$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/62D956E4706B11F1BCF9211474A30FBC.roa File: 62D956E4706B11F1BCF9211474A30FBC.roa (raw, json) Hash identifier: n/YBf6A1YCN/tI4RhM9WC/Th7RlT/bwkHDTIMVsln80= Subject key identifier: B3:12:AC:56:27:64:9B:43:18:34:CD:E6:B0:56:60:7D:57:3E:C9:40 Certificate issuer: /CN=A91FEEA9/serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8 Certificate serial: 35A3 Authority key identifier: 29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/62D956E4706B11F1BCF9211474A30FBC.roa Signing time: Mon 05 Oct 2026 05:51:25 +0000 ROA not before: Mon 05 Oct 2026 05:51:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134375 IP address blocks: 119.252.192.0/22 maxlen: 24 119.252.196.0/22 maxlen: 24 119.252.200.0/21 maxlen: 24 119.252.210.0/23 maxlen: 24 119.252.212.0/23 maxlen: 24 119.252.216.0/22 maxlen: 24 119.252.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 14:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13731 (0x35a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEEA9, serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8 Validity Not Before: Oct 5 05:51:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ac33add-5079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:91:35:12:15:2f:2f:2e:22:25:ce:2c:5c:f0: ef:2b:c6:8f:ba:45:24:ed:a3:11:83:66:1e:f5:32: 9b:5d:50:73:e7:98:3c:7f:43:55:b4:61:f1:f0:14: 8d:a6:d1:15:ba:a5:4d:67:65:92:73:fc:42:12:74: aa:12:89:87:83:92:a3:6f:ec:fd:5b:1a:cc:02:7d: 06:44:94:83:ca:a1:af:88:a1:87:f1:2f:85:8a:80: e7:c1:f7:15:aa:3a:7e:56:99:5c:ad:bc:e9:cf:3f: 45:80:d0:e9:4c:bc:87:2e:10:36:34:d8:1d:8e:14: be:87:65:24:5c:92:0a:9b:fb:24:24:53:50:3c:e7: 1d:4f:68:b5:64:7e:a5:76:27:59:b9:af:b2:74:30: cb:57:5f:08:36:6e:99:d7:b3:4e:18:35:93:ae:c8: 49:d3:db:cb:b3:d7:a0:49:cc:d7:4f:29:9b:4b:81: 8c:f7:6d:0f:01:b9:10:d0:45:34:62:a8:da:41:cf: 7c:ca:f4:9c:17:31:af:93:68:40:5a:f2:0a:45:f6: ff:2f:d3:1e:8f:c8:5c:7e:9f:59:d6:f9:33:d0:60: 77:e9:08:48:55:48:aa:54:c9:7f:41:63:1f:e3:28: 10:47:22:2e:e1:cd:b0:71:1d:25:d9:c1:af:b9:fe: 07:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:12:AC:56:27:64:9B:43:18:34:CD:E6:B0:56:60:7D:57:3E:C9:40 X509v3 Authority Key Identifier: keyid:29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/62D956E4706B11F1BCF9211474A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 119.252.192.0/20 119.252.210.0-119.252.213.255 119.252.216.0/21 Signature Algorithm: sha256WithRSAEncryption b2:35:d2:f5:34:36:10:dc:76:2c:17:9f:0b:de:7a:52:38:c2: 