$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/879C6CC6BC0A11EF8387A57BC4F9AE02.roa File: 879C6CC6BC0A11EF8387A57BC4F9AE02.roa (raw, json) Hash identifier: 1eY8rJWK8M5qlPB4QcYglDemefar9YyroUxbLgQBtXI= Subject key identifier: DA:30:11:1F:C9:50:9F:0C:BA:32:67:EB:61:FE:F4:AD:D1:3E:01:E6 Certificate issuer: /CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B Certificate serial: 0B88 Authority key identifier: A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/879C6CC6BC0A11EF8387A57BC4F9AE02.roa Signing time: Wed 24 Jun 2026 20:23:27 +0000 ROA not before: Wed 24 Jun 2026 20:23:27 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 9229 IP address blocks: 202.174.130.0/24 maxlen: 24 202.174.155.0/24 maxlen: 24 202.174.156.0/24 maxlen: 24 202.174.157.0/24 maxlen: 24 202.174.159.0/24 maxlen: 24 203.88.80.0/24 maxlen: 24 203.88.81.0/24 maxlen: 24 203.88.82.0/24 maxlen: 24 203.88.86.0/24 maxlen: 24 203.88.87.0/24 maxlen: 24 203.88.88.0/24 maxlen: 24 203.88.89.0/24 maxlen: 24 203.88.90.0/24 maxlen: 24 203.88.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 19:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2952 (0xb88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E27, serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B Validity Not Before: Jun 24 20:23:27 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a3c3cbf-097c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ce:4f:e9:d1:c1:12:cd:75:69:aa:e1:99:a4: 6e:05:0e:df:a2:86:bf:1a:61:9e:21:cc:c2:86:9a: 7f:17:9a:11:27:23:70:b9:4a:ba:e4:97:29:3d:ef: f9:36:13:b9:bb:e9:67:b0:1b:ca:14:c6:5d:db:03: 42:86:ac:c3:59:38:bd:a2:64:58:e0:e1:2a:3b:ff: 0b:54:79:3f:45:d9:f8:cd:28:d1:f9:c6:aa:e4:24: 13:0b:a0:77:cc:88:a2:a5:81:55:5c:7d:82:4d:0b: cd:ab:08:f9:f1:ca:9a:27:40:70:a4:cc:2e:ab:f5: c2:66:c2:c9:8c:da:94:52:ca:12:54:e0:51:af:4e: 34:20:6d:03:1b:20:6e:13:36:5d:f5:03:b3:bc:64: 1d:35:9f:74:b9:dd:18:88:93:b7:5f:b1:b0:6b:f8: b3:6e:7c:4f:ca:5c:55:62:d2:74:93:68:91:13:ca: e1:82:2b:39:c0:1d:3f:6c:df:cd:4c:cc:d3:4f:91: 88:32:9d:ed:32:a0:3d:61:c9:e9:7c:bc:b4:dc:a6: d2:00:cd:76:1c:a6:7e:1b:8d:54:fb:23:45:7a:89: ca:87:62:c2:74:1c:d1:3d:3c:12:89:f5:9a:37:fe: a7:7c:65:89:73:d9:16:fe:09:ab:6f:a4:46:ec:04: 42:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:30:11:1F:C9:50:9F:0C:BA:32:67:EB:61:FE:F4:AD:D1:3E:01:E6 X509v3 Authority Key Identifier: keyid:A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/879C6CC6BC0A11EF8387A57BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.174.130.0/24 202.174.155.0-202.174.157.255 202.174.159.0/24 203.88.80.0-203.88.82.255 203.88.86.0-203.88.90.255 203.88.95.