$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/FE8AECB2607511F0901D374BC4F9AE02.roa File: FE8AECB2607511F0901D374BC4F9AE02.roa (raw, json) Hash identifier: V1clQTpgNzCoHD3obxT1d05EKWDEECnE+KNw5qWymVk= Subject key identifier: B4:1A:96:62:04:82:1C:A6:5D:A0:82:03:6C:F6:1E:95:45:54:19:AF Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Certificate serial: 0839 Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/FE8AECB2607511F0901D374BC4F9AE02.roa Signing time: Thu 14 May 2026 03:47:04 +0000 ROA not before: Thu 14 May 2026 03:47:04 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131445 IP address blocks: 14.207.0.0/21 maxlen: 21 14.207.0.0/24 maxlen: 24 14.207.1.0/24 maxlen: 24 14.207.2.0/24 maxlen: 24 14.207.3.0/24 maxlen: 24 14.207.4.0/24 maxlen: 24 14.207.5.0/24 maxlen: 24 14.207.6.0/24 maxlen: 24 14.207.32.0/24 maxlen: 24 14.207.33.0/24 maxlen: 24 14.207.34.0/24 maxlen: 24 14.207.35.0/24 maxlen: 24 14.207.36.0/24 maxlen: 24 14.207.37.0/24 maxlen: 24 14.207.38.0/24 maxlen: 24 14.207.39.0/24 maxlen: 24 14.207.40.0/24 maxlen: 24 14.207.41.0/24 maxlen: 24 14.207.42.0/24 maxlen: 24 14.207.43.0/24 maxlen: 24 14.207.44.0/22 maxlen: 23 14.207.44.0/24 maxlen: 24 14.207.45.0/24 maxlen: 24 14.207.46.0/24 maxlen: 24 14.207.47.0/24 maxlen: 24 14.207.48.0/22 maxlen: 23 14.207.48.0/24 maxlen: 24 14.207.49.0/24 maxlen: 24 14.207.50.0/24 maxlen: 24 14.207.51.0/24 maxlen: 24 14.207.52.0/22 maxlen: 23 14.207.52.0/24 maxlen: 24 14.207.53.0/24 maxlen: 24 14.207.54.0/24 maxlen: 24 14.207.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 23:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2105 (0x839) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Validity Not Before: May 14 03:47:04 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6a0545b8-8bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b9:2c:44:c4:51:7a:dd:a5:61:0d:3c:15:34: 24:75:a7:28:c0:93:55:dd:33:27:5d:57:5e:12:9b: 6a:2e:8e:93:71:03:bb:b0:c2:9f:68:1d:d6:39:59: 8d:dc:0d:3f:a1:6f:7d:4f:16:d7:ce:40:41:02:ad: fc:ca:2d:31:6b:34:0f:94:e4:f4:6c:9d:45:64:55: f4:2e:ad:24:0a:5d:26:ac:a2:66:0f:4c:80:7f:1f: 8d:15:d9:0c:74:80:ad:f1:4a:de:84:14:70:78:75: 34:17:84:6d:94:36:fc:6f:65:9d:3b:a3:62:51:10: 9d:23:a6:cc:33:0f:1f:de:d3:fa:e6:a5:31:6a:ed: 0c:7f:12:4f:69:f2:e0:aa:b1:1f:d9:4d:a9:c0:c4: 86:d6:20:98:d4:2b:17:83:fd:94:fa:7c:a4:dc:84: 17:0b:44:e0:9f:9d:0b:52:6f:f4:0a:aa:df:8f:74: a9:c8:99:11:bc:ff:a5:2e:95:d3:18:4a:56:e8:40: f8:4f:33:f0:e2:5b:61:3e:a9:76:93:eb:6e:d1:42: 75:ea:84:ad:10:a2:af:82:0d:49:0d:20:1d:55:7a: f4:90:24:b1:95:54:b5:10:23:80:e8:99:64:bc:e4: 61:8a:ba:2f:2e:cc:ed:a9:45:02:bd:25:e2:7c:45: ec:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1A:96:62:04:82:1C:A6:5D:A0:82:03:6C:F6:1E:95:45:54:19:AF