$ rpki-client -vvf rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/D4054B8A8F9611F1AF74EBB85B11F970.roa File: D4054B8A8F9611F1AF74EBB85B11F970.roa (raw, json) Hash identifier: x8DWipUs4w9swCnDv8kVnSJ3LRGZsUJtbo3eh3gnAb4= Subject key identifier: 46:87:65:91:E2:E2:F1:7B:52:25:7A:89:14:26:4D:3E:92:5B:C4:02 Certificate issuer: /CN=A91341E0/serialNumber=921A27541635F824BED71A79E7E818346562D030 Certificate serial: 02 Authority key identifier: 92:1A:27:54:16:35:F8:24:BE:D7:1A:79:E7:E8:18:34:65:62:D0:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khonVBY1-CS-1xp55-gYNGVi0DA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/D4054B8A8F9611F1AF74EBB85B11F970.roa Signing time: Mon 03 Aug 2026 23:55:39 +0000 ROA not before: Mon 03 Aug 2026 23:55:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7474 IP address blocks: 203.23.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.crl rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khonVBY1-CS-1xp55-gYNGVi0DA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91341E0, serialNumber=921A27541635F824BED71A79E7E818346562D030 Validity Not Before: Aug 3 23:55:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a712a7b-c8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c4:11:02:78:42:96:8b:05:e1:5b:e8:0c:5c: 80:59:48:41:9a:41:c2:c0:d5:da:20:9b:6d:95:09: 91:d8:67:e9:35:d9:57:69:2f:c7:f0:f3:80:dd:c3: aa:43:b3:b7:63:57:bc:c1:cc:aa:7a:ce:f4:b4:b5: a0:11:a9:7b:c1:37:8c:a3:7d:1e:a2:87:9c:2d:5d: c8:6d:be:13:c4:31:f3:a4:f0:94:e7:cd:5c:7f:09: d3:5f:da:83:0c:42:f5:42:70:a5:3d:0d:1f:4f:35: 43:a0:90:1a:37:1a:15:60:7c:18:55:72:39:26:9c: 4a:d7:0e:3b:e2:7c:d8:fc:4c:fd:14:f5:a3:33:d8: f7:62:2e:61:86:d8:96:ad:9a:a1:87:3e:16:7c:1b: a3:26:74:05:ef:78:e3:b7:d4:77:86:ff:f3:5b:8a: 6e:20:41:68:0e:a2:f4:22:36:c2:14:b0:aa:97:63: 82:d2:8c:10:5b:fc:ac:31:42:73:4c:d2:d6:23:27: ee:25:dc:fd:2b:f8:79:e2:56:d1:3d:e2:14:3d:e6: a0:0b:23:dd:a0:62:37:5f:8a:f0:90:28:be:6b:0a: c7:14:72:be:cb:7b:eb:be:62:bd:27:77:c1:ba:b1: dc:11:69:0a:5e:70:37:b2:2b:5a:5f:01:28:29:7e: 96:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:87:65:91:E2:E2:F1:7B:52:25:7A:89:14:26:4D:3E:92:5B:C4:02 X509v3 Authority Key Identifier: keyid:92:1A:27:54:16:35:F8:24:BE:D7:1A:79:E7:E8:18:34:65:62:D0:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/khonVBY1-CS-1xp55-gYNGVi0DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khonVBY1-CS-1xp55-gYNGVi0DA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91341E0/67976E768F9411F1BEBCEE6D5B11F970/D4054B8A8F9611F1AF74EBB85B11F970.roa