$ rpki-client -vvf rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/75AB676E747811EDA48E0D52C4F9AE02.roa File: 75AB676E747811EDA48E0D52C4F9AE02.roa (raw, json) Hash identifier: 0ZX7onnHeath/X0shPjw6NE2rJxaKKkRVT87NS18/xg= Subject key identifier: E6:5F:DE:6B:C5:6A:A5:2E:4F:DE:1A:84:39:FA:AA:23:F8:47:1B:73 Certificate issuer: /CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27 Certificate serial: 3573 Authority key identifier: D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/75AB676E747811EDA48E0D52C4F9AE02.roa Signing time: Wed 04 Mar 2026 15:10:32 +0000 ROA not before: Wed 04 Mar 2026 15:10:31 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 17660 IP address blocks: 45.64.248.0/22 maxlen: 22 103.245.240.0/22 maxlen: 22 103.245.242.0/23 maxlen: 23 119.2.96.0/19 maxlen: 19 202.144.128.0/19 maxlen: 19 202.144.128.0/19 maxlen: 24 202.144.128.0/20 maxlen: 20 202.144.144.0/20 maxlen: 20 2405:d000::/32 maxlen: 32 2405:d000::/32 maxlen: 48 2405:d000:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13683 (0x3573) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D99A, serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27 Validity Not Before: Mar 4 15:10:31 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a84b67-5286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4a:46:c6:05:d2:06:86:da:53:2b:d3:ea:e2: ea:d2:3d:d3:ee:dc:f4:58:d7:c4:02:b2:4c:6e:d8: bf:c2:44:0b:00:79:87:75:e7:a4:1d:ed:49:b4:9c: 48:a9:dd:95:45:bc:dc:62:ff:6c:15:36:8d:2d:49: 6b:23:91:b1:e0:59:bf:de:c6:b9:6b:0e:b5:c4:7c: 1a:27:49:e5:ff:44:83:1a:15:1c:be:d3:f4:72:0e: 66:28:4b:c8:84:3c:ed:e9:f8:b2:db:da:55:9a:16: c1:7a:43:9f:65:a3:6c:5a:be:d6:e0:25:a4:1a:a5: 20:06:8a:6e:28:4c:e5:24:cb:4c:56:53:ef:11:51: 04:c2:31:a7:4e:61:44:8c:b5:a7:1d:4f:b7:ef:05: 42:e3:c4:66:c0:2b:a1:14:02:0a:79:1f:32:40:4d: 2e:e8:66:5b:a8:18:82:53:8f:51:89:93:11:92:99: 66:88:43:4e:0a:10:46:10:ad:37:61:ac:1a:54:3a: 49:b6:b0:0c:33:77:c3:43:ec:dc:d5:e7:05:ae:f0: 57:00:16:40:ea:7d:31:e4:3b:38:a3:c1:8d:47:fd: 50:d5:b2:72:e2:4a:56:f1:0b:35:dd:cd:8f:95:cd: 55:7e:7c:4b:33:ee:57:73:1d:76:38:dd:af:df:e1: ab:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5F:DE:6B:C5:6A:A5:2E:4F:DE:1A:84:39:FA:AA:23:F8:47:1B:73 X509v3 Authority Key Identifier: keyid:D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/75AB676E747811EDA48E0D52C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.64.248.0/22 103.245.240.0/22 119.2.96.0/19 202.144.128.0/19 IPv6: 2405:d000::/32 Signature Algorithm: sha256WithRSAEncryption 