$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/FD91EBC6813F11F1B7D13E8E7CA30FBC.roa File: FD91EBC6813F11F1B7D13E8E7CA30FBC.roa (raw, json) Hash identifier: dGGnYz9vFTRVk8P1V4rDN6tHYZBhnkVzydpNO0GPnX0= Subject key identifier: A0:1D:4A:DA:37:C3:21:A5:12:E9:22:AB:CB:F9:CA:F2:8D:EB:A8:C9 Certificate issuer: /CN=A914C10B/serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798 Certificate serial: 06D4 Authority key identifier: 10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/FD91EBC6813F11F1B7D13E8E7CA30FBC.roa Signing time: Thu 16 Jul 2026 17:58:46 +0000 ROA not before: Thu 16 Jul 2026 17:58:46 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 54238 IP address blocks: 164.153.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 22:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1748 (0x6d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B, serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798 Validity Not Before: Jul 16 17:58:46 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6a591bd6-95cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4f:54:57:1c:e9:6f:99:7b:df:8b:e3:6c:c9: ec:cb:74:cd:45:bc:3c:f4:27:dd:03:dc:fd:f0:dd: 47:bf:2c:fc:4f:bc:99:ed:5b:15:37:47:0b:8d:d8: 02:16:07:73:e5:c1:fd:40:b7:33:cc:fb:60:4f:9f: 63:ac:2b:28:9a:00:8d:0f:6a:f6:1b:68:b9:08:85: f0:1f:67:77:ff:78:01:e2:41:89:f7:c4:5d:6f:83: 45:67:82:fe:ce:de:df:5c:b0:60:7f:84:ad:e9:b0: f7:07:09:93:f3:ca:f5:3d:cb:d2:45:82:f0:34:74: d2:59:cf:51:94:f7:ad:bf:e2:53:6c:4f:40:15:83: f6:96:a1:d6:aa:4b:0d:bd:ac:ab:d8:ef:50:8b:25: 5c:5e:b4:6e:4c:98:e6:1f:a5:0f:df:07:da:a8:50: e2:08:f7:87:c0:b9:3a:d3:bf:a0:b4:42:41:c7:81: de:fb:64:48:38:ac:16:3a:8b:19:04:12:19:47:ba: 5d:83:ab:e2:30:ed:18:ae:fe:52:9a:e5:d6:a2:f1: 63:15:b4:67:bf:8b:ad:ce:bf:34:22:1c:1c:0c:ed: ca:eb:28:4b:c7:a6:cb:b0:88:0b:1f:8b:13:97:b8: 4d:93:88:27:58:55:ed:4a:bc:2c:7e:8d:f1:d9:49: fc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1D:4A:DA:37:C3:21:A5:12:E9:22:AB:CB:F9:CA:F2:8D:EB:A8:C9 X509v3 Authority Key Identifier: keyid:10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/FD91EBC6813F11F1B7D13E8E7CA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 164.153.28.0/22 Signature Algorithm: sha256WithRSAEncryption 23:38:58:9d:26:6d:9b:d2:d2:f9:0e:f7:bd:20:1f:ba:dc:d5: 0c:c6:40:a6:42:cb:b3:1c:6c:88:df:c1:30:ab:3a:66:bf:1c: 11:3b:fc:cc:54:7e:21:0c:aa:0f:8f:b5:66:a6:ff:64:bd:33: 53:1f:d4:a4:71:8c:c1:c7:7f:f2:07:3b:12:f1:4a:14:cf:60: 4d:ed:ac:c9:e8:70:d5:8a:01:bf:e2:36:f3:8d:f7:9d:23:b0: 7f:24:29:4d:c0:a6:f4:07:fc:29:c7:ed:8c:ac:70:b8:8b:4a: 7e:aa:16:b7:d2:4b:d8:ea:ca:98:87:c3:c8:0a:b1:73:ba:be: 1e:ba:86:c6:5b:b9:1a:76:18:ef:82:68:ed:9c:fb:e5:03:4f: e5:10:36:63:9d:6f:83:20:93:18:07:4b:32:34:34:39:c6:ce: 3b:70:fa:02:82:45:8c:eb:6f:55:15:46:17:d7:23:40:bf:3e: 2e:84:cf:5d:d0:ed:ea:c7:01:1d:87:71:d8:30:55:d0:f8:15: c1:18:16:96:f3:88:06:04:3c:99:67:da:7b:3e:55:8c:f4:46: 3d:30:d7:ee:8c:27:ea:69:81:87:71:06:9b:35:87:96:ab:6e: 1c:3e:c9:59:30:5a:b0:b5:f0:70:78:df:20:c5:d0:d4:84:fd: 89:bc:56:d0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDEwOUNCNzFCNEY2NDE2NkYxRERBNDIyQ0VCNzIxRUUz RUQxOTY3OTgwHhcNMjYwNzE2MTc1ODQ2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU5MWJkNi05NWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq09UVxzpb5l734vjbMnsy3TNRbw89CfdA9z98N1Hvyz8T7yZ7VsVN0cLjdgC Fgdz5cH9QLczzPtgT59jrCsomgCND2r2G2i5CIXwH2d3/3gB4kGJ98Rdb4NFZ4L+ zt7fXLBgf4St6bD3BwmT88r1PcvSRYLwNHTSWc9RlPetv+JTbE9AFYP2lqHWqksN vayr2O9QiyVcXrRuTJjmH6UP3wfaqFDiCPeHwLk607+gtEJBx4He+2RIOKwWOosZ BBIZR7pdg6viMO0Yrv5SmuXWovFjFbRnv4utzr80IhwcDO3K6yhLx6bLsIgLH4sT l7hNk4gnWFXtSrwsfo3x2Un8MQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKAdSto3 wyGlEukiq8v5yvKN66jJMB8GA1UdIwQYMBaAFBCctxtPZBZvHdpCLOtyHuPtGWeY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83MjMxQzNEQUFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0ZtOGQya0lzNjNJZTQtMFpa NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VKeTNHMDlrRm04ZDJrSXM2M0llNC0wWlo1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEMxMEIvNzIzMUMzREFBRjYyMTFFQjhCQTFGNzE0QzRGOUFFMDIvRkQ5MUVCQzY4 MTNGMTFGMUI3RDEzRThFN0NBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCpJkcMA0GCSqGSIb3DQEBCwUAA4IBAQAjOFidJm2b0tL5Dve9IB+6 3NUMxkCmQsuzHGyI38EwqzpmvxwRO/zMVH4hDKoPj7Vmpv9kvTNTH9SkcYzBx3/y BzsS8UoUz2BN7azJ6HDVigG/4jbzjfedI7B/JClNwKb0B/wpx+2MrHC4i0p+qha3 0kvY6sqYh8PICrFzur4euobGW7kadhjvgmjtnPvlA0/lEDZjnW+DIJMYB0syNDQ5 xs47cPoCgkWM629VFUYX1yNAvz4uhM9d0O3qxwEdh3HYMFXQ+BXBGBaW84gGBDyZ Z9p7PlWM9EY9MNfujCfqaYGHcQabNYeWq24cPslZMFqwtfBweN8gxdDUhP2JvFbQ -----END CERTIFICATE-----Generated at Sat Jul 18 04:29:09 2026 by rpki-client