$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/8B417B6064AA11F19AE9C6D58F47A888.roa File: 8B417B6064AA11F19AE9C6D58F47A888.roa (raw, json) Hash identifier: VxBq9ev4olTZHWXFb/0pr2uIN1FLk3ZIw2Udkr1ORSM= Subject key identifier: 5C:C3:E1:73:47:11:1D:B3:2D:5B:09:EF:1F:0D:E1:7A:1F:D0:99:D1 Certificate issuer: /CN=A91A6C1A/serialNumber=A4A570B524F66291B6909BF23133D5DB835041ED Certificate serial: 37 Authority key identifier: A4:A5:70:B5:24:F6:62:91:B6:90:9B:F2:31:33:D5:DB:83:50:41:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/8B417B6064AA11F19AE9C6D58F47A888.roa Signing time: Thu 03 Sep 2026 08:58:24 +0000 ROA not before: Thu 03 Sep 2026 08:58:24 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 154194 IP address blocks: 202.133.76.0/23 maxlen: 24 2402:2720::/32 maxlen: 32 2402:2720::/36 maxlen: 36 2402:2720:1000::/36 maxlen: 36 2402:2720:2000::/36 maxlen: 36 2402:2720:3000::/36 maxlen: 36 2402:2720:4000::/36 maxlen: 36 2402:2720:5000::/36 maxlen: 36 2402:2720:6000::/36 maxlen: 36 2402:2720:7000::/36 maxlen: 36 2402:2720:8000::/36 maxlen: 36 2402:2720:9000::/36 maxlen: 36 2402:2720:a000::/36 maxlen: 36 2402:2720:b000::/36 maxlen: 36 2402:2720:c000::/36 maxlen: 36 2402:2720:d000::/36 maxlen: 36 2402:2720:e000::/36 maxlen: 36 2402:2720:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.crl rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 09:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6C1A, serialNumber=A4A570B524F66291B6909BF23133D5DB835041ED Validity Not Before: Sep 3 08:58:24 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a9936b0-98e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c9:f0:a1:fb:03:72:7f:57:a7:8b:8a:33:ed: 58:d1:10:7c:62:ea:5d:18:61:53:79:d8:8c:e6:54: 2a:9a:ea:83:e2:95:fe:12:ae:7e:51:9c:af:80:a0: 29:67:1d:6a:61:55:0f:14:bd:82:92:2b:d9:48:bb: f8:0c:ef:b3:99:92:7c:32:a6:8e:d3:87:c3:5a:6a: b7:8d:47:47:ec:55:51:bd:10:96:e3:b8:21:1b:be: d2:02:f7:84:c4:24:08:6b:75:d7:59:dc:e7:1e:1e: 14:e3:5a:4d:5f:fe:4a:51:bd:43:b6:9a:cf:e8:e5: 73:02:f5:06:c3:01:8d:38:00:1a:e0:98:85:c4:10: f0:ff:6b:a9:4d:15:a0:cb:6a:7d:c7:b8:66:1b:09: ba:82:9d:36:01:bb:bd:37:00:af:08:74:74:60:8b: 24:23:7c:36:7b:c1:09:8d:e6:67:f0:bf:73:e4:92: a8:85:b7:7e:3b:00:92:e5:47:f2:b0:9d:d8:7d:4c: 7f:7b:77:64:f0:9b:99:0d:0a:d3:a4:10:6e:fa:a2: 14:f9:14:89:d9:b5:4c:c8:c9:b8:b2:5a:24:62:35: b6:ef:f3:65:0a:fe:80:9e:66:40:d9:79:92:db:0c: 3a:0d:d2:ff:7a:10:f4:a4:c4:c5:5e:38:ad:10:d8: 57:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C3:E1:73:47:11:1D:B3:2D:5B:09:EF:1F:0D:E1:7A:1F:D0:99:D1 X509v3 Authority Key Identifier: