$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/62D956E4706B11F1BCF9211474A30FBC.roa File: 62D956E4706B11F1BCF9211474A30FBC.roa (raw, json) Hash identifier: qIR0Cnf/Tw3jmEWlP5g5lhVl5hdbItrkQSAnuy1RWvs= Subject key identifier: 35:F3:90:B6:DE:6C:38:12:9A:0E:3E:BE:4B:4E:D4:AB:47:C2:E8:88 Certificate issuer: /CN=A91FEEA9/serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8 Certificate serial: 3569 Authority key identifier: 29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/62D956E4706B11F1BCF9211474A30FBC.roa Signing time: Thu 25 Jun 2026 08:06:39 +0000 ROA not before: Thu 25 Jun 2026 08:06:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134375 IP address blocks: 119.252.192.0/22 maxlen: 24 119.252.196.0/22 maxlen: 24 119.252.200.0/21 maxlen: 24 119.252.210.0/23 maxlen: 24 119.252.216.0/22 maxlen: 24 119.252.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13673 (0x3569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEEA9, serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8 Validity Not Before: Jun 25 08:06:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a3ce18f-b295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e7:45:95:18:a8:e6:81:88:40:d1:f0:d9:57: 26:bf:f2:93:ce:1a:8b:37:cc:65:64:47:0f:02:34: e2:5d:03:f4:7c:1a:cd:68:42:34:1a:8b:b8:5d:44: a3:bf:ad:f2:78:8b:81:8d:a2:c0:2c:ca:69:b4:df: 55:9d:78:e3:70:01:ce:be:80:b4:da:2c:6f:42:f8: 68:0d:f2:cc:8d:9b:01:fa:46:1f:b2:dd:0e:a3:7d: 4c:a5:3a:39:c5:bd:79:7c:99:5b:04:e3:d6:56:ab: 89:28:a5:ed:5d:53:a5:6c:67:9f:ad:69:fc:1f:45: b2:32:7e:fd:8c:02:a5:d7:8e:3e:e3:ae:de:48:02: b0:5a:62:4f:3b:7f:ee:f3:76:3e:54:be:48:c5:b0: f4:21:09:6e:57:4b:74:93:d5:78:62:aa:03:45:16: dc:d9:cb:5a:e4:de:6c:d6:c5:60:e7:5a:a7:3e:7d: b9:39:77:62:a3:c7:59:44:64:65:89:9f:34:d1:06: 3a:fa:9e:4b:c2:75:23:e2:d0:ad:b0:e5:15:7c:da: ae:30:a4:0d:8d:14:d0:b8:78:48:6f:93:0b:ba:76: 32:68:4b:5e:3c:25:76:c9:1a:3e:cf:07:76:68:5b: d2:ec:66:f5:5f:ce:c5:fb:15:a0:52:76:b5:a3:21: 61:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F3:90:B6:DE:6C:38:12:9A:0E:3E:BE:4B:4E:D4:AB:47:C2:E8:88 X509v3 Authority Key Identifier: keyid:29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/62D956E4706B11F1BCF9211474A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 119.252.192.0/20 119.252.210.0/23 119.252.216.0/21 Signature Algorithm: sha256WithRSAEncryption 92:41:6b:8f:d5:0f:a5:ba:e1:c4:4d:81:98:62:9a:c6:e4:31: 91:1f:3a:24:8a:2a:7c:b1:10:de:83:64:30:60:17:24:63:25: af:1b:9a:ef:35:de:17:cb:e0:33:69:ad:67:bf:f4:9e:fd:18: 63:9d:ee:e5:e2:47:34:f5:9a:7e:e2:7f:7f:d6:ae:bd:1e:d9: 26:a2:d6:71:1a:e2:ce:62:69:3d:1e:d0:7f:1b:0e:69:a3:40: 06:b7:7e:db:41:65:07:ec:a2:13:b1:a6:57:d5:5e:25:65:85: 98:23:89:da:f6:17:de:c4:0a:a8:97:18:79:a7:90:83:98:36: 13:b9:05:cf:79:74:79:7e:f6:54:76:d7:bb:d9:2f:05:7b:dc: d7:a5:7e:5b:07:d0:fb:59:54:44:3b:d9:1f:89:77:13:9c:62: 87:4a:71:5a:dd:09:96:d0:51:52:74:1b:d8:63:d6:1c:78:72: 46:08:7b:36:22:c8:b9:42:6f:77:30:23:9a:7a:c3:5d:94:a5: ee:27:6b:a9:26:60:15:60:1a:e9:3b:51:4c:ac:59:5c:7e:ce: a4:ff:26:c1:2a:84:3a:95:ef:59:61:34:f0:d2:e4:c7:cc:b0: 4b:50:8c:17:e8:ea:1d:f0:4e:e1:76:0c:15:33:a9:e5:fd:c7: c3:e2:1a:24 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICNWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFQTkxMTAvBgNVBAUTKDI5NDFDNzE2MUVENEEyRTA5QkI5MUNBQkM0NDNDOEND QkMwMzJFRDgwHhcNMjYwNjI1MDgwNjM5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTNjZTE4Zi1iMjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAledFlRio5oGIQNHw2Vcmv/KTzhqLN8xlZEcPAjTiXQP0fBrNaEI0Gou4XUSj v63yeIuBjaLALMpptN9VnXjjcAHOvoC02ixvQvhoDfLMjZsB+kYfst0Oo31MpTo5 xb15fJlbBOPWVquJKKXtXVOlbGefrWn8H0WyMn79jAKl144+467eSAKwWmJPO3/u 83Y+VL5IxbD0IQluV0t0k9V4YqoDRRbc2cta5N5s1sVg51qnPn25OXdio8dZRGRl iZ800QY6+p5LwnUj4tCtsOUVfNquMKQNjRTQuHhIb5MLunYyaEtePCV2yRo+zwd2 aFvS7Gb1X87F+xWgUna1oyFh/QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDXzkLbe bDgSmg4+vktO1KtHwuiIMB8GA1UdIwQYMBaAFClBxxYe1KLgm7kcq8RDyMy8Ay7Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUVBOS9DRUQwQTlFNjFE OTcxMUUyQkYzRTgxODEwOEIwMkNEMi9LVUhIRmg3VW91Q2J1UnlyeEVQSXpMd0RM dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tVSEhGaDdVb3VDYnVSeXJ4RVBJekx3REx0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkVFQTkvQ0VEMEE5RTYxRDk3MTFFMkJGM0U4MTgxMDhCMDJDRDIvNjJEOTU2RTQ3 MDZCMTFGMUJDRjkyMTE0NzRBMzBGQkMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQEd/zAAwQBd/zSAwQDd/zYMA0GCSqGSIb3DQEBCwUAA4IBAQCSQWuP 1Q+luuHETYGYYprG5DGRHzokiip8sRDeg2QwYBckYyWvG5rvNd4Xy+Azaa1nv/Se /Rhjne7l4kc09Zp+4n9/1q69HtkmotZxGuLOYmk9HtB/Gw5po0AGt37bQWUH7KIT saZX1V4lZYWYI4na9hfexAqolxh5p5CDmDYTuQXPeXR5fvZUdte72S8Fe9zXpX5b B9D7WVREO9kfiXcTnGKHSnFa3QmW0FFSdBvYY9YceHJGCHs2Isi5Qm93MCOaesNd lKXuJ2upJmAVYBrpO1FMrFlcfs6k/ybBKoQ6le9ZYTTw0uTHzLBLUIwX6Ood8E7h dgwVM6nl/cfD4hok -----END CERTIFICATE-----Generated at Tue Jul 21 18:14:16 2026 by rpki-client