$ rpki-client -vvf rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/90AE648CDA6011ED9BC6175FC4F9AE02.roa File: 90AE648CDA6011ED9BC6175FC4F9AE02.roa (raw, json) Hash identifier: sE0FXcv6AB6dmDFKiWcu8KQiOOpk2VVY0iuOGiUmgoI= Subject key identifier: 5B:43:DC:02:40:C0:C7:4E:C0:CA:EB:69:BA:CD:1B:3A:6A:0E:B1:1C Certificate issuer: /CN=A9170C53/serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA Certificate serial: 0251 Authority key identifier: E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/90AE648CDA6011ED9BC6175FC4F9AE02.roa Signing time: Wed 11 Mar 2026 02:36:07 +0000 ROA not before: Wed 11 Mar 2026 02:36:07 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 135047 IP address blocks: 210.48.174.0/24 maxlen: 24 210.48.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 593 (0x251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170C53, serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA Validity Not Before: Mar 11 02:36:07 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69b0d517-8b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:98:cb:d2:a4:c5:25:74:03:95:1c:36:2d:f4: a4:1f:6d:1e:4c:4c:5c:31:28:67:53:6a:fb:88:5f: 16:d6:94:41:5e:98:75:80:db:53:b7:5c:ca:63:73: 17:ee:5d:5b:d8:f5:87:cc:67:a2:44:b4:78:21:7b: d0:b6:a1:36:df:00:c2:e1:0b:46:63:a8:83:ff:4c: d1:67:00:9c:e0:62:26:16:f5:48:7a:06:cb:e1:0c: e8:e5:30:1f:73:c5:32:22:63:5e:2b:3a:0d:0d:b6: 2d:1b:20:dd:0b:7b:db:94:61:8f:dd:a5:5e:c9:ca: 01:f9:2b:5b:06:d8:e7:06:30:d7:c1:4e:82:20:ef: d0:fc:c3:1b:d8:6a:82:96:99:fa:f4:a7:05:cb:c9: 6c:8b:d5:9f:e1:f3:b5:da:27:54:29:3c:fc:af:58: c9:12:b3:5d:b4:b7:ed:fb:10:f3:e7:2d:c6:97:3a: 53:8f:92:0c:3a:4f:d5:ba:cf:06:5e:d3:ff:c5:14: fd:26:51:4a:7a:32:a0:32:94:7d:97:45:1c:8f:24: ca:59:54:4c:04:34:04:67:0c:59:a5:0e:6a:85:d9: 46:65:cb:21:36:28:b9:35:75:ab:83:7e:4e:cd:57: d5:8a:a7:3e:6b:6a:3a:9e:0d:59:5a:56:43:77:5b: a9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:43:DC:02:40:C0:C7:4E:C0:CA:EB:69:BA:CD:1B:3A:6A:0E:B1:1C X509v3 Authority Key Identifier: keyid:E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/90AE648CDA6011ED9BC6175FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 210.48.174.0/23 Signature Algorithm: sha256WithRSAEncryption 82:c8:47:58:e2:a3:b4:20:93:a4:8a:16:3e:d2:c2:cc:8e:48: 13:85:ce:d9:03:6e:b6:c1:be:90:79:d7:30:96:c9:f8:e8:6d: 47:b0:ea:b2:04:8f:75:a9:24:5b:a8:72:dd:d2:33:e9:a1:5b: 31:14:ec:38:70:8a:a2:94:01:26:00:7e:da:0a:0c:01:fd:ee: 81:a8:52:05:1f:19:b8:77:86:ca:ef:c1:38:f9:82:c4:2c:45: 11:75:a4:c1:dd:a2:51:8f:4d:c3:09:1b:5c:ad:e5:9a:42:52: b0:66:35:62:02:c5:46:93:ec:ac:35:f2:a2:bb:0a:fd:e3:f9: 4c:69:bc:5b:27:eb:60:48:55:20:c9:a4:3b:dc:df:38:fe:6e: 73:c2:a8:25:92:e0:d7:ee:c5:84:5a:26:b8:d6:c5:e3:ce:a2: 74:84:8d:80:ed:a7:92:e9:1f:07:41:57:e7:8a:eb:b9:cd:1b: 11:e8:8b:62:c7:f7:7a:64:32:43:e1:d4:6f:fc:53:60:c7:49: 96:b9:2d:cb:7a:0d:84:e7:5e:ad:ab:86:61:71:51:5e:b7:83: 48:2e:2a:80:8b:58:ad:3c:8d:a7:94:35:36:90:08:fc:0b:aa: 05:50:4a:19:bc:80:df:de:01:9c:49:f5:6c:c3:ea:4d:5c:12: 1e:17:a2:e6 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBDNTMxMTAvBgNVBAUTKEUxRDE0M0Q5RDhFQTAyMjI0QzFDQjBDOTE1RUNCODRF RTI4QjVBQUEwHhcNMjYwMzExMDIzNjA3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWIwZDUxNy04YjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpjL0qTFJXQDlRw2LfSkH20eTExcMShnU2r7iF8W1pRBXph1gNtTt1zKY3MX 7l1b2PWHzGeiRLR4IXvQtqE23wDC4QtGY6iD/0zRZwCc4GImFvVIegbL4Qzo5TAf c8UyImNeKzoNDbYtGyDdC3vblGGP3aVeycoB+StbBtjnBjDXwU6CIO/Q/MMb2GqC lpn69KcFy8lsi9Wf4fO12idUKTz8r1jJErNdtLft+xDz5y3GlzpTj5IMOk/Vus8G XtP/xRT9JlFKejKgMpR9l0UcjyTKWVRMBDQEZwxZpQ5qhdlGZcshNii5NXWrg35O zVfViqc+a2o6ng1ZWlZDd1upEwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFtD3AJA wMdOwMrrabrNGzpqDrEcMB8GA1UdIwQYMBaAFOHRQ9nY6gIiTBywyRXsuE7ii1qq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEM1My9DRTQ0NUJEMERB NUIxMUVEOTY3NDdDNUFDNEY5QUUwMi80ZEZEMmRqcUFpSk1ITERKRmV5NFR1S0xX cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkRkQyZGpxQWlKTUhMREpGZXk0VHVLTFdxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzBDNTMvQ0U0NDVCRDBEQTVCMTFFRDk2NzQ3QzVBQzRGOUFFMDIvOTBBRTY0OENE QTYwMTFFRDlCQzYxNzVGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQB0jCuMA0GCSqGSIb3DQEBCwUAA4IBAQCCyEdY4qO0IJOkihY+0sLM jkgThc7ZA262wb6Qedcwlsn46G1HsOqyBI91qSRbqHLd0jPpoVsxFOw4cIqilAEm AH7aCgwB/e6BqFIFHxm4d4bK78E4+YLELEURdaTB3aJRj03DCRtcreWaQlKwZjVi AsVGk+ysNfKiuwr94/lMabxbJ+tgSFUgyaQ73N84/m5zwqglkuDX7sWEWia41sXj zqJ0hI2A7aeS6R8HQVfniuu5zRsR6Itix/d6ZDJD4dRv/FNgx0mWuS3Leg2E516t q4ZhcVFet4NILiqAi1itPI2nlDU2kAj8C6oFUEoZvIDf3gGcSfVsw+pNXBIeF6Lm -----END CERTIFICATE-----Generated at Thu Mar 26 12:55:50 2026 by rpki-client