$ rpki-client -vvvf rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/9936E74CC80411F1847B0DA56811F970.roa File: 9936E74CC80411F1847B0DA56811F970.roa (raw, json) Hash identifier: tP2f1c83JL3Vu7cAQoMo9VLSqymcXf+2nOHEsCAqIVk= Subject key identifier: FA:B1:64:73:7C:AF:EA:FF:2B:DF:A9:C7:47:93:72:14:C3:FE:E7:5E Certificate issuer: /CN=A91864A7/serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D Certificate serial: 02CB Authority key identifier: FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/9936E74CC80411F1847B0DA56811F970.roa Signing time: Wed 21 Oct 2026 01:39:27 +0000 ROA not before: Wed 21 Oct 2026 01:39:27 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 8075 IP address blocks: 119.15.20.0/24 maxlen: 24 119.15.21.0/24 maxlen: 24 119.15.22.0/24 maxlen: 24 119.15.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 02:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 715 (0x2cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91864A7, serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D Validity Not Before: Oct 21 01:39:27 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6ad817cf-e3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:61:46:67:71:cf:2f:8d:78:f2:5f:d9:61:52: f0:6d:a0:16:d1:c2:68:08:5c:71:cb:ba:64:fa:86: 6b:d2:cf:7d:eb:62:6b:2b:a0:47:b8:ea:ac:5e:68: 6f:df:24:4b:3c:47:78:0d:0d:a8:10:90:95:97:6c: 8b:c2:c5:c3:e9:85:50:f1:7c:09:c3:bf:c9:4c:5f: e1:58:d4:88:e9:45:cb:98:b5:0e:0e:ff:64:40:b3: e6:45:ce:60:9b:b8:01:22:31:c6:a1:04:fd:41:21: f1:3e:79:3f:c4:7f:80:3c:65:22:11:ba:08:36:18: 51:7e:d1:2b:e8:e9:69:c7:ed:4b:e6:f2:02:1a:ca: a8:c2:aa:90:95:83:87:e7:57:9f:c9:05:77:ef:a9: ef:0b:84:21:11:87:bf:ab:88:a8:a7:18:6b:70:2e: 14:09:91:5f:17:65:92:14:bd:bc:12:8a:44:16:6d: 7d:74:d9:f1:9a:88:e7:78:1e:61:b2:c6:12:fd:32: 29:a6:a9:95:a6:0d:bc:82:1d:d1:f1:68:b5:92:4f: ab:7d:05:6e:c0:a9:99:8d:82:14:e2:cc:f0:42:16: 04:fe:2d:aa:10:3c:9c:32:51:0d:4e:ed:4c:b5:a5: c0:b7:cf:43:fb:76:59:7d:1d:ba:98:b6:d6:6c:fb: 77:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B1:64:73:7C:AF:EA:FF:2B:DF:A9:C7:47:93:72:14:C3:FE:E7:5E X509v3 Authority Key Identifier: keyid:FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/9936E74CC80411F1847B0DA56811F970.roa sbgp-ipAddrBlock: critical IPv4: 119.15.20.0/22 Signature Algorithm: sha256WithRSAEncryption 09:bd:82:e1:ca:e7:b2:f6:74:54:f5:06:4e:dc:44:40:3a:bc: a2:0d:96:be:1d:6c:89:51:a9:af:aa:e5:51:e7:7a:b1:6f:0e: 78:3b:14:da:79:9e:3b:8c:b4:2b:44:17:7e:46:1d:35:55:77: 64:6e:f1:2e:09:51:bb:fb:33:81:af:0e:ce:6e:d2:27:d0:da: ea:02:fd:2d:08:92:15:1b:29:10:aa:e4:ff:ec:83:3a:e8:a1: 80:e0:e2:35:14:1c:e9:e6:4b:f2:13:52:aa:c9:22:e0:13:e4: 7f:53:3f:b4:35:63:69:1d:51:00:88:53:c4:9c:15:00:ee:68: 71:05:f8:98:5d:ba:d6:17:50:a0:87:e1:d2:99:07:2c:eb:23: e0:19:2e:fc:0a:b0:47:b5:93:2f:d8:db:5c:66:67:b1:74:73: 3e:44:9c:78:b3:6b:1b:98:11:53:c3:77:f5:21:a0:d7:19:3f: 55:2d:6c:06:6a:45:3b:d6:c6:7a:ab:ce:3c:df:fd:55:b3:4b: 7c:96:b3:2e:64:92:bb:ed:f1:fa:e6:54:0e:99:99:e1:0f:93: 55:23:51:73:3c:90:72:92:ea:69:22:1e:44:d5:a9:48:41:37: e0:6a:33:f9:7d:22:67:86:f8:f3:0c:48:ae:1a:c3:73:25:d5: 2e:81:b0:ff -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY0QTcxMTAvBgNVBAUTKEZGNDJCMzQzNjA0NDk1NDY5NkZGRTA4QjBFRTE5NzVD NkM1QjhENkQwHhcNMjYxMDIxMDEzOTI3WhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQ4MTdjZi1lM2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmmFGZ3HPL4148l/ZYVLwbaAW0cJoCFxxy7pk+oZr0s9962JrK6BHuOqsXmhv 3yRLPEd4DQ2oEJCVl2yLwsXD6YVQ8XwJw7/JTF/hWNSI6UXLmLUODv9kQLPmRc5g m7gBIjHGoQT9QSHxPnk/xH+APGUiEboINhhRftEr6Olpx+1L5vICGsqowqqQlYOH 51efyQV376nvC4QhEYe/q4iopxhrcC4UCZFfF2WSFL28EopEFm19dNnxmojneB5h ssYS/TIppqmVpg28gh3R8Wi1kk+rfQVuwKmZjYIU4szwQhYE/i2qEDycMlENTu1M taXAt89D+3ZZfR26mLbWbPt31wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPqxZHN8 r+r/K9+px0eTchTD/udeMB8GA1UdIwQYMBaAFP9Cs0NgRJVGlv/giw7hl1xsW41t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjRBNy9DODA1NUZENkM5 MjUxMUVEODA5MzYxNDlDNEY5QUUwMi9fMEt6UTJCRWxVYVdfLUNMRHVHWFhHeGJq VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wS3pRMkJFbFVhV18tQ0xEdUdYWEd4YmpXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODY0QTcvQzgwNTVGRDZDOTI1MTFFRDgwOTM2MTQ5QzRGOUFFMDIvOTkzNkU3NEND ODA0MTFGMTg0N0IwREE1NjgxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCdw8UMA0GCSqGSIb3DQEBCwUAA4IBAQAJvYLhyuey9nRU9QZO3ERA OryiDZa+HWyJUamvquVR53qxbw54OxTaeZ47jLQrRBd+Rh01VXdkbvEuCVG7+zOB rw7ObtIn0NrqAv0tCJIVGykQquT/7IM66KGA4OI1FBzp5kvyE1KqySLgE+R/Uz+0 NWNpHVEAiFPEnBUA7mhxBfiYXbrWF1Cgh+HSmQcs6yPgGS78CrBHtZMv2NtcZmex dHM+RJx4s2sbmBFTw3f1IaDXGT9VLWwGakU71sZ6q8483/1Vs0t8lrMuZJK77fH6 5lQOmZnhD5NVI1FzPJBykuppIh5E1alIQTfgajP5fSJnhvjzDEiuGsNzJdUugbD/ -----END CERTIFICATE-----Generated at Wed Oct 21 22:46:32 2026 by rpki-client