$ rpki-client -vvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/8CBE17540BCF11EF80BE8E0CC4F9AE02.roa File: 8CBE17540BCF11EF80BE8E0CC4F9AE02.roa (raw, json) Hash identifier: K5LcOR8cOoj1G9hwCRlc2w0NxNadpML+5njvncofuUc= Subject key identifier: 6B:E7:D6:97:00:F3:41:D0:02:AB:32:5C:26:C3:30:FB:74:D4:46:D2 Certificate issuer: /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C Certificate serial: 070F Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/8CBE17540BCF11EF80BE8E0CC4F9AE02.roa Signing time: Tue 16 Jun 2026 22:26:49 +0000 ROA not before: Tue 16 Jun 2026 22:26:49 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 394089 IP address blocks: 114.141.120.0/24 maxlen: 24 114.141.121.0/24 maxlen: 24 114.141.122.0/24 maxlen: 24 114.141.123.0/24 maxlen: 24 114.141.124.0/24 maxlen: 24 114.141.125.0/24 maxlen: 24 114.141.126.0/24 maxlen: 24 114.141.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 22:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1807 (0x70f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203EB, serialNumber=2F265B0C802473094926890A85124E21B109DA3C Validity Not Before: Jun 16 22:26:49 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a31cda9-4f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bd:ec:56:2c:98:c9:ea:54:fb:2a:8e:f7:dd: 2c:f5:30:eb:8b:f7:fc:65:d1:b7:fa:f0:18:c6:5e: f7:24:5b:fe:7f:ef:57:0c:78:14:9c:fd:89:ed:2a: c2:73:51:7e:08:95:44:d2:d2:21:a1:a6:90:3c:57: 53:73:5e:6b:d3:12:32:dd:6a:f8:20:8c:ed:33:93: 86:b2:23:9b:73:31:4a:0c:38:3a:40:1b:12:fd:4e: a6:e4:74:e3:50:03:89:a2:6f:aa:cb:0b:39:a1:13: 04:a8:90:9f:0c:56:9e:7f:12:e1:86:21:f1:8c:eb: 52:69:63:91:20:a1:62:ee:e0:8d:81:be:79:fe:14: 23:6f:b7:50:e6:78:65:a0:b7:a3:b7:ee:ef:50:2e: a3:13:0f:31:16:10:bc:2e:d4:12:10:3d:a8:a6:db: f5:c1:07:71:5c:c2:83:c4:df:85:08:57:35:85:63: 08:34:a2:d6:15:b4:ff:3d:d2:38:53:d6:66:f1:66: 9b:ed:0c:52:3f:9c:80:58:41:ad:c3:42:18:e0:73: ca:8c:6a:41:c0:1a:fe:26:52:c8:42:e1:2d:6b:fa: 43:4d:a9:f0:39:e0:76:ad:6e:b3:09:ae:9b:82:30: bc:ea:64:65:81:a1:3d:70:85:47:cc:b8:15:d5:23: 8f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E7:D6:97:00:F3:41:D0:02:AB:32:5C:26:C3:30:FB:74:D4:46:D2 X509v3 Authority Key Identifier: keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/8CBE17540BCF11EF80BE8E0CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 114.141.120.0/21 Signature Algorithm: sha256WithRSAEncryption 67:dd:7b:6c:fc:dc:e9:da:e3:e7:e3:bd:19:f1:23:25:39:cb: ea:5e:c8:8b:a3:7b:30:8e:48:c8:e4:9e:8f:62:28:53:7a:9a: e0:00:0d:4d:f9:ac:0d:7b:1b:17:53:07:d5:32:6e:11:f7:cf: 8d:12:0c:98:93:15:72:9b:33:0f:04:64:d0:3f:b3:7e:0c:ea: 95:ed:4e:91:40:bb:19:89:4e:54:4a:0d:7b:17:5e:98:9c:b0: 88:ef:77:ec:0b:20:9f:89:5f:81:3d:44:de:01:f4:7f:2e:30: 96:c0:5c:3a:be:42:5f:f6:66:4b:d7:8a:8e:5e:28:8e:f2:23: c6:b6:4f:03:29:eb:50:0a:12:e1:9b:ca:58:65:c0:15:6d:5d: 7e:3e:c5:c4:70:4c:1d:40:24:f8:88:4f:bb:a3:29:eb:c8:57: 44:21:ae:0b:aa:17:84:87:4d:d5:b8:f8:1a:a3:66:a9:98:a8: b4:2c:e5:57:cc:34:ea:5d:f5:a3:06:d6:d8:d5:b4:f8:19:40: bd:28:c5:cf:70:49:c2:15:53:48:b3:c2:c7:16:97:f3:cd:3f: 39:fb:c0:a4:58:46:09:e5:d6:29:06:64:cb:5f:df:7d:68:cc: 80:d1:6f:36:3b:5e:e8:fe:52:0c:83:5f:06:e8:f2:59:82:61: 89:8d:c5:ba -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzRUIxMTAvBgNVBAUTKDJGMjY1QjBDODAyNDczMDk0OTI2ODkwQTg1MTI0RTIx QjEwOURBM0MwHhcNMjYwNjE2MjIyNjQ5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTMxY2RhOS00ZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAib3sViyYyepU+yqO990s9TDri/f8ZdG3+vAYxl73JFv+f+9XDHgUnP2J7SrC c1F+CJVE0tIhoaaQPFdTc15r0xIy3Wr4IIztM5OGsiObczFKDDg6QBsS/U6m5HTj UAOJom+qyws5oRMEqJCfDFaefxLhhiHxjOtSaWORIKFi7uCNgb55/hQjb7dQ5nhl oLejt+7vUC6jEw8xFhC8LtQSED2optv1wQdxXMKDxN+FCFc1hWMINKLWFbT/PdI4 U9Zm8Wab7QxSP5yAWEGtw0IY4HPKjGpBwBr+JlLIQuEta/pDTanwOeB2rW6zCa6b gjC86mRlgaE9cIVHzLgV1SOPxwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGvn1pcA 80HQAqsyXCbDMPt01EbSMB8GA1UdIwQYMBaAFC8mWwyAJHMJSSaJCoUSTiGxCdo8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNFQi9GMzYyMkU3NDk3 NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3bEpKb2tLaFJKT0liRUoy ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5WmJESUFrY3dsSkpva0toUkpPSWJFSjJqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjAzRUIvRjM2MjJFNzQ5NzY5MTFFQkFCQzc3NDg2QzRGOUFFMDIvOENCRTE3NTQw QkNGMTFFRjgwQkU4RTBDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDco14MA0GCSqGSIb3DQEBCwUAA4IBAQBn3Xts/Nzp2uPn470Z8SMl OcvqXsiLo3swjkjI5J6PYihTeprgAA1N+awNexsXUwfVMm4R98+NEgyYkxVymzMP BGTQP7N+DOqV7U6RQLsZiU5USg17F16YnLCI73fsCyCfiV+BPUTeAfR/LjCWwFw6 vkJf9mZL14qOXiiO8iPGtk8DKetQChLhm8pYZcAVbV1+PsXEcEwdQCT4iE+7oynr yFdEIa4LqheEh03VuPgao2apmKi0LOVXzDTqXfWjBtbY1bT4GUC9KMXPcEnCFVNI s8LHFpfzzT85+8CkWEYJ5dYpBmTLX999aMyA0W82O17o/lIMg18G6PJZgmGJjcW6 -----END CERTIFICATE-----Generated at Wed Jul 22 02:36:04 2026 by rpki-client