$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/AAF88862D51811F0B469126CC4F9AE02.roa File: AAF88862D51811F0B469126CC4F9AE02.roa (raw, json) Hash identifier: TL/EtRu22ONIBQU9AjMsDMVh2O5yUU42eXjpY7kgULg= Subject key identifier: 07:E2:3F:65:4E:5D:DF:B7:7E:DA:56:55:FB:21:1A:E8:EF:69:8C:9A Certificate issuer: /CN=A91CE65A/serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00 Certificate serial: 0186 Authority key identifier: 29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/AAF88862D51811F0B469126CC4F9AE02.roa Signing time: Sun 05 Jul 2026 05:32:20 +0000 ROA not before: Sun 05 Jul 2026 05:32:20 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 14618 IP address blocks: 203.8.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 05:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE65A, serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00 Validity Not Before: Jul 5 05:32:20 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a49ec64-f337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:75:b2:f0:ae:c5:84:5d:a5:f5:d4:33:56:ac: ed:8c:07:ff:8c:ea:14:4e:31:9f:40:ab:3b:03:34: 1e:48:69:36:82:eb:38:73:a0:26:32:63:94:70:d3: 8c:8e:de:54:25:09:4b:b3:30:80:36:3f:9e:7d:36: 96:76:1c:90:54:fe:df:84:c3:a4:32:69:62:9a:f2: e7:5e:c1:20:ff:29:4c:ef:9b:49:47:4f:5f:57:5e: 1b:a4:85:51:80:d3:6b:c7:b5:a3:5f:a5:ac:99:c4: 64:24:cc:51:0a:8d:0d:0d:5b:e6:c9:a5:97:91:e2: c4:9e:1d:56:46:a4:13:85:bc:7a:9f:eb:2a:58:18: 19:c7:80:2a:d9:af:33:16:3d:79:11:37:92:15:29: 66:15:9a:44:2e:f7:47:54:8d:5f:e6:26:a6:2e:94: f9:03:f9:14:9c:e5:5d:44:87:e2:13:08:08:93:42: 9b:28:b8:34:67:27:6f:25:55:9a:4a:44:65:9c:61: 19:4b:e6:23:6c:7a:28:d9:33:6b:f3:d6:6b:25:ae: 48:99:d2:e0:30:fd:b1:7c:7f:25:69:b8:51:80:83: 30:ee:eb:94:b9:db:ea:ca:f2:ba:c6:95:ae:26:4a: d1:a6:00:37:22:f9:de:a4:d0:a6:f2:4c:bb:41:01: ec:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E2:3F:65:4E:5D:DF:B7:7E:DA:56:55:FB:21:1A:E8:EF:69:8C:9A X509v3 Authority Key Identifier: keyid:29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/AAF88862D51811F0B469126CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.8.2.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:a4:d6:7c:b2:57:f1:da:37:fd:57:ab:67:a3:17:e9:a9:6b: ce:7d:36:74:52:62:75:77:95:3d:09:ff:85:d3:73:66:f2:61: b8:38:4e:9e:a4:47:8b:61:1a:4f:e8:c2:7a:cc:61:b6:c5:a3: 4a:a6:76:5d:ab:51:4a:81:0a:c1:0e:74:9c:3a:e6:af:26:c1: fc:22:12:2b:2b:c8:e8:a7:50:c8:8b:19:24:e9:45:c9:62:04: 1b:cb:cf:09:c4:3a:bf:14:63:8c:eb:12:d6:c3:de:f3:87:54: ae:dc:7d:83:ee:24:2e:d0:c4:44:5c:e0:24:f6:0e:0d:fc:c4: 1e:bb:a7:7f:f9:8a:2c:50:b2:33:3c:bc:b2:0f:56:eb:51:60: 71:73:28:8d:0e:22:21:11:9b:34:53:ad:62:7b:5c:4c:dd:1b: 95:ab:2f:84:4c:69:d4:a3:64:5b:94:81:86:51:d6:74:e2:46: 2a:e1:7b:f9:8c:a6:86:71:4b:e8:fc:85:68:b5:a7:9b:93:6b: 92:23:71:35:dd:38:4e:39:06:7a:0d:e2:96:85:ab:41:d8:5e: 82:6c:9e:9e:46:0a:07:29:c4:b5:18:d5:d5:7c:8e:e0:08:aa: 27:a7:4a:5f:ee:7b:34:df:73:a5:c8:c3:3c:79:8b:d7:68:5d: b6:0f:3a:eb -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2NUExMTAvBgNVBAUTKDI5M0JGMDY5QzRGNEQ4MzFFRUU3NjlENUIxMzlFMzAy MURCMzRCMDAwHhcNMjYwNzA1MDUzMjIwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ5ZWM2NC1mMzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnWy8K7FhF2l9dQzVqztjAf/jOoUTjGfQKs7AzQeSGk2gus4c6AmMmOUcNOM jt5UJQlLszCANj+efTaWdhyQVP7fhMOkMmlimvLnXsEg/ylM75tJR09fV14bpIVR gNNrx7WjX6WsmcRkJMxRCo0NDVvmyaWXkeLEnh1WRqQThbx6n+sqWBgZx4Aq2a8z Fj15ETeSFSlmFZpELvdHVI1f5iamLpT5A/kUnOVdRIfiEwgIk0KbKLg0ZydvJVWa SkRlnGEZS+YjbHoo2TNr89ZrJa5ImdLgMP2xfH8labhRgIMw7uuUudvqyvK6xpWu JkrRpgA3IvnepNCm8ky7QQHsuwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAfiP2VO Xd+3ftpWVfshGujvaYyaMB8GA1UdIwQYMBaAFCk78GnE9Ngx7udp1bE54wIds0sA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTY1QS82NkU2RkUzNjQ5 N0ExMUVGQUY1NTE4NDJDNEY5QUUwMi9LVHZ3YWNUMDJESHU1Mm5Wc1RuakFoMnpT d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tUdndhY1QwMkRIdTUyblZzVG5qQWgyelN3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U2NUEvNjZFNkZFMzY0OTdBMTFFRkFGNTUxODQyQzRGOUFFMDIvQUFGODg4NjJE NTE4MTFGMEI0NjkxMjZDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAywgCMA0GCSqGSIb3DQEBCwUAA4IBAQB7pNZ8slfx2jf9V6tnoxfp qWvOfTZ0UmJ1d5U9Cf+F03Nm8mG4OE6epEeLYRpP6MJ6zGG2xaNKpnZdq1FKgQrB DnScOuavJsH8IhIrK8jop1DIixkk6UXJYgQby88JxDq/FGOM6xLWw97zh1Su3H2D 7iQu0MREXOAk9g4N/MQeu6d/+YosULIzPLyyD1brUWBxcyiNDiIhEZs0U61ie1xM 3RuVqy+ETGnUo2RblIGGUdZ04kYq4Xv5jKaGcUvo/IVotaebk2uSI3E13ThOOQZ6 DeKWhatB2F6CbJ6eRgoHKcS1GNXVfI7gCKonp0pf7ns033OlyMM8eYvXaF22Dzrr -----END CERTIFICATE-----Generated at Mon Jul 6 18:19:22 2026 by rpki-client