0e:81:db:57:6e:7b:95:58:c6:b3:b7:d7:0d:fd:75:62: 73:db:f9:08:91:78:0b:69:95:1d:5f:e0:c5:61:be:f9:4d:ad: 75:51:5d:8d:2b:a3:03:08:3e:ca:24:53:b4:89:52:a6:06:9e: 72:27:74:60:b6:8a:16:c3:ea:ad:cb:7e:f2:c2:89:5a:3d:97: 25:ac:c3:f5:c6:7a:ba:bd:6f:ce:92:92:ec:6c:d5:1f:54:4c: 23:f1:51:28:bd:dc:12:63:81:d1:0e:01:9a:32:e0:6c:5b:3c: 53:fe:bc:f0:3e:d4:c5:47:fe:6d:43:94:3d:9e:77:27:16:70: 05:01:10:b0:a0:c4:81:9c:13:09:14:48:fe:8a:82:59:04:53: a7:72:13:15:34:63:82:cc:83:05:91:a4:bb:be:4a:dc:25:32: 72:5e:7a:8a -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFDRTIxMTAvBgNVBAUTKERBRTFDRTBBREE2N0I0NDcxM0M2MUIxRkFFQzRGNUQ0 RDY3QTE1OUYwHhcNMjYwNDI1MDc0MzIwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWVjNzA5OC0yNTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23kX3qIvhU8VR0iQpzJzNoYWG6rjGCmlakR24/xBBunaQevjziot3YtcI+AF Y4OdqPnbQiphEqJ/izCj3qw+m2jYJGv0BTBvTZlXQyJLkReeUvQHUqZpq+RcnPqb Xr/gUZgj1payNWhAZHchmy64fE3/8+aVcNc8YP938AJ20bQ9PoDvrO78I8lPZGua YNE5vr85ngGlH3HdojTgYJkL30+4p0Pn40zy53Cm9fPuUYjX0hyr8RshQhQ7C9w1 ih2s7gw13Ec6Y6AMd6Flcdku81GoAvFFGK5ckXHhnOknVdN6RHei/gMuZkccEe9A lCYU5TpsDbIvu3ERtvNRXmq3hwIDAQABo4ICjjCCAoowHQYDVR0OBBYEFHilcZOs 655F7PJ+LN3rTRuijj7MMB8GA1UdIwQYMBaAFNrhzgraZ7RHE8YbH67E9dTWehWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUNFMi81MUNEN0ZCQTcy Q0UxMUYwODQyMUFBNDhDNEY5QUUwMi8ydUhPQ3RwbnRFY1R4aHNmcnNUMTFOWjZG WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ1SE9DdHBudEVjVHhoc2Zyc1QxMU5aNkZaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUFDRTIvNTFDRDdGQkE3MkNFMTFGMDg0MjFBQTQ4QzRGOUFFMDIvNkM4RUVBREE4 RkUwMTFGMEExQzYxMjBEQzRGOUFFMDIucm9hME0GCCsGAQUFBwEHAQH/BD4wPDA6 BAIAATA0AwQAyj/IAwQAyj/KAwQAyj/NAwQAyj/PMAwDBADKP9EDBADKP9IwDAME AMo/1QMEAMo/1jANBgkqhkiG9w0BAQsFAAOCAQEAbh43Z34VwgkvlkDGFaaiJkpu H0Mg5JSzQBh3D0uplcvRSun1ePOYvkjHSQBIaBgqo8bzqw2FI5ebA1dUMmqZELwp KNUqdQZlrsUgS9qiAnQ0q8MTXus1Akk5TAoOgdtXbnuVWMazt9cN/XVic9v5CJF4 C2mVHV/gxWG++U2tdVFdjSujAwg+yiRTtIlSpgaecid0YLaKFsPqrct+8sKJWj2X JazD9cZ6ur1vzpKS7GzVH1RMI/FRKL3cEmOB0Q4BmjLgbFs8U/688D7UxUf+bUOU PZ53JxZwBQEQsKDEgZwTCRRI/oqCWQRTp3ITFTRjgsyDBZGku75K3CUycl56ig== -----END CERTIFICATE-----Generated at Tue Apr 28 07:41:47 2026 by rpki-client