$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/6EC9CC12746911F0B5BCC83EC4F9AE02.roa File: 6EC9CC12746911F0B5BCC83EC4F9AE02.roa (raw, json) Hash identifier: +/kAkfziYTn212TfYK9V8Vaa0l9HEiaFVxFsS7+dCsI= Subject key identifier: 2B:D7:76:27:05:0C:B2:E4:0A:B8:5F:2A:6F:4A:D4:8B:E1:D6:DC:F2 Certificate issuer: /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Certificate serial: 07A6 Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/6EC9CC12746911F0B5BCC83EC4F9AE02.roa Signing time: Tue 28 Jul 2026 22:44:08 +0000 ROA not before: Tue 28 Jul 2026 22:44:08 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 21859 IP address blocks: 122.10.140.0/22 maxlen: 24 122.10.149.0/24 maxlen: 24 122.10.196.0/23 maxlen: 24 122.10.221.0/24 maxlen: 24 122.10.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 10:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1958 (0x7a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37, serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Validity Not Before: Jul 28 22:44:08 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a6930b7-95cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0d:15:ed:fa:6d:cf:66:50:95:f5:67:e0:f9: a6:cb:7b:29:68:1d:50:dd:cb:00:2c:d2:c7:8e:bb: 8d:67:e7:de:0c:72:b5:f9:29:d5:8e:a9:27:e8:3c: 20:37:b3:81:9e:c7:30:dd:3c:1c:9b:76:18:3a:20: ba:33:5e:23:66:f4:9c:e2:24:42:59:82:a8:e5:90: 7e:e7:02:7a:f6:60:65:99:57:1c:80:69:57:ea:ec: 78:bf:b3:32:45:ba:4f:6a:dd:85:28:47:3c:b5:b0: 6f:67:f2:04:b6:f2:68:07:9a:77:32:4a:a7:4e:02: a8:ff:a0:bd:db:73:d6:8a:a3:10:65:d1:70:69:b2: 7c:b8:1d:79:00:80:b2:92:e6:7b:55:b8:c0:71:aa: b5:ce:75:e7:d9:41:db:b3:bd:41:c0:49:c7:62:46: e8:67:48:5d:52:10:9b:14:fb:81:65:ff:b1:15:43: 1a:f1:14:59:44:e9:be:5a:b7:89:06:b3:ed:14:9d: aa:d7:d6:f5:e3:44:a6:4d:b9:47:d9:fb:1e:1c:45: 6e:bd:72:9e:8e:56:25:e4:65:3a:ce:99:8d:20:5b: fa:96:db:6d:03:59:8a:4a:35:35:30:21:32:a8:22: 27:f3:be:e6:a7:9f:1b:e0:32:8e:70:58:c5:3c:9f: 2f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D7:76:27:05:0C:B2:E4:0A:B8:5F:2A:6F:4A:D4:8B:E1:D6:DC:F2 X509v3 Authority Key Identifier: keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/6EC9CC12746911F0B5BCC83EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 122.10.140.0/22 122.10.149.0/24 122.10.196.0/23 122.10.221.0/24 122.10.223.0/24 Signature Algorithm: sha256WithRSAEncryption b2:4a:3c:cc:9c:7b:3b:28:dd:28:1f:92:03:bf:15:47:25:45: 86:ed:f1:79:51:4a:84:30:90:d1:45:40:6d:7d:5e:e4:0a:20: 35:2e:75:b7:6c:19:2a:72:ad:b0:eb:d4:ae:56:b9:be:59:db: 0a:b6:e8:c7:55:b6:de:e5:c0:55:2a:7a:16:61:c5:cb:ec:cc: fa:5b:4d:7d:ba:b2:39:fb:ef:88:f8:b2:83:67:03:61:25:04: 30:ff:fa:c7:71:fe:e7:c9:5e:53:ea:88:b6:53:f6:31:0a:7b: 0f:a3:ad:75:33:60:cb:65:29:12:80:5b:e8:e6:a4:d2:eb:f2: 36:c3:fa:bc:1a:f5:79:f0:86:e2:cb:dd:4d:cb:31:7d:7a:ae: cb:68:68:86:c8:70:1e:7d:ca:73:fd:ce:5f:c4:2b:e0:19:58: c7:0a:8d:9f:7d:43:e3:08:5a:01:44:ba:07:10:0f:6f:f3:f5: c9:9e:82:9e:bc:0a:ee:28:74:e0:9a:eb:1a:f1:71:9e:b8:86: bc:74:ce:1e:5d:e4:7b:c5:cb:0c:73:8a:df:99:02:a2:8e:b7: 59:11:44:98:47:19:95:5d:57:df:83:f6:f8:4a:ec:78:4e:d2: 84:44:86:a4:50:15:f1:56:31:0c:fd:8b:d7:2c:9c:d6:1f:82: 1e:30:27:cd -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICB6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKEJCNTQ0MTc2RERFNjhFMzU4MUM1QzQzRjRGQzdDQzJD RjY4RDY5MjQwHhcNMjYwNzI4MjI0NDA4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5MzBiNy05NWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Q0V7fptz2ZQlfVn4Pmmy3spaB1Q3csALNLHjruNZ+feDHK1+SnVjqkn6Dwg N7OBnscw3Twcm3YYOiC6M14jZvSc4iRCWYKo5ZB+5wJ69mBlmVccgGlX6ux4v7My RbpPat2FKEc8tbBvZ/IEtvJoB5p3MkqnTgKo/6C923PWiqMQZdFwabJ8uB15AICy kuZ7VbjAcaq1znXn2UHbs71BwEnHYkboZ0hdUhCbFPuBZf+xFUMa8RRZROm+WreJ BrPtFJ2q19b140SmTblH2fseHEVuvXKejlYl5GU6zpmNIFv6ltttA1mKSjU1MCEy qCIn877mp58b4DKOcFjFPJ8vqwIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFCvXdicF DLLkCrhfKm9K1Ivh1tzyMB8GA1UdIwQYMBaAFLtUQXbd5o41gcXEP0/HzCz2jWkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy81NzY0NzM3QTc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpqV0J4Y1FfVDhmTUxQYU5h U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxUkJkdDNtampXQnhjUV9UOGZNTFBhTmFTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RURCMzcvNTc2NDczN0E3OEEwMTFFQjk1MEQzMTc1QzRGOUFFMDIvNkVDOUNDMTI3 NDY5MTFGMEI1QkNDODNFQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQCegqMAwQAegqVAwQBegrEAwQAegrdAwQAegrfMA0GCSqGSIb3DQEB CwUAA4IBAQCySjzMnHs7KN0oH5IDvxVHJUWG7fF5UUqEMJDRRUBtfV7kCiA1LnW3 bBkqcq2w69SuVrm+WdsKtujHVbbe5cBVKnoWYcXL7Mz6W019urI5+++I+LKDZwNh JQQw//rHcf7nyV5T6oi2U/YxCnsPo611M2DLZSkSgFvo5qTS6/I2w/q8GvV58Ibi y91NyzF9eq7LaGiGyHAefcpz/c5fxCvgGVjHCo2ffUPjCFoBRLoHEA9v8/XJnoKe vAruKHTgmusa8XGeuIa8dM4eXeR7xcsMc4rfmQKijrdZEUSYRxmVXVffg/b4Sux4 TtKERIakUBXxVjEM/YvXLJzWH4IeMCfN -----END CERTIFICATE-----Generated at Sun Aug 23 00:18:41 2026 by rpki-client