$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E395A29EB8F111E98C5EE76CC4F9AE02.roa File: E395A29EB8F111E98C5EE76CC4F9AE02.roa (raw, json) Hash identifier: GP9Yp1aiGEJ5gYnTCu9iyT8G1vWmdLU9R7fy0MWgcxM= Subject key identifier: 7A:28:1E:2B:ED:D1:E6:74:AB:32:22:DD:EF:9D:E1:D5:B4:9A:DB:F3 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E1B9 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E395A29EB8F111E98C5EE76CC4F9AE02.roa Signing time: Sun 31 May 2026 16:31:13 +0000 ROA not before: Sun 31 May 2026 16:31:13 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 10077 IP address blocks: 202.56.96.0/24 maxlen: 24 202.56.97.0/24 maxlen: 24 202.56.98.0/24 maxlen: 24 202.56.99.0/24 maxlen: 24 202.56.100.0/24 maxlen: 24 202.56.101.0/24 maxlen: 24 202.56.102.0/24 maxlen: 24 202.56.103.0/24 maxlen: 24 202.56.104.0/24 maxlen: 24 202.56.105.0/24 maxlen: 24 202.56.106.0/24 maxlen: 24 202.56.107.0/24 maxlen: 24 202.56.108.0/24 maxlen: 24 202.56.109.0/24 maxlen: 24 202.56.110.0/24 maxlen: 24 202.56.111.0/24 maxlen: 24 202.56.112.0/24 maxlen: 24 202.56.113.0/24 maxlen: 24 202.56.114.0/24 maxlen: 24 202.56.115.0/24 maxlen: 24 202.56.116.0/24 maxlen: 24 202.56.117.0/24 maxlen: 24 202.56.118.0/24 maxlen: 24 202.56.119.0/24 maxlen: 24 202.56.120.0/24 maxlen: 24 202.56.121.0/24 maxlen: 24 202.56.122.0/24 maxlen: 24 202.56.123.0/24 maxlen: 24 202.56.124.0/24 maxlen: 24 202.56.125.0/24 maxlen: 24 202.56.126.0/24 maxlen: 24 202.56.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57785 (0xe1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 16:31:13 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c6251-2557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3e:5f:3b:15:3a:8e:df:d3:45:bd:40:5b:ee: 6c:0b:6e:14:d1:61:3f:cb:f1:35:a8:25:40:0e:1b: 96:8d:9b:bb:d6:65:af:60:c7:15:ea:92:66:e3:3c: 79:d9:8d:c4:43:38:aa:3b:b0:3d:c5:27:6f:3e:11: 5a:af:e8:3d:8d:1d:19:c0:da:af:e0:0e:ab:24:55: c7:c3:77:9b:d9:4c:98:59:50:c7:89:d3:6f:72:fb: eb:5e:0e:8f:f5:42:87:59:6b:5c:71:6e:72:45:6d: ea:c1:1e:88:41:80:7a:e5:76:da:c7:f1:f7:e4:7f: 70:aa:e6:e0:6f:8d:84:bf:8e:98:14:aa:2c:b9:94: 0e:c7:42:fa:8e:1b:9f:72:b9:ee:bc:c1:22:90:41: f6:49:ee:7c:e7:45:83:f0:00:4d:4d:87:b3:90:46: 75:df:77:4d:59:24:d6:7f:76:c6:a4:3f:da:d9:3a: 8b:7b:e0:4c:68:b8:86:51:bb:c9:ce:71:75:32:20: 1f:34:8b:0f:3b:30:c8:e8:23:c2:37:0a:4a:d9:0c: 25:0d:6b:f5:a0:07:63:77:76:69:52:3c:0f:92:07: ab:bb:d1:d7:c4:bd:3d:de:1c:fc:f3:64:27:d9:8d: 