$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/0DBF860C6FB111F1A2CD02AE78A30FBC.roa File: 0DBF860C6FB111F1A2CD02AE78A30FBC.roa (raw, json) Hash identifier: HcbMw2rn7TZMWXGPZnCmUILsaTL6x9o/58aT8kV7J4E= Subject key identifier: DA:7F:A9:1D:48:5A:DD:8A:19:3E:B9:FB:DB:A3:3A:C1:7C:D8:9B:B7 Certificate issuer: /CN=A91DF0EC/serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Certificate serial: 0AE0 Authority key identifier: DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/0DBF860C6FB111F1A2CD02AE78A30FBC.roa Signing time: Wed 24 Jun 2026 09:42:46 +0000 ROA not before: Wed 24 Jun 2026 09:42:46 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 150180 IP address blocks: 123.0.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Jul 2026 19:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2784 (0xae0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF0EC, serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Validity Not Before: Jun 24 09:42:46 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a3ba695-d7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e6:b4:7f:bc:c9:81:3c:45:07:14:55:2c:34: 9e:25:7f:e2:4a:52:b4:c7:c5:9f:14:d9:ea:00:7e: c7:d5:8a:00:bc:23:b0:ce:a6:cc:3b:56:1d:8c:a5: 6f:d7:3c:50:2c:a4:e3:64:66:35:3f:b5:de:f3:5a: 82:ed:19:5a:c3:bf:25:fa:0a:c5:7e:23:4b:7c:11: 1b:f7:a7:02:94:fc:60:c4:59:32:21:ce:80:8d:64: 4b:5a:a9:10:56:26:0e:ad:49:99:8f:64:97:46:35: 70:b7:40:66:a9:00:d1:d5:bd:dc:ee:42:f3:85:07: 66:92:d1:71:e2:a8:58:92:1d:9f:11:0b:cd:fc:73: a0:be:66:db:d4:e5:05:83:72:2e:f2:f5:1c:a9:46: 3c:65:e6:9e:8b:75:93:e6:39:de:2d:93:84:d2:f1: a9:4d:37:bb:75:44:d1:c5:87:f3:9d:6a:73:8a:a6: 4e:db:64:9e:78:33:d9:ca:7c:41:2c:81:29:41:22: 8c:c5:f9:d7:8d:dc:35:5f:de:67:1e:9c:4d:60:70: 58:df:97:6c:ce:5c:9a:27:8e:93:73:39:e3:56:b7: 9d:23:94:7e:8a:23:a9:b6:ea:29:dc:7f:d5:61:a1: b6:19:69:32:dd:28:ff:44:d0:84:a0:b1:84:6a:4c: 8c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7F:A9:1D:48:5A:DD:8A:19:3E:B9:FB:DB:A3:3A:C1:7C:D8:9B:B7 X509v3 Authority Key Identifier: keyid:DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/0DBF860C6FB111F1A2CD02AE78A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 123.0.28.0/24 Signature Algorithm: sha256WithRSAEncryption 82:57:88:31:77:ae:d1:5c:d7:4a:a5:3b:10:6c:d0:77:03:6e: 4e:7e:36:1d:b4:d2:0e:56:ed:4d:c3:7c:84:b2:3e:c3:be:42: a9:6d:3b:20:46:89:bf:de:22:03:ea:68:c6:02:c4:a0:b5:60: bb:61:f8:b9:e2:5c:86:3a:1b:53:60:c7:75:e3:64:b9:36:6f: 76:75:b3:da:80:3b:9e:7e:63:d4:df:32:0a:fd:4d:d9:69:43: b8:17:1f:38:cf:32:1f:08:14:e0:35:0b:4b:02:32:b0:eb:51: 29:69:5b:be:07:96:10:e0:c5:d7:d4:ff:ff:69:6d:a6:bd:0a: 54:4f:60:fa:b6:73:9e:d6:83:6a:4c:49:a8:7b:5c:e7:7d:c6: d8:4c:57:65:08:97:bd:19:c9:dd:0e:c3:44:33:68:21:6b:6f: 75:73:86:69:ef:7a:e9:f3:81:f0:23:03:68:7c:aa:5c:7d:b1: df:2d:bd:33:33:85:37:19:8c:0b:81:9e:1d:cf:10:eb:ca:25: 13:1c:b7:44:c6:c1:25:de:7d:01:0e:72:9d:2c:11:4f:a3:8e: 3e:77:39:e1:80:2b:04:80:a5:9f:32:51:cf:c5:a3:e3:24:67: aa:15:a5:24:66:77:af:d6:4e:dc:18:1b:a9:e5:03:b0:a1:62: 7b:8a:83:64 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYwRUMxMTAvBgNVBAUTKERBMkI0M0NDMTgzQ0E4RTBGNkE4RjZEQUE1NENERDcz MDZGODYyMjgwHhcNMjYwNjI0MDk0MjQ2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTNiYTY5NS1kN2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOa0f7zJgTxFBxRVLDSeJX/iSlK0x8WfFNnqAH7H1YoAvCOwzqbMO1YdjKVv 1zxQLKTjZGY1P7Xe81qC7Rlaw78l+grFfiNLfBEb96cClPxgxFkyIc6AjWRLWqkQ ViYOrUmZj2SXRjVwt0BmqQDR1b3c7kLzhQdmktFx4qhYkh2fEQvN/HOgvmbb1OUF g3Iu8vUcqUY8Zeaei3WT5jneLZOE0vGpTTe7dUTRxYfznWpziqZO22SeeDPZynxB LIEpQSKMxfnXjdw1X95nHpxNYHBY35dszlyaJ46TcznjVredI5R+iiOptuop3H/V YaG2GWky3Sj/RNCEoLGEakyMYwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNp/qR1I Wt2KGT65+9ujOsF82Ju3MB8GA1UdIwQYMBaAFNorQ8wYPKjg9qj22qVM3XMG+GIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBFQy85OTFDRUY3RTc5 NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFPRDJxUGJhcFV6ZGN3YjRZ aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJpdER6Qmc4cU9EMnFQYmFwVXpkY3diNFlpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REYwRUMvOTkxQ0VGN0U3OTU4MTFFQTkzQUU5NjQ2QzRGOUFFMDIvMERCRjg2MEM2 RkIxMTFGMUEyQ0QwMkFFNzhBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAewAcMA0GCSqGSIb3DQEBCwUAA4IBAQCCV4gxd67RXNdKpTsQbNB3 A25OfjYdtNIOVu1Nw3yEsj7DvkKpbTsgRom/3iID6mjGAsSgtWC7Yfi54lyGOhtT YMd142S5Nm92dbPagDuefmPU3zIK/U3ZaUO4Fx84zzIfCBTgNQtLAjKw61EpaVu+ B5YQ4MXX1P//aW2mvQpUT2D6tnOe1oNqTEmoe1znfcbYTFdlCJe9GcndDsNEM2gh a291c4Zp73rp84HwIwNofKpcfbHfLb0zM4U3GYwLgZ4dzxDryiUTHLdExsEl3n0B DnKdLBFPo44+dznhgCsEgKWfMlHPxaPjJGeqFaUkZnev1k7cGBup5QOwoWJ7ioNk -----END CERTIFICATE-----Generated at Mon Jul 6 09:53:32 2026 by rpki-client