$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCA20/AFE7BC42BBEC11F1B1BE25D66C11F970/1F570068BBEF11F181E0A0606E11F970.roa File: 1F570068BBEF11F181E0A0606E11F970.roa (raw, json) Hash identifier: KsMqN0WthcI9r2Gmivl+cLrOQiNCQi5AweNACLK33Bs= Subject key identifier: 2C:DF:80:5D:8D:92:BF:05:71:0B:EF:8E:36:C3:38:35:90:A8:F1:A4 Certificate issuer: /CN=A91FCA20/serialNumber=F7D49C16D679BC405D8FAF9DA01FCFADACB99DB8 Certificate serial: 02 Authority key identifier: F7:D4:9C:16:D6:79:BC:40:5D:8F:AF:9D:A0:1F:CF:AD:AC:B9:9D:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ScFtZ5vEBdj6-doB_Pray5nbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA20/AFE7BC42BBEC11F1B1BE25D66C11F970/1F570068BBEF11F181E0A0606E11F970.roa Signing time: Tue 29 Sep 2026 10:18:32 +0000 ROA not before: Tue 29 Sep 2026 10:18:32 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 154954 IP address blocks: 220.158.150.0/23 maxlen: 24 2402:7920::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA20/AFE7BC42BBEC11F1B1BE25D66C11F970/99ScFtZ5vEBdj6-doB_Pray5nbg.crl rsync://rpki.apnic.net/member_repository/A91FCA20/AFE7BC42BBEC11F1B1BE25D66C11F970/99ScFtZ5vEBdj6-doB_Pray5nbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ScFtZ5vEBdj6-doB_Pray5nbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 09:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA20, serialNumber=F7D49C16D679BC405D8FAF9DA01FCFADACB99DB8 Validity Not Before: Sep 29 10:18:32 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6abb9078-a116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f7:1d:9f:cd:85:60:f9:11:33:6b:78:7b:3d: 12:f1:ed:46:00:89:56:39:35:b4:89:13:a4:5f:43: 8c:72:8b:ec:11:05:e7:42:42:6d:e6:66:bb:e2:41: 95:bd:87:87:32:62:e6:24:e4:d9:2c:9b:0e:00:29: 13:1b:5d:dc:bd:5f:9b:64:ab:43:12:96:53:c4:50: 8d:66:b6:b1:1d:d1:50:35:ee:fe:cb:d1:76:fe:ec: c5:b0:dd:dc:c2:39:ac:d4:bc:76:26:0c:ce:9f:e2: 82:f5:0c:b7:b3:12:49:c3:37:4e:2e:fc:5f:28:5d: fc:f7:60:6d:9e:08:54:78:92:bb:b9:59:7d:b8:48: d9:61:d2:88:d6:28:8e:18:39:a5:84:c1:21:88:c0: 9b:e9:3f:1d:32:b9:b0:e3:e0:bd:85:6f:ba:e0:b8: fe:52:59:26:da:f8:e1:de:21:40:02:82:c7:10:68: e2:0c:b4:63:00:27:05:1a:9c:89:30:20:59:8c:83: c3:8a:fe:3e:79:62:3a:e9:7a:73:83:fe:e5:ce:9c: 84:2b:c9:a1:40:4e:56:9c:23:16:9d:a8:5d:78:5b: 54:b2:60:37:e8:96:54:32:c8:69:68:bd:f1:fd:1b: 2b:87:b8:ab:73:db:92:da:ef:10:02:4e:d9:37:31: 5f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DF:80:5D:8D:92:BF:05:71:0B:EF:8E:36:C3:38:35:90:A8:F1:A4 X509v3 Authority Key Identifier: keyid:F7:D4:9C:16:D6:79:BC:40:5D:8F:AF:9D:A0:1F:CF:AD:AC:B9:9D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA20/AFE7BC42BBEC11F1B1BE25D66C11F970/99ScFtZ5vEBdj6-doB_Pray5nbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ScFtZ5vEBdj6-doB_Pray5nbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA20/AFE7BC42BBEC11F1B1BE25D66C11F970/1F570068BBEF11F181E0A0606E11F970.roa