$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/8CD64094BDFE11EBBBB16A42C4F9AE02.roa File: 8CD64094BDFE11EBBBB16A42C4F9AE02.roa (raw, json) Hash identifier: 8b4jo2m0Ngh7TWy3IkuEiD0GJam3IZH9UOeev3O9qQ8= Subject key identifier: 80:87:43:90:E3:02:AC:43:FB:40:C4:6F:D9:50:29:40:6D:E4:04:C7 Certificate issuer: /CN=A91F731E/serialNumber=90603E354DB568B3CA42900E703011E79662892E Certificate serial: 06EA Authority key identifier: 90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/8CD64094BDFE11EBBBB16A42C4F9AE02.roa Signing time: Thu 06 Aug 2026 16:29:08 +0000 ROA not before: Thu 06 Aug 2026 16:29:08 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 17501 IP address blocks: 72.9.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1770 (0x6ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E, serialNumber=90603E354DB568B3CA42900E703011E79662892E Validity Not Before: Aug 6 16:29:08 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a74b654-ddcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3c:5b:3c:20:fc:02:a3:80:2b:c6:93:ef:c5: 43:7f:56:94:5f:23:e7:39:e9:97:f2:29:94:e4:ce: 9c:12:90:ed:7d:0f:53:0d:85:65:64:3e:45:ba:e2: e5:7d:30:6c:3e:2a:5b:61:7c:c0:c4:90:32:0e:26: e4:84:a8:bd:47:8a:2a:9b:a7:e7:8c:40:62:74:70: 3b:77:76:14:3d:a9:8f:39:99:bd:80:1c:29:3f:5f: de:6a:5c:72:0c:23:3b:87:2d:64:96:57:58:32:54: d2:0e:ef:ad:4e:40:9e:66:64:e8:b0:7d:71:c9:cc: e9:50:71:e6:2c:65:bf:d0:b8:8c:37:84:66:85:a6: e5:5f:57:f2:08:9d:bf:c0:85:7a:c9:a0:d6:de:b7: 3a:a8:fb:a3:3d:e1:96:20:95:43:b8:db:c6:20:5a: cc:e8:0e:eb:36:b6:96:ff:d3:26:16:0f:f8:92:00: 2e:8a:8c:64:0b:7d:af:44:47:a6:a7:19:fb:27:3b: b9:de:8f:39:6c:c0:4f:74:4d:54:2f:f1:65:4d:15: 6c:78:f9:e9:e8:1b:02:eb:1d:da:52:1a:9d:1c:c1: 15:bf:44:88:e5:ce:ee:19:a2:98:10:47:8b:3b:78: 08:ff:c3:76:f8:4d:18:95:b1:a4:b5:e4:c7:eb:70: e9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:87:43:90:E3:02:AC:43:FB:40:C4:6F:D9:50:29:40:6D:E4:04:C7 X509v3 Authority Key Identifier: keyid:90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/8CD64094BDFE11EBBBB16A42C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 72.9.128.0/20 Signature Algorithm: sha256WithRSAEncryption a6:d2:68:dc:6b:09:73:8a:13:a1:32:df:72:e7:d5:74:65:05: 8f:3b:c5:0d:1a:e2:5f:07:b7:8c:ce:4b:45:9a:4c:c1:1e:5b: 47:c7:5b:16:83:00:4b:af:5b:54:0f:ef:85:ed:c8:09:88:d0: f8:61:ef:de:fa:ee:e8:57:45:12:47:14:0d:c5:0b:3d:79:9e: b9:de:c1:a3:fe:a0:b1:50:07:94:87:89:7d:4c:34:96:46:23: e0:b1:1e:f5:5b:a3:3a:59:8d:97:63:cc:f1:34:3a:cd:f3:05: fa:2e:8a:f2:c0:12:a1:07:49:0f:33:da:7b:11:24:5f:97:56: 7f:3b:dd:8c:0e:16:4a:bb:89:48:45:c5:17:11:5e:43:8b:0c: b2:aa:fc:cf:72:21:08:f7:25:fd:57:c2:41:9b:80:b5:ff:a9: af:5a:53:78:30:f8:d8:45:3e:29:47:2b:5a:d9:8f:44:c3:7d: 8b:c0:9a:a3:b5:b6:11:01:08:84:30:79:e5:7d:e4:b1:66:38: e5:54:e6:f3:e8:b9:c7:01:c1:97:93:6d:5d:3e:e5:a4:1d:18: 23:43:e0:82:13:8e:d3:ff:8b:29:28:e1:05:51:c5:5c:26:16: 05:4a:73:48:47:a2:43:79:5f:25:33:e9:7c:15:5e:1e:55:68: 70:81:b2:4d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKDkwNjAzRTM1NERCNTY4QjNDQTQyOTAwRTcwMzAxMUU3 OTY2Mjg5MkUwHhcNMjYwODA2MTYyOTA4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc0YjY1NC1kZGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzxbPCD8AqOAK8aT78VDf1aUXyPnOemX8imU5M6cEpDtfQ9TDYVlZD5FuuLl fTBsPipbYXzAxJAyDibkhKi9R4oqm6fnjEBidHA7d3YUPamPOZm9gBwpP1/ealxy DCM7hy1klldYMlTSDu+tTkCeZmTosH1xyczpUHHmLGW/0LiMN4RmhablX1fyCJ2/ wIV6yaDW3rc6qPujPeGWIJVDuNvGIFrM6A7rNraW/9MmFg/4kgAuioxkC32vREem pxn7Jzu53o85bMBPdE1UL/FlTRVsePnp6BsC6x3aUhqdHMEVv0SI5c7uGaKYEEeL O3gI/8N2+E0YlbGkteTH63DphwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFICHQ5Dj AqxD+0DEb9lQKUBt5ATHMB8GA1UdIwQYMBaAFJBgPjVNtWizykKQDnAwEeeWYoku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9FQUExOUNCNEIy REMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFMUEtRcEFPY0RBUjU1Wmlp UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tHQS1OVTIxYUxQS1FwQU9jREFSNTVaaWlTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjczMUUvRUFBMTlDQjRCMkRDMTFFQjg2MjFDQjU2QzRGOUFFMDIvOENENjQwOTRC REZFMTFFQkJCQjE2QTQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQESAmAMA0GCSqGSIb3DQEBCwUAA4IBAQCm0mjcawlzihOhMt9y59V0 ZQWPO8UNGuJfB7eMzktFmkzBHltHx1sWgwBLr1tUD++F7cgJiND4Ye/e+u7oV0US RxQNxQs9eZ653sGj/qCxUAeUh4l9TDSWRiPgsR71W6M6WY2XY8zxNDrN8wX6Lory wBKhB0kPM9p7ESRfl1Z/O92MDhZKu4lIRcUXEV5DiwyyqvzPciEI9yX9V8JBm4C1 /6mvWlN4MPjYRT4pRyta2Y9Ew32LwJqjtbYRAQiEMHnlfeSxZjjlVObz6LnHAcGX k21dPuWkHRgjQ+CCE47T/4spKOEFUcVcJhYFSnNIR6JDeV8lM+l8FV4eVWhwgbJN -----END CERTIFICATE-----Generated at Sat Sep 5 04:37:59 2026 by rpki-client