$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/AB61CD86D51811F09422126CC4F9AE02.roa File: AB61CD86D51811F09422126CC4F9AE02.roa (raw, json) Hash identifier: TLLdIsk74f1u3haWZpgZc348xyx6vBubsic7GeU/I8Y= Subject key identifier: E7:94:83:5D:15:7A:60:D2:F0:84:2D:C7:2F:37:A0:EE:A5:ED:F9:D0 Certificate issuer: /CN=A91CE65A/serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00 Certificate serial: 0187 Authority key identifier: 29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/AB61CD86D51811F09422126CC4F9AE02.roa Signing time: Sun 05 Jul 2026 05:32:22 +0000 ROA not before: Sun 05 Jul 2026 05:32:22 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 16509 IP address blocks: 203.8.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 05:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE65A, serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00 Validity Not Before: Jul 5 05:32:22 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a49ec66-2e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:51:b4:ba:12:4f:a9:ab:94:de:60:b2:c9:df: b8:bd:4d:68:e0:76:d4:19:2b:00:2d:24:76:41:4d: e6:04:63:b4:01:8d:04:03:03:76:e5:23:18:d3:85: b3:48:38:33:8b:b7:f3:99:76:58:87:ac:c2:ee:c8: 0e:34:00:ef:57:7d:81:ff:44:3b:a1:1d:dc:91:26: a4:94:da:94:ca:22:2d:3c:5a:0d:56:3e:9f:06:e9: 25:ab:3f:3a:f6:0f:8e:d9:3e:56:f2:b8:7a:8d:95: 35:b6:1a:8b:92:9a:28:d9:bb:82:55:28:ec:80:85: 8c:55:44:82:4a:e9:9a:43:33:31:f4:54:b8:d5:9c: dc:c6:ab:0e:d7:2c:b1:26:d6:f2:c3:e7:2a:65:3e: c6:39:d3:13:53:6b:35:9a:f2:a3:99:fc:0e:07:b1: fa:08:29:85:73:0d:0a:84:0f:fd:a7:65:4f:ed:b0: e1:d7:1c:04:9e:4c:d0:eb:61:d4:c7:4c:6e:95:7f: 44:c8:e4:58:bd:01:f6:6b:a7:6f:15:0c:87:9e:02: 38:8f:a6:03:f6:3c:33:67:55:bc:0c:78:02:82:4b: 11:b1:e3:e7:8a:6b:8d:2f:61:22:d7:ec:ce:a8:40: c5:35:eb:7e:2e:6d:39:a2:41:6b:bf:14:0b:a0:cd: df:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:94:83:5D:15:7A:60:D2:F0:84:2D:C7:2F:37:A0:EE:A5:ED:F9:D0 X509v3 Authority Key Identifier: keyid:29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/AB61CD86D51811F09422126CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.8.2.0/24 Signature Algorithm: sha256WithRSAEncryption 97:1b:4e:83:5e:3f:4a:8c:ca:2b:70:08:9a:ba:7d:59:e1:72: 3c:d5:80:44:b6:b5:4d:0d:f1:a3:e4:c5:6b:a8:ec:d4:2c:e5: 0d:e7:49:1d:5d:39:a3:0e:b8:ea:0d:9b:51:aa:23:38:15:3f: 20:db:df:e8:82:53:50:9c:dd:51:e2:4a:60:9e:30:84:9c:3d: 13:15:d4:f3:25:43:c8:0f:70:82:eb:09:b5:3d:f5:c6:ac:e0: 75:c6:71:eb:66:e3:82:b0:18:ef:ce:ee:25:bd:88:62:4c:67: d6:69:7e:89:5f:56:be:b8:3f:77:63:dd:46:d1:0e:92:5d:25: da:d7:7c:7f:f2:f2:9e:bc:3d:fa:1d:a4:cc:b0:b4:79:1f:18: c9:5b:ea:39:8b:0b:32:11:3a:a8:fe:bd:96:3e:bd:0d:5e:d3: 3c:39:34:25:80:1a:90:e5:36:46:0c:dd:59:90:88:b3:d5:b5: f6:5d:bc:d6:fb:bc:8f:7e:25:65:5c:c1:2c:94:e1:c4:b6:47: 95:08:9d:59:fb:84:d6:b7:78:eb:31:de:1e:97:58:d5:75:29: fc:62:fa:98:80:38:05:3d:0c:23:ec:b0:4d:9f:fd:b9:bd:f4: 16:94:cc:d4:f3:e1:03:44:08:49:ab:2b:3f:0e:24:c0:2d:22: d9:d7:60:98 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2NUExMTAvBgNVBAUTKDI5M0JGMDY5QzRGNEQ4MzFFRUU3NjlENUIxMzlFMzAy MURCMzRCMDAwHhcNMjYwNzA1MDUzMjIyWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ5ZWM2Ni0yZTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVG0uhJPqauU3mCyyd+4vU1o4HbUGSsALSR2QU3mBGO0AY0EAwN25SMY04Wz SDgzi7fzmXZYh6zC7sgONADvV32B/0Q7oR3ckSaklNqUyiItPFoNVj6fBuklqz86 9g+O2T5W8rh6jZU1thqLkpoo2buCVSjsgIWMVUSCSumaQzMx9FS41ZzcxqsO1yyx Jtbyw+cqZT7GOdMTU2s1mvKjmfwOB7H6CCmFcw0KhA/9p2VP7bDh1xwEnkzQ62HU x0xulX9EyORYvQH2a6dvFQyHngI4j6YD9jwzZ1W8DHgCgksRsePnimuNL2Ei1+zO qEDFNet+Lm05okFrvxQLoM3fQQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOeUg10V emDS8IQtxy83oO6l7fnQMB8GA1UdIwQYMBaAFCk78GnE9Ngx7udp1bE54wIds0sA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTY1QS82NkU2RkUzNjQ5 N0ExMUVGQUY1NTE4NDJDNEY5QUUwMi9LVHZ3YWNUMDJESHU1Mm5Wc1RuakFoMnpT d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tUdndhY1QwMkRIdTUyblZzVG5qQWgyelN3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U2NUEvNjZFNkZFMzY0OTdBMTFFRkFGNTUxODQyQzRGOUFFMDIvQUI2MUNEODZE NTE4MTFGMDk0MjIxMjZDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAywgCMA0GCSqGSIb3DQEBCwUAA4IBAQCXG06DXj9KjMorcAiaun1Z 4XI81YBEtrVNDfGj5MVrqOzULOUN50kdXTmjDrjqDZtRqiM4FT8g29/oglNQnN1R 4kpgnjCEnD0TFdTzJUPID3CC6wm1PfXGrOB1xnHrZuOCsBjvzu4lvYhiTGfWaX6J X1a+uD93Y91G0Q6SXSXa13x/8vKevD36HaTMsLR5HxjJW+o5iwsyETqo/r2WPr0N XtM8OTQlgBqQ5TZGDN1ZkIiz1bX2XbzW+7yPfiVlXMEslOHEtkeVCJ1Z+4TWt3jr Md4el1jVdSn8YvqYgDgFPQwj7LBNn/25vfQWlMzU8+EDRAhJqys/DiTALSLZ12CY -----END CERTIFICATE-----Generated at Mon Jul 6 21:09:42 2026 by rpki-client