8a:26:c7:94:86:3d:4d:43:c2:52:7d:be:2c:e2:17:d4:e5:ae: 60:34:6b:93:5d:e3:bd:46:9c:ec:84:f8:14:44:2f:b8:ed:63: 09:a1:09:56:dd:a1:e7:54:af:3e:84:24:08:b6:62:f4:89:b0: ca:e8:20:06:16:b5:b0:25:2f:64:58:86:2f:c3:6d:e8:80:c7: 83:05:88:60:f9:6e:62:53:2f:c5:22:e6:7b:76:8f:b5:66:35: 1b:fe:25:11:58:fa:ce:71:6b:6b:33:db:3c:11:76:ee:ec:73: bd:ce:5b:70:a2:75:6d:f6:c1:63:1f:7f:21:65:6f:b9:41:a6: 9f:29:61:ed:62:dd:86:bd:f8:84:af:24:85:53:39:8d:37:81: 24:3d:f6:bd:96:91:12:de:69:bf:3c:38:c2:cf:7c:4b:9d:93: 96:cc:6b:a1:29:b9:f8:7c:0e:48:a6:72:56:42:e1:b7:00:ed: f9:1c:a0:9e:06:a6:a5:8e:db:6c:02:e7:b7:12:58:e3:be:22: 9d:73:c2:ac:4d:81:28:58:dd:4b:ef:d7:87:ce:c9:b2:80:2f: 1b:28:a2:49:d9:d4:f8:08:2a:36:44:08:17:b8:31:da:47:ec: f4:51:f5:22:42:1c:dc:71:c5:59:1f:c0:58:bd:05:4e:85:ba: d7:47:be:61 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICNXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ5OUExMTAvBgNVBAUTKEQxN0Q3N0NCMEM4OUI5OTRDRERBQ0JBMjc1MjcwQTFF NzREQ0FBMjcwHhcNMjYwMzA0MTUxMDMxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE4NGI2Ny01Mjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA60pGxgXSBobaUyvT6uLq0j3T7tz0WNfEArJMbti/wkQLAHmHdeekHe1JtJxI qd2VRbzcYv9sFTaNLUlrI5Gx4Fm/3sa5aw61xHwaJ0nl/0SDGhUcvtP0cg5mKEvI hDzt6fiy29pVmhbBekOfZaNsWr7W4CWkGqUgBopuKEzlJMtMVlPvEVEEwjGnTmFE jLWnHU+37wVC48RmwCuhFAIKeR8yQE0u6GZbqBiCU49RiZMRkplmiENOChBGEK03 YawaVDpJtrAMM3fDQ+zc1ecFrvBXABZA6n0x5Ds4o8GNR/1Q1bJy4kpW8Qs13c2P lc1VfnxLM+5Xcx12ON2v3+GrXwIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFOZf3mvF aqUuT94ahDn6qiP4RxtzMB8GA1UdIwQYMBaAFNF9d8sMibmUzdrLonUnCh503Kon MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDk5QS8xNzg4MjJEQTFE ODUxMUUyQTgyQTdDREIwOEIwMkNEMi8wWDEzeXd5SnVaVE4yc3VpZFNjS0huVGNx aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBYMTN5d3lKdVpUTjJzdWlkU2NLSG5UY3FpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQ5OUEvMTc4ODIyREExRDg1MTFFMkE4MkE3Q0RCMDhCMDJDRDIvNzVBQjY3NkU3 NDc4MTFFREE0OEUwRDUyQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCLUD4AwQCZ/XwAwQFdwJgAwQFypCAMA0EAgACMAcDBQAkBdAAMA0G CSqGSIb3DQEBCwUAA4IBAQCKJseUhj1NQ8JSfb4s4hfU5a5gNGuTXeO9RpzshPgU RC+47WMJoQlW3aHnVK8+hCQItmL0ibDK6CAGFrWwJS9kWIYvw23ogMeDBYhg+W5i Uy/FIuZ7do+1ZjUb/iURWPrOcWtrM9s8EXbu7HO9zltwonVt9sFjH38hZW+5Qaaf KWHtYt2GvfiErySFUzmNN4EkPfa9lpES3mm/PDjCz3xLnZOWzGuhKbn4fA5IpnJW QuG3AO35HKCeBqaljttsAue3EljjviKdc8KsTYEoWN1L79eHzsmygC8bKKJJ2dT4 CCo2RAgXuDHaR+z0UfUiQhzcccVZH8BYvQVOhbrXR75h -----END CERTIFICATE-----Generated at Thu Mar 26 05:36:00 2026 by rpki-client