$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/1B4BDA5C48B011EF9D34415EC4F9AE02.roa File: 1B4BDA5C48B011EF9D34415EC4F9AE02.roa (raw, json) Hash identifier: MnUN+wIf2SZZnB0eZd0RCAaBnlMS8U6AMjfCXX4MwtA= Subject key identifier: 48:49:1F:28:29:9B:69:3F:52:75:D7:B7:C8:B2:1B:FD:5A:99:3E:2D Certificate issuer: /CN=A91B2472/serialNumber=9E513ACC4D7B90014A867FB52AF89229E00BA4AC Certificate serial: 0193 Authority key identifier: 9E:51:3A:CC:4D:7B:90:01:4A:86:7F:B5:2A:F8:92:29:E0:0B:A4:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/1B4BDA5C48B011EF9D34415EC4F9AE02.roa Signing time: Wed 19 Aug 2026 05:54:06 +0000 ROA not before: Wed 19 Aug 2026 05:54:06 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 18199 IP address blocks: 202.37.68.0/24 maxlen: 24 202.37.167.0/24 maxlen: 24 202.50.240.0/24 maxlen: 24 202.169.192.0/19 maxlen: 24 2403:de00::/32 maxlen: 32 2403:de00:100::/40 maxlen: 40 2403:de00:200::/39 maxlen: 40 2403:de00:400::/38 maxlen: 40 2403:de00:1000::/36 maxlen: 40 2403:de00:2000::/35 maxlen: 40 2403:de00:4000::/34 maxlen: 35 2403:de00:4000::/35 maxlen: 40 2403:de00:6000::/36 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.crl rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 04:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2472, serialNumber=9E513ACC4D7B90014A867FB52AF89229E00BA4AC Validity Not Before: Aug 19 05:54:06 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a8544fe-736c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:99:26:86:b9:bb:8c:93:56:95:d4:24:4a:cc: bc:9a:50:73:f2:97:9d:49:83:6c:fd:ce:79:df:3b: 1d:ea:3a:e9:88:1a:48:78:f8:79:da:7a:59:ff:a4: c6:6f:9f:c0:04:fb:d5:3e:b9:0e:43:34:d5:7d:5d: 48:ac:15:80:5e:5f:6d:a8:8c:c7:fd:95:4c:0e:c0: 06:37:60:c2:97:d7:06:4e:1b:6c:da:5f:48:bb:90: 0e:86:a9:03:69:24:8d:7c:84:27:d4:0c:c5:92:17: 25:7c:d7:38:e7:1e:e9:15:56:a0:9e:61:52:f4:35: 1c:7b:d8:5f:13:da:ab:8f:1c:89:aa:6a:87:bb:62: d9:b6:9e:01:eb:21:94:40:50:40:d2:19:89:60:c2: 5b:49:04:b5:30:f4:31:71:75:ea:1a:8c:3c:99:75: 49:f2:bc:79:8a:8a:61:a1:c1:8e:a1:66:34:f9:81: 5d:d2:a1:6a:ac:ca:41:cc:09:d4:5d:88:c3:9b:3e: b1:22:be:c9:25:64:af:70:33:41:a2:8d:e8:94:b7: 24:0a:de:e2:f2:97:b5:3c:7d:9b:a5:0e:fc:37:cb: b4:6d:da:47:a3:ce:e0:55:19:a6:76:dd:24:62:c0: 15:28:24:ab:8a:e9:e0:5f:7a:ef:1f:32:82:99:de: 77:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:49:1F:28:29:9B:69:3F:52:75:D7:B7:C8:B2:1B:FD:5A:99:3E:2D X509v3 Authority Key Identifier: keyid:9E:51:3A:CC:4D:7B:90:01:4A:86:7F:B5:2A:F8:92:29:E0:0B:A4:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/1B4BDA5C48B011EF9D34415EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.37.68.0/24 