$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CD70D3940A7811EEA489D07BC4F9AE02.roa File: CD70D3940A7811EEA489D07BC4F9AE02.roa (raw, json) Hash identifier: 2FNBLNXeHKr5fNOjfs5L8pJM6snV6ei6jK9XX9YsJak= Subject key identifier: 75:59:CD:DA:03:87:8B:DD:64:97:AA:1A:03:71:6F:26:79:4E:0E:5E Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 26AB Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CD70D3940A7811EEA489D07BC4F9AE02.roa Signing time: Mon 20 Jul 2026 16:17:05 +0000 ROA not before: Mon 20 Jul 2026 16:17:05 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 26344 IP address blocks: 120.28.20.0/24 maxlen: 24 222.127.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 16:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9899 (0x26ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Jul 20 16:17:05 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a5e4a01-9ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:11:77:19:cd:e3:15:e3:e4:a1:a0:2d:3d:38: f6:4b:cd:27:5a:f0:e8:78:cb:3d:d3:bc:46:ed:f7: 19:8d:ba:9d:7e:30:7e:c5:fa:f1:d2:a5:c7:b5:8e: de:f8:71:16:51:e3:73:c4:fe:34:af:04:1e:73:d4: f2:07:98:42:3a:46:b2:a7:87:84:34:9b:71:11:b9: d1:a5:ae:e6:2d:91:37:6b:50:a6:16:02:fe:ce:53: 16:2e:06:2a:08:cc:5e:2c:87:8f:aa:64:fa:54:aa: 96:90:18:4d:1e:95:98:a5:37:2f:02:ca:30:c8:b5: 71:2b:7a:d8:d1:9a:f5:c6:78:8d:36:35:da:0f:0c: d5:ba:c9:02:fc:e5:35:e8:f1:b2:bc:d2:97:d8:80: 39:46:2e:82:48:32:a9:ec:1b:9c:1f:73:4c:a6:90: 28:ff:97:b4:63:4e:c0:e4:7c:62:10:9b:13:05:15: dc:7b:7b:7b:cc:42:c5:a6:89:37:1f:d7:05:4f:bc: d6:68:7a:41:82:36:76:4f:48:b5:ef:3b:83:d0:cb: 80:05:a8:1b:fa:7f:d9:17:68:67:d1:d3:6c:0b:a3: 9e:e4:4b:b0:df:34:60:15:63:8d:68:24:6f:58:aa: 22:99:e7:c1:8d:0f:e3:e5:fc:5d:ec:58:f5:4e:63: 1d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:59:CD:DA:03:87:8B:DD:64:97:AA:1A:03:71:6F:26:79:4E:0E:5E X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CD70D3940A7811EEA489D07BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.28.20.0/24 222.127.19.0/24 Signature Algorithm: sha256WithRSAEncryption e5:7e:81:6b:29:11:44:59:32:c6:ce:b0:c4:7b:69:a0:ba:c9: 41:ce:8a:14:28:71:3c:09:d5:51:db:d0:ac:65:4f:7d:1d:c0: a1:3d:f3:54:77:21:a7:12:53:40:bd:bd:54:15:ce:07:88:7e: 43:7a:0f:3b:39:99:62:dc:9d:c9:4e:1c:fd:83:95:e9:38:00: fb:7f:e2:02:82:07:a8:ac:af:ef:c0:55:3e:f2:af:47:77:4b: 85:e9:12:1f:bb:26:e8:8b:b6:2b:06:2b:82:0e:76:e8:8a:32: 41:8e:25:4b:b6:f2:f4:c6:3c:17:d8:41:7f:7c:df:7e:6f:c7: 8a:34:2d:3b:74:ed:21:95:19:02:10:13:1d:64:08:c3:2d:1f: 3b:a2:4b:e4:e8:ce:dd:c4:a5:0c:ff:21:5a:e4:cb:fa:d0:2d: 45:f6:e6:c9:66:d3:c5:06:f3:1a:43:6c:60:59:43:ae:41:8a: 8e:73:9a:5a:23:d5:fb:b0:a6:fa:48:a8:ca:ee:e7:72:e1:3d: 21:c1:8a:f2:ab:5d:21:e7:c4:02:a3:dc:f7:9e:22:55:0b:a9: ae:91:1e:08:5f:be:89:a8:f1:ed:87:63:eb:d8:da:39:be:03: 78:61:bb:e4:af:79:27:9a:7b:d0:46:28:bb:35:f3:31:35:42: ad:5b:d7:76 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICJqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjYwNzIwMTYxNzA1WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTVlNGEwMS05Y2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBF3Gc3jFePkoaAtPTj2S80nWvDoeMs907xG7fcZjbqdfjB+xfrx0qXHtY7e +HEWUeNzxP40rwQec9TyB5hCOkayp4eENJtxEbnRpa7mLZE3a1CmFgL+zlMWLgYq CMxeLIePqmT6VKqWkBhNHpWYpTcvAsowyLVxK3rY0Zr1xniNNjXaDwzVuskC/OU1 6PGyvNKX2IA5Ri6CSDKp7BucH3NMppAo/5e0Y07A5HxiEJsTBRXce3t7zELFpok3 H9cFT7zWaHpBgjZ2T0i17zuD0MuABagb+n/ZF2hn0dNsC6Oe5Euw3zRgFWONaCRv WKoimefBjQ/j5fxd7Fj1TmMdMwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFHVZzdoD h4vdZJeqGgNxbyZ5Tg5eMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvQ0Q3MEQzOTQw QTc4MTFFRUE0ODlEMDdCQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAeBwUAwQA3n8TMA0GCSqGSIb3DQEBCwUAA4IBAQDlfoFrKRFEWTLG zrDEe2mguslBzooUKHE8CdVR29CsZU99HcChPfNUdyGnElNAvb1UFc4HiH5Deg87 OZli3J3JThz9g5XpOAD7f+ICggeorK/vwFU+8q9Hd0uF6RIfuyboi7YrBiuCDnbo ijJBjiVLtvL0xjwX2EF/fN9+b8eKNC07dO0hlRkCEBMdZAjDLR87okvk6M7dxKUM /yFa5Mv60C1F9ubJZtPFBvMaQ2xgWUOuQYqOc5paI9X7sKb6SKjK7udy4T0hwYry q10h58QCo9z3niJVC6mukR4IX76JqPHth2Pr2No5vgN4Ybvkr3knmnvQRii7NfMx NUKtW9d2 -----END CERTIFICATE-----Generated at Tue Jul 21 18:04:22 2026 by rpki-client