$ rpki-client -vvf rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/F16DD2B0E0FB11EE8552F941C4F9AE02.roa File: F16DD2B0E0FB11EE8552F941C4F9AE02.roa (raw, json) Hash identifier: h02dVzTuDdZnoBsgoj8lNnaKdLjE+/bsS26xsZZ0knY= Subject key identifier: 6B:A3:D5:2B:8B:84:62:E9:1A:18:2E:88:4C:F1:E3:E6:63:76:F0:6E Certificate issuer: /CN=A915B1BE/serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A Certificate serial: 01C1 Authority key identifier: C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/F16DD2B0E0FB11EE8552F941C4F9AE02.roa Signing time: Mon 15 Jun 2026 04:33:17 +0000 ROA not before: Mon 15 Jun 2026 04:33:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137883 IP address blocks: 202.37.104.0/23 maxlen: 23 202.37.104.0/24 maxlen: 24 202.37.105.0/24 maxlen: 24 2401:b620::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 04:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B1BE, serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A Validity Not Before: Jun 15 04:33:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a2f808d-e46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:07:54:fb:1b:b8:77:40:b9:d4:c4:40:41:a3: d3:47:9d:5d:06:19:83:05:97:30:c9:a6:7c:f2:b0: 32:de:9d:f3:04:12:55:2c:d0:5b:ae:d1:45:ad:a7: 43:be:ad:58:28:35:da:33:a5:0a:89:e5:e8:ad:8f: 9e:97:1e:e0:d0:b8:a4:93:13:8e:e6:e4:f8:b2:fc: 92:44:1e:74:76:90:d7:a0:22:40:b4:f2:a6:e0:f0: c6:b2:d7:ec:17:ab:48:a0:65:57:97:6c:06:f6:eb: 22:a6:3e:49:d2:30:31:b5:24:eb:80:8e:f9:9f:15: 43:3d:19:7c:0f:b6:78:d8:cb:0f:2c:18:7f:f6:ab: 3c:42:be:19:5f:25:f0:21:ac:7c:b0:24:47:eb:0c: b6:94:e1:ab:49:e5:8e:f9:dd:6a:2d:c7:bd:61:e3: 01:8c:e6:76:f4:45:9c:e5:43:56:b6:eb:0d:9f:47: b3:cc:c0:e4:9e:b7:a1:9b:d2:24:72:b5:27:2e:26: 22:d7:93:1f:b2:53:a4:19:65:15:33:dd:54:4c:1a: 4b:4c:d7:d6:f6:6c:03:78:16:61:59:0e:92:fb:69: 42:b5:a4:3b:f3:77:0c:66:f1:7e:ce:d4:41:6c:04: e6:2b:62:8b:e6:d7:e1:b4:3e:0d:9d:33:fe:f7:be: ad:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A3:D5:2B:8B:84:62:E9:1A:18:2E:88:4C:F1:E3:E6:63:76:F0:6E X509v3 Authority Key Identifier: keyid:C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/F16DD2B0E0FB11EE8552F941C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.37.104.0/23 IPv6: 2401:b620::/32 Signature Algorithm: sha256WithRSAEncryption 6e:c0:18:02:91:b0:77:52:0c:69:0b:86:db:80:e9:29:53:39: b2:51:c9:f4:c5:c5:80:66:ff:79:a9:52:8a:cd:1c:03:cc:a0: 3b:d5:c5:63:af:da:c6:86:5b:52:55:55:0f:56:7f:cd:f1:6f: 45:65:81:26:04:24:37:f3:e4:34:bb:19:67:b8:13:8c:18:15: ae:49:a7:e5:0f:51:a9:de:2b:4c:ad:78:11:38:57:82:25:63: 10:c7:f0:f3:77:2d:2f:f0:4b:c9:dc:70:8b:c2:09:66:aa:4f: 4c:ad:68:ed:cf:42:f2:d3:76:57:25:cf:c1:57:82:11:24:85: 26:11:4e:c9:19:ab:8a:77:d1:2b:50:5b:3b:f7:67:f0:92:e9: 5b:af:be:62:d6:a8:f5:64:9d:57:ab:ff:6d:73:7d:17:52:87: b6:e4:42:0c:cb:e5:3f:8c:95:0a:a7:62:7b:15:8d:0c:9e:9e: 21:0a:c0:c6:af:72:7c:13:28:33:7d:53:2c:78:cd:7d:97:9f: 2e:72:40:c8:9a:53:93:b2:35:1c:43:2e:7a:0f:05:38:db:ca: ff:46:fe:f7:12:8b:0a:36:7d:f6:82:10:80:d8:2b:3d:0b:0c: 83:f6:21:04:26:83:25:37:aa:f8:ff:d9:fa:d9:8a:6f:c3:5b: 0a:52:06:91 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIxQkUxMTAvBgNVBAUTKEM5NThGRDJBQkY4REExRjQ4OTE1MkNFNjUxQTQwODk0 NTdDRDE3NkEwHhcNMjYwNjE1MDQzMzE3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTJmODA4ZC1lNDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkgdU+xu4d0C51MRAQaPTR51dBhmDBZcwyaZ88rAy3p3zBBJVLNBbrtFFradD vq1YKDXaM6UKieXorY+elx7g0LikkxOO5uT4svySRB50dpDXoCJAtPKm4PDGstfs F6tIoGVXl2wG9usipj5J0jAxtSTrgI75nxVDPRl8D7Z42MsPLBh/9qs8Qr4ZXyXw Iax8sCRH6wy2lOGrSeWO+d1qLce9YeMBjOZ29EWc5UNWtusNn0ezzMDknrehm9Ik crUnLiYi15MfslOkGWUVM91UTBpLTNfW9mwDeBZhWQ6S+2lCtaQ783cMZvF+ztRB bATmK2KL5tfhtD4NnTP+976tDQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFGuj1SuL hGLpGhguiEzx4+ZjdvBuMB8GA1UdIwQYMBaAFMlY/Sq/jaH0iRUs5lGkCJRXzRdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjFCRS8zOTk5NTM0NEUw RkIxMUVFODc4RjBENDBDNEY5QUUwMi95Vmo5S3ItTm9mU0pGU3ptVWFRSWxGZk5G Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lWajlLci1Ob2ZTSkZTem1VYVFJbEZmTkYyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUIxQkUvMzk5OTUzNDRFMEZCMTFFRTg3OEYwRDQwQzRGOUFFMDIvRjE2REQyQjBF MEZCMTFFRTg1NTJGOTQxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQByiVoMA0EAgACMAcDBQAkAbYgMA0GCSqGSIb3DQEBCwUAA4IBAQBu wBgCkbB3UgxpC4bbgOkpUzmyUcn0xcWAZv95qVKKzRwDzKA71cVjr9rGhltSVVUP Vn/N8W9FZYEmBCQ38+Q0uxlnuBOMGBWuSaflD1Gp3itMrXgROFeCJWMQx/Dzdy0v 8EvJ3HCLwglmqk9MrWjtz0Ly03ZXJc/BV4IRJIUmEU7JGauKd9ErUFs792fwkulb r75i1qj1ZJ1Xq/9tc30XUoe25EIMy+U/jJUKp2J7FY0Mnp4hCsDGr3J8EygzfVMs eM19l58uckDImlOTsjUcQy56DwU428r/Rv73EosKNn32ghCA2Cs9CwyD9iEEJoMl N6r4/9n62Ypvw1sKUgaR -----END CERTIFICATE-----Generated at Wed Jun 24 12:34:44 2026 by rpki-client