202.37.167.0/24 202.50.240.0/24 202.169.192.0/19 IPv6: 2403:de00::/32 Signature Algorithm: sha256WithRSAEncryption ab:31:9d:f5:94:ae:3f:4d:b7:7e:fb:9c:18:7d:d9:12:ff:04: bb:96:7b:95:76:1b:fc:3e:94:5f:f6:50:4b:00:06:62:cd:44: 9d:a0:0e:ca:ad:98:8d:32:79:ca:65:d7:f7:5c:ec:d3:63:7b: 64:08:5d:7e:44:03:a1:04:05:21:3b:21:11:16:0e:c7:e8:6e: 4c:83:65:fb:0f:db:d6:11:4e:c4:7d:c6:34:c1:71:ed:b0:ad: 4a:16:b2:81:dc:48:ce:21:ad:80:2c:dd:8f:a3:f4:d9:03:68: 29:d0:24:0a:8f:30:cf:66:16:9c:5a:c1:fb:68:2f:5e:bc:96: ed:58:ea:4e:15:24:e3:49:4b:a1:de:ee:3b:e3:2a:fd:93:38: c8:76:7d:47:b5:ca:a2:44:03:b0:86:18:b6:96:38:a8:0c:df: a4:57:12:35:15:f1:92:57:f8:78:ca:56:54:35:be:30:00:19: 54:4b:ae:a2:f4:3f:83:92:53:5d:f0:60:2c:0d:30:56:4b:0d: 5b:cb:34:3b:df:c0:8e:ad:c1:47:69:da:e3:7b:4f:42:0f:e9: 75:23:af:55:43:44:c7:17:98:50:f6:11:23:29:8a:d9:6f:14: 23:03:6d:2f:7a:f1:84:4f:5c:8b:72:7b:06:40:91:18:b5:4c: 30:7a:85:6f -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI0NzIxMTAvBgNVBAUTKDlFNTEzQUNDNEQ3QjkwMDE0QTg2N0ZCNTJBRjg5MjI5 RTAwQkE0QUMwHhcNMjYwODE5MDU1NDA2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg1NDRmZS03MzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl5kmhrm7jJNWldQkSsy8mlBz8pedSYNs/c553zsd6jrpiBpIePh52npZ/6TG b5/ABPvVPrkOQzTVfV1IrBWAXl9tqIzH/ZVMDsAGN2DCl9cGThts2l9Iu5AOhqkD aSSNfIQn1AzFkhclfNc45x7pFVagnmFS9DUce9hfE9qrjxyJqmqHu2LZtp4B6yGU QFBA0hmJYMJbSQS1MPQxcXXqGow8mXVJ8rx5iophocGOoWY0+YFd0qFqrMpBzAnU XYjDmz6xIr7JJWSvcDNBoo3olLckCt7i8pe1PH2bpQ78N8u0bdpHo87gVRmmdt0k YsAVKCSriungX3rvHzKCmd53PwIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFEhJHygp m2k/UnXXt8iyG/1amT4tMB8GA1UdIwQYMBaAFJ5ROsxNe5ABSoZ/tSr4kingC6Ss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ3Mi9FNjJCNzM1QTQ4 MTkxMUVGQjhCRTQ1MzRDNEY5QUUwMi9ubEU2ekUxN2tBRktobi0xS3ZpU0tlQUxw S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25sRTZ6RTE3a0FGS2huLTFLdmlTS2VBTHBLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjI0NzIvRTYyQjczNUE0ODE5MTFFRkI4QkU0NTM0QzRGOUFFMDIvMUI0QkRBNUM0 OEIwMTFFRjlEMzQ0MTVFQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQAyiVEAwQAyiWnAwQAyjLwAwQFyqnAMA0EAgACMAcDBQAkA94AMA0G CSqGSIb3DQEBCwUAA4IBAQCrMZ31lK4/Tbd++5wYfdkS/wS7lnuVdhv8PpRf9lBL AAZizUSdoA7KrZiNMnnKZdf3XOzTY3tkCF1+RAOhBAUhOyERFg7H6G5Mg2X7D9vW EU7EfcY0wXHtsK1KFrKB3EjOIa2ALN2Po/TZA2gp0CQKjzDPZhacWsH7aC9evJbt WOpOFSTjSUuh3u474yr9kzjIdn1HtcqiRAOwhhi2ljioDN+kVxI1FfGSV/h4ylZU Nb4wABlUS66i9D+DklNd8GAsDTBWSw1byzQ738COrcFHadrje09CD+l1I69VQ0TH F5hQ9hEjKYrZbxQjA20vevGET1yLcnsGQJEYtUwweoVv -----END CERTIFICATE-----Generated at Sun Oct 11 20:09:22 2026 by rpki-client