$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/F814A546C01411EA912AC365C4F9AE02.roa File: F814A546C01411EA912AC365C4F9AE02.roa (raw, json) Hash identifier: Oa+XnWmZj8lxQOoLBB41DoIKtq0PD+QvaiWHN0dWav0= Subject key identifier: 9C:B6:66:2B:CA:33:DE:4C:9F:99:89:82:3A:12:62:CE:65:ED:56:42 Certificate issuer: /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4 Certificate serial: 099D Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/F814A546C01411EA912AC365C4F9AE02.roa Signing time: Wed 22 Jul 2026 21:21:16 +0000 ROA not before: Wed 22 Jul 2026 21:21:16 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.249.53.0/24 maxlen: 24 45.249.54.0/24 maxlen: 24 103.16.56.0/24 maxlen: 24 103.16.58.0/24 maxlen: 24 103.16.59.0/24 maxlen: 24 103.16.101.0/24 maxlen: 24 150.242.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2461 (0x99d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A64F, serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4 Validity Not Before: Jul 22 21:21:16 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a61344c-12b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8d:98:a9:ac:6c:9e:24:8e:79:c4:c9:9a:47: ce:44:f6:21:43:6e:f1:4f:53:0c:c1:6d:d3:a1:a7: 3e:33:af:7b:8e:7a:03:1d:22:47:6d:f2:49:7f:46: 86:53:71:14:0f:83:85:28:56:07:6a:ae:4b:b1:9e: a6:4f:d4:d1:5d:55:4b:65:55:36:79:99:88:f8:de: 8d:94:29:9b:64:40:1f:17:2d:2b:3d:77:b5:da:2b: 26:f0:da:6d:6a:81:2e:bb:c0:99:1c:66:9c:69:4b: a0:7b:87:e3:9c:b9:6e:58:6e:24:f7:ff:f7:2c:b1: 86:2d:35:e6:e7:12:e1:c6:20:8c:92:36:21:c1:51: af:93:36:1a:b3:5a:30:2f:f8:b9:12:1f:ba:41:9e: 3f:55:5a:4b:01:42:a4:07:aa:5c:50:73:cf:5e:38: 1c:dc:3f:53:05:c8:51:e1:7e:e2:4d:7a:a6:0b:71: b0:78:56:dc:fd:73:1c:0c:e7:0d:e9:2f:c5:79:29: 3d:2a:db:9f:b0:22:cd:7b:fa:d5:1a:cd:f0:57:eb: d1:c9:63:ac:7d:8e:d3:b7:c3:e2:79:8f:11:0b:8d: 18:6b:54:26:be:81:f5:15:4d:60:81:39:f0:29:f3: 2d:d9:af:38:8b:26:22:15:ea:53:99:b0:a6:41:8a: 81:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B6:66:2B:CA:33:DE:4C:9F:99:89:82:3A:12:62:CE:65:ED:56:42 X509v3 Authority Key Identifier: keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/F814A546C01411EA912AC365C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.249.53.0-45.249.54.255 103.16.56.0/24 103.16.58.0/23 103.16.101.0/24 150.242.68.0/24 Signature Algorithm: sha256WithRSAEncryption 39:33:38:90:e5:39:64:62:a1:a4:d1:47:5f:62:7b:86:86:0f: 52:ff:4f:0d:9b:85:f2:c3:0e:32:35:54:9d:26:b5:bd:ad:bb: 