$ rpki-client -vvf rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/E101BEF6BA1111EAA2AF621EC4F9AE02.roa File: E101BEF6BA1111EAA2AF621EC4F9AE02.roa (raw, json) Hash identifier: F0eRWyxznh4A95wola8Wt0wEw8FGRQEkSXXva8DJ0JQ= Subject key identifier: 7A:5E:21:F9:BA:5A:A2:2A:B2:AB:D8:17:70:18:2A:A8:34:58:3D:16 Certificate issuer: /CN=A91E563F/serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F Certificate serial: 09BE Authority key identifier: 48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/E101BEF6BA1111EAA2AF621EC4F9AE02.roa Signing time: Mon 20 Jul 2026 21:21:22 +0000 ROA not before: Mon 20 Jul 2026 21:21:22 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 62500 IP address blocks: 202.95.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 21:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2494 (0x9be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E563F, serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F Validity Not Before: Jul 20 21:21:22 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a5e9152-2dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:98:79:70:77:98:f9:e5:43:71:df:38:c5:d4: bd:c9:4b:48:85:26:67:87:1d:40:52:78:b8:18:b3: ca:00:27:c4:dd:e4:10:76:de:d7:5c:86:21:7b:9a: 4d:79:36:84:39:b7:5d:3b:92:c7:e9:f6:db:d5:21: 34:0b:23:41:fd:ec:9e:af:cf:a6:03:79:55:21:29: 3a:89:34:b1:9c:2e:e3:f2:c2:95:92:2e:38:94:74: 35:2b:09:c0:46:0f:b0:f3:3c:60:7c:4b:7e:d8:9c: a8:16:f0:7c:7f:a3:cc:a9:b3:37:23:20:c9:fc:e4: b4:0c:8e:5e:46:b0:cf:9b:2f:1e:86:20:4f:43:e1: 34:be:4d:f9:ca:ad:ac:d5:aa:6b:ad:44:bb:e7:ae: dd:ed:35:4e:05:cd:2e:57:c4:b4:7e:4f:9b:b6:dc: 74:3b:f3:04:19:df:9c:4e:2c:2e:41:24:4f:49:26: e9:77:26:09:79:93:6a:32:cc:42:6d:a9:b5:7b:c9: cb:d6:12:3d:6e:11:ed:69:78:8b:6e:8f:e9:3f:5f: 95:81:de:de:d5:65:83:0f:2a:49:a1:d8:75:61:fe: d1:b3:85:94:6d:ca:43:c0:a3:06:8f:6b:11:44:31: 23:20:de:17:6a:07:ab:b7:6a:70:30:bf:ff:92:16: b4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5E:21:F9:BA:5A:A2:2A:B2:AB:D8:17:70:18:2A:A8:34:58:3D:16 X509v3 Authority Key Identifier: keyid:48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/E101BEF6BA1111EAA2AF621EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.95.233.0/24 Signature Algorithm: sha256WithRSAEncryption 47:4d:48:ec:28:aa:cc:d1:f0:a7:8e:4b:0a:fb:60:6f:de:17: 29:51:09:83:92:a2:b5:e2:82:26:86:30:f1:d8:87:b5:85:5d: c1:1d:ba:c2:49:29:32:06:ea:4f:2d:43:20:ea:83:12:b2:a2: 58:bd:ce:db:c4:fb:88:4b:11:a6:ef:63:42:76:38:36:05:86: d9:20:a4:1c:31:1d:f7:79:6e:ea:35:8f:71:29:d7:17:39:fd: 68:55:07:f0:3c:fa:5c:dc:f7:83:b4:3e:7a:c9:8e:6a:cd:f2: 2f:b4:e5:3d:3a:c5:43:ea:97:ab:7f:b6:e7:6b:1b:b7:df:47: a2:d9:a3:1a:bf:df:0e:69:bc:5b:1a:96:5b:9f:4a:27:34:fe: d9:b2:da:8e:ad:c7:26:1f:69:dc:b1:56:1a:3f:b8:d6:6a:9d: 2d:34:3c:77:33:d9:0a:4c:c5:28:76:cd:8a:62:2e:b2:78:79: 1a:c1:d6:b7:bf:b7:ac:c5:63:bc:a4:fe:ac:7e:86:9a:e2:14: 73:7a:2d:48:0f:8a:03:df:5a:9f:9c:ae:b3:e9:92:4f:99:c4: a9:f7:6f:7f:f0:50:d3:19:10:30:a6:65:c5:f3:16:a5:94:8a: 55:53:a1:61:4f:45:33:17:97:aa:4e:6a:f4:0b:dd:2a:18:27: 1c:f4:e3:52 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU2M0YxMTAvBgNVBAUTKDQ4MjAxNkU1NkEwMjQxRkQyRDM1QkZENzdCQzk3MkU2 NzNDRTlGMkYwHhcNMjYwNzIwMjEyMTIyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTVlOTE1Mi0yZGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ph5cHeY+eVDcd84xdS9yUtIhSZnhx1AUni4GLPKACfE3eQQdt7XXIYhe5pN eTaEObddO5LH6fbb1SE0CyNB/eyer8+mA3lVISk6iTSxnC7j8sKVki44lHQ1KwnA Rg+w8zxgfEt+2JyoFvB8f6PMqbM3IyDJ/OS0DI5eRrDPmy8ehiBPQ+E0vk35yq2s 1aprrUS7567d7TVOBc0uV8S0fk+bttx0O/MEGd+cTiwuQSRPSSbpdyYJeZNqMsxC bam1e8nL1hI9bhHtaXiLbo/pP1+Vgd7e1WWDDypJodh1Yf7Rs4WUbcpDwKMGj2sR RDEjIN4Xagert2pwML//kha0JwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHpeIfm6 WqIqsqvYF3AYKqg0WD0WMB8GA1UdIwQYMBaAFEggFuVqAkH9LTW/13vJcuZzzp8v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTYzRi8wQUI3NzdEQUI2 QTgxMUVBQUVFMTRGN0JDNEY5QUUwMi9TQ0FXNVdvQ1FmMHROYl9YZThseTVuUE9u eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDQVc1V29DUWYwdE5iX1hlOGx5NW5QT255OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTU2M0YvMEFCNzc3REFCNkE4MTFFQUFFRTE0RjdCQzRGOUFFMDIvRTEwMUJFRjZC QTExMTFFQUEyQUY2MjFFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyl/pMA0GCSqGSIb3DQEBCwUAA4IBAQBHTUjsKKrM0fCnjksK+2Bv 3hcpUQmDkqK14oImhjDx2Ie1hV3BHbrCSSkyBupPLUMg6oMSsqJYvc7bxPuISxGm 72NCdjg2BYbZIKQcMR33eW7qNY9xKdcXOf1oVQfwPPpc3PeDtD56yY5qzfIvtOU9 OsVD6perf7bnaxu330ei2aMav98OabxbGpZbn0onNP7ZstqOrccmH2ncsVYaP7jW ap0tNDx3M9kKTMUods2KYi6yeHkawda3v7esxWO8pP6sfoaa4hRzei1ID4oD31qf nK6z6ZJPmcSp929/8FDTGRAwpmXF8xallIpVU6FhT0UzF5eqTmr0C90qGCcc9ONS -----END CERTIFICATE-----Generated at Wed Jul 22 00:07:36 2026 by rpki-client