$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/DFBA3AD2555611E7A82D327CC4F9AE02.roa File: DFBA3AD2555611E7A82D327CC4F9AE02.roa (raw, json) Hash identifier: kizVRkxIaY1795MCpE8rdX3fvEG4qDLVYFjlEnVts0Q= Subject key identifier: 4D:27:DA:95:0B:E2:A4:4F:81:8A:56:EB:0B:A1:31:0C:A8:C4:17:81 Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 26A6 Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/DFBA3AD2555611E7A82D327CC4F9AE02.roa Signing time: Mon 20 Jul 2026 16:16:54 +0000 ROA not before: Mon 20 Jul 2026 16:16:54 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 23689 IP address blocks: 120.28.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 16:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9894 (0x26a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Jul 20 16:16:54 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a5e49f6-e23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:76:e6:16:7e:32:d1:96:c6:e7:13:6b:49:1b: 91:b6:e4:52:d4:9f:fa:8e:f0:3f:d2:23:9b:1c:e7: 7a:35:a1:c7:23:ef:ff:f5:80:2c:06:2a:27:e7:96: b0:ed:63:90:2b:a0:d5:f8:44:14:0c:56:4f:1c:67: f5:f9:a9:9a:61:bd:0c:2f:da:96:28:f2:1d:94:3c: a7:55:26:e2:04:ac:0f:7f:fe:45:e2:6e:5d:18:21: 2c:47:56:df:a8:bc:bb:89:d0:07:1c:f0:fb:47:53: f5:d1:35:be:f6:a3:ad:25:cf:1b:50:be:d8:92:6b: b8:ef:6b:d6:98:3b:cd:e7:84:a5:33:c2:92:2f:43: 1c:61:1b:9a:eb:63:be:fd:77:06:5f:9c:48:ae:2b: 50:7e:a0:b8:a5:1b:b8:f6:11:9d:d9:4e:95:38:6a: f9:f0:9b:be:f8:5f:84:c9:e1:6c:21:1b:63:b2:7a: 3f:7d:e5:e7:5b:49:1f:48:4d:3e:fa:1e:4d:40:6d: eb:f1:7f:e2:49:d3:02:5d:8f:56:76:94:64:47:7a: 5a:ed:8f:9b:49:ad:b2:e4:b1:5a:a1:37:de:92:09: 0d:c8:59:43:a1:20:4d:e1:bd:c5:30:bf:a0:90:f8: 2d:fa:fa:34:b3:3e:86:2e:79:03:21:bb:61:40:a6: 56:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:27:DA:95:0B:E2:A4:4F:81:8A:56:EB:0B:A1:31:0C:A8:C4:17:81 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/DFBA3AD2555611E7A82D327CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.28.28.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:b0:e4:c7:ad:27:36:39:01:f1:6f:6e:d1:30:48:9a:b2:64: 44:89:7f:47:34:40:fc:2e:d8:58:1f:85:36:ea:81:f7:39:92: ea:93:0a:b9:a7:f8:ff:b1:c7:53:49:2a:00:b4:bb:e0:2e:2a: 69:0a:59:0a:f6:f8:22:95:bf:88:fb:c7:80:59:01:47:04:66: a9:69:d8:5f:0e:96:2d:67:74:94:a8:30:d7:09:59:70:26:03: c7:21:e9:5e:6c:dd:61:6b:2b:2f:45:65:e6:0b:6d:c0:db:fa: 61:a8:5a:27:7a:c4:cc:9d:d0:2c:78:89:4c:80:4d:a3:79:2b: 72:0d:5e:88:19:d7:ef:9d:a2:45:99:60:1d:9c:9b:1d:38:23: b9:4c:e1:1f:88:fa:ae:aa:a6:a9:3e:56:d2:fd:6d:de:50:c9: 78:86:e4:03:53:06:ee:0a:4c:bb:6f:bd:9f:e8:02:04:3f:57: e0:5d:20:26:19:b3:30:56:cc:66:d9:1e:d3:6b:fb:b6:b0:4e: f4:4f:d1:25:89:e9:d4:5d:52:26:c9:38:57:43:35:8a:69:ac: 36:ef:20:1a:73:b6:af:44:7d:63:e2:e3:c0:b9:73:aa:77:35: 33:33:cc:70:56:4a:b9:e0:56:ea:4d:18:56:0f:cf:37:de:de: 0f:fc:9a:45 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICJqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjYwNzIwMTYxNjU0WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTVlNDlmNi1lMjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA73bmFn4y0ZbG5xNrSRuRtuRS1J/6jvA/0iObHOd6NaHHI+//9YAsBion55aw 7WOQK6DV+EQUDFZPHGf1+amaYb0ML9qWKPIdlDynVSbiBKwPf/5F4m5dGCEsR1bf qLy7idAHHPD7R1P10TW+9qOtJc8bUL7Ykmu472vWmDvN54SlM8KSL0McYRua62O+ /XcGX5xIritQfqC4pRu49hGd2U6VOGr58Ju++F+EyeFsIRtjsno/feXnW0kfSE0+ +h5NQG3r8X/iSdMCXY9WdpRkR3pa7Y+bSa2y5LFaoTfekgkNyFlDoSBN4b3FML+g kPgt+vo0sz6GLnkDIbthQKZWHQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFE0n2pUL 4qRPgYpW6wuhMQyoxBeBMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvREZCQTNBRDI1 NTU2MTFFN0E4MkQzMjdDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBeBwcMA0GCSqGSIb3DQEBCwUAA4IBAQCbsOTHrSc2OQHxb27RMEia smREiX9HNED8LthYH4U26oH3OZLqkwq5p/j/scdTSSoAtLvgLippClkK9vgilb+I +8eAWQFHBGapadhfDpYtZ3SUqDDXCVlwJgPHIelebN1haysvRWXmC23A2/phqFon esTMndAseIlMgE2jeStyDV6IGdfvnaJFmWAdnJsdOCO5TOEfiPquqqapPlbS/W3e UMl4huQDUwbuCky7b72f6AIEP1fgXSAmGbMwVsxm2R7Ta/u2sE70T9ElienUXVIm yThXQzWKaaw27yAac7avRH1j4uPAuXOqdzUzM8xwVkq54FbqTRhWD8833t4P/JpF -----END CERTIFICATE-----Generated at Tue Jul 21 20:32:02 2026 by rpki-client