sbgp-ipAddrBlock: critical IPv4: 203.23.78.0/24 Signature Algorithm: sha256WithRSAEncryption 89:21:b8:d5:fc:fc:86:8e:76:be:93:0b:59:37:8c:1c:0c:0b: a6:74:04:95:84:85:88:df:1f:80:8e:bd:df:ac:fa:6e:34:03: 2f:6e:36:45:82:a4:f1:1a:0c:77:3b:2b:1f:7d:09:dc:42:3d: b0:6f:39:ff:3b:35:87:2c:d3:7c:84:d1:f2:6c:e9:01:70:39: 68:29:31:71:25:dc:6a:94:b3:46:bb:02:72:24:e1:6e:84:88: 5d:c3:61:fa:34:60:1a:87:b4:72:33:ae:e3:ef:d3:7e:36:e4: a2:ff:32:14:7f:b6:c1:7a:b1:07:fe:1c:45:50:69:fd:ba:5c: 71:77:97:a8:fe:bc:ab:00:10:80:5d:f4:cd:21:96:69:13:77: 45:6e:48:ec:bd:a6:38:be:3c:0f:23:5c:f5:e3:7c:2a:82:c4: 17:0d:c8:62:32:f9:a1:48:23:13:77:4d:01:7b:c9:ad:cd:3d: 43:50:a8:98:64:7a:7b:ce:8d:fa:22:fb:1a:40:71:cd:02:d1: a8:8e:7e:41:0a:ab:31:a3:2e:7a:c6:d2:88:2a:2c:93:06:85: 68:c1:f4:1f:be:a7:13:c6:f1:b9:2f:17:2c:f1:0f:25:24:b9: e9:06:cc:f8:5c:bf:a0:7c:29:fa:c5:ee:3b:38:1f:82:71:ec: 62:7b:d2:07 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NDFFMDExMC8GA1UEBRMoOTIxQTI3NTQxNjM1RjgyNEJFRDcxQTc5RTdFODE4MzQ2 NTYyRDAzMDAeFw0yNjA4MDMyMzU1MzlaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNzEyYTdiLWM4ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKxBECeEKWiwXhW+gMXIBZSEGaQcLA1dogm22VCZHYZ+k12VdpL8fw84Ddw6pD s7djV7zBzKp6zvS0taARqXvBN4yjfR6ih5wtXchtvhPEMfOk8JTnzVx/CdNf2oMM QvVCcKU9DR9PNUOgkBo3GhVgfBhVcjkmnErXDjvifNj8TP0U9aMz2PdiLmGG2Jat mqGHPhZ8G6MmdAXveOO31HeG//Nbim4gQWgOovQiNsIUsKqXY4LSjBBb/KwxQnNM 0tYjJ+4l3P0r+HniVtE94hQ95qALI92gYjdfivCQKL5rCscUcr7Le+u+Yr0nd8G6 sdwRaQpecDeyK1pfASgpfpaRAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQURodlkeLi 8XtSJXqJFCZNPpJbxAIwHwYDVR0jBBgwFoAUkhonVBY1+CS+1xp55+gYNGVi0DAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0MUUwLzY3OTc2RTc2OEY5 NDExRjFCRUJDRUU2RDVCMTFGOTcwL2tob25WQlkxLUNTLTF4cDU1LWdZTkdWaTBE QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva2hvblZCWTEtQ1MtMXhwNTUtZ1lOR1ZpMERBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDFFMC82Nzk3NkU3NjhGOTQxMUYxQkVCQ0VFNkQ1QjExRjk3MC9ENDA1NEI4QThG OTYxMUYxQUY3NEVCQjg1QjExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADLF04wDQYJKoZIhvcNAQELBQADggEBAIkhuNX8/IaOdr6TC1k3jBwM C6Z0BJWEhYjfH4COvd+s+m40Ay9uNkWCpPEaDHc7Kx99CdxCPbBvOf87NYcs03yE 0fJs6QFwOWgpMXEl3GqUs0a7AnIk4W6EiF3DYfo0YBqHtHIzruPv03425KL/MhR/ tsF6sQf+HEVQaf26XHF3l6j+vKsAEIBd9M0hlmkTd0VuSOy9pji+PA8jXPXjfCqC xBcNyGIy+aFIIxN3TQF7ya3NPUNQqJhkenvOjfoi+xpAcc0C0aiOfkEKqzGjLnrG 0ogqLJMGhWjB9B++pxPG8bkvFyzxDyUkuekGzPhcv6B8KfrF7js4H4Jx7GJ70gc= -----END CERTIFICATE-----Generated at Wed Aug 19 13:37:03 2026 by rpki-client