$ rpki-client -vvvf rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/7B8A52D4B5BB11F18D5162F53E11F970.roa File: 7B8A52D4B5BB11F18D5162F53E11F970.roa (raw, json) Hash identifier: T6c4+2+fIJ46LdhEoUSSX1Kw6hw1AA5PzFi6KFbGnms= Subject key identifier: 33:B7:53:F3:77:EC:AB:86:CA:90:A5:38:45:50:5E:67:DB:57:AD:1D Certificate issuer: /CN=A91599B5/serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Certificate serial: FF Authority key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/7B8A52D4B5BB11F18D5162F53E11F970.roa Signing time: Mon 21 Sep 2026 12:53:46 +0000 ROA not before: Mon 21 Sep 2026 12:53:46 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 154103 IP address blocks: 202.1.28.0/24 maxlen: 24 2402:1e20::/32 maxlen: 36 2402:1e20:1000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 07:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Validity Not Before: Sep 21 12:53:46 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6ab128da-700d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:37:c4:35:5f:7c:fd:62:27:c3:6e:25:8c:f9: cc:bb:50:bd:8b:be:24:0b:54:6e:6b:02:f1:74:61: e5:4d:cf:4d:9b:1a:d0:cb:e1:64:2c:cf:f2:54:5e: 79:ce:de:39:1c:0e:6f:41:46:e5:08:b2:81:4f:53: aa:32:0b:a4:52:41:18:6f:0e:6a:2a:3f:06:bc:e0: 79:dc:61:c5:17:6b:41:58:d3:46:a7:db:ae:72:eb: 9e:7a:05:86:bb:9f:fe:15:67:23:23:c6:48:b8:24: 08:13:d8:80:c5:ff:b2:8a:43:cc:44:9b:39:80:bd: 66:b8:15:97:08:dd:ff:3e:b4:5e:21:54:6e:f6:2d: 19:d0:fd:c2:ed:68:c6:5e:99:8a:ac:6f:af:d3:8d: d7:b0:1b:62:06:f5:d7:61:4d:56:4a:f8:41:3f:6f: a3:39:c7:04:e6:08:ae:44:2f:10:14:ac:b9:44:4f: f5:d1:2c:e4:ec:10:5b:cc:ff:26:7a:c3:9a:cf:30: c9:aa:9f:81:f4:aa:0d:75:f9:8e:85:c5:94:62:86: 9f:10:22:90:64:33:07:a3:80:91:c0:9d:95:25:94: fd:49:4c:5f:03:98:ef:37:e4:05:e8:47:7d:ec:a6: 32:ff:1a:dc:1d:c4:47:8e:97:fd:3e:19:86:f3:93: d6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B7:53:F3:77:EC:AB:86:CA:90:A5:38:45:50:5E:67:DB:57:AD:1D X509v3 Authority Key Identifier: keyid:B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/7B8A52D4B5BB11F18D5162F53E11F970.roa sbgp-ipAddrBlock: critical IPv4: 202.1.28.0/24 IPv6: 2402:1e20::/32 Signature Algorithm: sha256WithRSAEncryption 92:db:29:63:63:87:98:c6:f2:8e:72:b7:b3:cb:bf:ba:bf:86: ef:94:99:9d:6d:54:57:f1:e4:0f:77:0e:10:7d:9f:86:6b:06: dc:4f:4d:ed:21:07:c1:33:34:e3:9e:48:14:a5:f4:5f:9b:8f: 8c:fd:e1:b2:2a:b3:fe:f2:57:d2:6c:bd:e8:f4:bb:d2:52:f5: 1e:37:25:85:46:e6:1b:22:38:77:55:13:a6:7e:ef:3e:d6:ac: 18:e2:99:8b:8a:1a:24:f4:49:b8:f8:e0:d4:bf:1b:dd:7a:f5: ea:7b:0f:b2:f6:f7:5e:0c:8e:2c:59:d5:14:b1:0b:4f:05:29: 2d:d6:e8:2e:bc:91:6b:10:6f:56:ee:68:f6:c1:7f:45:44:03: 7d:23:f0:b7:7c:d0:2d:e4:33:94:56:9d:ae:64:8a:e5:72:4b: 1a:df:bd:c6:e3:2e:4d:cc:89:11:15:52:3f:d4:c2:f2:9a:92: f9:27:01:a1:23:f8:79:18:db:4c:26:94:d6:5c:e2:27:0b:8c: 8e:e3:7d:27:64:28:b0:ae:9e:8d:6f:0b:c2:80:2a:7f:a0:28: a1:f3:ab:a6:2f:04:41:b4:1c:7c:e2:5d:ef:f6:ab:17:3e:bb: 78:9c:f1:b2:b7:f1:b7:04:55:3e:d1:2a:7b:b5:ab:16:32:46: 39:bb:64:b4 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk5QjUxMTAvBgNVBAUTKEI1MkFFMTgzNkM2MTE5M0RFQThCQTVCRTlENzFCOENC QjM0MzAzOTgwHhcNMjYwOTIxMTI1MzQ2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIxMjhkYS03MDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDfENV98/WInw24ljPnMu1C9i74kC1RuawLxdGHlTc9NmxrQy+FkLM/yVF55 zt45HA5vQUblCLKBT1OqMgukUkEYbw5qKj8GvOB53GHFF2tBWNNGp9uucuueegWG u5/+FWcjI8ZIuCQIE9iAxf+yikPMRJs5gL1muBWXCN3/PrReIVRu9i0Z0P3C7WjG XpmKrG+v043XsBtiBvXXYU1WSvhBP2+jOccE5giuRC8QFKy5RE/10Szk7BBbzP8m esOazzDJqp+B9KoNdfmOhcWUYoafECKQZDMHo4CRwJ2VJZT9SUxfA5jvN+QF6Ed9 7KYy/xrcHcRHjpf9PhmG85PWGwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFDO3U/N3 7KuGypClOEVQXmfbV60dMB8GA1UdIwQYMBaAFLUq4YNsYRk96oulvp1xuMuzQwOY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTlCNS9CMjI2NkZEMjZE RTQxMUYwQkUwMkY5NjFDNEY5QUUwMi90U3JoZzJ4aEdUM3FpNlctblhHNHk3TkRB NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RTcmhnMnhoR1QzcWk2Vy1uWEc0eTdOREE1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTk5QjUvQjIyNjZGRDI2REU0MTFGMEJFMDJGOTYxQzRGOUFFMDIvN0I4QTUyRDRC NUJCMTFGMThENTE2MkY1M0UxMUY5NzAucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQAygEcMA0EAgACMAcDBQAkAh4gMA0GCSqGSIb3DQEBCwUAA4IBAQCS 2yljY4eYxvKOcrezy7+6v4bvlJmdbVRX8eQPdw4QfZ+GawbcT03tIQfBMzTjnkgU pfRfm4+M/eGyKrP+8lfSbL3o9LvSUvUeNyWFRuYbIjh3VROmfu8+1qwY4pmLihok 9Em4+ODUvxvdevXqew+y9vdeDI4sWdUUsQtPBSkt1uguvJFrEG9W7mj2wX9FRAN9 I/C3fNAt5DOUVp2uZIrlcksa373G4y5NzIkRFVI/1MLympL5JwGhI/h5GNtMJpTW XOInC4yO430nZCiwrp6NbwvCgCp/oCih86umLwRBtBx84l3v9qsXPrt4nPGyt/G3 BFU+0Sp7tasWMkY5u2S0 -----END CERTIFICATE-----Generated at Sun Oct 4 17:23:55 2026 by rpki-client