$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB946/646FD6D284D811F196CAEBA85AA30FBC/C2B4BDB684D811F1AA5089AC5AA30FBC.roa File: C2B4BDB684D811F1AA5089AC5AA30FBC.roa (raw, json) Hash identifier: ftQaGXx1fIvdKMJy0O9Lu4ioVXxX5G6/noF52zI+HLM= Subject key identifier: 20:25:B6:9C:A0:E2:81:BC:C9:5E:83:F3:49:F3:9D:6C:28:26:A2:EA Certificate issuer: /CN=A91BB946/serialNumber=1BA9DD8DC3B7EF378EBD87E168E4EB9F0E49CAC0 Certificate serial: 02 Authority key identifier: 1B:A9:DD:8D:C3:B7:EF:37:8E:BD:87:E1:68:E4:EB:9F:0E:49:CA:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6ndjcO37zeOvYfhaOTrnw5JysA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB946/646FD6D284D811F196CAEBA85AA30FBC/C2B4BDB684D811F1AA5089AC5AA30FBC.roa Signing time: Tue 21 Jul 2026 07:49:54 +0000 ROA not before: Tue 21 Jul 2026 07:49:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134907 IP address blocks: 163.128.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB946/646FD6D284D811F196CAEBA85AA30FBC/G6ndjcO37zeOvYfhaOTrnw5JysA.crl rsync://rpki.apnic.net/member_repository/A91BB946/646FD6D284D811F196CAEBA85AA30FBC/G6ndjcO37zeOvYfhaOTrnw5JysA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6ndjcO37zeOvYfhaOTrnw5JysA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 07:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB946, serialNumber=1BA9DD8DC3B7EF378EBD87E168E4EB9F0E49CAC0 Validity Not Before: Jul 21 07:49:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a5f24a2-1232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:53:7e:3a:58:d3:d7:7c:24:cd:0e:42:5a:15: 93:3b:cd:a4:33:80:79:72:8b:b9:53:56:9e:7b:66: f2:0b:4e:ca:56:f4:07:c7:8d:1d:b4:ea:5a:2d:cd: 00:4c:59:5b:28:7c:c8:65:a6:39:5a:d5:9c:0d:a0: 9b:2f:a8:c1:ff:0e:84:46:0f:65:26:a3:df:fd:32: ba:f7:3a:5a:76:68:40:3d:f5:ed:c0:c7:f0:ed:59: 1c:24:b3:cc:2a:22:ea:e1:48:8d:11:7e:ea:4b:ba: 9b:8f:b4:6c:e2:70:57:c3:d6:64:6e:b8:44:c3:e1: 1e:8d:69:f5:9b:21:e7:8a:09:3b:a3:dd:0c:88:9f: 6b:7d:ab:0b:05:e7:26:4e:16:20:2b:fa:03:a7:fb: 9d:b8:6f:4a:52:e1:ce:fb:1f:6c:df:6e:28:b6:15: 55:61:13:6c:65:f1:64:b7:f6:fa:7b:a1:f1:48:30: ae:e0:37:48:ef:06:7a:48:70:23:39:8f:a3:ff:d4: 15:81:13:1b:60:6e:82:29:5f:6f:e6:86:52:e4:c6: d0:19:40:01:67:5a:74:c8:11:ba:34:11:34:16:bf: 6a:0c:5d:7e:66:eb:7f:33:dd:1b:77:4b:64:f2:91: 96:7a:15:bb:23:5c:b1:92:05:d7:af:43:7f:99:c4: b2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:25:B6:9C:A0:E2:81:BC:C9:5E:83:F3:49:F3:9D:6C:28:26:A2:EA X509v3 Authority Key Identifier: keyid:1B:A9:DD:8D:C3:B7:EF:37:8E:BD:87:E1:68:E4:EB:9F:0E:49:CA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB946/646FD6D284D811F196CAEBA85AA30FBC/G6ndjcO37zeOvYfhaOTrnw5JysA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6ndjcO37zeOvYfhaOTrnw5JysA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB946/646FD6D284D811F196CAEBA85AA30FBC/C2B4BDB684D811F1AA5089AC5AA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 163.128.220.