$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/5AF5468879D811F18B1076AA62A30FBC.roa File: 5AF5468879D811F18B1076AA62A30FBC.roa (raw, json) Hash identifier: Txk3oJfW8oIUxGfHQSNc17ubTWdL39XUVrUs5+VxnYc= Subject key identifier: 3F:B9:02:C6:16:FD:24:33:02:EA:EC:73:B2:1C:12:13:55:38:31:32 Certificate issuer: /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Certificate serial: 0671 Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/5AF5468879D811F18B1076AA62A30FBC.roa Signing time: Tue 07 Jul 2026 07:51:22 +0000 ROA not before: Tue 07 Jul 2026 07:51:22 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45237 IP address blocks: 202.170.64.0/24 maxlen: 24 202.170.65.0/24 maxlen: 24 202.170.66.0/24 maxlen: 24 202.170.67.0/24 maxlen: 24 202.170.68.0/24 maxlen: 24 202.170.69.0/24 maxlen: 24 202.170.70.0/24 maxlen: 24 202.170.71.0/24 maxlen: 24 202.170.73.0/24 maxlen: 24 202.170.74.0/24 maxlen: 24 202.170.75.0/24 maxlen: 24 202.170.77.0/24 maxlen: 24 202.170.78.0/24 maxlen: 24 202.170.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 07:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1649 (0x671) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5972, serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Validity Not Before: Jul 7 07:51:22 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6a4caffa-e86b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5d:75:63:13:3c:8d:5b:55:c0:e0:95:a6:5b: 28:35:2b:ee:c7:b0:ef:aa:7b:44:39:22:4e:14:16: 06:2f:27:01:fc:97:1d:af:b9:2a:4e:b2:20:2c:11: e6:cc:e4:1b:b9:da:85:6f:dd:af:0e:8f:aa:e1:4e: f6:6c:0e:c2:9c:02:ce:52:5a:1f:d7:4e:b1:9a:21: fa:ce:6d:5c:ef:c2:62:30:a6:db:d5:1c:18:43:89: 45:53:8d:e2:9d:96:7f:4d:ac:43:94:d0:1e:f2:5c: 4e:9f:65:46:cd:08:ff:bc:0e:51:93:df:07:08:8e: 68:fa:8b:c0:87:79:6e:22:e7:66:98:31:12:fa:45: 95:83:76:ec:de:5d:13:e5:da:a8:be:c8:3d:91:05: 97:de:61:df:db:89:2e:6b:ad:9b:f3:b1:b2:90:82: 51:11:42:d7:22:3d:72:54:b0:3d:0b:31:12:ca:45: d6:4a:82:2d:56:a2:70:19:73:d7:fc:13:be:0e:58: 35:74:a2:5e:e4:3b:c3:57:e0:92:08:bc:06:4e:6a: cd:54:9a:e2:cc:69:9f:1b:8d:c4:dd:23:61:2b:b6: f8:0c:1c:a8:6d:52:4e:2f:6d:34:84:0b:66:82:77: 3e:a4:27:90:f0:79:05:db:e2:c9:16:dd:da:0f:79: 13:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B9:02:C6:16:FD:24:33:02:EA:EC:73:B2:1C:12:13:55:38:31:32 X509v3 Authority Key Identifier: keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/5AF5468879D811F18B1076AA62A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 202.170.64.0/21 202.170.73.0-202.170.75.255 202.170.77.0-202.170.79.255 