$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/206969823B9411EB9F059D7EC4F9AE02.roa File: 206969823B9411EB9F059D7EC4F9AE02.roa (raw, json) Hash identifier: fT0MQOczypsjHgqIISFNboLyF3R81xE+5ng5wnC/P64= Subject key identifier: C8:C9:4A:D0:7B:11:15:BE:B8:7E:76:31:0D:12:02:ED:74:84:27:47 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0D1A Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/206969823B9411EB9F059D7EC4F9AE02.roa Signing time: Fri 14 Aug 2026 19:38:30 +0000 ROA not before: Fri 14 Aug 2026 19:38:30 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 0 IP address blocks: 203.190.227.0/24 maxlen: 24 203.190.230.0/24 maxlen: 24 2001:de8:4::/64 maxlen: 64 2001:de8:5::/64 maxlen: 64 2001:de8:5:1::/64 maxlen: 64 2001:de8:6::/64 maxlen: 64 2001:de8:6:1::/64 maxlen: 64 2001:de8:6:2::/64 maxlen: 64 2001:de8:7::/64 maxlen: 64 2001:de8:7:1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3354 (0xd1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Aug 14 19:38:30 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7f6eb5-6dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:20:48:e4:c0:72:05:42:e1:0e:17:a1:8f:14: 68:9e:0d:64:ea:0c:f2:06:f0:23:a3:87:39:6d:7e: 50:31:31:a8:6b:5d:92:58:4e:e6:70:8a:b9:67:f4: 66:a9:41:11:3c:43:39:89:21:38:a9:9d:9d:6e:21: bc:99:76:41:02:1f:26:e2:38:e0:7f:50:60:6c:61: 00:65:ad:9f:56:9b:fc:2b:df:6b:d5:a7:97:f2:4c: 72:03:50:9e:bc:b8:61:b8:53:65:9a:c8:3d:44:3e: 14:b5:7b:d5:41:a7:93:a8:91:b6:28:2c:d6:04:f8: 42:d4:40:75:9e:48:68:b1:08:97:bf:d2:76:e0:a7: d2:70:61:45:6a:62:f0:3f:22:9f:a0:b1:d8:48:04: 6d:b7:72:ef:ae:b6:00:bd:42:b2:91:2b:85:6b:4c: ff:37:8f:f4:97:6d:25:7c:23:b0:32:cb:a8:f0:87: 4a:2e:15:ca:63:65:9f:c6:fa:c4:44:11:9d:dd:e6: a9:3b:7f:72:50:5f:ae:44:47:11:22:93:a6:d0:df: 72:88:30:33:5a:37:14:9b:82:aa:f5:59:82:4a:fc: bf:c5:d4:52:75:fe:1f:8c:84:5a:4e:bb:59:92:b8: d9:94:95:24:68:c3:c4:f6:a7:f6:61:f8:68:b0:03: 24:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C9:4A:D0:7B:11:15:BE:B8:7E:76:31:0D:12:02:ED:74:84:27:47 X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/206969823B9411EB9F059D7EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.190.227.0/24 203.190.230.0/24 IPv6: 2001:de8:4::/64 2001:de8:5::/63 2001:de8:6::-2001:de8:6:2:ffff:ffff:ffff:ffff 2001:de8:7::/63 Signature Algorithm: sha256WithRSAEncryption 93:e3:bb:ba:68:9e:f7:9c:5f:2e:8e:58:76:da:d3:34:e7:89: 35:b7:f6:c6:bd:ad:32:02:9c:74:84:d0:05:96:b1:07:4f:75: 65:e6:e2:5b:a7:1d:87:3e:56:18:ce:a8:a7:7f:72:43:bf:92: 7e:b6:54:20:b7:eb:47:86:77:06:7e:d1:45:dd:7b:17:85:85: 55:31:0d:b5:2f:d7:95:d0:4e:91:ff:b1:26:88:98:a4:13:68: 1a:5d:d8:95:a3:94:c6:4e:80:fc:60:55:58:d8:3e:ae:df:d8: 38:f7:18:76:a7:a5:1d:b1:88:c6:3d:0a:7d:5c:24:04:6b:a1: 1e:56:5e:23:c1:51:31:e9:53:1f:8e:2f:4e:b5:34:d0:38:67: 72:2b:9d:8d:29:50:45:0e:78:58:f3:d2:b1:29:cf:12:e2:c0: 4d:43:83:a7:8d:72:e1:eb:d6:d6:c2:b2:78:11:11:b1:f1:1d: 1e:74:27:72:fd:ab:97:dd:2b:85:20:f7:70:c3:16:56:06:88: 60:db:4b:85:9e:56:fa:3b:4c:75:e6:00:a5:04:00:4f:c3:bf: ee:89:38:98:75:5f:1f:f5:f0:f8:8f:b0:5d:46:a5:ab:d1:a4: 0f:e7:c3:95:5b:3b:93:a5:33:7b:ef:a6:59:2d:e6:10:78:d9: ee:e5:db:dd -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICDRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjYwODE0MTkzODMwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdmNmViNS02ZGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjyBI5MByBULhDhehjxRong1k6gzyBvAjo4c5bX5QMTGoa12SWE7mcIq5Z/Rm qUERPEM5iSE4qZ2dbiG8mXZBAh8m4jjgf1BgbGEAZa2fVpv8K99r1aeX8kxyA1Ce vLhhuFNlmsg9RD4UtXvVQaeTqJG2KCzWBPhC1EB1nkhosQiXv9J24KfScGFFamLw PyKfoLHYSARtt3LvrrYAvUKykSuFa0z/N4/0l20lfCOwMsuo8IdKLhXKY2WfxvrE RBGd3eapO39yUF+uREcRIpOm0N9yiDAzWjcUm4Kq9VmCSvy/xdRSdf4fjIRaTrtZ krjZlJUkaMPE9qf2YfhosAMk5wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMjJStB7 ERW+uH52MQ0SAu10hCdHMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThFM0YvQzI0MzIyQkE1NDQ2MTFFQThDMDU2NTFEQzRGOUFFMDIvMjA2OTY5ODIz Qjk0MTFFQjlGMDU5RDdFQzRGOUFFMDIucm9hMGQGCCsGAQUFBwEHAQH/BFUwUzAS BAIAATAMAwQAy77jAwQAy77mMD0EAgACMDcDCQAgAQ3oAAQAAAMJASABDegABQAA MBQDBwEgAQ3oAAYDCQAgAQ3oAAYAAgMJASABDegABwAAMA0GCSqGSIb3DQEBCwUA A4IBAQCT47u6aJ73nF8ujlh22tM054k1t/bGva0yApx0hNAFlrEHT3Vl5uJbpx2H PlYYzqinf3JDv5J+tlQgt+tHhncGftFF3XsXhYVVMQ21L9eV0E6R/7EmiJikE2ga XdiVo5TGToD8YFVY2D6u39g49xh2p6UdsYjGPQp9XCQEa6EeVl4jwVEx6VMfji9O tTTQOGdyK52NKVBFDnhY89KxKc8S4sBNQ4OnjXLh69bWwrJ4ERGx8R0edCdy/auX 3SuFIPdwwxZWBohg20uFnlb6O0x15gClBABPw7/uiTiYdV8f9fD4j7BdRqWr0aQP 58OVWzuTpTN776ZZLeYQeNnu5dvd -----END CERTIFICATE-----Generated at Fri Aug 21 21:47:22 2026 by rpki-client