$ rpki-client -vvf rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/C86D4880DBDE11EAB7E6495DC4F9AE02.roa File: C86D4880DBDE11EAB7E6495DC4F9AE02.roa (raw, json) Hash identifier: o0LmnO6BRRhTDWaoNS/Q5OWs6Jcg83zmkTbdMtTDeh8= Subject key identifier: 5A:83:14:AE:74:B1:02:47:14:8B:96:E9:CB:A9:C5:EA:92:32:7A:D6 Certificate issuer: /CN=A91B872C/serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F Certificate serial: 0905 Authority key identifier: 40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/C86D4880DBDE11EAB7E6495DC4F9AE02.roa Signing time: Tue 18 Aug 2026 20:41:02 +0000 ROA not before: Tue 18 Aug 2026 20:41:02 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 137386 IP address blocks: 123.253.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2309 (0x905) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B872C, serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F Validity Not Before: Aug 18 20:41:02 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a84c35e-fc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:86:32:8d:d8:f6:b1:70:16:3d:b1:14:4d: b4:32:5c:da:f3:3e:c4:80:ef:11:62:ea:fe:01:04: 99:da:a3:1a:10:bb:24:61:07:96:d5:7a:c7:fa:c3: 1c:7a:76:db:74:79:89:55:d5:9c:60:eb:5b:91:c9: e1:e3:c8:66:aa:82:aa:d8:f0:e9:7e:71:81:b8:7e: 37:3c:2b:a0:3d:6a:e8:ec:b6:e8:af:66:09:94:07: 50:50:ca:51:98:9e:89:45:11:7b:72:a9:a0:2b:77: e7:63:48:b0:75:d7:70:4d:f1:23:52:66:e9:16:b3: f3:82:2b:a4:65:e7:f6:84:5b:22:0e:25:bf:7b:f2: 0e:8e:4b:07:9a:18:ff:94:4c:b7:d7:ee:f4:3e:45: d3:33:14:30:6d:50:d6:85:f3:73:67:ae:fc:e2:98: cd:c0:e5:f7:8d:72:80:6c:f8:e3:f0:e1:26:4c:1a: 9e:c1:99:b0:dc:3f:00:29:7b:76:90:74:cc:e6:75: 99:8e:c9:ef:f2:8f:54:26:a4:4d:c6:7d:1a:14:b5: 9d:8f:60:88:cd:cf:a6:e7:39:24:00:f2:2d:49:d6: b2:a6:ca:41:67:dc:06:b2:65:e3:20:95:aa:c9:14: 88:25:a4:60:9d:06:49:91:ae:97:31:78:6c:5f:06: 16:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:83:14:AE:74:B1:02:47:14:8B:96:E9:CB:A9:C5:EA:92:32:7A:D6 X509v3 Authority Key Identifier: keyid:40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/C86D4880DBDE11EAB7E6495DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 123.253.219.0/24 Signature Algorithm: sha256WithRSAEncryption b5:5a:c7:7a:25:36:22:33:ec:22:be:2c:07:26:38:42:aa:27: d2:16:3c:7e:eb:c1:73:03:fd:5c:04:92:6f:81:5f:0a:ec:41: c6:fe:9c:a3:ba:ee:cf:da:55:6c:7d:31:92:1b:d2:8f:67:e4: f2:63:22:86:ad:11:a3:5d:f4:8b:a4:af:50:77:3f:fd:81:e5: 1a:aa:45:36:fb:88:2e:75:4e:7d:81:e7:b2:e2:8c:75:ad:32: 33:ef:1a:6e:cd:f7:f2:ec:70:83:27:b2:29:33:bf:48:c3:d0: fc:65:fc:e6:b4:56:c2:8f:c2:95:0f:6f:81:39:f7:25:16:a2: 55:d0:01:65:97:0b:43:72:7e:38:a5:56:ee:27:88:9d:27:85: 2f:f2:7b:c6:28:10:2a:03:32:29:6c:15:f1:4e:dc:36:3f:18: a2:65:e7:1f:d1:16:06:44:7c:8e:7f:5d:a9:16:78:5c:26:0c: 02:77:f6:e8:70:1b:cc:d0:b6:1b:d8:ef:f8:59:32:c2:f9:b3: 4f:f5:21:e1:b1:2e:88:37:ab:b9:50:4a:40:dd:13:48:4a:8d: c3:df:8c:16:ab:47:eb:4e:89:ba:be:6d:c1:9c:e7:24:fb:b2: e6:5c:f3:e9:d1:dc:be:07:8c:19:e2:2b:ad:dc:16:08:85:c1: e0:3b:09:93 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3MkMxMTAvBgNVBAUTKDQwNjA2QTVCNUQyOUJCRjQyMTY3RkE2OEIzMjY4NjdF RjkwRTgyNkYwHhcNMjYwODE4MjA0MTAyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg0YzM1ZS1mYzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxduGMo3Y9rFwFj2xFE20Mlza8z7EgO8RYur+AQSZ2qMaELskYQeW1XrH+sMc enbbdHmJVdWcYOtbkcnh48hmqoKq2PDpfnGBuH43PCugPWro7Lbor2YJlAdQUMpR mJ6JRRF7cqmgK3fnY0iwdddwTfEjUmbpFrPzgiukZef2hFsiDiW/e/IOjksHmhj/ lEy31+70PkXTMxQwbVDWhfNzZ6784pjNwOX3jXKAbPjj8OEmTBqewZmw3D8AKXt2 kHTM5nWZjsnv8o9UJqRNxn0aFLWdj2CIzc+m5zkkAPItSdaypspBZ9wGsmXjIJWq yRSIJaRgnQZJka6XMXhsXwYWQQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFqDFK50 sQJHFIuW6cupxeqSMnrWMB8GA1UdIwQYMBaAFEBgaltdKbv0IWf6aLMmhn75DoJv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODcyQy9GMjBFNTU5NkRC REMxMUVBOTNGRjdENDRDNEY5QUUwMi9RR0JxVzEwcHVfUWhaX3Bvc3lhR2Z2a09n bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FHQnFXMTBwdV9RaFpfcG9zeWFHZnZrT2dtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjg3MkMvRjIwRTU1OTZEQkRDMTFFQTkzRkY3RDQ0QzRGOUFFMDIvQzg2RDQ4ODBE QkRFMTFFQUI3RTY0OTVEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAe/3bMA0GCSqGSIb3DQEBCwUAA4IBAQC1Wsd6JTYiM+wiviwHJjhC qifSFjx+68FzA/1cBJJvgV8K7EHG/pyjuu7P2lVsfTGSG9KPZ+TyYyKGrRGjXfSL pK9Qdz/9geUaqkU2+4gudU59geey4ox1rTIz7xpuzffy7HCDJ7IpM79Iw9D8Zfzm tFbCj8KVD2+BOfclFqJV0AFllwtDcn44pVbuJ4idJ4Uv8nvGKBAqAzIpbBXxTtw2 PxiiZecf0RYGRHyOf12pFnhcJgwCd/bocBvM0LYb2O/4WTLC+bNP9SHhsS6IN6u5 UEpA3RNISo3D34wWq0frTom6vm3BnOck+7LmXPPp0dy+B4wZ4iut3BYIhcHgOwmT -----END CERTIFICATE-----Generated at Wed Aug 19 17:02:48 2026 by rpki-client