75:b0:38:a5:70:59:45:6d:88:32:12:a9:5e:71:9c:b6:70:33: a3:1d:35:b1:4c:be:ec:0e:16:f0:d3:0d:93:da:e3:d8:8d:ab: 2c:8b:e9:93:d1:4c:4e:5a:88:17:88:86:cb:27:31:b5:9c:d6: 78:30:80:f7:6d:ae:d6:a1:fe:4e:cd:51:21:f1:55:62:f2:39: 22:50:47:d2:b7:0e:31:e8:c6:fb:1b:ab:5a:1d:1e:ef:9c:67: bc:60:30:51:ec:79:e4:fd:ff:51:a2:35:13:d1:a0:f3:35:f9: b2:45:55:4b:3d:e4:b1:3a:91:e7:79:d8:14:ac:6d:7b:36:e5: d8:4e:b4:9e:7a:01:0b:80:cf:b1:81:7f:10:32:7b:6d:d0:c6: af:c1:5f:96:07:b2:10:7c:40:44:27:9e:4b:b1:44:d1:c6:89: 9d:d7:3e:de:9b:98:08:31:46:68:50:8f:b2:05:39:54:66:63: 3f:7e:2b:ae:5e:49:1d:52:aa:dc:f4:e9:9f:3f:bf:5f:22:aa: 0a:c4:91:59:95:06:24:c0:b3:c2:46:8b:ae:b9:e2:28:35:35: 79:ae:e9:1d:2a:0a:b7:2a:86:6c:14:09:94:c8:37:09:a4:96: cd:15:00:ee -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICNaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFQTkxMTAvBgNVBAUTKDI5NDFDNzE2MUVENEEyRTA5QkI5MUNBQkM0NDNDOEND QkMwMzJFRDgwHhcNMjYxMDA1MDU1MTI1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMzM2FkZC01MDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ZE1EhUvLy4iJc4sXPDvK8aPukUk7aMRg2Ye9TKbXVBz55g8f0NVtGHx8BSN ptEVuqVNZ2WSc/xCEnSqEomHg5Kjb+z9WxrMAn0GRJSDyqGviKGH8S+FioDnwfcV qjp+Vplcrbzpzz9FgNDpTLyHLhA2NNgdjhS+h2UkXJIKm/skJFNQPOcdT2i1ZH6l didZua+ydDDLV18INm6Z17NOGDWTrshJ09vLs9egSczXTymbS4GM920PAbkQ0EU0 YqjaQc98yvScFzGvk2hAWvIKRfb/L9Mej8hcfp9Z1vkz0GB36QhIVUiqVMl/QWMf 4ygQRyIu4c2wcR0l2cGvuf4HBwIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFLMSrFYn ZJtDGDTN5rBWYH1XPslAMB8GA1UdIwQYMBaAFClBxxYe1KLgm7kcq8RDyMy8Ay7Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUVBOS9DRUQwQTlFNjFE OTcxMUUyQkYzRTgxODEwOEIwMkNEMi9LVUhIRmg3VW91Q2J1UnlyeEVQSXpMd0RM dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tVSEhGaDdVb3VDYnVSeXJ4RVBJekx3REx0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkVFQTkvQ0VEMEE5RTYxRDk3MTFFMkJGM0U4MTgxMDhCMDJDRDIvNjJEOTU2RTQ3 MDZCMTFGMUJDRjkyMTE0NzRBMzBGQkMucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaAwQEd/zAMAwDBAF3/NIDBAF3/NQDBAN3/NgwDQYJKoZIhvcNAQELBQAD ggEBALI10vU0NhDcdiwXnwveelI4wnWwOKVwWUVtiDISqV5xnLZwM6MdNbFMvuwO FvDTDZPa49iNqyyL6ZPRTE5aiBeIhssnMbWc1ngwgPdtrtah/k7NUSHxVWLyOSJQ R9K3DjHoxvsbq1odHu+cZ7xgMFHseeT9/1GiNRPRoPM1+bJFVUs95LE6ked52BSs bXs25dhOtJ56AQuAz7GBfxAye23Qxq/BX5YHshB8QEQnnkuxRNHGiZ3XPt6bmAgx RmhQj7IFOVRmYz9+K65eSR1Sqtz06Z8/v18iqgrEkVmVBiTAs8JGi6654ig1NXmu 6R0qCrcqhmwUCZTINwmkls0VAO4= -----END CERTIFICATE-----Generated at Fri Oct 23 15:44:17 2026 by rpki-client