$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/5D364EA2C5DC11F0B2B11B60C4F9AE02.roa File: 5D364EA2C5DC11F0B2B11B60C4F9AE02.roa (raw, json) Hash identifier: PpeyWD14dKt8E9ZSNOJae92lNZw77a7W5KBVkuT5Dak= Subject key identifier: FD:07:52:42:AC:03:FD:54:35:DA:B8:30:87:83:96:19:6B:74:EF:7C Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Certificate serial: 1064 Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/5D364EA2C5DC11F0B2B11B60C4F9AE02.roa Signing time: Wed 15 Jul 2026 02:35:03 +0000 ROA not before: Wed 15 Jul 2026 02:35:03 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 7543 IP address blocks: 202.47.204.0/24 maxlen: 24 2403:e800:b00::/40 maxlen: 40 2403:e800:fd40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 18:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4196 (0x1064) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Validity Not Before: Jul 15 02:35:03 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6a56f1d7-f89b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:88:9f:68:53:a1:0c:ed:06:86:80:22:9f:89: 0b:f7:21:54:9e:7b:4f:5b:01:3b:aa:27:05:af:d3: e1:57:e6:8c:ce:48:b1:ac:d7:60:ad:3c:74:e9:6e: 3c:14:ad:c6:c8:d3:2d:dd:90:8e:9c:0e:1b:db:66: 8f:71:03:0e:64:ea:a7:13:bc:dd:0f:5a:a6:28:66: 9f:87:dd:e1:f0:19:d8:98:f0:0c:84:d3:fc:ff:4e: 1e:7d:1f:53:c2:d4:61:2b:eb:3f:e6:a6:e0:37:c7: d2:69:3b:f0:6a:74:5b:fe:c8:b9:dd:64:32:b7:fd: 26:a9:b3:49:bb:fd:57:37:3b:a8:85:c2:4d:1e:af: 51:77:7a:30:8b:76:fe:87:02:37:cf:5f:4d:6a:88: 09:82:80:f7:df:59:1b:9a:c3:ea:39:6b:f7:55:d3: 42:24:ba:86:f4:70:ff:51:d7:a8:a0:23:12:df:9a: 1a:73:76:5d:00:65:96:9e:5f:de:9b:6e:4f:74:9b: ef:da:af:96:b2:88:05:52:86:cc:61:58:0b:d0:db: a8:11:27:7c:6c:99:83:8c:0f:47:0c:98:28:04:98: c8:84:e7:d5:b5:9d:84:bb:e5:04:9c:93:3b:38:c0: 91:b0:db:31:9c:e7:a7:f7:3d:8a:10:b6:64:73:d9: 14:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:07:52:42:AC:03:FD:54:35:DA:B8:30:87:83:96:19:6B:74:EF:7C X509v3 Authority Key Identifier: keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/5D364EA2C5DC11F0B2B11B60C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.47.204.0/24 IPv6: 2403:e800:b00::/40 2403:e800:fd40::/48 Signature Algorithm: sha256WithRSAEncryption 05:e9:40:c2:33:be:a5:ff:97:d3:73:f7:0b:52:7d:c2:03:91: 09:89:45:cf:41:aa:d7:e7:97:8c:79:71:c9:27:76:4f:db:e0: 3b:6c:68:f1:79:7a:cb:8a:44:5d:f3:22:09:1b:dc:fe:38:f2: cb:40:c7:63:a1:d0:87:d2:0d:d2:40:bf:64:74:3f:b7:aa:3f: 3c:82:e3:96:b2:5f:d8:4e:57:0a:8d:ce:e6:6a:47:1a:01:4c: 17:38:04:a0:cc:25:81:3a:53:ec:84:3c:20:16:47:45:b6:27: 0c:37:c8:b4:df:66:15:a2:6c:c1:49:51:c7:6a:d4:22:09:68: 46:df:a6:20:93:08:40:1f:38:89:70:23:1f:b3:bd:ec:14:eb: ed:df:de:fd:f2:eb:49:87:37:34:f9:db:ee:b4:2f:9d:0a:42: 54:20:b8:26:a9:d4:93:9f:ce:5f:0f:59:54:f9:7a:78:bc:ec: 38:98:6c:6b:36:13:ca:78:96:e1:56:00:dc:05:eb:a4:2e:51: 63:e2:79:8e:1c:28:b7:e3:dd:75:a3:30:72:ce:3a:49:a3:85: 9b:1c:3f:88:22:db:83:1e:37:8f:31:a8:51:ad:18:bd:79:f5: 85:0f:c2:03:c5:37:33:c2:7a:01:25:ad:a4:0d:16:23:22:c5: c3:9f:8e:76 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgICEGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB RDNBRUZFQzgwHhcNMjYwNzE1MDIzNTAzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU2ZjFkNy1mODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooifaFOhDO0GhoAin4kL9yFUnntPWwE7qicFr9PhV+aMzkixrNdgrTx06W48 FK3GyNMt3ZCOnA4b22aPcQMOZOqnE7zdD1qmKGafh93h8BnYmPAMhNP8/04efR9T wtRhK+s/5qbgN8fSaTvwanRb/si53WQyt/0mqbNJu/1XNzuohcJNHq9Rd3owi3b+ hwI3z19NaogJgoD331kbmsPqOWv3VdNCJLqG9HD/UdeooCMS35oac3ZdAGWWnl/e m25PdJvv2q+WsogFUobMYVgL0NuoESd8bJmDjA9HDJgoBJjIhOfVtZ2Eu+UEnJM7 OMCRsNsxnOen9z2KELZkc9kU6QIDAQABo4ICeTCCAnUwHQYDVR0OBBYEFP0HUkKs A/1UNdq4MIeDlhlrdO98MB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQTAvMUQ2NkQ0ODZEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvNUQzNjRFQTJD NURDMTFGMEIyQjExQjYwQzRGOUFFMDIucm9hMDgGCCsGAQUFBwEHAQH/BCkwJzAM BAIAATAGAwQAyi/MMBcEAgACMBEDBgAkA+gACwMHACQD6AD9QDANBgkqhkiG9w0B AQsFAAOCAQEABelAwjO+pf+X03P3C1J9wgORCYlFz0Gq1+eXjHlxySd2T9vgO2xo 8Xl6y4pEXfMiCRvc/jjyy0DHY6HQh9IN0kC/ZHQ/t6o/PILjlrJf2E5XCo3O5mpH GgFMFzgEoMwlgTpT7IQ8IBZHRbYnDDfItN9mFaJswUlRx2rUIgloRt+mIJMIQB84 iXAjH7O97BTr7d/e/fLrSYc3NPnb7rQvnQpCVCC4JqnUk5/OXw9ZVPl6eLzsOJhs azYTyniW4VYA3AXrpC5RY+J5jhwot+PddaMwcs46SaOFmxw/iCLbgx43jzGoUa0Y vXn1hQ/CA8U3M8J6ASWtpA0WIyLFw5+Odg== -----END CERTIFICATE-----Generated at Tue Jul 21 21:43:55 2026 by rpki-client