Signature Algorithm: sha256WithRSAEncryption 0a:8b:2d:50:0e:08:d2:76:78:fa:47:ff:9b:53:3e:b0:bd:81: 1e:21:11:d4:37:3f:f2:96:f2:21:0f:56:ec:d1:e1:4c:fe:53: c8:36:ea:f5:8f:1d:70:83:e2:5a:26:69:c9:48:4a:fe:8d:49: cd:e4:2f:02:c9:41:b2:55:97:ac:1b:b6:da:6f:9e:11:c9:62: 08:70:c9:59:5b:2f:de:8f:43:ab:fd:b5:1f:ab:7d:2c:f2:3e: 20:41:b4:26:9f:c7:7c:a4:33:6a:59:66:c8:22:36:a9:e0:f5: a0:0e:d2:02:77:b9:14:3b:33:01:0e:f8:59:c9:6a:bf:5b:84: 8f:92:c6:ef:22:26:72:55:00:bf:7a:b2:73:a5:78:07:2a:c0: 7b:7b:b0:07:ba:9c:3b:ce:db:c4:ef:60:33:aa:a3:6d:31:1e: 05:a6:39:77:ed:46:6d:c9:f7:a3:3e:f3:07:a9:35:e7:5a:c6: d3:e3:33:9d:5b:90:a2:75:af:57:f4:85:24:89:19:bf:87:46: b2:3a:ca:38:f2:25:9c:e1:56:39:df:23:c9:e9:b1:c4:13:50: f4:05:38:77:8a:8e:16:87:1e:ba:d1:5c:7f:ae:f2:76:90:24: cf:8d:ea:a2:df:2a:de:5a:03:be:8d:1e:b8:7f:82:e2:99:2d: a9:19:c3:80 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgICBnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5NzIxMTAvBgNVBAUTKEFGNzk4NzQzREFCNjQ3ODY4QUI2NjY3M0FGN0ExMzZD MkVBMEVBNUIwHhcNMjYwNzA3MDc1MTIyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRjYWZmYS1lODZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjF11YxM8jVtVwOCVplsoNSvux7DvqntEOSJOFBYGLycB/Jcdr7kqTrIgLBHm zOQbudqFb92vDo+q4U72bA7CnALOUlof106xmiH6zm1c78JiMKbb1RwYQ4lFU43i nZZ/TaxDlNAe8lxOn2VGzQj/vA5Rk98HCI5o+ovAh3luIudmmDES+kWVg3bs3l0T 5dqovsg9kQWX3mHf24kua62b87GykIJREULXIj1yVLA9CzESykXWSoItVqJwGXPX /BO+Dlg1dKJe5DvDV+CSCLwGTmrNVJrizGmfG43E3SNhK7b4DByobVJOL200hAtm gnc+pCeQ8HkF2+LJFt3aD3kTyQIDAQABo4ICfDCCAngwHQYDVR0OBBYEFD+5AsYW /SQzAursc7IcEhNVODEyMB8GA1UdIwQYMBaAFK95h0PatkeGirZmc696E2wuoOpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTk3Mi85QkY2QzQ0RUYw MzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0YUt0bVp6cjNvVGJDNmc2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzbUhROXEyUjRhS3RtWnpyM29UYkM2ZzZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU5NzIvOUJGNkM0NEVGMDMxMTFFQjk1Rjc2NzQ4QzRGOUFFMDIvNUFGNTQ2ODg3 OUQ4MTFGMThCMTA3NkFBNjJBMzBGQkMucm9hMDsGCCsGAQUFBwEHAQH/BCwwKjAo BAIAATAiAwQDyqpAMAwDBADKqkkDBALKqkgwDAMEAMqqTQMEBMqqQDANBgkqhkiG 9w0BAQsFAAOCAQEACostUA4I0nZ4+kf/m1M+sL2BHiER1Dc/8pbyIQ9W7NHhTP5T yDbq9Y8dcIPiWiZpyUhK/o1JzeQvAslBslWXrBu22m+eEcliCHDJWVsv3o9Dq/21 H6t9LPI+IEG0Jp/HfKQzallmyCI2qeD1oA7SAne5FDszAQ74Wclqv1uEj5LG7yIm clUAv3qyc6V4ByrAe3uwB7qcO87bxO9gM6qjbTEeBaY5d+1Gbcn3oz7zB6k151rG 0+MznVuQonWvV/SFJIkZv4dGsjrKOPIlnOFWOd8jyemxxBNQ9AU4d4qOFoceutFc f67ydpAkz43qot8q3loDvo0euH+C4pktqRnDgA== -----END CERTIFICATE-----Generated at Wed Jul 8 08:16:32 2026 by rpki-client