keyid:A4:A5:70:B5:24:F6:62:91:B6:90:9B:F2:31:33:D5:DB:83:50:41:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/8B417B6064AA11F19AE9C6D58F47A888.roa sbgp-ipAddrBlock: critical IPv4: 202.133.76.0/23 IPv6: 2402:2720::/32 Signature Algorithm: sha256WithRSAEncryption 8c:ad:1b:c0:24:33:28:62:0c:40:8c:4d:d5:4a:85:24:cd:8e: 96:c8:d1:80:0e:1f:11:66:09:1c:34:fe:53:72:3f:e9:94:a3: c4:de:12:6e:57:c2:6c:44:e5:c1:dd:f8:41:f8:4e:4a:b7:2f: 21:1e:54:6a:7e:fd:12:16:de:3d:10:07:77:46:2f:ed:90:36: 56:a8:6b:16:ae:78:64:6e:ed:65:be:1a:c0:56:1c:69:d6:bf: aa:d5:35:3e:04:5a:d2:e4:3b:f7:c9:d8:77:13:51:f9:b8:dd: cc:5e:71:7f:6c:b1:c3:ff:e8:84:e8:7e:52:b2:75:a4:52:8c: b6:e2:2d:2f:9e:ea:b3:61:b9:92:5f:0c:7a:d1:ce:0d:a5:ce: da:ef:65:29:bf:c5:68:48:e7:15:be:7f:c3:d8:b1:39:c4:96: 28:2a:51:e1:88:c3:01:31:1a:20:05:17:c9:5a:cb:c7:3c:d3: 86:cb:0d:87:dc:aa:ed:ee:3f:48:eb:70:a4:17:74:c1:2f:8e: cd:c5:5c:92:8c:c4:f0:dd:01:f5:98:9f:16:73:f2:c8:ad:33: 77:4e:01:7b:8a:7c:44:07:c8:68:e5:c9:2c:e2:ef:28:96:d5: 5d:98:f5:9d:0d:1f:28:8e:85:bd:4b:21:1e:9d:0a:f4:a8:ec: 9b:4c:4a:a4 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkMxQTExMC8GA1UEBRMoQTRBNTcwQjUyNEY2NjI5MUI2OTA5QkYyMzEzM0Q1REI4 MzUwNDFFRDAeFw0yNjA5MDMwODU4MjRaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOTkzNmIwLTk4ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjyfCh+wNyf1eni4oz7VjREHxi6l0YYVN52IzmVCqa6oPilf4Srn5RnK+AoCln HWphVQ8UvYKSK9lIu/gM77OZknwypo7Th8NaareNR0fsVVG9EJbjuCEbvtIC94TE JAhrdddZ3OceHhTjWk1f/kpRvUO2ms/o5XMC9QbDAY04ABrgmIXEEPD/a6lNFaDL an3HuGYbCbqCnTYBu703AK8IdHRgiyQjfDZ7wQmN5mfwv3PkkqiFt347AJLlR/Kw ndh9TH97d2Twm5kNCtOkEG76ohT5FInZtUzIybiyWiRiNbbv82UK/oCeZkDZeZLb DDoN0v96EPSkxMVeOK0Q2FcdAgMBAAGjggJvMIICazAdBgNVHQ4EFgQUXMPhc0cR HbMtWwnvHw3heh/QmdEwHwYDVR0jBBgwFoAUpKVwtST2YpG2kJvyMTPV24NQQe0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2QzFBL0UxMkM0Q0E0NjRB OTExRjFCNjVGNTZCMjhGNDdBODg4L3BLVnd0U1QyWXBHMmtKdnlNVFBWMjROUVFl MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcEtWd3RTVDJZcEcya0p2eU1UUFYyNE5RUWUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkMxQS9FMTJDNENBNDY0QTkxMUYxQjY1RjU2QjI4RjQ3QTg4OC84QjQxN0I2MDY0 QUExMUYxOUFFOUM2RDU4RjQ3QTg4OC5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE AgABMAYDBAHKhUwwDQQCAAIwBwMFACQCJyAwDQYJKoZIhvcNAQELBQADggEBAIyt G8AkMyhiDECMTdVKhSTNjpbI0YAOHxFmCRw0/lNyP+mUo8TeEm5XwmxE5cHd+EH4 Tkq3LyEeVGp+/RIW3j0QB3dGL+2QNlaoaxaueGRu7WW+GsBWHGnWv6rVNT4EWtLk O/fJ2HcTUfm43cxecX9sscP/6IToflKydaRSjLbiLS+e6rNhuZJfDHrRzg2lztrv ZSm/xWhI5xW+f8PYsTnEligqUeGIwwExGiAFF8lay8c804bLDYfcqu3uP0jrcKQX dMEvjs3FXJKMxPDdAfWYnxZz8sitM3dOAXuKfEQHyGjlySzi7yiW1V2Y9Z0NHyiO hb1LIR6dCvSo7JtMSqQ= -----END CERTIFICATE-----Generated at Thu Oct 8 16:49:41 2026 by rpki-client