$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/20E14746C88211F1BD0C2FA35011F970.roa File: 20E14746C88211F1BD0C2FA35011F970.roa (raw, json) Hash identifier: bJkiqKi3wu0WqvRDJOhUFbvZVQscKmX6GNZ1KZfPkJs= Subject key identifier: 9B:DC:EC:79:A6:38:EA:B1:90:96:AF:11:2C:C4:86:65:E2:74:69:4F Certificate issuer: /CN=A91F3CB1/serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B Certificate serial: 0150 Authority key identifier: 7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/20E14746C88211F1BD0C2FA35011F970.roa Signing time: Thu 15 Oct 2026 10:21:43 +0000 ROA not before: Thu 15 Oct 2026 10:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154321 IP address blocks: 202.60.230.0/24 maxlen: 24 202.60.231.0/24 maxlen: 24 202.60.232.0/24 maxlen: 24 202.60.233.0/24 maxlen: 24 202.60.234.0/24 maxlen: 24 202.60.235.0/24 maxlen: 24 202.60.236.0/24 maxlen: 24 202.60.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 06:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3CB1, serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B Validity Not Before: Oct 15 10:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ad0a937-a464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:09:09:a4:3c:02:14:65:f1:d9:89:7a:ce:dc: fd:4b:a5:c7:05:0a:0f:12:be:5f:46:16:89:b1:93: 71:5b:1e:6a:0a:17:3b:68:e1:5f:fd:4b:2e:9a:68: da:9c:69:0b:cc:fa:d5:2d:0b:20:8b:65:25:db:44: cf:24:27:4e:ac:a0:2b:20:67:fa:d9:2d:97:4d:d8: ce:be:c6:69:44:28:b9:c5:59:09:77:3b:ec:79:e0: f4:f1:4e:a1:5a:df:9f:3c:ec:fd:1f:38:55:39:94: fa:53:11:74:06:aa:e8:2a:24:01:2c:f6:44:35:49: d1:c5:11:4a:94:1d:ee:51:9c:40:51:d6:4f:18:ed: 60:ff:37:55:2b:09:0f:7b:73:1b:5c:cc:ee:01:cc: 14:0d:07:d1:19:a8:15:dc:df:b7:3a:fd:ac:74:6c: 8c:84:01:35:40:10:d0:39:aa:f9:9e:01:d6:b1:45: ce:c3:e0:d9:de:5f:33:d7:45:bf:e6:19:54:55:d8: a3:a6:86:5f:6e:9a:bb:18:cb:1a:a3:ba:43:6b:74: 4a:29:81:be:33:87:33:49:8b:4d:df:0c:eb:8a:50: 5c:1a:90:3e:53:f6:33:69:95:fd:61:07:00:00:bc: 2f:b4:d1:60:36:42:58:2a:2e:c2:89:fa:1a:ae:10: 20:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DC:EC:79:A6:38:EA:B1:90:96:AF:11:2C:C4:86:65:E2:74:69:4F X509v3 Authority Key Identifier: keyid:7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/20E14746C88211F1BD0C2FA35011F970.roa sbgp-ipAddrBlock: critical IPv4: 202.60.230.0-202.60.237.255 Signature Algorithm: sha256WithRSAEncryption 47:b5:e4:41:f3:fc:05:e2:64:54:75:60:02:f0:a8:db:77:c1: 