$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CFF0FFB002CC11E6AA35863CC4F9AE02.roa File: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (raw, json) Hash identifier: fELsRIeUPp1iTyoEm2tgpyVJi8oS2Ehx5DGrmeooViw= Subject key identifier: EF:F0:3F:81:37:4B:1A:F7:18:C3:3A:96:16:8C:3D:D2:83:5A:83:F4 Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 26B2 Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CFF0FFB002CC11E6AA35863CC4F9AE02.roa Signing time: Mon 20 Jul 2026 16:17:20 +0000 ROA not before: Mon 20 Jul 2026 16:17:20 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 56095 IP address blocks: 120.28.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 16:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9906 (0x26b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Jul 20 16:17:20 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a5e4a10-0d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:20:d2:e2:18:e9:b4:10:ee:3f:97:26:a5:54: 05:6c:9e:24:8f:3e:2c:34:b4:06:ce:6f:7d:5e:44: f0:86:6c:15:0f:85:08:63:27:2e:96:7e:6e:1a:fd: 2b:f4:90:b7:16:1b:81:07:51:26:97:87:68:ff:ea: 64:c3:ac:75:2d:70:d1:f9:cb:4a:85:d3:54:d9:16: 30:71:e0:ad:6d:76:ed:49:21:d6:b9:21:7a:c4:ef: 96:c9:ae:51:a4:4e:ee:02:1e:74:61:93:47:d6:2f: 03:84:f8:7b:9f:43:ad:8d:a5:8a:ba:4c:1c:12:f7: 75:45:b0:4b:69:ed:2f:fd:2a:7e:be:fe:44:18:e4: ac:43:f0:0f:0d:40:db:84:7b:04:c0:af:cf:97:4d: ef:da:c8:2c:3b:07:f5:ad:4f:44:35:d2:84:33:c3: 36:19:0a:17:b5:6b:4e:17:a6:6f:35:26:d6:c9:01: 95:e9:45:f9:8d:cb:66:42:54:fc:e1:c1:2b:31:76: 8a:1a:db:27:b4:b3:c9:ff:57:49:8f:13:b2:2b:a8: c0:41:16:e3:5d:1d:63:b6:fe:3b:ac:3c:46:f3:6a: 3f:69:ef:05:e9:32:a9:e3:b1:bb:1a:d1:70:60:36: 9c:41:33:3b:25:b9:c3:4a:19:f6:1a:e5:37:26:14: ea:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F0:3F:81:37:4B:1A:F7:18:C3:3A:96:16:8C:3D:D2:83:5A:83:F4 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CFF0FFB002CC11E6AA35863CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.28.16.0/24 Signature Algorithm: sha256WithRSAEncryption 14:b8:0e:53:dc:06:26:98:f4:61:da:a6:ce:b5:ab:ec:ab:a1: 87:53:c5:95:2f:ff:2f:72:f5:c0:f2:ee:4c:e8:79:b7:c7:98: a5:83:77:c7:2c:b8:7a:f8:36:6c:ed:60:9a:96:08:53:71:c4: fc:f3:6c:78:1a:ce:ff:52:58:eb:49:09:1b:55:a8:8b:ba:6b: ea:fb:8a:bd:fa:f7:74:99:23:80:ef:e6:87:e9:58:2c:aa:3a: c5:b0:e7:3e:82:70:c8:07:aa:e5:75:6a:34:dc:c5:e2:f0:7d: ae:fe:a6:33:c0:9b:de:8d:df:ec:dd:f6:4f:d2:55:6c:6e:7e: 65:39:8f:e2:92:a4:d0:c3:28:eb:c8:65:cd:43:72:e9:0d:55: 64:44:47:e1:34:e1:ce:a8:31:6e:2f:90:34:da:53:45:fd:f0: dd:07:a3:48:38:d0:06:e6:bc:19:4a:5f:b1:d2:9d:ca:4e:5d: e1:a3:65:05:0a:f8:f1:7a:38:08:86:bd:7e:6c:bc:a0:6c:08: ac:d4:19:5e:f4:58:c5:5d:d6:5b:19:73:0b:47:6b:79:74:ba: 36:4c:63:d2:01:1a:91:59:de:a2:8e:82:d3:9e:a4:a3:2e:86: 5a:77:76:d0:ee:3c:e6:13:61:c7:25:ec:dc:1c:9e:af:a3:85: f4:3d:8e:a8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICJrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjYwNzIwMTYxNzIwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTVlNGExMC0wZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCDS4hjptBDuP5cmpVQFbJ4kjz4sNLQGzm99XkTwhmwVD4UIYyculn5uGv0r 9JC3FhuBB1Eml4do/+pkw6x1LXDR+ctKhdNU2RYwceCtbXbtSSHWuSF6xO+Wya5R pE7uAh50YZNH1i8DhPh7n0OtjaWKukwcEvd1RbBLae0v/Sp+vv5EGOSsQ/APDUDb hHsEwK/Pl03v2sgsOwf1rU9ENdKEM8M2GQoXtWtOF6ZvNSbWyQGV6UX5jctmQlT8 4cErMXaKGtsntLPJ/1dJjxOyK6jAQRbjXR1jtv47rDxG82o/ae8F6TKp47G7GtFw YDacQTM7JbnDShn2GuU3JhTqdwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFO/wP4E3 Sxr3GMM6lhaMPdKDWoP0MB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvQ0ZGMEZGQjAw MkNDMTFFNkFBMzU4NjNDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAeBwQMA0GCSqGSIb3DQEBCwUAA4IBAQAUuA5T3AYmmPRh2qbOtavs q6GHU8WVL/8vcvXA8u5M6Hm3x5ilg3fHLLh6+DZs7WCalghTccT882x4Gs7/Uljr SQkbVaiLumvq+4q9+vd0mSOA7+aH6VgsqjrFsOc+gnDIB6rldWo03MXi8H2u/qYz wJvejd/s3fZP0lVsbn5lOY/ikqTQwyjryGXNQ3LpDVVkREfhNOHOqDFuL5A02lNF /fDdB6NIONAG5rwZSl+x0p3KTl3ho2UFCvjxejgIhr1+bLygbAis1Ble9FjFXdZb GXMLR2t5dLo2TGPSARqRWd6ijoLTnqSjLoZad3bQ7jzmE2HHJezcHJ6vo4X0PY6o -----END CERTIFICATE-----Generated at Tue Jul 21 21:17:12 2026 by rpki-client