$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/95BD9D90A56A11EFA5ABDC46C4F9AE02.roa File: 95BD9D90A56A11EFA5ABDC46C4F9AE02.roa (raw, json) Hash identifier: somKGJyrgSti1VRxrZrHWC+Anql8k4+l+DM0JgTxCFs= Subject key identifier: 39:C0:64:0D:C9:F1:69:8A:3A:CC:19:07:0C:D9:E4:60:53:3E:E2:AF Certificate issuer: /CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B Certificate serial: 0B87 Authority key identifier: A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/95BD9D90A56A11EFA5ABDC46C4F9AE02.roa Signing time: Wed 24 Jun 2026 20:23:24 +0000 ROA not before: Wed 24 Jun 2026 20:23:24 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 4913 IP address blocks: 202.174.130.0/24 maxlen: 24 202.174.155.0/24 maxlen: 24 202.174.156.0/24 maxlen: 24 202.174.157.0/24 maxlen: 24 202.174.159.0/24 maxlen: 24 203.88.86.0/24 maxlen: 24 203.88.87.0/24 maxlen: 24 203.88.88.0/24 maxlen: 24 203.88.89.0/24 maxlen: 24 203.88.90.0/24 maxlen: 24 203.88.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 19:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2951 (0xb87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E27, serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B Validity Not Before: Jun 24 20:23:24 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a3c3cbc-3061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e9:21:3e:a8:cf:6c:a9:02:d6:cf:3b:87:03: de:a3:2e:0c:65:a6:30:d4:55:89:4b:2f:9b:22:67: f9:7b:de:1b:06:a1:c2:23:2f:55:b9:0c:a7:78:06: 5c:00:71:0f:c7:ac:dd:3b:0f:2e:b7:9d:69:a9:df: a1:f0:f8:f6:26:ed:49:af:35:92:cf:12:fe:61:af: b1:3e:77:30:b5:12:c1:07:39:a6:2c:0d:f3:db:e2: 28:48:15:ed:84:7a:d3:e5:b1:ee:ae:cf:24:5b:54: f2:3b:34:00:35:c1:11:08:6b:53:c0:27:36:d5:21: 87:03:08:48:b1:5b:81:26:a7:c9:8d:b0:d5:3b:96: d5:43:f6:83:bf:e2:ac:5e:7b:ae:2f:af:7d:01:8a: 92:48:5d:da:ad:1f:bb:d0:ab:c9:24:c5:15:3e:ef: b2:63:d0:da:82:0b:e6:b6:52:9b:b0:84:88:26:2d: 5e:dd:5b:13:d9:df:ec:46:c1:ea:a0:8f:e0:dd:33: fe:0c:3d:95:cf:fe:cf:d6:c1:2e:6c:6b:3b:00:b7: 32:b2:eb:12:06:b8:93:7f:0c:3d:96:58:a1:46:70: d5:19:c4:73:f1:42:71:8c:06:7d:67:e5:cb:58:34: 24:9c:51:9c:ba:ff:ac:ad:33:bf:68:9e:95:5c:ec: d4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C0:64:0D:C9:F1:69:8A:3A:CC:19:07:0C:D9:E4:60:53:3E:E2:AF X509v3 Authority Key Identifier: keyid:A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/95BD9D90A56A11EFA5ABDC46C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.174.130.0/24 202.174.155.0-202.174.157.255 202.174.159.0/24 203.88.86.0-203.88.90.255 203.88.95.