$ rpki-client -vvf rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/B0071914AAE811EA8412810FC4F9AE02.roa File: B0071914AAE811EA8412810FC4F9AE02.roa (raw, json) Hash identifier: gqN4+0x/iPERujmuiwnxSyaP8QLNa37HtTvPV2wxA2M= Subject key identifier: 40:5C:3A:6A:44:D7:BB:8A:79:77:86:E2:96:DE:AA:C9:BB:59:11:63 Certificate issuer: /CN=A911C005/serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22 Certificate serial: 099C Authority key identifier: 83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/B0071914AAE811EA8412810FC4F9AE02.roa Signing time: Mon 02 Mar 2026 20:24:48 +0000 ROA not before: Mon 02 Mar 2026 20:24:48 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 9474 IP address blocks: 202.140.64.0/19 maxlen: 19 202.140.64.0/20 maxlen: 20 202.140.69.0/24 maxlen: 24 202.140.72.0/24 maxlen: 24 202.140.76.0/24 maxlen: 24 202.140.77.0/24 maxlen: 24 202.140.78.0/24 maxlen: 24 202.140.80.0/21 maxlen: 21 202.140.88.0/21 maxlen: 21 202.140.90.0/24 maxlen: 24 202.140.92.0/24 maxlen: 24 202.140.94.0/24 maxlen: 24 202.140.96.0/19 maxlen: 19 202.140.101.0/24 maxlen: 24 202.140.107.0/24 maxlen: 24 202.140.108.0/24 maxlen: 24 202.140.110.0/24 maxlen: 24 202.140.112.0/24 maxlen: 24 202.140.114.0/24 maxlen: 24 2403:fa00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2460 (0x99c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C005, serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22 Validity Not Before: Mar 2 20:24:48 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a5f20f-a2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:63:ea:65:23:ae:60:d4:64:c4:a1:82:7a:c5: 84:1a:f9:50:f1:5c:c2:d3:7e:c6:1f:37:16:26:e5: 19:1c:3e:55:71:23:7a:0a:71:48:b4:8b:a3:2f:ea: 8d:2f:e7:fa:67:dc:9b:74:fa:e5:7f:d6:04:04:98: 7d:7e:aa:ed:cc:63:d0:29:30:4b:2a:24:4c:1b:87: a0:ff:d1:ab:18:3b:ed:fe:7d:e2:1d:5e:10:10:86: fa:42:e4:f6:60:2d:70:c0:0c:4a:4f:6e:58:a2:52: 25:b8:98:49:79:6f:54:e7:28:eb:c0:a9:b2:1c:36: 9b:a3:33:41:2d:e6:0b:1d:cb:e6:88:f4:95:3a:87: 0d:25:c4:1a:98:9e:42:e5:c1:35:cb:6c:3b:c2:19: 26:61:54:b0:07:46:69:74:d0:15:88:13:87:4a:07: 78:88:c7:56:4c:cb:f6:64:8a:f3:b0:e5:33:2e:9a: a8:35:8e:df:96:be:52:22:8b:af:6a:ff:f7:cb:58: 54:d9:ff:f7:b1:05:55:a2:c4:e3:3f:ad:ae:7f:0b: fe:cb:82:68:5f:c8:87:c9:ff:21:bc:a4:ac:bd:2b: 56:9e:15:e8:88:98:f3:bd:a4:55:dc:93:0f:25:57: 6a:27:e6:9a:f7:3f:d4:0a:dd:fd:e8:89:ab:02:1b: 40:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5C:3A:6A:44:D7:BB:8A:79:77:86:E2:96:DE:AA:C9:BB:59:11:63 X509v3 Authority Key Identifier: