$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/2405203273AF11F1A114703E7BA30FBC.roa File: 2405203273AF11F1A114703E7BA30FBC.roa (raw, json) Hash identifier: IhibjJxGIh0OyW3/zjLPSvy30FYiWbe6Y1PZPZxcy54= Subject key identifier: E7:B6:4B:73:14:7C:37:CB:52:FC:1B:96:F8:4F:E5:F6:21:9B:D7:44 Certificate issuer: /CN=A91BB8EA/serialNumber=9ED6443BC17D1E8256B5C1C23460C78CDCD95D1A Certificate serial: 02 Authority key identifier: 9E:D6:44:3B:C1:7D:1E:82:56:B5:C1:C2:34:60:C7:8C:DC:D9:5D:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/2405203273AF11F1A114703E7BA30FBC.roa Signing time: Mon 29 Jun 2026 11:39:09 +0000 ROA not before: Mon 29 Jun 2026 11:39:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141767 IP address blocks: 163.223.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB8EA, serialNumber=9ED6443BC17D1E8256B5C1C23460C78CDCD95D1A Validity Not Before: Jun 29 11:39:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a42595c-ddef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:42:26:c4:1e:ab:c0:86:be:b9:ca:77:3d:e3: fb:72:89:7c:a2:31:f8:96:e7:b8:f5:66:24:f9:66: 9f:2f:5a:0e:27:2a:d8:73:eb:52:48:39:22:0a:3a: 9d:e5:29:2c:b7:9c:58:af:3d:3a:a3:63:e8:06:a2: a1:84:3f:4d:cd:76:7c:37:35:05:91:1f:93:b7:63: 64:b4:e7:a9:0b:bd:31:23:b1:29:7c:94:01:c9:47: 60:bb:4d:71:90:1e:03:96:df:a7:8b:c8:25:38:50: 43:b4:1c:e2:3c:85:91:3a:da:c2:c1:d6:91:3a:c2: 2f:b7:24:36:71:11:f0:a4:fc:c5:f8:03:b1:19:b2: 87:88:1c:f1:9b:65:85:93:f3:05:06:c2:43:47:31: 38:13:84:46:b0:f2:28:4a:f4:29:e1:27:84:63:98: 3b:7f:dd:b1:c8:81:af:6b:9d:f8:71:30:bc:2c:be: ec:1e:fd:8b:69:73:9a:a1:6d:a3:ac:d9:65:5c:e6: df:30:1a:dd:15:75:37:a5:e8:81:32:b4:82:8b:03: 9e:d3:69:56:27:67:5f:c0:70:df:f0:52:fb:53:76: 45:5c:c9:3d:4c:01:0f:38:31:d4:32:3c:16:44:8c: d9:17:bc:6d:f3:b0:df:95:4d:02:e8:83:b5:9f:9b: bb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B6:4B:73:14:7C:37:CB:52:FC:1B:96:F8:4F:E5:F6:21:9B:D7:44 X509v3 Authority Key Identifier: keyid:9E:D6:44:3B:C1:7D:1E:82:56:B5:C1:C2:34:60:C7:8C:DC:D9:5D:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/2405203273AF11F1A114703E7BA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 163.223.98.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:37:15:0d:37:4d:c2:38:47:3e:ce:3f:ea:5c:08:2d:27:a3: 2c:04:c1:85:51:df:ef:53:b5:0e:62:22:44:e7:ea:6c:ee:b3: 39:37:5f:f8:ab:b8:51:59:ae:77:74:64:83:0e:c0:72:b8:46: 76:84:86:47:4e:12:e7:be:de:a2:63:6f:8d:81:c8:b3:fc:88: 6e:9a:14:9e:6d:9f:0e:c8:c6:84:36:db:0a:86:d8:10:3d:92: 30:2a:df:7d:6f:49:8c:71:d2:44:4a:14:e8:73:e9:cd:34:34: a0:41:13:5e:8d:b2:f4:85:33:57:31:f7:13:7c:32:64:8e:76: f1:cc:55:8a:94:65:6f:e0:f3:9b:83:2a:74:a1:4c:91:79:e4: 06:5f:8c:82:05:38:e8:90:bd:5d:29:e4:e0:3d:45:4b:e3:db: da:e9:00:60:3e:2c:a2:11:27:5b:20:9b:4a:04:61:0d:51:b8: 6e:e4:b5:18:3e:3d:07:37:a8:e7:df:f4:9f:2e:43:f1:da:37: 60:fb:70:86:dd:d3:b7:21:d7:a4:b5:59:da:69:78:a0:8f:97: 1b:04:8b:1f:f0:a7:79:d8:d9:ee:bf:83:1d:8f:b5:e5:89:8c: 72:62:72:35:20:41:ff:a2:39:17:65:a7:02:23:a8:63:43:f0: b1:8a:49:07 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjhFQTExMC8GA1UEBRMoOUVENjQ0M0JDMTdEMUU4MjU2QjVDMUMyMzQ2MEM3OENE Q0Q5NUQxQTAeFw0yNjA2MjkxMTM5MDlaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNDI1OTVjLWRkZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoQibEHqvAhr65ync94/tyiXyiMfiW57j1ZiT5Zp8vWg4nKthz61JIOSIKOp3l KSy3nFivPTqjY+gGoqGEP03Ndnw3NQWRH5O3Y2S056kLvTEjsSl8lAHJR2C7TXGQ HgOW36eLyCU4UEO0HOI8hZE62sLB1pE6wi+3JDZxEfCk/MX4A7EZsoeIHPGbZYWT 8wUGwkNHMTgThEaw8ihK9CnhJ4RjmDt/3bHIga9rnfhxMLwsvuwe/Ytpc5qhbaOs 2WVc5t8wGt0VdTel6IEytIKLA57TaVYnZ1/AcN/wUvtTdkVcyT1MAQ84MdQyPBZE jNkXvG3zsN+VTQLog7Wfm7sFAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU57ZLcxR8 N8tS/BuW+E/l9iGb10QwHwYDVR0jBBgwFoAUntZEO8F9HoJWtcHCNGDHjNzZXRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCOEVBLzQwQThGMjhDNzNB RTExRjE5OUU0OEIxNjdCQTMwRkJDL250WkVPOEY5SG9KV3RjSENOR0RIak56WlhS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnRaRU84RjlIb0pXdGNIQ05HREhqTnpaWFJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjhFQS80MEE4RjI4QzczQUUxMUYxOTlFNDhCMTY3QkEzMEZCQy8yNDA1MjAzMjcz QUYxMUYxQTExNDcwM0U3QkEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGj32IwDQYJKoZIhvcNAQELBQADggEBAJ83FQ03TcI4Rz7OP+pcCC0n oywEwYVR3+9TtQ5iIkTn6mzuszk3X/iruFFZrnd0ZIMOwHK4RnaEhkdOEue+3qJj b42ByLP8iG6aFJ5tnw7IxoQ22wqG2BA9kjAq331vSYxx0kRKFOhz6c00NKBBE16N svSFM1cx9xN8MmSOdvHMVYqUZW/g85uDKnShTJF55AZfjIIFOOiQvV0p5OA9RUvj 29rpAGA+LKIRJ1sgm0oEYQ1RuG7ktRg+PQc3qOff9J8uQ/HaN2D7cIbd07ch16S1 WdppeKCPlxsEix/wp3nY2e6/gx2PteWJjHJicjUgQf+iORdlpwIjqGND8LGKSQc= -----END CERTIFICATE-----Generated at Sat Jul 18 07:09:14 2026 by rpki-client