$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/AFD8C9F0A4E311F18DF958E06811F970.roa File: AFD8C9F0A4E311F18DF958E06811F970.roa (raw, json) Hash identifier: Lrk9LTcg/bv+vbM0honqqAUz9KhJdQc3X7h5xz+fH0E= Subject key identifier: 1F:C4:B6:15:83:26:B0:D7:FC:98:57:BF:80:F5:E1:4E:55:2A:57:E2 Certificate issuer: /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Certificate serial: D5 Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/AFD8C9F0A4E311F18DF958E06811F970.roa Signing time: Mon 31 Aug 2026 02:28:44 +0000 ROA not before: Mon 31 Aug 2026 02:28:44 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 141153 IP address blocks: 202.1.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 06:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Validity Not Before: Aug 31 02:28:44 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a94e6dc-7b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:49:d0:26:e1:57:f2:86:51:fa:aa:8a:c6:ad: d0:6f:7b:d3:30:50:9b:d8:74:51:1b:25:81:e9:ac: e6:90:36:33:be:db:fd:83:4c:6b:4e:7e:f5:ec:94: 4f:94:5c:24:b8:5d:c9:6f:44:3c:09:02:78:f9:5b: c2:c7:13:c7:59:c6:6e:e2:4e:8f:db:97:e0:a4:c0: aa:b4:f1:53:23:d8:21:8c:a1:9e:84:77:71:f0:c7: aa:d3:94:d9:e4:86:f5:c1:e6:a1:3c:5a:9f:48:f9: 46:07:36:f2:a9:58:9d:54:b2:24:14:9a:e7:a2:14: 49:10:fc:80:2c:13:90:b3:4c:e7:27:e3:6e:1f:7f: 41:30:1f:67:9a:50:0d:42:c7:f5:2f:aa:79:e3:36: 20:c1:b5:04:d6:0c:2e:de:d6:b7:45:13:03:58:4b: 98:46:60:99:5e:1c:5a:22:3d:a7:be:02:ab:3d:90: 90:df:7d:76:d2:5d:de:d7:37:07:f0:44:f8:03:3c: c9:3e:42:8d:bf:4c:8e:9b:d0:8c:fe:3c:31:60:fe: 2c:28:63:33:01:73:f1:ea:e0:63:0f:84:cc:93:13: 98:f0:69:6f:f4:17:f8:fb:bf:ac:58:cf:69:96:17: 78:60:b0:e4:6c:8a:58:11:92:a1:42:e7:56:6d:67: cb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C4:B6:15:83:26:B0:D7:FC:98:57:BF:80:F5:E1:4E:55:2A:57:E2 X509v3 Authority Key Identifier: keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/AFD8C9F0A4E311F18DF958E06811F970.roa sbgp-ipAddrBlock: critical IPv4: 202.1.20.0/23 Signature Algorithm: sha256WithRSAEncryption 83:e9:0b:32:40:a4:a8:5c:3a:0e:e4:2f:20:75:52:62:17:c6: 74:e1:a7:76:93:ee:a6:d8:59:ab:da:9d:72:2a:92:c9:ce:78: 29:39:4a:6b:46:82:ca:36:6c:5d:60:51:6d:bb:93:5e:22:a8: c3:83:72:4e:40:8f:ce:37:b1:0d:1b:b0:0d:59:3e:ec:1b:24: 52:99:dd:62:e0:73:db:e3:3c:14:e0:8e:a4:db:eb:f7:04:29: 12:39:36:9b:56:20:0d:25:a8:b2:8e:83:32:f6:4a:c5:4d:93: 16:c3:1b:10:de:6d:9a:95:1f:79:13:9f:f2:8e:42:58:1a:9c: 03:4c:cc:10:2a:da:46:3f:eb:7b:3c:52:36:7c:4e:89:5d:f3: 77:aa:7b:8c:54:7e:94:e2:c3:b6:7c:a8:f2:f7:40:d0:58:28: 22:be:82:25:13:73:ac:37:cd:a1:69:76:e0:2c:01:0a:b8:12: 39:e0:2b:84:08:72:31:40:e9:80:37:fe:c1:63:b3:66:2b:97: fe:50:8a:96:e6:5f:b5:5b:79:7c:0c:d9:2f:b2:9e:b6:a3:28: fa:4f:09:5f:a7:2f:21:29:90:98:7b:3d:65:55:0f:2b:61:92: 63:dd:77:b0:e7:d7:4f:f0:54:1c:01:22:91:78:d0:86:aa:a0: ef:4e:d8:c7 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0MzIxMTAvBgNVBAUTKDk2RkMzRDFGODc5NUJFRTlFQUExRUI5NUQyOUE1OUM4 QTQwMjczRDMwHhcNMjYwODMxMDIyODQ0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk0ZTZkYy03YjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUnQJuFX8oZR+qqKxq3Qb3vTMFCb2HRRGyWB6azmkDYzvtv9g0xrTn717JRP lFwkuF3Jb0Q8CQJ4+VvCxxPHWcZu4k6P25fgpMCqtPFTI9ghjKGehHdx8Meq05TZ 5Ib1weahPFqfSPlGBzbyqVidVLIkFJrnohRJEPyALBOQs0znJ+NuH39BMB9nmlAN Qsf1L6p54zYgwbUE1gwu3ta3RRMDWEuYRmCZXhxaIj2nvgKrPZCQ33120l3e1zcH 8ET4AzzJPkKNv0yOm9CM/jwxYP4sKGMzAXPx6uBjD4TMkxOY8Glv9Bf4+7+sWM9p lhd4YLDkbIpYEZKhQudWbWfLRwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB/EthWD JrDX/JhXv4D14U5VKlfiMB8GA1UdIwQYMBaAFJb8PR+Hlb7p6qHrldKaWcikAnPT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODQzMi9GQjY4NUIxRTZD NTAxMUYwODk5ODA3NEJDNEY5QUUwMi9sdnc5SDRlVnZ1bnFvZXVWMHBwWnlLUUNj OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2dzlINGVWdnVucW9ldVYwcHBaeUtRQ2M5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg0MzIvRkI2ODVCMUU2QzUwMTFGMDg5OTgwNzRCQzRGOUFFMDIvQUZEOEM5RjBB NEUzMTFGMThERjk1OEUwNjgxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBygEUMA0GCSqGSIb3DQEBCwUAA4IBAQCD6QsyQKSoXDoO5C8gdVJi F8Z04ad2k+6m2Fmr2p1yKpLJzngpOUprRoLKNmxdYFFtu5NeIqjDg3JOQI/ON7EN G7ANWT7sGyRSmd1i4HPb4zwU4I6k2+v3BCkSOTabViANJaiyjoMy9krFTZMWwxsQ 3m2alR95E5/yjkJYGpwDTMwQKtpGP+t7PFI2fE6JXfN3qnuMVH6U4sO2fKjy90DQ WCgivoIlE3OsN82haXbgLAEKuBI54CuECHIxQOmAN/7BY7NmK5f+UIqW5l+1W3l8 DNkvsp62oyj6Twlfpy8hKZCYez1lVQ8rYZJj3Xew59dP8FQcASKReNCGqqDvTtjH -----END CERTIFICATE-----Generated at Sat Sep 5 08:29:40 2026 by rpki-client