keyid:83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/B0071914AAE811EA8412810FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.140.64.0/18 IPv6: 2403:fa00::/32 Signature Algorithm: sha256WithRSAEncryption 5c:af:f8:a7:08:75:b6:8a:4d:ab:55:c7:49:04:46:5e:e8:39: 9f:62:26:bf:6e:b0:6a:5c:e5:e1:cc:30:86:17:fa:54:1d:b6: 7e:26:de:ad:7d:3c:91:a4:1b:37:9c:57:ef:fa:58:ca:db:ce: ca:d1:26:9a:c6:c6:07:cc:b0:39:f4:27:34:9b:c7:d5:97:be: 91:0f:c8:3f:43:e7:f5:19:86:a0:a7:91:1f:45:0c:0e:e6:36: 97:03:57:35:27:be:20:e0:6c:db:a4:71:68:d2:cf:d4:0a:07: 8b:a3:08:5f:39:74:1c:6f:af:11:5a:dd:58:58:0b:f7:9f:55: 96:e5:8d:d8:8c:d0:9a:bd:9f:b8:d3:31:8a:69:83:c3:18:1d: 5c:06:b0:5f:ed:27:56:b6:17:58:03:12:f1:3e:ef:29:f0:9e: e6:6a:ac:d3:d8:c0:7e:47:6f:51:ac:20:d9:0d:d4:7b:c1:fe: 59:19:5e:0d:df:a4:dc:eb:14:d0:aa:9a:ec:04:29:cf:fe:c7: 05:29:27:b4:8a:5e:46:05:af:0c:92:84:25:10:d8:24:da:6b: 87:90:18:8d:48:af:98:97:ba:e9:1a:e2:d2:a1:89:75:be:db: 20:ee:01:91:6c:d8:1f:76:bf:d5:a4:78:f9:42:c5:e6:11:5e: 1f:39:99:a6 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMwMDUxMTAvBgNVBAUTKDgzMERDRkNCNUE5QUEwQzdGQTdEN0FCOTk4OURBMjM0 M0RFRDJDMjIwHhcNMjYwMzAyMjAyNDQ4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ZjIwZi1hMmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmPqZSOuYNRkxKGCesWEGvlQ8VzC037GHzcWJuUZHD5VcSN6CnFItIujL+qN L+f6Z9ybdPrlf9YEBJh9fqrtzGPQKTBLKiRMG4eg/9GrGDvt/n3iHV4QEIb6QuT2 YC1wwAxKT25YolIluJhJeW9U5yjrwKmyHDabozNBLeYLHcvmiPSVOocNJcQamJ5C 5cE1y2w7whkmYVSwB0ZpdNAViBOHSgd4iMdWTMv2ZIrzsOUzLpqoNY7flr5SIouv av/3y1hU2f/3sQVVosTjP62ufwv+y4JoX8iHyf8hvKSsvStWnhXoiJjzvaRV3JMP JVdqJ+aa9z/UCt396ImrAhtA1wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFEBcOmpE 17uKeXeG4pbeqsm7WRFjMB8GA1UdIwQYMBaAFIMNz8tamqDH+n16uZidojQ97Swi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzAwNS84Q0E2ODI3NkFB RTcxMUVBQTkxMjJCMEVDNEY5QUUwMi9ndzNQeTFxYW9NZjZmWHE1bUoyaU5EM3RM Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3M1B5MXFhb01mNmZYcTVtSjJpTkQzdExDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMwMDUvOENBNjgyNzZBQUU3MTFFQUE5MTIyQjBFQzRGOUFFMDIvQjAwNzE5MTRB QUU4MTFFQTg0MTI4MTBGQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQGyoxAMA0EAgACMAcDBQAkA/oAMA0GCSqGSIb3DQEBCwUAA4IBAQBc r/inCHW2ik2rVcdJBEZe6DmfYia/brBqXOXhzDCGF/pUHbZ+Jt6tfTyRpBs3nFfv +ljK287K0SaaxsYHzLA59Cc0m8fVl76RD8g/Q+f1GYagp5EfRQwO5jaXA1c1J74g 4GzbpHFo0s/UCgeLowhfOXQcb68RWt1YWAv3n1WW5Y3YjNCavZ+40zGKaYPDGB1c BrBf7SdWthdYAxLxPu8p8J7maqzT2MB+R29RrCDZDdR7wf5ZGV4N36Tc6xTQqprs BCnP/scFKSe0il5GBa8MkoQlENgk2muHkBiNSK+Yl7rpGuLSoYl1vtsg7gGRbNgf dr/VpHj5QsXmEV4fOZmm -----END CERTIFICATE-----Generated at Thu Mar 26 14:57:50 2026 by rpki-client