$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/E8343A14280A11ED80EB7F2FC4F9AE02.roa File: E8343A14280A11ED80EB7F2FC4F9AE02.roa (raw, json) Hash identifier: h75R/VPyklT8Smj0zNdkHNnxIlaqr8U6bdMBzhCUFLk= Subject key identifier: 3E:52:CF:BF:67:00:FC:16:5B:97:85:F6:36:5E:D1:13:8E:67:FD:A5 Certificate issuer: /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD Certificate serial: 035A Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/E8343A14280A11ED80EB7F2FC4F9AE02.roa Signing time: Sun 15 Mar 2026 00:34:22 +0000 ROA not before: Sun 15 Mar 2026 00:34:22 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 24017 IP address blocks: 202.10.240.0/22 maxlen: 22 202.10.244.0/22 maxlen: 22 203.17.26.0/23 maxlen: 23 203.17.26.0/24 maxlen: 24 203.17.27.0/24 maxlen: 24 203.18.237.0/24 maxlen: 24 203.18.238.0/24 maxlen: 24 203.18.239.0/24 maxlen: 24 203.22.0.0/24 maxlen: 24 203.22.1.0/24 maxlen: 24 203.22.2.0/24 maxlen: 24 203.22.10.0/24 maxlen: 24 203.22.11.0/24 maxlen: 24 203.22.12.0/23 maxlen: 23 203.22.14.0/23 maxlen: 23 203.22.14.0/24 maxlen: 24 203.22.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 858 (0x35a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155AE4, serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD Validity Not Before: Mar 15 00:34:22 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69b5fe8e-4662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:ed:2e:a0:ed:6b:91:f3:4a:07:39:52:96: 4b:64:c3:60:9f:4d:25:b1:11:8c:0f:5e:2d:b0:bf: ad:9c:92:a2:d7:8f:30:e1:eb:59:72:7c:0c:5f:fd: 40:85:6a:d3:15:23:d1:ea:75:44:2a:f6:b2:50:49: 98:bb:2d:b8:bc:0a:41:0c:80:44:98:9b:a5:4d:36: a5:50:2f:61:80:d3:43:b0:54:be:fb:d5:45:df:10: b2:d8:e4:e9:f0:3e:fc:81:7c:19:ac:93:75:c1:53: e7:8d:5f:7f:0c:36:68:ff:b5:19:46:e5:07:3d:59: d0:21:1c:b8:98:13:3c:87:b7:c9:1c:1a:c2:0b:91: 1e:58:0a:82:26:ec:80:8d:cc:29:f9:4b:9f:02:23: 54:8c:da:aa:b3:18:3e:3b:3a:88:84:1e:b8:aa:ed: 72:0f:9e:92:df:97:f5:05:b6:13:71:7f:0d:aa:2b: f6:3e:1f:a9:34:8e:f6:01:8f:0a:b1:4b:53:32:8d: 38:db:8b:3a:db:96:76:65:78:84:0b:01:62:e4:88: e9:f6:7c:0d:99:03:63:b2:d1:d7:31:6b:b4:50:fb: 0a:57:c4:47:8a:c1:8a:68:c4:97:4e:2e:88:3c:7a: 54:e2:6c:ec:9e:e4:00:7a:d8:cd:02:92:45:42:70: 86:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:52:CF:BF:67:00:FC:16:5B:97:85:F6:36:5E:D1:13:8E:67:FD:A5 X509v3 Authority Key Identifier: keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/E8343A14280A11ED80EB7F2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.10.240.0/21 203.17.26.0/23 203.18.237.0-203.18.239.255 203.22.0.0-203.22.2.255 