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:1e:30:9e:9c:31:08:b1:6e:06:93:9f:b9:e1:e2:72:b1:9e: 78:f0:cf:c4:79:71:8a:19:2d:f9:97:d2:0a:55:84:db:84:b8: 71:83:56:26:1c:74:65:40:ff:64:6a:45:72:b4:b5:a0:91:bc: 25:85:e5:aa:7e:0c:4a:30:1e:65:08:1e:bc:4d:60:ca:04:b7: bc:06:9c:49:3a:cf:0f:eb:45:85:07:af:c6:25:3d:74:0a:cf: 6f:27:01:e2:db:3e:bc:a4:73:79:83:b4:cb:01:98:3d:a1:41: 64:7f:8d:51:b5:a4:d4:0e:36:50:28:d5:21:82:48:15:28:c6: 31:f5:e1:8a:a9:cb:57:2b:57:1c:3d:b4:03:ac:7d:01:59:1b: 49:2d:97:07:d8:ff:17:45:39:b1:6a:a0:4e:a5:8e:95:d6:c2: 26:c9:f9:43:1a:df:1e:7c:af:ee:2d:f8:51:99:c0:92:98:31: 1f:47:ba:e4:c2:b1:c6:6b:5f:62:ab:76:df:c6:e5:af:1d:e1: 30:ad:89:1d:b1:31:9f:65:02:8e:89:19:8c:b6:01:fb:fe:ee: c1:4f:c6:9c:7b:db:8a:63:51:3a:26:b9:75:93:19:ac:dd:9b: f2:52:65:10:0c:f2:a3:43:2c:43:f6:5f:e8:3d:2c:7f:11:5c: 99:fe:42:c3 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Qjk0NjExMC8GA1UEBRMoMUJBOUREOERDM0I3RUYzNzhFQkQ4N0UxNjhFNEVCOUYw RTQ5Q0FDMDAeFw0yNjA3MjEwNzQ5NTRaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNWYyNGEyLTEyMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvU346WNPXfCTNDkJaFZM7zaQzgHlyi7lTVp57ZvILTspW9AfHjR206lotzQBM WVsofMhlpjla1ZwNoJsvqMH/DoRGD2Umo9/9Mrr3Olp2aEA99e3Ax/DtWRwks8wq IurhSI0RfupLupuPtGzicFfD1mRuuETD4R6NafWbIeeKCTuj3QyIn2t9qwsF5yZO FiAr+gOn+524b0pS4c77H2zfbii2FVVhE2xl8WS39vp7ofFIMK7gN0jvBnpIcCM5 j6P/1BWBExtgboIpX2/mhlLkxtAZQAFnWnTIEbo0ETQWv2oMXX5m638z3Rt3S2Ty kZZ6FbsjXLGSBdevQ3+ZxLLNAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUICW2nKDi gbzJXoPzSfOdbCgmouowHwYDVR0jBBgwFoAUG6ndjcO37zeOvYfhaOTrnw5JysAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCOTQ2LzY0NkZENkQyODRE ODExRjE5NkNBRUJBODVBQTMwRkJDL0c2bmRqY08zN3plT3ZZZmhhT1Rybnc1Snlz QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRzZuZGpjTzM3emVPdllmaGFPVHJudzVKeXNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjk0Ni82NDZGRDZEMjg0RDgxMUYxOTZDQUVCQTg1QUEzMEZCQy9DMkI0QkRCNjg0 RDgxMUYxQUE1MDg5QUM1QUEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGjgNwwDQYJKoZIhvcNAQELBQADggEBAGweMJ6cMQixbgaTn7nh4nKx nnjwz8R5cYoZLfmX0gpVhNuEuHGDViYcdGVA/2RqRXK0taCRvCWF5ap+DEowHmUI HrxNYMoEt7wGnEk6zw/rRYUHr8YlPXQKz28nAeLbPrykc3mDtMsBmD2hQWR/jVG1 pNQONlAo1SGCSBUoxjH14Yqpy1crVxw9tAOsfQFZG0ktlwfY/xdFObFqoE6ljpXW wibJ+UMa3x58r+4t+FGZwJKYMR9HuuTCscZrX2Krdt/G5a8d4TCtiR2xMZ9lAo6J GYy2Afv+7sFPxpx724pjUTomuXWTGazdm/JSZRAM8qNDLEP2X+g9LH8RXJn+QsM= -----END CERTIFICATE-----Generated at Tue Jul 21 20:56:09 2026 by rpki-client