$ rpki-client -vvf rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/297EA0CE86EC11F1BEC86003A7EE528E.roa File: 297EA0CE86EC11F1BEC86003A7EE528E.roa (raw, json) Hash identifier: u+l10wNqXKtDvYB2FSJACp39xA5dy4/Me1XyWnQhQ9I= Subject key identifier: 15:A1:31:BF:0F:9A:3F:6F:B8:65:AF:D2:D2:BE:A1:43:5A:A5:AC:DC Certificate issuer: /CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27 Certificate serial: 35BE Authority key identifier: D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/297EA0CE86EC11F1BEC86003A7EE528E.roa Signing time: Thu 23 Jul 2026 23:13:49 +0000 ROA not before: Thu 23 Jul 2026 23:13:49 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 17660 IP address blocks: 45.64.248.0/22 maxlen: 22 103.245.240.0/22 maxlen: 22 103.245.242.0/23 maxlen: 23 119.2.96.0/19 maxlen: 19 202.144.128.0/19 maxlen: 24 2405:d000::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 23:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13758 (0x35be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D99A, serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27 Validity Not Before: Jul 23 23:13:49 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a62a02d-02d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:34:bf:ac:d7:d6:1c:97:e3:f3:06:26:75:8d: 81:37:64:90:c9:ad:97:f1:61:d2:52:78:df:1c:69: ab:f8:8d:b1:ac:8b:f2:42:a5:90:fe:64:b0:3c:4f: a0:d3:0e:e1:e3:dc:67:c4:37:2a:5e:a0:2a:dd:4b: 76:0e:81:90:29:af:26:ba:d8:b9:d9:44:d5:81:67: 60:8d:fa:15:2c:73:21:42:05:c2:e0:d5:d8:03:00: 30:61:d4:6e:5b:0c:13:df:f6:e0:92:57:52:ff:0c: f7:f8:0c:34:c1:82:4a:c3:04:9a:64:4f:b1:1f:f3: 48:4f:7a:c6:46:ad:55:98:74:fc:ef:4f:ed:c2:df: cb:fc:8a:d6:a8:aa:e3:e4:b3:e6:92:47:10:6c:a0: 5b:c2:4d:1a:66:2b:27:75:73:e3:69:c3:42:85:28: 92:bc:e9:b8:e9:a8:3b:7f:4d:32:83:fc:52:93:3f: a4:be:1c:e3:27:44:78:65:ba:c7:cc:00:23:13:0e: c1:11:b1:46:19:1f:72:63:67:1d:c3:d3:d5:c8:e7: 82:79:a0:fa:37:a5:e2:30:a8:41:3a:f4:64:45:b6: 7b:6d:a9:6b:46:de:43:fd:ac:50:b5:55:dc:f5:34: ce:e8:ad:7f:b5:bb:25:3c:21:80:bf:c2:bb:7f:87: 9c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A1:31:BF:0F:9A:3F:6F:B8:65:AF:D2:D2:BE:A1:43:5A:A5:AC:DC X509v3 Authority Key Identifier: keyid:D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/297EA0CE86EC11F1BEC86003A7EE528E.roa sbgp-ipAddrBlock: critical IPv4: 45.64.248.0/22 103.245.240.0/22 119.2.96.0/19 202.144.128.0/19 IPv6: 2405:d000::/32 Signature Algorithm: sha256WithRSAEncryption a6:a2:d0:64:57:87:ec:9f:db:95:fc:7b:01:c0:86:02:14:ea: b4:0d:75:16:08:63:8b:8b:79:5d:33:0e:85:b0:fc:50:9b:13: 92:dc:f2:0e:4c:b0:6f:39:4d:08:92:80:fa:a6:97:8b:84:0a: b6:03:70:f6:83:02:f6:c0:35:db:31:e9:77:bb:e1:7c:e8:50: a2:b3:ca:c3:8e:f7:76:39:fb:2c:ca:49:68:5f:9d:79:54:c9: 64:b7:d3:d9:2d:e9:01:e8:f0:50:12:1e:e6:c6:04:4c:20:10: 2e:11:5a:b1:a5:60:49:53:59:50:63:87:5e:46:fe:1b:2f:dc: 69:bc:4a:1f:34:64:e6:1d:5c:82:b5:d0:d5:f8:bf:2b:1d:bd: 8f:f3:ef:8e:66:c9:ed:46:d2:a3:2a:64:19:78:8b:ae:b2:e3: f8:20:d7:07:cd:fd:cb:1d:d1:cb:47:21:fd:b9:fd:5e:d9:b2: f6:23:58:8d:98:9f:77:4d:53:5c:9c:6b:6d:48:f0:b7:8b:3e: 0c:b7:5f:a4:46:8c:35:61:3b:6f:59:ed:7f:74:fe:3a:86:aa: 75:5e:51:92:2f:34:6e:dd:84:34:0e:45:42:e9:1d:53:35:32: a6:0d:d5:88:89:d4:df:27:f1:dd:10:f9:ed:81:59:38:70:e7: 94:79:1f:39 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICNb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ5OUExMTAvBgNVBAUTKEQxN0Q3N0NCMEM4OUI5OTRDRERBQ0JBMjc1MjcwQTFF NzREQ0FBMjcwHhcNMjYwNzIzMjMxMzQ5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYyYTAyZC0wMmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DS/rNfWHJfj8wYmdY2BN2SQya2X8WHSUnjfHGmr+I2xrIvyQqWQ/mSwPE+g 0w7h49xnxDcqXqAq3Ut2DoGQKa8muti52UTVgWdgjfoVLHMhQgXC4NXYAwAwYdRu WwwT3/bgkldS/wz3+Aw0wYJKwwSaZE+xH/NIT3rGRq1VmHT870/twt/L/IrWqKrj 5LPmkkcQbKBbwk0aZisndXPjacNChSiSvOm46ag7f00yg/xSkz+kvhzjJ0R4ZbrH zAAjEw7BEbFGGR9yY2cdw9PVyOeCeaD6N6XiMKhBOvRkRbZ7balrRt5D/axQtVXc 9TTO6K1/tbslPCGAv8K7f4ecUwIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFBWhMb8P mj9vuGWv0tK+oUNapazcMB8GA1UdIwQYMBaAFNF9d8sMibmUzdrLonUnCh503Kon MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDk5QS8xNzg4MjJEQTFE ODUxMUUyQTgyQTdDREIwOEIwMkNEMi8wWDEzeXd5SnVaVE4yc3VpZFNjS0huVGNx aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBYMTN5d3lKdVpUTjJzdWlkU2NLSG5UY3FpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQ5OUEvMTc4ODIyREExRDg1MTFFMkE4MkE3Q0RCMDhCMDJDRDIvMjk3RUEwQ0U4 NkVDMTFGMUJFQzg2MDAzQTdFRTUyOEUucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCLUD4AwQCZ/XwAwQFdwJgAwQFypCAMA0EAgACMAcDBQAkBdAAMA0G CSqGSIb3DQEBCwUAA4IBAQCmotBkV4fsn9uV/HsBwIYCFOq0DXUWCGOLi3ldMw6F sPxQmxOS3PIOTLBvOU0IkoD6ppeLhAq2A3D2gwL2wDXbMel3u+F86FCis8rDjvd2 OfssykloX515VMlkt9PZLekB6PBQEh7mxgRMIBAuEVqxpWBJU1lQY4deRv4bL9xp vEofNGTmHVyCtdDV+L8rHb2P8++OZsntRtKjKmQZeIuusuP4INcHzf3LHdHLRyH9 uf1e2bL2I1iNmJ93TVNcnGttSPC3iz4Mt1+kRow1YTtvWe1/dP46hqp1XlGSLzRu 3YQ0DkVC6R1TNTKmDdWIidTfJ/HdEPntgVk4cOeUeR85 -----END CERTIFICATE-----Generated at Fri Jul 24 03:26:51 2026 by rpki-client