X509v3 Authority Key Identifier: keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/FE8AECB2607511F0901D374BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 14.207.0.0/21 14.207.32.0-14.207.55.255 Signature Algorithm: sha256WithRSAEncryption 56:d6:41:63:5e:e1:cc:f5:8e:4c:2c:11:13:5a:5c:e3:ba:53: 6a:3b:8e:b7:e0:58:39:f3:ca:ef:47:4c:39:42:a7:85:01:f5: ba:dd:b7:68:3d:c3:8f:e4:0f:7d:bd:60:7e:c8:8b:7e:6b:48: 2c:52:4d:4b:93:6b:8d:68:44:69:59:f5:fd:cb:5c:a5:e4:e1: 44:7b:c7:fc:51:9c:06:1d:d9:f7:e9:6d:b5:ed:38:92:2a:da: b8:dd:b4:eb:61:00:12:27:57:97:89:62:e7:e1:c9:7b:ce:bf: 86:9b:19:e8:11:56:78:72:7a:b1:4d:7b:c3:ff:13:86:3c:ff: 2e:6b:d3:9d:4a:f2:9f:53:b9:8a:a8:a7:ec:b4:e5:da:c7:3a: 80:dc:ab:dc:09:eb:26:e7:ce:c0:b0:62:1d:97:ac:be:49:c4: 59:be:55:f7:30:d0:10:8f:f8:cf:18:7a:50:ea:5a:bd:bf:0b: ac:b0:91:32:c7:0a:aa:02:aa:73:63:02:1a:92:0a:75:5e:2b: 8d:29:7e:53:9f:47:bc:1b:f9:ff:bb:3f:e0:f6:6b:91:64:86: c6:2a:33:df:b6:44:ad:13:aa:5a:fb:89:30:eb:06:50:7c:30: a7:c7:c2:1b:bb:19:1a:bc:7f:56:3e:ca:b4:f1:81:06:0e:d2: 83:f7:48:e0 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1NjExMTAvBgNVBAUTKDI1QkM3RDRERTc3QkQwMUIzRDE5MTU4NzY5NkU1QUZE RDhDRUNEMDQwHhcNMjYwNTE0MDM0NzA0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTA1NDViOC04YmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLksRMRRet2lYQ08FTQkdacowJNV3TMnXVdeEptqLo6TcQO7sMKfaB3WOVmN 3A0/oW99TxbXzkBBAq38yi0xazQPlOT0bJ1FZFX0Lq0kCl0mrKJmD0yAfx+NFdkM dICt8UrehBRweHU0F4RtlDb8b2WdO6NiURCdI6bMMw8f3tP65qUxau0MfxJPafLg qrEf2U2pwMSG1iCY1CsXg/2U+nyk3IQXC0Tgn50LUm/0Cqrfj3SpyJkRvP+lLpXT GEpW6ED4TzPw4lthPql2k+tu0UJ16oStEKKvgg1JDSAdVXr0kCSxlVS1ECOA6Jlk vORhirovLsztqUUCvSXifEXsoQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFLQalmIE ghymXaCCA2z2HpVFVBmvMB8GA1UdIwQYMBaAFCW8fU3ne9AbPRkVh2luWv3Yzs0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2MS9BMjZFMDZFMDA1 NEMxMUVDQkRCNEZFNDZDNEY5QUUwMi9KYng5VGVkNzBCczlHUldIYVc1YV9kak96 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pieDlUZWQ3MEJzOUdSV0hhVzVhX2RqT3pRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc1NjEvQTI2RTA2RTAwNTRDMTFFQ0JEQjRGRTQ2QzRGOUFFMDIvRkU4QUVDQjI2 MDc1MTFGMDkwMUQzNzRCQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQDDs8AMAwDBAUOzyADBAMOzzAwDQYJKoZIhvcNAQELBQADggEBAFbW QWNe4cz1jkwsERNaXOO6U2o7jrfgWDnzyu9HTDlCp4UB9brdt2g9w4/kD329YH7I i35rSCxSTUuTa41oRGlZ9f3LXKXk4UR7x/xRnAYd2ffpbbXtOJIq2rjdtOthABIn V5eJYufhyXvOv4abGegRVnhyerFNe8P/E4Y8/y5r051K8p9TuYqop+y05drHOoDc q9wJ6ybnzsCwYh2XrL5JxFm+Vfcw0BCP+M8YelDqWr2/C6ywkTLHCqoCqnNjAhqS CnVeK40pflOfR7wb+f+7P+D2a5FkhsYqM9+2RK0Tqlr7iTDrBlB8MKfHwhu7GRq8 f1Y+yrTxgQYO0oP3SOA= -----END CERTIFICATE-----Generated at Sat Jun 6 12:26:39 2026 by rpki-client