$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/974869042C2A11F19F1796939D833773.roa File: 974869042C2A11F19F1796939D833773.roa (raw, json) Hash identifier: dNxf/Mml8OnQdOuNplaosydIcb29Iuv8OpEtTrmU0KU= Subject key identifier: 81:38:6A:CE:42:C8:16:37:64:97:45:88:DD:90:A3:56:DE:AE:FD:4D Certificate issuer: /CN=A91D4345/serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Certificate serial: 0D5C Authority key identifier: E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/974869042C2A11F19F1796939D833773.roa Signing time: Sun 23 Aug 2026 07:00:20 +0000 ROA not before: Sun 23 Aug 2026 07:00:20 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138004 IP address blocks: 202.125.64.0/24 maxlen: 24 202.125.66.0/24 maxlen: 24 202.125.67.0/24 maxlen: 24 202.125.68.0/24 maxlen: 24 202.125.78.0/24 maxlen: 24 202.125.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3420 (0xd5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4345, serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Validity Not Before: Aug 23 07:00:20 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a8a9a84-027e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a8:e3:a8:ae:95:91:b9:25:8c:2a:5e:5d:08: 03:64:11:48:f1:c9:c4:1e:05:e4:c5:59:4b:c7:4f: 59:a0:9a:f7:96:07:79:21:45:c7:22:ea:d3:6f:2a: 5d:bc:9e:aa:26:e4:06:45:66:cb:b9:46:a7:c4:1a: 60:45:f3:14:39:62:4e:ed:30:07:f5:7a:17:e9:d2: ff:93:dd:90:8c:ec:34:72:b7:e0:be:10:c6:83:ac: 0d:e6:9a:2e:df:da:da:d7:8e:a7:ca:c2:d2:d8:11: 84:42:09:a1:f3:76:9f:3c:15:72:ec:33:45:f6:05: e9:db:07:dd:22:03:a7:80:e6:f3:29:3b:d7:95:0b: 2f:69:ea:64:37:72:2e:2b:59:a2:a3:cf:94:d9:a0: 00:53:3e:af:50:5f:9a:f1:5a:1a:41:c7:2f:51:49: 86:92:92:b9:b8:f2:25:3b:46:fc:87:17:79:b3:aa: 25:fb:cb:26:4e:3a:10:eb:aa:84:48:f0:5a:42:3f: 54:d6:1a:1b:34:a2:55:6b:e9:ad:17:fa:bf:cc:c1: 45:92:89:98:fe:43:4e:82:23:d5:16:e0:90:2d:4c: 69:03:53:11:40:9a:56:8d:b8:d7:10:04:70:e7:49: bb:a8:b7:79:62:3f:7c:b2:16:f4:bf:a9:ff:02:db: a4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:38:6A:CE:42:C8:16:37:64:97:45:88:DD:90:A3:56:DE:AE:FD:4D X509v3 Authority Key Identifier: keyid:E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/974869042C2A11F19F1796939D833773.roa sbgp-ipAddrBlock: critical IPv4: 202.125.64.0/24 202.125.66.0-202.125.68.255 202.125.78.0/23 Signature Algorithm: sha256WithRSAEncryption 87:da:57:f5:89:2c:d0:e4:44:46:a9:2a:e8:cd:8b:10:b2:93: 82:5a:a7:44:f6:09:72:85:1b:e3:70:80:17:bf:aa:06:09:f8: 