$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CB7AF50802CC11E6AA35863CC4F9AE02.roa File: CB7AF50802CC11E6AA35863CC4F9AE02.roa (raw, json) Hash identifier: cAXd+rSqoS0/CrBqmAlff9AaR6q5VbbrxC7tqf0d2OM= Subject key identifier: B3:D7:49:23:B0:FA:2C:F3:92:34:29:2E:7B:96:A5:26:95:51:7F:F3 Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 26AC Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CB7AF50802CC11E6AA35863CC4F9AE02.roa Signing time: Mon 20 Jul 2026 16:17:07 +0000 ROA not before: Mon 20 Jul 2026 16:17:07 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 38445 IP address blocks: 120.28.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 16:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9900 (0x26ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Jul 20 16:17:07 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a5e4a03-1795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:65:74:ff:62:12:e8:29:4c:aa:c4:f1:18: fb:12:c5:6d:ae:16:cc:3b:55:ee:6e:7b:6e:26:62: fd:db:c4:65:c3:cc:c1:88:26:36:da:9d:15:2c:c8: 98:79:30:70:89:7e:f0:22:7e:1f:1e:03:73:41:04: 02:66:7c:f8:92:44:d2:1b:c3:44:55:96:a7:2e:20: 56:8d:8c:c0:77:05:15:74:ce:44:dc:44:7e:71:c2: 95:1d:84:e2:20:a9:bd:e8:f7:f6:99:75:e2:6a:91: 47:0d:14:cf:5c:57:e3:d7:cb:62:5b:1f:1d:9a:21: 3f:ed:87:8e:e7:4f:be:c1:c3:78:a8:e1:3b:e8:82: d6:bc:3b:e7:e9:0e:1f:32:04:c4:16:de:da:5a:e0: 63:38:1b:d3:e5:10:3f:fd:e6:0d:90:73:27:94:34: 88:14:a7:10:54:9c:37:85:8a:ad:da:f3:a9:1f:50: 8f:87:24:23:d0:c8:f1:d3:41:be:21:5a:90:3c:80: 1e:8c:d9:99:a4:3a:7f:c8:2f:4d:ea:ce:d1:fd:d0: 0c:38:74:17:f7:09:a8:33:0b:7a:cd:c8:50:53:84: 25:c8:30:fd:14:fa:ef:93:f3:d0:9c:18:47:cd:25: 00:da:7f:0b:9b:40:7d:a1:89:f2:65:1a:2e:77:c3: 5e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D7:49:23:B0:FA:2C:F3:92:34:29:2E:7B:96:A5:26:95:51:7F:F3 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CB7AF50802CC11E6AA35863CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.28.21.0/24 Signature Algorithm: sha256WithRSAEncryption af:5f:93:d7:69:05:5f:41:1d:37:f9:81:1d:de:61:a9:f9:9d: 3d:aa:8e:c5:6b:cd:82:4d:b2:70:2d:66:49:fe:7b:19:44:5f: 9a:37:42:fc:db:c8:36:77:97:03:9f:97:af:f0:77:4e:ab:25: 2f:f2:22:75:60:17:48:af:95:90:a2:16:8f:c6:24:30:50:49: 8c:af:73:50:3b:5d:da:4b:79:b4:9e:fe:c0:74:0c:af:39:49: 37:23:30:b7:3a:60:bb:96:85:41:e9:5e:8f:5d:fa:c3:9d:28: 5c:67:00:9f:d6:1e:ac:52:48:0d:cd:c9:e7:9c:0f:b4:ff:f6: 43:27:c5:17:ad:8b:a5:24:89:1f:9b:2e:5e:42:d2:60:75:db: f1:56:6b:ba:31:73:5c:92:8e:52:7e:11:df:48:2c:82:b4:00: bd:c8:e4:d1:06:67:19:70:f0:0e:7b:f9:85:2c:1d:a8:cc:ff: 60:0c:2b:39:14:66:49:0e:09:98:5f:5d:58:2e:12:5d:7a:03: 9e:48:37:63:05:6a:f9:3a:c7:16:c5:38:8c:9e:16:3a:3b:53: 05:f2:99:a3:af:52:ea:b3:dd:9d:49:6c:3b:3d:84:8b:e5:6e: 60:83:34:58:c8:18:32:0e:0d:0c:1c:d4:22:df:63:ec:c8:79: 2a:fa:84:d5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICJqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjYwNzIwMTYxNzA3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTVlNGEwMy0xNzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuF5ldP9iEugpTKrE8Rj7EsVtrhbMO1XubntuJmL928Rlw8zBiCY22p0VLMiY eTBwiX7wIn4fHgNzQQQCZnz4kkTSG8NEVZanLiBWjYzAdwUVdM5E3ER+ccKVHYTi IKm96Pf2mXXiapFHDRTPXFfj18tiWx8dmiE/7YeO50++wcN4qOE76ILWvDvn6Q4f MgTEFt7aWuBjOBvT5RA//eYNkHMnlDSIFKcQVJw3hYqt2vOpH1CPhyQj0Mjx00G+ IVqQPIAejNmZpDp/yC9N6s7R/dAMOHQX9wmoMwt6zchQU4QlyDD9FPrvk/PQnBhH zSUA2n8Lm0B9oYnyZRoud8Ne6QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLPXSSOw +izzkjQpLnuWpSaVUX/zMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvQ0I3QUY1MDgw MkNDMTFFNkFBMzU4NjNDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAeBwVMA0GCSqGSIb3DQEBCwUAA4IBAQCvX5PXaQVfQR03+YEd3mGp +Z09qo7Fa82CTbJwLWZJ/nsZRF+aN0L828g2d5cDn5ev8HdOqyUv8iJ1YBdIr5WQ ohaPxiQwUEmMr3NQO13aS3m0nv7AdAyvOUk3IzC3OmC7loVB6V6PXfrDnShcZwCf 1h6sUkgNzcnnnA+0//ZDJ8UXrYulJIkfmy5eQtJgddvxVmu6MXNcko5SfhHfSCyC tAC9yOTRBmcZcPAOe/mFLB2ozP9gDCs5FGZJDgmYX11YLhJdegOeSDdjBWr5OscW xTiMnhY6O1MF8pmjr1Lqs92dSWw7PYSL5W5ggzRYyBgyDg0MHNQi32PsyHkq+oTV -----END CERTIFICATE-----Generated at Tue Jul 21 20:32:09 2026 by rpki-client