sbgp-ipAddrBlock: critical IPv4: 220.158.150.0/23 IPv6: 2402:7920::/32 Signature Algorithm: sha256WithRSAEncryption b1:33:6c:1a:3d:a9:62:7b:6b:90:68:86:e4:05:14:45:e3:13: 18:b6:46:0c:29:09:f8:f3:e9:33:9f:84:6c:7a:c6:70:27:2c: 08:06:8c:9c:b5:35:fd:ea:4d:ec:49:05:8e:40:3b:1d:b9:75: 31:84:8b:79:59:2e:43:bc:8c:dd:0c:da:b8:10:b6:e8:6a:36: a9:2d:c2:d7:28:64:eb:e8:33:f8:37:37:b3:10:01:3d:43:fd: e6:77:f9:8e:27:b2:56:ef:19:7f:32:4d:ba:db:f0:c1:6b:72: 4b:6e:94:44:68:3e:14:97:8b:f9:42:d9:c0:eb:e4:1b:63:41: e1:04:27:ab:c1:a2:71:63:73:41:87:d3:fe:f3:d1:7c:9f:d6: f7:ec:ea:d0:e0:4f:0f:88:27:aa:3c:67:70:26:ef:c7:27:58: d9:d2:2c:c7:74:f0:29:ff:7a:6a:71:e5:10:d5:60:f1:88:e0: d9:11:51:3d:a1:7b:84:0e:7f:60:0f:f3:ae:cc:87:cc:be:51: ff:94:ac:2f:ab:a0:4e:28:e8:66:2c:35:e7:5a:01:40:5c:d2: ab:28:78:57:88:c9:83:b8:2d:c2:9e:c4:87:65:8b:ae:77:c4: 74:99:9d:af:cb:0f:46:e9:1c:1c:c6:1d:c3:16:65:fa:10:49: 0b:d2:8b:b7 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Q0EyMDExMC8GA1UEBRMoRjdENDlDMTZENjc5QkM0MDVEOEZBRjlEQTAxRkNGQURB Q0I5OURCODAeFw0yNjA5MjkxMDE4MzJaFw0yNzEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYmI5MDc4LWExMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCd9x2fzYVg+REza3h7PRLx7UYAiVY5NbSJE6RfQ4xyi+wRBedCQm3mZrviQZW9 h4cyYuYk5Nksmw4AKRMbXdy9X5tkq0MSllPEUI1mtrEd0VA17v7L0Xb+7MWw3dzC OazUvHYmDM6f4oL1DLezEknDN04u/F8oXfz3YG2eCFR4kru5WX24SNlh0ojWKI4Y OaWEwSGIwJvpPx0yubDj4L2Fb7rguP5SWSba+OHeIUACgscQaOIMtGMAJwUanIkw IFmMg8OK/j55YjrpenOD/uXOnIQryaFATlacIxadqF14W1SyYDfollQyyGlovfH9 GyuHuKtz25La7xACTtk3MV8bAgMBAAGjggJvMIICazAdBgNVHQ4EFgQULN+AXY2S vwVxC++ONsM4NZCo8aQwHwYDVR0jBBgwFoAU99ScFtZ5vEBdj6+doB/Pray5nbgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDQTIwL0FGRTdCQzQyQkJF QzExRjFCMUJFMjVENjZDMTFGOTcwLzk5U2NGdFo1dkVCZGo2LWRvQl9QcmF5NW5i Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOTlTY0Z0WjV2RUJkajYtZG9CX1ByYXk1bmJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0EyMC9BRkU3QkM0MkJCRUMxMUYxQjFCRTI1RDY2QzExRjk3MC8xRjU3MDA2OEJC RUYxMUYxODFFMEEwNjA2RTExRjk3MC5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE AgABMAYDBAHcnpYwDQQCAAIwBwMFACQCeSAwDQYJKoZIhvcNAQELBQADggEBALEz bBo9qWJ7a5BohuQFFEXjExi2RgwpCfjz6TOfhGx6xnAnLAgGjJy1Nf3qTexJBY5A Ox25dTGEi3lZLkO8jN0M2rgQtuhqNqktwtcoZOvoM/g3N7MQAT1D/eZ3+Y4nslbv GX8yTbrb8MFrcktulERoPhSXi/lC2cDr5BtjQeEEJ6vBonFjc0GH0/7z0Xyf1vfs 6tDgTw+IJ6o8Z3Am78cnWNnSLMd08Cn/empx5RDVYPGI4NkRUT2he4QOf2AP867M h8y+Uf+UrC+roE4o6GYsNedaAUBc0qsoeFeIyYO4LcKexIdli653xHSZna/LD0bp HBzGHcMWZfoQSQvSi7c= -----END CERTIFICATE-----Generated at Mon Oct 12 21:54:41 2026 by rpki-client