$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/AEFB1B262FB111EB89A04D37C4F9AE02.roa File: AEFB1B262FB111EB89A04D37C4F9AE02.roa (raw, json) Hash identifier: tT41B0xJ+RDXXvQx3CB/Ui5y+1aA7lb07rB6KtZUBJc= Subject key identifier: 29:BC:E4:08:65:F0:A2:C3:1B:45:A9:76:94:E8:33:4F:F5:C8:39:2A Certificate issuer: /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F Certificate serial: 07FE Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/AEFB1B262FB111EB89A04D37C4F9AE02.roa Signing time: Sat 02 May 2026 21:27:41 +0000 ROA not before: Sat 02 May 2026 21:27:40 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 55489 IP address blocks: 202.128.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2046 (0x7fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE1C4, serialNumber=70BD1E495E250B22E2798296969785A2D77D737F Validity Not Before: May 2 21:27:40 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=69f66c4c-86d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fa:63:51:3d:1c:62:91:9e:0f:3f:b8:e5:89: 95:d5:e9:d0:09:a7:0b:de:8e:80:c5:6b:10:a1:96: 40:88:79:4f:fc:f0:31:0b:ec:69:b1:fc:e1:d1:74: 4a:0a:19:21:0d:86:d0:33:97:b3:23:80:ae:58:9c: 0e:97:05:a2:3f:61:9e:a9:a0:29:e3:13:f7:94:c6: 5e:1c:f6:1d:89:f4:d9:d6:80:24:20:d9:ee:1e:6c: a6:14:14:1e:9b:7c:89:e0:c0:f6:d2:eb:a7:ca:70: f8:91:a6:35:37:66:3d:84:20:7e:58:bf:36:9b:49: de:fb:03:ee:df:b1:ce:02:64:49:db:17:cf:78:5b: 69:2c:74:37:d0:72:20:cd:e6:55:53:e4:68:ad:53: 5c:ee:0c:08:7c:d6:21:81:96:c5:53:92:9e:58:34: 4c:72:a7:6a:05:f6:75:5b:ee:47:2a:cc:fa:19:1a: a2:66:95:02:10:f7:0d:a1:9f:d9:7c:f6:be:5c:4c: cc:4e:d8:8f:c6:d6:bd:da:e5:1e:02:95:f3:f6:25: ee:71:3c:fd:fa:cb:f7:69:d6:da:e6:d9:5f:8c:bd: 0b:e0:28:f7:bc:b5:2d:30:2d:71:f2:b1:9a:65:6c: ae:78:e5:15:b8:ce:42:9a:22:d3:f3:bb:7a:df:02: 20:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BC:E4:08:65:F0:A2:C3:1B:45:A9:76:94:E8:33:4F:F5:C8:39:2A X509v3 Authority Key Identifier: keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/AEFB1B262FB111EB89A04D37C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.128.99.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:31:16:93:f4:a6:91:b5:5a:11:b1:5c:54:54:62:e7:d2:33: 15:de:82:b0:0f:46:b0:03:a4:a2:d0:fa:b9:24:ac:08:3b:0a: a6:10:8c:9c:54:06:f9:be:12:fa:09:c7:32:ec:ae:f5:02:13: 85:5f:fa:d9:4b:68:84:4e:88:0b:0c:aa:b7:a8:ea:8d:5f:e0: a2:9d:e5:02:fe:a3:28:e1:f0:a1:38:cb:4f:2a:e9:fa:e3:91: a7:60:fe:69:82:a7:d5:94:27:f7:d2:1c:76:6b:43:5c:de:47: bd:f2:ce:4c:77:fc:b5:7e:e2:cd:50:e3:e3:99:27:4a:c3:04: 28:69:81:55:8b:4b:ed:1a:bc:ad:86:aa:f6:d1:4d:eb:f9:bf: 0c:90:96:d9:75:16:d3:23:48:40:1e:23:8b:10:37:f5:b9:22: 7f:31:36:ba:08:e3:48:2a:66:ed:cc:de:d0:14:41:9f:00:1b: 19:3a:95:80:e8:eb:5f:94:b9:09:73:e7:e5:c8:2f:ba:c2:60: a3:10:99:92:67:e0:73:6f:ca:a1:70:b6:ee:7b:31:87:30:df: 66:90:6d:1c:5b:18:45:43:04:4d:9d:f8:94:a2:d2:75:51:8b: fe:11:87:3e:be:e5:a1:b2:de:3f:2b:64:a1:95:8e:61:7f:59: 71:3f:cc:b0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUxQzQxMTAvBgNVBAUTKDcwQkQxRTQ5NUUyNTBCMjJFMjc5ODI5Njk2OTc4NUEy RDc3RDczN0YwHhcNMjYwNTAyMjEyNzQwWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWY2NmM0Yy04NmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/pjUT0cYpGeDz+45YmV1enQCacL3o6AxWsQoZZAiHlP/PAxC+xpsfzh0XRK ChkhDYbQM5ezI4CuWJwOlwWiP2GeqaAp4xP3lMZeHPYdifTZ1oAkINnuHmymFBQe m3yJ4MD20uunynD4kaY1N2Y9hCB+WL82m0ne+wPu37HOAmRJ2xfPeFtpLHQ30HIg zeZVU+RorVNc7gwIfNYhgZbFU5KeWDRMcqdqBfZ1W+5HKsz6GRqiZpUCEPcNoZ/Z fPa+XEzMTtiPxta92uUeApXz9iXucTz9+sv3adba5tlfjL0L4Cj3vLUtMC1x8rGa ZWyueOUVuM5CmiLT87t63wIg9QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCm85Ahl 8KLDG0WpdpToM0/1yDkqMB8GA1UdIwQYMBaAFHC9HkleJQsi4nmClpaXhaLXfXN/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTFDNC9GQzY3MkI3MjJG QUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5TGllWUtXbHBlRm90ZDlj MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMMGVTVjRsQ3lMaWVZS1dscGVGb3RkOWMzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUUxQzQvRkM2NzJCNzIyRkFGMTFFQjk0MTU1RjMzQzRGOUFFMDIvQUVGQjFCMjYy RkIxMTFFQjg5QTA0RDM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyoBjMA0GCSqGSIb3DQEBCwUAA4IBAQCNMRaT9KaRtVoRsVxUVGLn 0jMV3oKwD0awA6Si0Pq5JKwIOwqmEIycVAb5vhL6Cccy7K71AhOFX/rZS2iETogL DKq3qOqNX+CineUC/qMo4fChOMtPKun645GnYP5pgqfVlCf30hx2a0Nc3ke98s5M d/y1fuLNUOPjmSdKwwQoaYFVi0vtGrythqr20U3r+b8MkJbZdRbTI0hAHiOLEDf1 uSJ/MTa6CONIKmbtzN7QFEGfABsZOpWA6OtflLkJc+flyC+6wmCjEJmSZ+Bzb8qh cLbuezGHMN9mkG0cWxhFQwRNnfiUotJ1UYv+EYc+vuWhst4/K2ShlY5hf1lxP8yw -----END CERTIFICATE-----Generated at Sun May 3 17:42:14 2026 by rpki-client