$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/711F090E8AB411EA89D83541C4F9AE02.roa File: 711F090E8AB411EA89D83541C4F9AE02.roa (raw, json) Hash identifier: IMwochcv5s995TLexfAmpmYUepE6GSpJSQXt47U74Ow= Subject key identifier: EB:9B:6E:95:41:04:AF:1A:AD:82:A5:99:F4:F2:64:49:53:22:60:2E Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Certificate serial: 1E29 Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/711F090E8AB411EA89D83541C4F9AE02.roa Signing time: Tue 20 Oct 2026 15:14:22 +0000 ROA not before: Tue 20 Oct 2026 15:14:22 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 17557 IP address blocks: 202.61.59.0/24 maxlen: 24 202.61.60.0/24 maxlen: 24 202.61.61.0/24 maxlen: 24 202.61.62.0/24 maxlen: 24 202.61.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 14:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7721 (0x1e29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Validity Not Before: Oct 20 15:14:22 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6ad7854e-0358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1a:2d:1a:49:13:13:8c:b9:a1:4f:4c:0d:18: 04:21:8f:6f:98:8e:3b:f3:24:04:8b:98:e5:5d:ca: 7e:33:1d:9f:30:83:d9:fe:a8:14:57:e8:0e:75:88: 32:19:76:2b:c3:ed:bb:38:ef:d4:bf:09:ff:9e:a2: 00:e0:f1:5f:b1:a2:12:2e:eb:ed:12:f2:6a:c2:60: 0c:f9:2f:dd:d6:81:3c:b1:d9:28:72:a7:e7:95:9f: ae:ef:80:7b:57:75:c6:47:33:f1:60:c3:a5:da:ab: 3e:7e:29:2b:db:5c:5f:89:a9:a2:b8:d9:23:9a:79: 02:22:a9:f9:c3:1a:b6:32:c5:3f:06:62:6a:cb:6e: 69:ba:9c:a9:09:c8:ee:4d:45:93:a9:10:77:16:df: 0f:07:8a:19:ed:44:23:af:ef:80:bb:7e:ae:7c:c0: 02:ae:6e:a8:a4:90:1a:3b:c3:5f:3e:de:1d:69:08: 8d:41:ac:b9:b5:59:90:33:b8:88:bf:36:56:02:1d: b9:f5:82:f6:04:3f:71:c4:c3:fb:de:18:87:07:80: cf:20:8e:f0:4c:62:86:00:5e:9d:ce:1e:69:b0:3e: 19:a8:72:90:61:b7:31:51:c3:04:15:76:4e:9d:f9: a9:76:7d:04:03:bc:98:61:cd:46:78:8a:23:6d:76: 20:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9B:6E:95:41:04:AF:1A:AD:82:A5:99:F4:F2:64:49:53:22:60:2E X509v3 Authority Key Identifier: keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/711F090E8AB411EA89D83541C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.61.59.0-202.61.63.255 Signature Algorithm: sha256WithRSAEncryption 64:2c:4b:22:64:ab:0a:ea:04:2b:61:b2:d6:37:bc:02:f9:83: ee:3d:b6:5f:32:20:f8:4d:dc:86:39:12:e9:4c:f9:d7:a2:81: fc:54:63:5f:30:fd:5e:78:ae:f7:13:7d:ab:60:74:1f:8d:28: b8:88:06:fe:45:46:8d:56:50:1d:df:91:ec:d7:c3:14:85:cf: 05:bf:1d:ad:7c:0a:03:2a:61:d7:72:8f:42:90:70:d9:24:44: c3:ba:99:b0:8a:bd:c5:97:24:67:de:90:41:14:7f:7d:4f:8a: 44:3a:bd:14:09:3a:ee:c1:c4:87:ce:f1:08:74:52:fc:b1:a6: 53:31:f1:f8:70:29:45:a1:2c:b0:1f:57:16:44:67:bc:a8:57: 71:1c:33:c0:33:be:d0:90:52:96:55:90:71:35:f1:cc:97:b0: 78:43:97:ee:58:a2:2d:da:9a:d1:70:4d:b0:15:95:91:52:db: 22:56:5a:52:ad:4e:e1:27:ee:32:4e:df:c6:10:46:f1:d6:4e: 90:f5:6d:1c:0f:e5:8d:93:82:13:9f:af:73:30:c7:96:56:68: 47:f7:32:93:31:bb:8d:2a:d3:30:ab:a6:f5:64:2b:94:e6:d5: 95:8c:e8:12:dd:53:25:80:9c:ab:0c:79:d8:34:33:d1:56:a8: 15:6d:ac:d2 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICHikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4 NkE5QjNGRDgwHhcNMjYxMDIwMTUxNDIyWhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQ3ODU0ZS0wMzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkxotGkkTE4y5oU9MDRgEIY9vmI478yQEi5jlXcp+Mx2fMIPZ/qgUV+gOdYgy GXYrw+27OO/Uvwn/nqIA4PFfsaISLuvtEvJqwmAM+S/d1oE8sdkocqfnlZ+u74B7 V3XGRzPxYMOl2qs+fikr21xfiamiuNkjmnkCIqn5wxq2MsU/BmJqy25pupypCcju TUWTqRB3Ft8PB4oZ7UQjr++Au36ufMACrm6opJAaO8NfPt4daQiNQay5tVmQM7iI vzZWAh259YL2BD9xxMP73hiHB4DPII7wTGKGAF6dzh5psD4ZqHKQYbcxUcMEFXZO nfmpdn0EA7yYYc1GeIojbXYgrwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFOubbpVB BK8arYKlmfTyZElTImAuMB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1NjgvQkQxQTk1RDIxRDg3MTFFMjlCRTNFNkRGMDhCMDJDRDIvNzExRjA5MEU4 QUI0MTFFQTg5RDgzNTQxQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBADKPTsDBAbKPQAwDQYJKoZIhvcNAQELBQADggEBAGQsSyJkqwrq BCthstY3vAL5g+49tl8yIPhN3IY5EulM+deigfxUY18w/V54rvcTfatgdB+NKLiI Bv5FRo1WUB3fkezXwxSFzwW/Ha18CgMqYddyj0KQcNkkRMO6mbCKvcWXJGfekEEU f31PikQ6vRQJOu7BxIfO8Qh0UvyxplMx8fhwKUWhLLAfVxZEZ7yoV3EcM8AzvtCQ UpZVkHE18cyXsHhDl+5Yoi3amtFwTbAVlZFS2yJWWlKtTuEn7jJO38YQRvHWTpD1 bRwP5Y2TghOfr3Mwx5ZWaEf3MpMxu40q0zCrpvVkK5Tm1ZWM6BLdUyWAnKsMedg0 M9FWqBVtrNI= -----END CERTIFICATE-----Generated at Wed Oct 28 05:26:59 2026 by rpki-client