$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40C353A6BDE411EAB947BE63C4F9AE02.roa File: 40C353A6BDE411EAB947BE63C4F9AE02.roa (raw, json) Hash identifier: B0A91/p6ZQN9d3BwXh56Fz3baeoyjH5acmTAiM+EuFA= Subject key identifier: F9:4B:48:08:6B:B8:C6:DE:51:85:E3:3B:03:D2:51:83:58:34:EC:16 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: EB29 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40C353A6BDE411EAB947BE63C4F9AE02.roa Signing time: Sun 31 May 2026 17:49:58 +0000 ROA not before: Sun 31 May 2026 17:49:58 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 23957 IP address blocks: 202.146.192.0/24 maxlen: 24 202.146.193.0/24 maxlen: 24 202.146.194.0/24 maxlen: 24 202.146.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60201 (0xeb29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 17:49:58 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c74c6-a52a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d2:c2:77:e1:26:e6:f7:d3:34:aa:a8:bf:bd: ed:ce:62:20:90:ed:1f:60:05:c2:5d:45:e6:5f:ed: a4:f4:0f:49:de:c3:39:57:6a:53:68:0a:bc:19:2f: b8:4c:d4:76:bd:fc:af:c9:21:5c:e4:48:8c:15:b0: c3:c6:c2:c0:de:c9:ea:70:a2:dd:e4:be:5d:2c:4a: c3:e8:60:04:ae:43:91:5c:cb:0c:5f:37:6e:83:f4: ad:b8:77:44:7a:68:49:0f:02:78:46:1c:c0:f0:64: 3e:6b:51:17:24:bf:11:4e:59:df:78:56:bf:26:cb: 42:79:b6:d5:18:f8:fa:70:43:d3:53:9b:32:a7:8a: da:44:1e:8b:34:27:a1:45:98:fd:4d:d3:7c:13:53: 09:60:b7:59:51:07:1a:23:94:36:44:3d:20:c6:bc: a5:fe:d1:3c:c4:ce:50:78:20:08:5b:63:0a:c8:61: 8d:0d:d7:b2:92:3a:26:83:d1:8e:0a:fc:36:d1:51: 1a:14:a8:2e:29:75:db:a7:a7:03:ce:8e:ed:31:35: e4:0b:ee:9f:ee:1e:8b:97:70:d0:59:43:25:18:7b: 89:44:c7:ca:2e:ec:2a:81:3c:d1:6b:05:dc:a0:a3: 58:16:98:9b:af:88:22:56:1a:c6:4f:72:4e:6e:ff: 00:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4B:48:08:6B:B8:C6:DE:51:85:E3:3B:03:D2:51:83:58:34:EC:16 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/40C353A6BDE411EAB947BE63C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.146.192.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:b6:b9:8b:48:55:eb:43:c5:fc:6e:00:86:52:9e:2a:32:6f: 7b:36:52:d8:78:3f:9e:e6:f0:ae:be:8a:a0:8d:ff:68:27:06: e6:fb:48:46:23:7e:6b:68:54:e7:74:73:24:c8:a7:43:b3:1d: 04:0b:69:74:17:2a:76:84:8d:65:34:83:fb:f1:12:1e:af:c5: b5:32:8d:25:be:56:df:3a:24:2c:cc:f4:e5:42:9a:e3:c0:04: a1:7e:88:dd:c3:9a:df:fe:5c:3a:c4:3a:b5:e7:f2:2a:8c:38: 4e:04:ab:35:9d:eb:28:82:f4:2d:62:c9:f1:4e:a7:da:ab:df: 09:d0:71:8a:74:c4:19:13:e6:09:bd:1c:20:a3:b7:fe:3b:17: 3c:f2:33:2c:e7:81:c0:f1:87:62:1e:07:6d:b0:55:14:19:c5: 2b:5b:db:f4:c0:e0:56:b8:9d:e1:ca:2f:03:d5:9d:3f:0d:51: b2:42:97:b7:1f:42:7d:18:fd:94:e8:83:63:ff:c7:c6:8c:db: 7d:16:e2:d1:41:95:76:bb:fe:28:35:ca:b5:b6:06:44:fa:e3: f5:ce:97:57:51:8c:10:10:20:b0:a1:74:b3:b7:da:d0:5e:d5: 0a:7d:a5:b5:12:e7:1b:86:c1:d1:1e:ca:e1:25:e8:c6:89:dc: 56:68:90:be -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDAOspMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE3NDk1OFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzc0YzYtYTUyYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXSwnfhJub30zSqqL+97c5iIJDtH2AFwl1F5l/tpPQPSd7DOVdqU2gKvBkv uEzUdr38r8khXORIjBWww8bCwN7J6nCi3eS+XSxKw+hgBK5DkVzLDF83boP0rbh3 RHpoSQ8CeEYcwPBkPmtRFyS/EU5Z33hWvybLQnm21Rj4+nBD01ObMqeK2kQeizQn oUWY/U3TfBNTCWC3WVEHGiOUNkQ9IMa8pf7RPMTOUHggCFtjCshhjQ3XspI6JoPR jgr8NtFRGhSoLil126enA86O7TE15Avun+4ei5dw0FlDJRh7iUTHyi7sKoE80WsF 3KCjWBaYm6+IIlYaxk9yTm7/AOUCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBT5S0gI a7jG3lGF4zsD0lGDWDTsFjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQwQzM1M0E2 QkRFNDExRUFCOTQ3QkU2M0M0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAsqSwDANBgkqhkiG9w0BAQsFAAOCAQEALra5i0hV60PF/G4AhlKe KjJvezZS2Hg/nubwrr6KoI3/aCcG5vtIRiN+a2hU53RzJMinQ7MdBAtpdBcqdoSN ZTSD+/ESHq/FtTKNJb5W3zokLMz05UKa48AEoX6I3cOa3/5cOsQ6tefyKow4TgSr NZ3rKIL0LWLJ8U6n2qvfCdBxinTEGRPmCb0cIKO3/jsXPPIzLOeBwPGHYh4HbbBV FBnFK1vb9MDgVrid4covA9WdPw1RskKXtx9CfRj9lOiDY//HxozbfRbi0UGVdrv+ KDXKtbYGRPrj9c6XV1GMEBAgsKF0s7fa0F7VCn2ltRLnG4bB0R7K4SXoxoncVmiQ vg== -----END CERTIFICATE-----Generated at Thu Jun 4 09:08:54 2026 by rpki-client