10:0f:83:5e:9a:18:c6:64:8f:05:2b:85:65:69:9b:a2:19:dd: b8:7d:0a:7a:2e:0e:b7:e6:ae:b7:f7:91:93:58:e7:7d:f4:ce: 6b:78:33:de:4d:e7:f9:c6:5e:ee:5b:f3:1b:f7:8e:05:23:57: 31:21:ce:7e:34:b4:18:9d:27:41:00:c8:be:59:79:9d:b0:d4: 79:65:f9:f8:8f:c6:a5:a1:83:d5:41:91:f0:31:36:f0:c1:01: 61:b0:cb:80:ae:84:f6:17:30:80:48:1b:15:e9:94:78:ab:8b: 42:f0:e0:5d:7a:19:4f:d0:79:17:7a:1c:4a:ef:36:05:5f:5c: b1:2e:df:8b:2b:45:83:2e:b8:3a:ce:58:45:48:ac:2f:28:ec: 98:12:69:f0:f3:41:c5:02:f9:73:71:0b:a9:3b:53:43:57:4c: b7:36:df:dc:fb:aa:d0:31:69:d5:a3:5f:c0:b0:58:9e:bd:20: 56:bf:59:1e:a8:2b:e9:7c:e6:75:84:a6:24:45:1a:7d:a8:ff: 52:11:4c:24:ae:33:d3:ac:90:27:dd:3d:5a:0a:59:c1:1e:bf: e2:b4:5a:6a -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICDVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQzNDUxMTAvBgNVBAUTKEU1MzdEMEMzNDhGRDdEQzQ5RjVGQzNCMDA2NkEzMUM1 ODRGQUUxQUIwHhcNMjYwODIzMDcwMDIwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YThhOWE4NC0wMjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwajjqK6VkbkljCpeXQgDZBFI8cnEHgXkxVlLx09ZoJr3lgd5IUXHIurTbypd vJ6qJuQGRWbLuUanxBpgRfMUOWJO7TAH9XoX6dL/k92QjOw0crfgvhDGg6wN5pou 39ra146nysLS2BGEQgmh83afPBVy7DNF9gXp2wfdIgOngObzKTvXlQsvaepkN3Iu K1mio8+U2aAAUz6vUF+a8VoaQccvUUmGkpK5uPIlO0b8hxd5s6ol+8smTjoQ66qE SPBaQj9U1hobNKJVa+mtF/q/zMFFkomY/kNOgiPVFuCQLUxpA1MRQJpWjbjXEARw 50m7qLd5Yj98shb0v6n/AtuknwIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFIE4as5C yBY3ZJdFiN2Qo1berv1NMB8GA1UdIwQYMBaAFOU30MNI/X3En1/DsAZqMcWE+uGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDM0NS9FQzc4Q0REQTA1 MzgxMUVBQjU4OTc2NjhDNEY5QUUwMi81VGZRdzBqOWZjU2ZYOE93Qm1veHhZVDY0 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVUZlF3MGo5ZmNTZlg4T3dCbW94eFlUNjRhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQzNDUvRUM3OENEREEwNTM4MTFFQUI1ODk3NjY4QzRGOUFFMDIvOTc0ODY5MDQy QzJBMTFGMTlGMTc5NjkzOUQ4MzM3NzMucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaAwQAyn1AMAwDBAHKfUIDBADKfUQDBAHKfU4wDQYJKoZIhvcNAQELBQAD ggEBAIfaV/WJLNDkREapKujNixCyk4Jap0T2CXKFG+NwgBe/qgYJ+BAPg16aGMZk jwUrhWVpm6IZ3bh9CnouDrfmrrf3kZNY5330zmt4M95N5/nGXu5b8xv3jgUjVzEh zn40tBidJ0EAyL5ZeZ2w1Hll+fiPxqWhg9VBkfAxNvDBAWGwy4CuhPYXMIBIGxXp lHiri0Lw4F16GU/QeRd6HErvNgVfXLEu34srRYMuuDrOWEVIrC8o7JgSafDzQcUC +XNxC6k7U0NXTLc239z7qtAxadWjX8CwWJ69IFa/WR6oK+l85nWEpiRFGn2o/1IR TCSuM9OskCfdPVoKWcEev+K0Wmo= -----END CERTIFICATE-----Generated at Thu Sep 24 21:01:15 2026 by rpki-client