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:b5:fc:97:87:97:55:02:6b:f8:33:63:3d:f2:60:3b:7f:8a: 4e:7e:d0:20:87:ba:09:ed:32:68:87:08:8c:ef:57:67:c7:d7: 4b:3a:b2:b1:28:b4:b3:fc:0c:2d:f3:96:b3:48:56:84:72:67: ab:67:4e:5d:54:28:83:ee:e7:c5:33:8f:1c:69:9c:6a:80:74: 14:63:0b:d0:33:8f:d1:1d:68:2e:6b:c7:0a:55:21:d5:27:ee: 0b:b9:74:47:05:8e:92:54:14:17:7b:04:97:9f:46:eb:a1:99: 08:11:30:6c:0b:bb:00:4d:47:37:75:ea:6f:7d:3d:c9:db:3d: 73:fc:02:0d:f0:af:4e:b5:3e:b7:17:7d:24:7c:cd:69:f4:77: 8f:0b:b4:1d:74:00:5d:21:f8:a2:0e:06:55:7f:49:f6:0c:aa: ad:f9:ca:05:4e:9f:7b:da:13:1e:11:5c:b3:57:c8:5e:2f:bc: af:23:c1:cd:01:8e:32:09:63:94:43:93:d6:91:fe:8e:97:39: 89:37:0c:bb:fc:b9:5b:8f:7b:73:52:e6:6c:03:5b:dd:ac:d9: 0e:46:1c:d1:5a:f2:7c:72:99:2e:8d:cb:a9:e0:25:4c:9c:70: e0:dd:56:43:f2:f2:86:75:7f:02:4c:4d:f0:f5:af:66:23:77: fa:16:3a:c8 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICC4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMjcxMTAvBgNVBAUTKEEyNzJBQ0FGRThGQUE0RjJBOTcwMEE2RkMxMTQyNTkw OEM3NDNENEIwHhcNMjYwNjI0MjAyMzI3WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTNjM2NiZi0wOTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA085P6dHBEs11aarhmaRuBQ7fooa/GmGeIczChpp/F5oRJyNwuUq65JcpPe/5 NhO5u+lnsBvKFMZd2wNChqzDWTi9omRY4OEqO/8LVHk/Rdn4zSjR+caq5CQTC6B3 zIiipYFVXH2CTQvNqwj58cqaJ0BwpMwuq/XCZsLJjNqUUsoSVOBRr040IG0DGyBu EzZd9QOzvGQdNZ90ud0YiJO3X7Gwa/izbnxPylxVYtJ0k2iRE8rhgis5wB0/bN/N TMzTT5GIMp3tMqA9YcnpfLy03KbSAM12HKZ+G41U+yNFeonKh2LCdBzRPTwSifWa N/6nfGWJc9kW/gmrb6RG7ARC5QIDAQABo4ICljCCApIwHQYDVR0OBBYEFNowER/J UJ8MujJn62H+9K3RPgHmMB8GA1UdIwQYMBaAFKJyrK/o+qTyqXAKb8EUJZCMdD1L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UyNy9GMzg4ODc2NjZG M0ExMUVBOTg0MDEzM0RDNEY5QUUwMi9vbktzci1qNnBQS3BjQXB2d1JRbGtJeDBQ VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29uS3NyLWo2cFBLcGNBcHZ3UlFsa0l4MFBVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNFMjcvRjM4ODg3NjY2RjNBMTFFQTk4NDAxMzNEQzRGOUFFMDIvODc5QzZDQzZC QzBBMTFFRjgzODdBNTdCQzRGOUFFMDIucm9hMFUGCCsGAQUFBwEHAQH/BEYwRDBC BAIAATA8AwQAyq6CMAwDBADKrpsDBAHKrpwDBADKrp8wDAMEBMtYUAMEAMtYUjAM AwQBy1hWAwQAy1haAwQAy1hfMA0GCSqGSIb3DQEBCwUAA4IBAQB/tfyXh5dVAmv4 M2M98mA7f4pOftAgh7oJ7TJohwiM71dnx9dLOrKxKLSz/Awt85azSFaEcmerZ05d VCiD7ufFM48caZxqgHQUYwvQM4/RHWgua8cKVSHVJ+4LuXRHBY6SVBQXewSXn0br oZkIETBsC7sATUc3depvfT3J2z1z/AIN8K9OtT63F30kfM1p9HePC7QddABdIfii DgZVf0n2DKqt+coFTp972hMeEVyzV8heL7yvI8HNAY4yCWOUQ5PWkf6OlzmJNwy7 /Llbj3tzUuZsA1vdrNkORhzRWvJ8cpkujcup4CVMnHDg3VZD8vKGdX8CTE3w9a9m I3f6FjrI -----END CERTIFICATE-----Generated at Wed Jul 22 00:11:36 2026 by rpki-client