203.22.10.0-203.22.15.255 Signature Algorithm: sha256WithRSAEncryption 07:68:67:89:7e:c0:fd:14:f4:63:cf:3c:bd:20:c8:03:10:bf: c3:4c:13:7d:5c:40:58:ff:da:cf:d9:f5:59:5d:c0:3e:9c:c7: 2f:e0:9b:68:da:d4:3e:8b:02:8a:a5:d4:d1:44:4b:30:26:d4: e6:6b:e8:28:98:f7:9e:71:b3:6a:9c:92:61:f1:0e:c3:d9:94: c9:b7:12:1c:dd:ab:04:44:f1:c9:d2:09:a4:b6:b2:00:b3:1c: f4:59:3e:21:4e:2f:db:b7:35:43:28:a8:a4:7a:e4:31:df:a2: 1e:39:67:f8:5a:4e:44:bb:b2:2b:08:f2:60:f0:66:1d:3d:81: de:9c:32:b5:09:83:a7:be:f5:31:7c:a5:7a:b6:1e:ff:52:78: f7:7a:ac:64:e2:64:89:97:4d:77:5b:98:73:63:79:13:08:b0: 46:67:95:9a:92:35:1f:08:1e:05:bc:51:5f:9b:d0:83:1e:76: d3:b9:c2:8f:0f:cc:c6:8f:dc:99:0e:f3:31:96:1a:f1:c7:eb: 4d:a1:13:93:92:34:64:49:5e:81:50:19:8c:14:3b:66:64:f7: 47:46:5f:15:a9:10:2f:4f:16:8c:31:c2:7b:10:4e:92:51:60: 34:97:f3:8b:20:0f:4b:e6:d7:49:3c:3b:12:5a:48:ca:e0:82: 1a:20:3c:cb -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgICA1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBRTQxMTAvBgNVBAUTKDNDRjkxNjA4MjI2ODE5QzNFOURBODREMTE5NUI1MzI2 RjkyNDlGQkQwHhcNMjYwMzE1MDAzNDIyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWI1ZmU4ZS00NjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGftLqDta5HzSgc5UpZLZMNgn00lsRGMD14tsL+tnJKi148w4etZcnwMX/1A hWrTFSPR6nVEKvayUEmYuy24vApBDIBEmJulTTalUC9hgNNDsFS++9VF3xCy2OTp 8D78gXwZrJN1wVPnjV9/DDZo/7UZRuUHPVnQIRy4mBM8h7fJHBrCC5EeWAqCJuyA jcwp+UufAiNUjNqqsxg+OzqIhB64qu1yD56S35f1BbYTcX8Nqiv2Ph+pNI72AY8K sUtTMo0424s625Z2ZXiECwFi5Ijp9nwNmQNjstHXMWu0UPsKV8RHisGKaMSXTi6I PHpU4mzsnuQAetjNApJFQnCGZwIDAQABo4ICjzCCAoswHQYDVR0OBBYEFD5Sz79n APwWW5eF9jZe0ROOZ/2lMB8GA1UdIwQYMBaAFDz5FggiaBnD6dqE0RlbUyb5JJ+9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUFFNC9FNUQ2RDBBQzA2 NTMxMUVEODI3QkVGNTRDNEY5QUUwMi9QUGtXQ0NKb0djUHAyb1RSR1Z0VEp2a2tu NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BQa1dDQ0pvR2NQcDJvVFJHVnRUSnZra243MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTVBRTQvRTVENkQwQUMwNjUzMTFFRDgyN0JFRjU0QzRGOUFFMDIvRTgzNDNBMTQy ODBBMTFFRDgwRUI3RjJGQzRGOUFFMDIucm9hME4GCCsGAQUFBwEHAQH/BD8wPTA7 BAIAATA1AwQDygrwAwQByxEaMAwDBADLEu0DBATLEuAwCwMDAcsWAwQAyxYCMAwD BAHLFgoDBATLFgAwDQYJKoZIhvcNAQELBQADggEBAAdoZ4l+wP0U9GPPPL0gyAMQ v8NME31cQFj/2s/Z9VldwD6cxy/gm2ja1D6LAoql1NFESzAm1OZr6CiY955xs2qc kmHxDsPZlMm3EhzdqwRE8cnSCaS2sgCzHPRZPiFOL9u3NUMoqKR65DHfoh45Z/ha TkS7sisI8mDwZh09gd6cMrUJg6e+9TF8pXq2Hv9SePd6rGTiZImXTXdbmHNjeRMI sEZnlZqSNR8IHgW8UV+b0IMedtO5wo8PzMaP3JkO8zGWGvHH602hE5OSNGRJXoFQ GYwUO2Zk90dGXxWpEC9PFowxwnsQTpJRYDSX84sgD0vm10k8OxJaSMrgghogPMs= -----END CERTIFICATE-----Generated at Thu Mar 26 13:28:29 2026 by rpki-client