96:be:74:79:80:07:2e:db:57:1a:98:89:19:1b:1f:9f:81:16: 16:e0:e5:30:49:b0:de:52:bb:d0:98:34:ed:51:b2:af:d2:c1: 58:f3:8d:75:3b:61:48:20:e8:ad:50:41:0f:35:2c:00:21:60: b2:31:20:35:88:55:c4:99:64:ea:19:4d:e1:eb:c4:de:a8:90: 95:61:90:52:01:25:cf:01:12:f0:5e:5e:97:9d:2a:be:0c:59: d4:b5:b5:44:0e:e6:fd:85:83:fa:63:5a:0a:90:32:d2:a1:83: 39:83:a2:4e:53:c7:05:5f:d8:8d:17:02:77:bb:87:aa:2f:ac: 48:17:ba:6c:1f:ac:53:8c:5a:69:87:97:46:c3:5b:df:ce:e8: 44:c8:78:02:3e:2b:ac:33:dc:35:a8:2e:1a:58:a8:43:43:9d: 58:f4:3f:31:be:1a:d2:9a:ed:9b:90:8c:67:1d:fc:ea:fd:45: c7:9e:2d:08:74:b9:fd:b5:bf:b9:93:a9:81:5b:65:12:65:15: 7c:40:6a:4f:fc:f8:ea:4e:dc:ac:cf:cd:a7:1f:29:52:e1:1c: 3f:3d:28:79 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICCZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE2NEYxMTAvBgNVBAUTKEQ0RDdERDI1QzcxM0U3QTk1NTRDRjM1MkQ5MzJCRjgw REE2NTJERTQwHhcNMjYwNzIyMjEyMTE2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYxMzQ0Yy0xMmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhY2YqaxsniSOecTJmkfORPYhQ27xT1MMwW3Toac+M697jnoDHSJHbfJJf0aG U3EUD4OFKFYHaq5LsZ6mT9TRXVVLZVU2eZmI+N6NlCmbZEAfFy0rPXe12ism8Npt aoEuu8CZHGacaUuge4fjnLluWG4k9//3LLGGLTXm5xLhxiCMkjYhwVGvkzYas1ow L/i5Eh+6QZ4/VVpLAUKkB6pcUHPPXjgc3D9TBchR4X7iTXqmC3GweFbc/XMcDOcN 6S/FeSk9KtufsCLNe/rVGs3wV+vRyWOsfY7Tt8PieY8RC40Ya1QmvoH1FU1ggTnw KfMt2a84iyYiFepTmbCmQYqBowIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFJy2ZivK M95Mn5mJgjoSYs5l7VZCMB8GA1UdIwQYMBaAFNTX3SXHE+epVUzzUtkyv4DaZS3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTY0Ri8zQzlFMkI1Q0Mw MTQxMUVBODE2ODkwNjVDNEY5QUUwMi8xTmZkSmNjVDU2bFZUUE5TMlRLX2dOcGxM ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFOZmRKY2NUNTZsVlRQTlMyVEtfZ05wbExlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEE2NEYvM0M5RTJCNUNDMDE0MTFFQTgxNjg5MDY1QzRGOUFFMDIvRjgxNEE1NDZD MDE0MTFFQTkxMkFDMzY1QzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAs BAIAATAmMAwDBAAt+TUDBAAt+TYDBABnEDgDBAFnEDoDBABnEGUDBACW8kQwDQYJ KoZIhvcNAQELBQADggEBADkzOJDlOWRioaTRR19ie4aGD1L/Tw2bhfLDDjI1VJ0m tb2tu5a+dHmABy7bVxqYiRkbH5+BFhbg5TBJsN5Su9CYNO1Rsq/SwVjzjXU7YUgg 6K1QQQ81LAAhYLIxIDWIVcSZZOoZTeHrxN6okJVhkFIBJc8BEvBeXpedKr4MWdS1 tUQO5v2Fg/pjWgqQMtKhgzmDok5TxwVf2I0XAne7h6ovrEgXumwfrFOMWmmHl0bD W9/O6ETIeAI+K6wz3DWoLhpYqENDnVj0PzG+GtKa7ZuQjGcd/Or9RceeLQh0uf21 v7mTqYFbZRJlFXxAak/8+OpO3KzPzacfKVLhHD89KHk= -----END CERTIFICATE-----Generated at Fri Jul 24 13:28:48 2026 by rpki-client