$ rpki-client -vvvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/63B6131AACDC11F1BA9026BD6C11F970.roa File: 63B6131AACDC11F1BA9026BD6C11F970.roa (raw, json) Hash identifier: u2ZZTBSaARH8wYVcsod+kQtz4biaPoR3PQpSSHrcENw= Subject key identifier: A2:C5:C4:79:49:5A:53:BC:76:A6:CE:67:67:12:0E:03:C6:53:73:C9 Certificate issuer: /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85 Certificate serial: 33FE Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/63B6131AACDC11F1BA9026BD6C11F970.roa Signing time: Tue 15 Sep 2026 08:37:00 +0000 ROA not before: Tue 15 Sep 2026 08:36:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 18066 IP address blocks: 14.140.56.0/21 maxlen: 21 14.140.61.0/24 maxlen: 24 59.163.240.0/20 maxlen: 20 115.112.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 15:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13310 (0x33fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85 Validity Not Before: Sep 15 08:36:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6aa903ab-bb97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9c:1b:27:da:1a:05:cc:bc:57:c8:af:f4:9e: 28:f4:5b:b5:0e:ed:e0:7a:b4:6b:c8:f7:28:b2:b7: 12:60:8e:5a:d9:f0:b4:66:36:9a:a9:00:d1:8f:b0: 34:74:f3:04:bd:b7:1b:3e:4a:80:46:4d:e0:6a:a1: f8:b6:78:bc:0e:9a:5c:61:e6:48:d8:70:11:a2:63: c4:f8:10:e4:2f:9b:01:5f:7a:0e:e4:f0:8e:29:0a: 3f:22:98:e3:cd:6e:63:4e:68:ea:ca:45:07:44:2b: 22:79:80:18:a1:00:46:c5:11:8e:bd:41:59:f2:2d: a2:85:da:fd:b7:75:2c:03:77:b1:62:c7:9b:2f:b9: c0:97:d5:dc:92:27:10:99:38:4a:7a:8a:46:a8:a3: ae:c6:55:a9:46:99:ff:33:21:4d:90:fd:e1:6e:a8: 1c:5e:43:52:ea:dc:48:1f:f6:b5:f1:f6:0f:a8:b1: b7:e1:85:2e:75:90:61:c0:40:fa:86:45:30:11:29: 87:3f:4e:88:48:25:1d:f1:35:a2:d9:3d:88:1a:49: 2c:6f:72:05:8f:ab:e1:57:ab:91:38:5f:97:73:9e: ac:ec:bb:9b:48:9f:19:e4:a5:15:84:bc:77:f0:48: bf:26:a1:ec:b4:ec:5e:01:5c:13:48:31:42:77:14: 6a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C5:C4:79:49:5A:53:BC:76:A6:CE:67:67:12:0E:03:C6:53:73:C9 X509v3 Authority Key Identifier: keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/63B6131AACDC11F1BA9026BD6C11F970.roa sbgp-ipAddrBlock: critical IPv4: 14.140.56.0/21 59.163.240.0/20 115.112.124.0/22 Signature Algorithm: sha256WithRSAEncryption 31:bf:00:b5:fe:73:c8:5d:6b:eb:f0:eb:e7:aa:ea:49:b4:fe: fc:68:14:6a:1d:4f:0c:f8:d7:4d:6f:3d:04:c0:76:db:70:07: f0:5f:e6:e7:a3:10:79:99:3b:84:b3:c7:50:e1:c5:34:23:fa: 7b:e5:3b:8f:4c:1b:5d:43:bf:6c:1b:85:40:b7:0f:47:4e:51: 5c:d8:b1:68:98:65:4f:e1:49:62:da:7c:c0:96:05:d3:2a:1d: a1:d6:4c:8b:c0:53:f4:79:64:01:ea:18:77:3b:d2:0a:ce:60: 95:1e:6f:55:ad:57:40:9f:95:01:0b:45:52:f4:da:1c:aa:8d: 7b:c8:f8:4e:25:09:a4:21:0f:74:43:dc:57:09:7f:82:4c:94: 1f:56:4e:bc:ff:cb:71:f7:77:d9:0c:17:c7:2c:57:b8:ff:34: a7:97:a0:5c:0a:1a:aa:19:bf:17:31:3b:9e:c9:4e:3b:95:b7: f1:b6:00:fe:c7:c9:9d:ed:34:12:62:ef:db:d9:a8:ea:df:ec: e4:9e:1b:60:16:78:18:12:b4:cc:3c:15:1c:ca:8a:d2:93:48: df:ed:2c:af:9d:83:a1:ff:64:24:44:8f:36:6a:90:e3:ec:a9: e2:f4:20:57:7f:33:ec:8d:e5:e5:55:83:41:38:7d:e1:1f:71: aa:3f:d9:b7 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICM/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3 OUJFQTZBODUwHhcNMjYwOTE1MDgzNjU5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE5MDNhYi1iYjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpwbJ9oaBcy8V8iv9J4o9Fu1Du3gerRryPcosrcSYI5a2fC0ZjaaqQDRj7A0 dPMEvbcbPkqARk3gaqH4tni8DppcYeZI2HARomPE+BDkL5sBX3oO5PCOKQo/Ipjj zW5jTmjqykUHRCsieYAYoQBGxRGOvUFZ8i2ihdr9t3UsA3exYsebL7nAl9XckicQ mThKeopGqKOuxlWpRpn/MyFNkP3hbqgcXkNS6txIH/a18fYPqLG34YUudZBhwED6 hkUwESmHP06ISCUd8TWi2T2IGkksb3IFj6vhV6uROF+Xc56s7LubSJ8Z5KUVhLx3 8Ei/JqHstOxeAVwTSDFCdxRqwwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKLFxHlJ WlO8dqbOZ2cSDgPGU3PJMB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NENFNzUvRDIyRUYzRDZGRjRCMTFFMjgxQkUwNjYyNTkxMUVBMzIvNjNCNjEzMUFB Q0RDMTFGMUJBOTAyNkJENkMxMUY5NzAucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQDDow4AwQEO6PwAwQCc3B8MA0GCSqGSIb3DQEBCwUAA4IBAQAxvwC1 /nPIXWvr8OvnqupJtP78aBRqHU8M+NdNbz0EwHbbcAfwX+bnoxB5mTuEs8dQ4cU0 I/p75TuPTBtdQ79sG4VAtw9HTlFc2LFomGVP4Uli2nzAlgXTKh2h1kyLwFP0eWQB 6hh3O9IKzmCVHm9VrVdAn5UBC0VS9Nocqo17yPhOJQmkIQ90Q9xXCX+CTJQfVk68 /8tx93fZDBfHLFe4/zSnl6BcChqqGb8XMTueyU47lbfxtgD+x8md7TQSYu/b2ajq 3+zknhtgFngYErTMPBUcyorSk0jf7SyvnYOh/2QkRI82apDj7Kni9CBXfzPsjeXl VYNBOH3hH3GqP9m3 -----END CERTIFICATE-----Generated at Sat Oct 10 12:58:46 2026 by rpki-client