$ rpki-client -vvf rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/F594A6063FA511F1B714D040BE833773.roa File: F594A6063FA511F1B714D040BE833773.roa (raw, json) Hash identifier: vpQZtX1yMfD38qzmAFhlXuV41BUehxqTr9ZL+NUr+4c= Subject key identifier: 5D:17:3B:11:C9:4B:C7:3C:3A:88:67:1E:F2:EB:F5:8E:8A:F1:A1:0D Certificate issuer: /CN=A91795C3/serialNumber=9546FFDA30E84E6FE8F35E68EC25541839E9AD0F Certificate serial: 2C Authority key identifier: 95:46:FF:DA:30:E8:4E:6F:E8:F3:5E:68:EC:25:54:18:39:E9:AD:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/F594A6063FA511F1B714D040BE833773.roa Signing time: Tue 12 May 2026 02:32:04 +0000 ROA not before: Tue 12 May 2026 02:32:04 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 4776 IP address blocks: 203.148.160.0/24 maxlen: 24 203.148.162.0/24 maxlen: 24 203.148.174.0/23 maxlen: 24 203.148.200.0/23 maxlen: 24 203.148.206.0/23 maxlen: 24 203.148.210.0/23 maxlen: 24 203.148.236.0/23 maxlen: 24 203.148.250.0/23 maxlen: 24 203.148.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.crl rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 08:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91795C3, serialNumber=9546FFDA30E84E6FE8F35E68EC25541839E9AD0F Validity Not Before: May 12 02:32:04 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6a029124-c5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c3:60:fe:bc:21:79:d1:c6:9e:66:2a:b6:50: 1c:be:68:d9:87:04:ab:e8:15:7d:4f:5a:da:76:43: 39:31:77:a0:9c:4e:66:c5:57:db:e4:61:68:62:71: 21:ae:52:b6:03:ad:6e:45:d7:34:35:01:60:ca:08: cc:a9:5e:be:e7:e4:75:60:10:c3:27:5a:d8:b0:aa: e1:d5:52:24:fb:cd:ca:87:8e:16:38:d7:2e:02:97: 53:05:6f:56:92:a5:f8:95:9f:83:c5:d6:5e:35:a2: fe:b2:f5:94:4d:68:51:fa:19:c4:5e:a6:ab:b4:21: f4:7c:b5:66:bb:32:e7:77:f4:2f:ef:f7:84:c9:8c: fa:c4:5f:00:03:22:38:95:c6:30:f4:a2:c0:19:d9: 04:16:21:e6:36:26:2a:2e:0f:57:0f:bd:7a:2f:cf: 2e:35:f8:5d:4f:ad:39:1a:b5:08:22:58:42:c5:47: 39:ed:c0:65:a4:ac:45:79:db:2d:18:07:24:71:de: 13:ff:23:3a:3d:62:bd:80:f2:0c:e4:61:e2:60:e1: fd:80:bd:03:18:5e:18:4a:76:f5:c4:63:fe:1a:ea: 9b:e6:14:96:92:22:0b:af:35:09:2a:eb:f9:df:e6: c6:c1:1d:0b:b4:51:a5:bf:a0:29:28:5d:51:52:cb: d7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:17:3B:11:C9:4B:C7:3C:3A:88:67:1E:F2:EB:F5:8E:8A:F1:A1:0D X509v3 Authority Key Identifier: keyid:95:46:FF:DA:30:E8:4E:6F:E8:F3:5E:68:EC:25:54:18:39:E9:AD:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/lUb_2jDoTm_o815o7CVUGDnprQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUb_2jDoTm_o815o7CVUGDnprQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795C3/2BB2BB262CDA11F1A7627DCF9B833773/F594A6063FA511F1B714D040BE833773.roa sbgp-ipAddrBlock: critical IPv4: 203.148.160.0/24 203.148.162.0/24 203.148.174.0/23 203.148.200.0/23 203.148.206.0/23 203.148.210.0/23 203.148.236.0/23 203.148.250.0/23 203.148.254.0/23 Signature Algorithm: sha256WithRSAEncryption 74:78:cd:1a:2b:c8:fd:45:7c:ae:ee:8b:6c:f8:99:87:8a:5f: ea:9f:45:25:cd:37:20:2e:53:e1:99:7e:21:41:d6:05:9b:89: 63:47:3f:b4:5d:f6:79:ff:af:cf:5b:11:f9:39:1c:16:35:00: b4:56:0c:82:04:8a:85:fe:80:e9:1d:94:dd:a3:57:23:f9:41: 8f:44:0e:b9:6c:7a:71:92:08:fa:41:90:46:45:42:12:a5:94: 59:9e:6f:92:d1:88:a8:3d:3e:fa:e9:3d:5f:70:6c:57:7f:f2: 86:fd:20:4e:96:41:66:e6:00:d2:05:e1:d9:f6:a2:ca:6b:4f: cc:fc:47:9c:97:3e:34:65:04:a3:b0:6d:ca:7e:31:82:46:e6: b3:b7:34:00:7b:2d:34:7c:59:0e:72:b5:de:ad:52:43:6b:cf: 77:6a:fa:39:16:3f:b9:87:ef:e8:a2:29:62:18:9a:ec:d1:6b: 0d:5b:41:18:6a:9f:63:91:1f:0c:f6:db:02:35:f8:56:91:5e: 79:38:b7:32:63:0f:83:c7:9d:02:00:42:83:ff:87:26:b9:8e: 8f:de:53:5f:6d:f6:75:f0:04:01:49:24:d5:54:36:e4:ab:10: b4:d1:b8:64:9e:fb:62:45:df:4e:2b:1a:62:ec:53:de:b6:41: b4:6f:cb:5f -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTVDMzExMC8GA1UEBRMoOTU0NkZGREEzMEU4NEU2RkU4RjM1RTY4RUMyNTU0MTgz OUU5QUQwRjAeFw0yNjA1MTIwMjMyMDRaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhMDI5MTI0LWM1ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrw2D+vCF50caeZiq2UBy+aNmHBKvoFX1PWtp2Qzkxd6CcTmbFV9vkYWhicSGu UrYDrW5F1zQ1AWDKCMypXr7n5HVgEMMnWtiwquHVUiT7zcqHjhY41y4Cl1MFb1aS pfiVn4PF1l41ov6y9ZRNaFH6GcRepqu0IfR8tWa7Mud39C/v94TJjPrEXwADIjiV xjD0osAZ2QQWIeY2JiouD1cPvXovzy41+F1PrTkatQgiWELFRzntwGWkrEV52y0Y ByRx3hP/Izo9Yr2A8gzkYeJg4f2AvQMYXhhKdvXEY/4a6pvmFJaSIguvNQkq6/nf 5sbBHQu0UaW/oCkoXVFSy9fHAgMBAAGjggKQMIICjDAdBgNVHQ4EFgQUXRc7EclL xzw6iGce8uv1jorxoQ0wHwYDVR0jBBgwFoAUlUb/2jDoTm/o815o7CVUGDnprQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5NUMzLzJCQjJCQjI2MkNE QTExRjFBNzYyN0RDRjlCODMzNzczL2xVYl8yakRvVG1fbzgxNW83Q1ZVR0RucHJR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbFViXzJqRG9UbV9vODE1bzdDVlVHRG5wclE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTVDMy8yQkIyQkIyNjJDREExMUYxQTc2MjdEQ0Y5QjgzMzc3My9GNTk0QTYwNjNG QTUxMUYxQjcxNEQwNDBCRTgzMzc3My5yb2EwTwYIKwYBBQUHAQcBAf8EQDA+MDwE AgABMDYDBADLlKADBADLlKIDBAHLlK4DBAHLlMgDBAHLlM4DBAHLlNIDBAHLlOwD BAHLlPoDBAHLlP4wDQYJKoZIhvcNAQELBQADggEBAHR4zRoryP1FfK7ui2z4mYeK X+qfRSXNNyAuU+GZfiFB1gWbiWNHP7Rd9nn/r89bEfk5HBY1ALRWDIIEioX+gOkd lN2jVyP5QY9EDrlsenGSCPpBkEZFQhKllFmeb5LRiKg9PvrpPV9wbFd/8ob9IE6W QWbmANIF4dn2osprT8z8R5yXPjRlBKOwbcp+MYJG5rO3NAB7LTR8WQ5ytd6tUkNr z3dq+jkWP7mH7+iiKWIYmuzRaw1bQRhqn2ORHwz22wI1+FaRXnk4tzJjD4PHnQIA QoP/hya5jo/eU19t9nXwBAFJJNVUNuSrELTRuGSe+2JF304rGmLsU962QbRvy18= -----END CERTIFICATE-----Generated at Wed May 13 12:39:20 2026 by rpki-client