$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/0AC13D943C5711F0BFBB572EC4F9AE02.roa File: 0AC13D943C5711F0BFBB572EC4F9AE02.roa (raw, json) Hash identifier: /oG+kh2eKtakm2rIYi2rKJyApYpZtiilOJOldegtuSg= Subject key identifier: 4C:9F:96:B9:AF:63:C0:F7:72:98:A0:DA:C3:91:0B:9D:3A:C3:9B:18 Certificate issuer: /CN=A91C7AA5/serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A Certificate serial: 011F Authority key identifier: F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/0AC13D943C5711F0BFBB572EC4F9AE02.roa Signing time: Fri 03 Jul 2026 07:34:11 +0000 ROA not before: Fri 03 Jul 2026 07:34:11 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 8075 IP address blocks: 203.2.220.0/24 maxlen: 24 203.2.221.0/24 maxlen: 24 203.2.222.0/24 maxlen: 24 203.2.223.0/24 maxlen: 24 203.28.214.0/24 maxlen: 24 203.28.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Jul 2026 07:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7AA5, serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A Validity Not Before: Jul 3 07:34:11 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a4765f3-2b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f3:c3:a4:7c:2f:34:08:3e:e9:f9:e7:a4:1c: 48:69:65:54:71:26:80:a6:1c:4d:12:6d:3d:f6:85: be:c1:e6:a2:d1:0a:7e:f1:f3:13:be:2f:0b:1f:8e: d6:21:27:10:4e:91:f1:fa:0f:ff:39:1c:32:8c:10: 5b:6f:2e:66:b3:16:f0:33:4a:cd:57:46:9f:0a:56: 2e:d1:05:05:c3:d5:96:c4:9c:59:45:68:a2:67:e1: 0c:54:e6:ce:9c:39:f1:da:f3:aa:91:0e:37:60:c9: 1e:57:60:59:54:d1:4d:4c:f4:72:74:ed:1b:51:37: a6:bf:13:d7:d0:98:79:f6:15:a9:8e:4a:aa:e7:e0: f9:1d:d7:4f:ac:ac:ce:94:78:dd:ed:bd:37:27:1d: 27:2f:d7:15:09:8a:d1:c0:b2:d1:ed:9f:f7:a5:56: dd:ac:c9:f6:10:39:33:59:9c:00:4e:59:4b:22:b8: 4a:f6:46:89:a9:9d:a6:b6:83:7a:dd:71:a9:2b:7a: 01:67:9a:c2:72:96:b7:33:16:23:37:f1:92:7c:db: 13:24:2c:35:63:90:96:7a:9b:f3:0c:ff:77:95:0b: 9c:c1:17:6d:38:13:ee:01:b6:eb:7f:70:ec:df:5d: 75:7f:c4:1d:79:37:94:77:34:2d:d0:bf:1d:a3:9e: 27:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9F:96:B9:AF:63:C0:F7:72:98:A0:DA:C3:91:0B:9D:3A:C3:9B:18 X509v3 Authority Key Identifier: keyid:F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/0AC13D943C5711F0BFBB572EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.2.220.0/22 203.28.214.0/23 Signature Algorithm: sha256WithRSAEncryption ba:3d:c4:f3:e8:d4:85:2e:41:c5:13:ba:56:19:36:ee:88:ad: e7:a4:e3:98:52:ec:25:37:e5:bc:af:e4:4f:3d:85:af:4b:f0: 6f:82:d8:6f:f8:8b:da:f9:8a:61:22:97:82:d2:6a:2b:73:bd: 7d:23:1f:47:c9:a3:55:21:61:4e:a7:c1:ea:ee:8d:28:23:54: 0f:b9:74:a2:23:7b:6b:e8:bf:81:47:0e:2a:20:ea:26:cd:f4: 86:85:4a:50:86:ac:87:49:25:37:60:3f:cc:5f:0d:18:a0:fa: c3:1b:12:5a:91:c4:aa:07:92:83:a6:57:1e:26:f2:28:7a:16: 86:1e:52:a4:6e:05:80:ec:5d:9d:18:7c:14:d2:e9:ae:20:3f: b6:d7:e2:f0:4d:58:dd:78:1b:b3:12:19:e0:3f:67:4c:9c:15: ad:66:6a:21:6f:fb:37:90:b1:db:ef:d6:ad:9d:10:2d:03:67: 84:99:5b:20:0b:10:f9:04:74:1f:26:34:00:46:af:6a:da:9f: 97:e0:01:16:c3:1d:90:4a:ec:c6:da:68:e4:57:dc:4a:2f:44: 08:a0:ec:c0:6f:b0:ed:b4:44:1b:83:6c:fa:f4:73:8d:cd:5c: 79:93:bc:d2:b2:e4:13:07:7d:d1:7b:97:f6:95:68:fc:d4:71: d8:0f:d1:eb -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBQTUxMTAvBgNVBAUTKEY3MjY3RTgwQkU4MTdGMDQzRDI4RkI3RTczMDVGNEM0 ODhBODM5MUEwHhcNMjYwNzAzMDczNDExWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ3NjVmMy0yYjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/PDpHwvNAg+6fnnpBxIaWVUcSaAphxNEm099oW+weai0Qp+8fMTvi8LH47W IScQTpHx+g//ORwyjBBbby5msxbwM0rNV0afClYu0QUFw9WWxJxZRWiiZ+EMVObO nDnx2vOqkQ43YMkeV2BZVNFNTPRydO0bUTemvxPX0Jh59hWpjkqq5+D5HddPrKzO lHjd7b03Jx0nL9cVCYrRwLLR7Z/3pVbdrMn2EDkzWZwATllLIrhK9kaJqZ2mtoN6 3XGpK3oBZ5rCcpa3MxYjN/GSfNsTJCw1Y5CWepvzDP93lQucwRdtOBPuAbbrf3Ds 3111f8QdeTeUdzQt0L8do54nXQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEyflrmv Y8D3cpig2sORC506w5sYMB8GA1UdIwQYMBaAFPcmfoC+gX8EPSj7fnMF9MSIqDka MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0FBNS9CQUZCMzU3NDE1 QkIxMUYwQkZENTQ4ODFDNEY5QUUwMi85eVotZ0w2QmZ3UTlLUHQtY3dYMHhJaW9P Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzl5Wi1nTDZCZndROUtQdC1jd1gweElpb09Sby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdBQTUvQkFGQjM1NzQxNUJCMTFGMEJGRDU0ODgxQzRGOUFFMDIvMEFDMTNEOTQz QzU3MTFGMEJGQkI1NzJFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCywLcAwQByxzWMA0GCSqGSIb3DQEBCwUAA4IBAQC6PcTz6NSFLkHF E7pWGTbuiK3npOOYUuwlN+W8r+RPPYWvS/Bvgthv+Iva+YphIpeC0morc719Ix9H yaNVIWFOp8Hq7o0oI1QPuXSiI3tr6L+BRw4qIOomzfSGhUpQhqyHSSU3YD/MXw0Y oPrDGxJakcSqB5KDplceJvIoehaGHlKkbgWA7F2dGHwU0umuID+21+LwTVjdeBuz EhngP2dMnBWtZmohb/s3kLHb79atnRAtA2eEmVsgCxD5BHQfJjQARq9q2p+X4AEW wx2QSuzG2mjkV9xKL0QIoOzAb7DttEQbg2z69HONzVx5k7zSsuQTB33Re5f2lWj8 1HHYD9Hr -----END CERTIFICATE-----Generated at Tue Jul 21 04:54:31 2026 by rpki-client