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:c0:9e:b6:47:76:b1:7c:1c:89:77:0b:94:3c:44:00:48:97: fa:ae:36:ac:1a:ea:8e:a0:e5:cc:20:22:27:bb:3f:d0:6d:09: 26:52:92:5f:c4:7d:98:16:9b:7b:cc:5e:61:ba:99:ff:b6:54: 5e:11:99:83:a4:24:9c:4a:c3:3f:d0:2b:64:92:c5:cd:9b:1e: 1a:ef:d8:39:3b:f2:d9:3d:0c:2b:e8:89:94:44:72:17:f8:79: 6b:96:e7:eb:16:7b:e5:fc:80:df:68:02:35:6c:d3:2e:eb:3c: 80:b6:39:cb:77:d5:bd:bf:7e:1c:a6:00:3b:15:36:85:33:47: d6:85:58:3e:0b:46:3b:3e:37:20:94:9c:7e:a6:78:f6:88:15: 60:32:0a:38:9f:65:b0:3d:4e:a8:62:98:9e:2f:18:37:64:d1: a8:da:cf:ae:d4:5e:20:6b:5a:9f:64:cb:61:93:7f:4d:a8:ad: 8d:3c:0a:e3:96:2a:aa:3d:66:19:e3:1e:68:38:a1:9f:c1:c1: a2:87:ac:d5:dd:bf:b7:09:25:1e:b4:f7:4a:9f:fc:05:e2:a8: 0d:2e:e3:b8:64:26:b6:ec:96:23:7b:c5:c6:34:41:d9:90:b6: 53:67:19:8f:f0:2b:3b:e2:a1:83:0e:37:23:a1:64:c7:5c:32: aa:35:20:c4 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgICC4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMjcxMTAvBgNVBAUTKEEyNzJBQ0FGRThGQUE0RjJBOTcwMEE2RkMxMTQyNTkw OEM3NDNENEIwHhcNMjYwNjI0MjAyMzI0WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTNjM2NiYy0zMDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlekhPqjPbKkC1s87hwPeoy4MZaYw1FWJSy+bImf5e94bBqHCIy9VuQyneAZc AHEPx6zdOw8ut51pqd+h8Pj2Ju1JrzWSzxL+Ya+xPncwtRLBBzmmLA3z2+IoSBXt hHrT5bHurs8kW1TyOzQANcERCGtTwCc21SGHAwhIsVuBJqfJjbDVO5bVQ/aDv+Ks XnuuL699AYqSSF3arR+70KvJJMUVPu+yY9DaggvmtlKbsISIJi1e3VsT2d/sRsHq oI/g3TP+DD2Vz/7P1sEubGs7ALcysusSBriTfww9llihRnDVGcRz8UJxjAZ9Z+XL WDQknFGcuv+srTO/aJ6VXOzUQQIDAQABo4ICiDCCAoQwHQYDVR0OBBYEFDnAZA3J 8WmKOswZBwzZ5GBTPuKvMB8GA1UdIwQYMBaAFKJyrK/o+qTyqXAKb8EUJZCMdD1L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UyNy9GMzg4ODc2NjZG M0ExMUVBOTg0MDEzM0RDNEY5QUUwMi9vbktzci1qNnBQS3BjQXB2d1JRbGtJeDBQ VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29uS3NyLWo2cFBLcGNBcHZ3UlFsa0l4MFBVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNFMjcvRjM4ODg3NjY2RjNBMTFFQTk4NDAxMzNEQzRGOUFFMDIvOTVCRDlEOTBB NTZBMTFFRkE1QUJEQzQ2QzRGOUFFMDIucm9hMEcGCCsGAQUFBwEHAQH/BDgwNjA0 BAIAATAuAwQAyq6CMAwDBADKrpsDBAHKrpwDBADKrp8wDAMEActYVgMEAMtYWgME AMtYXzANBgkqhkiG9w0BAQsFAAOCAQEAe8Cetkd2sXwciXcLlDxEAEiX+q42rBrq jqDlzCAiJ7s/0G0JJlKSX8R9mBabe8xeYbqZ/7ZUXhGZg6QknErDP9ArZJLFzZse Gu/YOTvy2T0MK+iJlERyF/h5a5bn6xZ75fyA32gCNWzTLus8gLY5y3fVvb9+HKYA OxU2hTNH1oVYPgtGOz43IJScfqZ49ogVYDIKOJ9lsD1OqGKYni8YN2TRqNrPrtRe IGtan2TLYZN/TaitjTwK45Yqqj1mGeMeaDihn8HBooes1d2/twklHrT3Sp/8BeKo DS7juGQmtuyWI3vFxjRB2ZC2U2cZj/ArO+Khgw43I6Fkx1wyqjUgxA== -----END CERTIFICATE-----Generated at Tue Jul 21 22:23:17 2026 by rpki-client