$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/DFC15BFCEE2A11F08F37AFA2486F56BC.roa File: DFC15BFCEE2A11F08F37AFA2486F56BC.roa (raw, json) Hash identifier: thg12ZzEBgMuI/QMazCIjvAj3z0Vs1wd8yWbe5birCk= Subject key identifier: 56:BA:C5:2D:1D:5D:FF:BE:4A:83:D3:90:E1:90:6A:66:13:9A:A4:28 Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Certificate serial: 3619 Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/DFC15BFCEE2A11F08F37AFA2486F56BC.roa Signing time: Mon 02 Mar 2026 22:45:03 +0000 ROA not before: Sat 10 Jan 2026 13:47:16 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 23647 IP address blocks: 202.51.65.0/24 maxlen: 24 202.51.66.0/24 maxlen: 24 202.51.67.0/24 maxlen: 24 202.51.77.0/24 maxlen: 24 202.51.79.0/24 maxlen: 24 202.51.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13849 (0x3619) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Validity Not Before: Jan 10 13:47:16 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a612ef-3027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e6:ab:56:3e:97:f1:f9:a2:24:07:ec:da:a2: bf:e3:54:4b:39:9a:3e:05:c7:1d:9a:75:6a:69:98: 7f:3b:20:90:60:11:44:3d:3e:03:c7:a1:9e:bb:96: 92:66:2a:4d:6b:e9:b8:f9:30:f2:be:e2:bf:b7:e3: e0:17:ff:3f:5b:44:ce:6c:4a:a7:ca:c8:92:cc:e3: 25:02:25:8b:bf:b1:1b:87:58:d1:37:1d:e3:6e:28: d6:0c:ea:4d:0f:bb:da:64:71:27:d1:43:7a:8a:50: 60:8a:85:88:85:07:51:48:89:b8:36:fd:5e:4c:c8: 3d:66:52:cf:c4:bb:ee:8b:4d:93:a4:73:9d:0f:e0: c1:83:fc:9c:5a:53:c9:c7:a6:79:ad:af:86:cc:39: ea:49:00:6b:38:ae:2d:2c:72:f9:3e:d9:c1:21:04: 26:a4:75:f3:89:d9:a2:4d:a1:4c:f3:91:e2:40:36: a5:a1:dc:ad:77:a9:0c:27:45:d6:cc:60:b4:fd:40: 66:f0:bc:8b:08:a8:e8:b8:a7:0e:91:f8:cd:94:38: 98:af:e4:00:b2:f3:90:8f:7d:88:59:0f:24:34:0b: ed:80:9e:99:b5:13:2f:9f:77:d4:23:e7:4e:e2:4d: 48:71:2f:cf:84:87:1f:9b:18:43:57:e8:8f:5c:c6: ea:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BA:C5:2D:1D:5D:FF:BE:4A:83:D3:90:E1:90:6A:66:13:9A:A4:28 X509v3 Authority Key Identifier: keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/DFC15BFCEE2A11F08F37AFA2486F56BC.roa sbgp-ipAddrBlock: critical IPv4: 202.51.65.0-202.51.67.255 202.51.77.0/24 202.51.79.0/24 202.51.94.0/24 Signature Algorithm: sha256WithRSAEncryption b6:01:fd:93:1b:6c:c5:6b:ef:99:03:47:4d:42:3f:c7:f4:3f: 1d:68:9a:58:fd:8a:9b:29:3b:29:70:0e:71:65:c6:5b:13:d2: b9:db:6b:65:9f:da:e8:ac:03:c5:57:71:ed:12:c6:22:42:ab: