$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2D554D1875B911F19160F3B762A30FBC.roa File: 2D554D1875B911F19160F3B762A30FBC.roa (raw, json) Hash identifier: awvfykrSz6QoQMrBSUpkmUV2t8VsWMbwM0JMYPHRNiE= Subject key identifier: 8A:AD:02:41:83:2B:58:57:29:33:08:4A:4B:2A:78:D5:60:2D:6E:8D Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 037E Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2D554D1875B911F19160F3B762A30FBC.roa Signing time: Thu 02 Jul 2026 01:56:02 +0000 ROA not before: Thu 02 Jul 2026 01:56:02 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 132621 IP address blocks: 140.168.226.0/23 maxlen: 24 140.168.228.0/23 maxlen: 24 140.168.244.0/22 maxlen: 22 140.168.244.0/24 maxlen: 24 140.168.245.0/24 maxlen: 24 140.168.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 894 (0x37e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Jul 2 01:56:02 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a45c531-16d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:67:56:6d:07:72:12:b4:c6:43:a1:79:09:2a: 8d:e4:16:e5:a3:84:ca:1a:b0:a4:89:4d:f1:5c:43: a8:8c:99:73:62:c1:cf:97:64:bb:e9:c2:a8:89:aa: 65:0d:6d:f6:aa:cb:e0:21:a2:5b:f6:48:bf:84:53: ce:dd:ef:df:3b:d2:c1:cb:44:41:6a:7b:7e:62:09: 68:e8:67:e9:83:e1:bb:2a:46:d0:3a:96:0a:42:92: 0b:67:40:a0:88:c7:13:b6:ee:84:eb:04:70:37:97: 2a:1d:1e:d8:bf:fd:a2:6f:17:d5:f9:0e:12:32:36: ac:aa:31:5e:ac:13:b0:e4:0c:4b:57:74:ab:d3:de: 8c:f1:2b:b2:4a:1c:90:d5:45:f0:09:bc:74:22:78: df:a4:11:0a:49:a8:a5:dd:42:3e:da:83:a3:77:04: c8:22:4d:19:d4:d2:d0:a5:ab:c4:55:1f:35:1c:33: 6f:e8:0b:7d:d8:ed:7d:c6:b6:3f:be:d0:0d:4d:aa: 4d:04:17:ab:a5:6a:1e:e3:5e:bc:eb:9a:49:f0:ad: 61:ce:cf:63:01:34:e6:71:6b:df:7d:d7:cc:c9:49: 2f:40:8d:2a:fa:68:18:02:81:64:f6:38:38:33:dd: 79:16:0a:f6:0f:21:cf:ab:59:9e:8c:85:58:ee:8a: da:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AD:02:41:83:2B:58:57:29:33:08:4A:4B:2A:78:D5:60:2D:6E:8D X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2D554D1875B911F19160F3B762A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 140.168.226.0-140.168.229.255 140.168.244.0/22 Signature Algorithm: sha256WithRSAEncryption c3:80:3a:84:76:6c:78:06:f0:46:b0:15:f0:a0:bc:0d:21:29: 48:c0:0e:96:a7:24:7d:43:5d:8c:45:79:4e:bb:20:45:39:ad: e9:d0:1a:ec:25:a1:75:76:65:18:78:d0:f2:4f:aa:c2:4e:55: 59:d5:39:04:fa:22:84:22:97:90:e1:3c:f3:7d:24:0b:31:83: e3:04:e6:32:78:2c:13:61:56:55:fc:2a:cf:d6:82:6b:c6:5f: 63:12:c7:a8:ea:e1:4e:81:82:3f:e4:3d:87:4f:ff:78:4d:36: fa:dd:3d:97:cd:c9:76:d5:2b:5f:5d:43:4f:69:6e:e2:8c:1f: 81:91:bc:ea:3e:a9:37:18:4d:78:a5:72:a5:c5:5f:e7:b2:a0: 58:01:dc:63:59:df:80:29:be:aa:86:ea:e2:c0:c1:f1:32:7c: 44:07:b1:44:db:db:98:0e:23:bc:50:d1:30:db:8d:87:ae:41: d2:f8:00:e8:fb:84:73:db:45:99:9b:3f:58:c4:88:9c:c1:c8: 84:ba:7a:68:9f:b4:7e:20:cf:54:f3:ca:a6:69:a0:90:0a:9f: de:6c:6a:02:2e:e2:cb:24:01:de:69:cd:3c:e8:5d:33:88:a3: dc:89:fc:06:d1:fa:1c:ac:ef:38:39:8d:cd:b1:e2:5e:bc:df: fd:53:03:9d -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICA34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjYwNzAyMDE1NjAyWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ1YzUzMS0xNmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2dWbQdyErTGQ6F5CSqN5Bblo4TKGrCkiU3xXEOojJlzYsHPl2S76cKoiapl DW32qsvgIaJb9ki/hFPO3e/fO9LBy0RBant+Yglo6Gfpg+G7KkbQOpYKQpILZ0Cg iMcTtu6E6wRwN5cqHR7Yv/2ibxfV+Q4SMjasqjFerBOw5AxLV3Sr096M8SuyShyQ 1UXwCbx0InjfpBEKSail3UI+2oOjdwTIIk0Z1NLQpavEVR81HDNv6At92O19xrY/ vtANTapNBBerpWoe416865pJ8K1hzs9jATTmcWvffdfMyUkvQI0q+mgYAoFk9jg4 M915Fgr2DyHPq1mejIVY7orapwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFIqtAkGD K1hXKTMISksqeNVgLW6NMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURCOTgvRDkzRTkzREM0OTIxMTFFREFCRDU5QzUzQzRGOUFFMDIvMkQ1NTREMTg3 NUI5MTFGMTkxNjBGM0I3NjJBMzBGQkMucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBAGMqOIDBAGMqOQDBAKMqPQwDQYJKoZIhvcNAQELBQADggEBAMOA OoR2bHgG8EawFfCgvA0hKUjADpanJH1DXYxFeU67IEU5renQGuwloXV2ZRh40PJP qsJOVVnVOQT6IoQil5DhPPN9JAsxg+ME5jJ4LBNhVlX8Ks/WgmvGX2MSx6jq4U6B gj/kPYdP/3hNNvrdPZfNyXbVK19dQ09pbuKMH4GRvOo+qTcYTXilcqXFX+eyoFgB 3GNZ34ApvqqG6uLAwfEyfEQHsUTb25gOI7xQ0TDbjYeuQdL4AOj7hHPbRZmbP1jE iJzByIS6emiftH4gz1TzyqZpoJAKn95sagIu4sskAd5pzTzoXTOIo9yJ/AbR+hys 7zg5jc2x4l683/1TA50= -----END CERTIFICATE-----Generated at Thu Jul 23 23:58:41 2026 by rpki-client