22:65:a0:e8:39:92:03:41:e9:f3:09:50:00:7d:1a:99:6d:08: fa:d1:86:09:9b:4b:5b:a5:28:6e:3d:ec:68:cc:be:80:ca:d4: 18:48:dd:98:9d:f4:24:10:71:89:6c:7a:82:67:03:f6:ae:c3: 5d:c6:04:61:f8:80:2b:2f:df:f9:75:d1:f5:33:ba:a6:5b:4c: f2:73:9f:6f:53:bc:25:01:14:1e:77:ac:c1:f5:73:cc:d2:25: 8d:80:34:b6:5a:ed:2a:42:05:f7:7e:aa:49:5d:1d:df:e5:8c: 13:76:2f:94:f8:1d:23:11:4d:3c:be:ae:f4:ab:cf:fb:fc:5b: 5d:f2:55:a8:3c:f4:a0:09:4d:22:79:7d:73:73:01:de:5f:61: 62:a0:f9:0b:b2:59:1b:ba:d2:c6:ee:c2:d7:6f:c3:58:6c:de: bf:73:b7:ab:4c:4c:dd:84:d6:b7:f3:19:c8:de:33:18:17:1e: f7:dc:0a:ee:d9:43:a8:24:52:c6:d8:bb:f8:e1:65:dc:0a:c9: 81:5b:52:d4:d1:3e:4d:45:55:4d:f5:51:b4:02:a4:d5:33:e8: 98:d7:a5:e0:2d:8d:49:03:70:2a:5a:ce:ab:a4:76:28:1d:ab: a3:1b:ef:a0 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDQjExMTAvBgNVBAUTKDdBRDc5RUVCM0I5MjgzNTREOTUwREM2RTRGOEJFQ0NC MjVDMkZDNEIwHhcNMjYxMDE1MTAyMTQzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQwYTkzNy1hNDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlgkJpDwCFGXx2Yl6ztz9S6XHBQoPEr5fRhaJsZNxWx5qChc7aOFf/Usummja nGkLzPrVLQsgi2Ul20TPJCdOrKArIGf62S2XTdjOvsZpRCi5xVkJdzvseeD08U6h Wt+fPOz9HzhVOZT6UxF0BqroKiQBLPZENUnRxRFKlB3uUZxAUdZPGO1g/zdVKwkP e3MbXMzuAcwUDQfRGagV3N+3Ov2sdGyMhAE1QBDQOar5ngHWsUXOw+DZ3l8z10W/ 5hlUVdijpoZfbpq7GMsao7pDa3RKKYG+M4czSYtN3wzrilBcGpA+U/YzaZX9YQcA ALwvtNFgNkJYKi7CifoarhAgHwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFJvc7Hmm OOqxkJavESzEhmXidGlPMB8GA1UdIwQYMBaAFHrXnus7koNU2VDcbk+L7MslwvxL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0NCMS8yRDg0MzY5ODE2 ODYxMUYwODkxNjk4NUJDNEY5QUUwMi9ldGVlNnp1U2cxVFpVTnh1VDR2c3l5WENf RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V0ZWU2enVTZzFUWlVOeHVUNHZzeXlYQ19Fcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjNDQjEvMkQ4NDM2OTgxNjg2MTFGMDg5MTY5ODVCQzRGOUFFMDIvMjBFMTQ3NDZD ODgyMTFGMUJEMEMyRkEzNTAxMUY5NzAucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBAHKPOYDBAHKPOwwDQYJKoZIhvcNAQELBQADggEBAEe15EHz/AXi ZFR1YALwqNt3wSJloOg5kgNB6fMJUAB9GpltCPrRhgmbS1ulKG497GjMvoDK1BhI 3Zid9CQQcYlseoJnA/auw13GBGH4gCsv3/l10fUzuqZbTPJzn29TvCUBFB53rMH1 c8zSJY2ANLZa7SpCBfd+qkldHd/ljBN2L5T4HSMRTTy+rvSrz/v8W13yVag89KAJ TSJ5fXNzAd5fYWKg+QuyWRu60sbuwtdvw1hs3r9zt6tMTN2E1rfzGcjeMxgXHvfc Cu7ZQ6gkUsbYu/jhZdwKyYFbUtTRPk1FVU31UbQCpNUz6JjXpeAtjUkDcCpazquk digdq6Mb76A= -----END CERTIFICATE-----Generated at Mon Oct 19 22:46:04 2026 by rpki-client