23:42:27:a2:fa:41:19:27:db:1f:fd:4b:37:49:e6: 31:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:28:1E:2B:ED:D1:E6:74:AB:32:22:DD:EF:9D:E1:D5:B4:9A:DB:F3 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E395A29EB8F111E98C5EE76CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.56.96.0/19 Signature Algorithm: sha256WithRSAEncryption ad:39:d0:fb:82:39:39:45:26:ca:52:1c:17:11:92:da:ca:7b: 3e:4a:56:ab:25:13:9d:72:73:16:2a:dc:f3:1f:cc:07:8b:6f: c0:e5:75:bb:30:44:90:f2:df:3a:96:68:37:75:0f:05:18:f6: 7c:b7:8e:7d:9f:86:f5:df:3e:2a:8b:e3:4f:c9:e3:a2:fd:4d: ad:0d:3f:c4:00:b9:94:39:b1:d4:3b:ef:50:60:6f:dc:9a:14: d9:e4:8c:c1:8d:5b:62:81:05:eb:de:10:cd:c1:11:de:bf:f1: fd:1e:68:39:79:a8:15:cb:0b:21:c0:e3:06:bf:e4:9e:4e:47: b5:10:6d:ad:91:f5:43:68:e6:d9:5e:c4:19:02:72:bd:4a:e6: 7f:e8:67:26:b2:b8:cc:06:26:47:50:2e:a6:62:aa:c5:d6:a6: 8b:40:91:c7:66:1d:4f:70:25:fb:ba:e0:8d:fa:b0:40:01:cf: 67:b1:8d:89:2d:a4:ad:60:a9:f5:be:d1:03:21:39:bb:ca:db: ac:06:a6:59:d7:38:05:39:e4:3d:21:c1:2a:02:0e:0b:75:71: 48:ed:c7:ee:45:77:c1:ba:84:52:86:68:78:d2:7c:6f:ba:0f: 97:ed:0d:f7:90:cc:68:8d:5e:b4:ee:aa:0e:ff:42:ee:00:08: c9:44:8d:f0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDAOG5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE2MzExM1oXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzYyNTEtMjU1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQ+XzsVOo7f00W9QFvubAtuFNFhP8vxNaglQA4blo2bu9Zlr2DHFeqSZuM8 edmNxEM4qjuwPcUnbz4RWq/oPY0dGcDar+AOqyRVx8N3m9lMmFlQx4nTb3L7614O j/VCh1lrXHFuckVt6sEeiEGAeuV22sfx9+R/cKrm4G+NhL+OmBSqLLmUDsdC+o4b n3K57rzBIpBB9knufOdFg/AATU2Hs5BGdd93TVkk1n92xqQ/2tk6i3vgTGi4hlG7 yc5xdTIgHzSLDzswyOgjwjcKStkMJQ1r9aAHY3d2aVI8D5IHq7vR18S9Pd4c/PNk J9mNI0InovpBGSfbH/1LN0nmMVsCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBR6KB4r 7dHmdKsyIt3vneHVtJrb8zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0UzOTVBMjlF QjhGMTExRTk4QzVFRTc2Q0M0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBco4YDANBgkqhkiG9w0BAQsFAAOCAQEArTnQ+4I5OUUmylIcFxGS 2sp7PkpWqyUTnXJzFirc8x/MB4tvwOV1uzBEkPLfOpZoN3UPBRj2fLeOfZ+G9d8+ KovjT8njov1NrQ0/xAC5lDmx1DvvUGBv3JoU2eSMwY1bYoEF694QzcER3r/x/R5o OXmoFcsLIcDjBr/knk5HtRBtrZH1Q2jm2V7EGQJyvUrmf+hnJrK4zAYmR1AupmKq xdami0CRx2YdT3Al+7rgjfqwQAHPZ7GNiS2krWCp9b7RAyE5u8rbrAamWdc4BTnk PSHBKgIOC3VxSO3H7kV3wbqEUoZoeNJ8b7oPl+0N95DMaI1etO6qDv9C7gAIyUSN 8A== -----END CERTIFICATE-----Generated at Thu Jun 4 09:03:07 2026 by rpki-client