a1:17:e6:59:86:89:1f:a5:d8:8b:16:b3:a8:b4:90:25:7b:51: 76:b6:6d:a6:b0:3b:9b:81:83:c6:ef:50:79:14:d5:8f:a3:31: 91:b8:16:93:92:5e:92:fe:e0:b8:42:bd:f9:6f:67:2f:73:d7: 13:ea:8c:2e:35:25:0e:65:33:cd:f9:e6:fb:ec:c2:e4:35:24: 42:5d:8f:f8:a3:52:1c:bf:2d:18:b1:17:80:58:8d:bf:96:e8: af:58:37:19:47:72:e4:8a:b0:e9:6b:97:34:a0:bd:c3:97:af: 6f:64:18:50:49:d2:fa:33:b6:8e:58:d2:a2:75:32:05:9c:8e: ce:b3:5f:52:63:f9:f2:8e:25:99:49:f4:ef:40:c1:ff:73:9d: 08:b4:7e:9a:ad:60:c2:52:60:68:62:f3:c5:22:4c:36:1f:33: 48:c3:03:ac:b6:8c:5f:e7:9b:2c:78:b8:6c:35:ba:cb:01:f8: 8e:c7:7e:b1:5d:20:8a:3d:8b:bc:f7:1d:97:39:75:83:03:58: 9e:fe:16:be -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICNhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY1NTAxMTAvBgNVBAUTKEEyNEI2QTYyMDQ0QjcwMDY1RjA1MDYzODg0NjBFNEFG MkYxN0YzRkYwHhcNMjYwMTEwMTM0NzE2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MTJlZi0zMDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkOarVj6X8fmiJAfs2qK/41RLOZo+BccdmnVqaZh/OyCQYBFEPT4Dx6Geu5aS ZipNa+m4+TDyvuK/t+PgF/8/W0TObEqnysiSzOMlAiWLv7Ebh1jRNx3jbijWDOpN D7vaZHEn0UN6ilBgioWIhQdRSIm4Nv1eTMg9ZlLPxLvui02TpHOdD+DBg/ycWlPJ x6Z5ra+GzDnqSQBrOK4tLHL5PtnBIQQmpHXzidmiTaFM85HiQDalodytd6kMJ0XW zGC0/UBm8LyLCKjouKcOkfjNlDiYr+QAsvOQj32IWQ8kNAvtgJ6ZtRMvn3fUI+dO 4k1IcS/PhIcfmxhDV+iPXMbqdQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFFa6xS0d Xf++SoPTkOGQamYTmqQoMB8GA1UdIwQYMBaAFKJLamIES3AGXwUGOIRg5K8vF/P/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjU1MC84QjlCRDIwMjFE ODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNBWmZCUVk0aEdEa3J5OFg4 XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29rdHFZZ1JMY0FaZkJRWTRoR0Rrcnk4WDhfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY1NTAvOEI5QkQyMDIxRDg1MTFFMkI0MTIzMERDMDhCMDJDRDIvREZDMTVCRkNF RTJBMTFGMDhGMzdBRkEyNDg2RjU2QkMucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgMAwDBADKM0EDBALKM0ADBADKM00DBADKM08DBADKM14wDQYJKoZIhvcN AQELBQADggEBALYB/ZMbbMVr75kDR01CP8f0Px1omlj9ipspOylwDnFlxlsT0rnb a2Wf2uisA8VXce0SxiJCq6EX5lmGiR+l2IsWs6i0kCV7UXa2baawO5uBg8bvUHkU 1Y+jMZG4FpOSXpL+4LhCvflvZy9z1xPqjC41JQ5lM8355vvswuQ1JEJdj/ijUhy/ LRixF4BYjb+W6K9YNxlHcuSKsOlrlzSgvcOXr29kGFBJ0vozto5Y0qJ1MgWcjs6z X1Jj+fKOJZlJ9O9Awf9znQi0fpqtYMJSYGhi88UiTDYfM0jDA6y2jF/nmyx4uGw1 ussB+I7HfrFdIIo9i7z3HZc5dYMDWJ7+Fr4= -----END CERTIFICATE-----Generated at Thu Mar 26 16:14:34 2026 by rpki-client