$ rpki-client -vvvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7BD18B9EA69D11ED970A2E1EC4F9AE02.roa File: 7BD18B9EA69D11ED970A2E1EC4F9AE02.roa (raw, json) Hash identifier: 9kLyz41+LyEUa7Qe6tisfAGLex0hD3yPOszPhWqjqtA= Subject key identifier: E5:0B:00:B8:C7:A4:96:DF:A0:BE:94:11:AA:E4:02:AB:69:00:FD:9E Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Certificate serial: 07CA Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7BD18B9EA69D11ED970A2E1EC4F9AE02.roa Signing time: Wed 30 Sep 2026 22:42:43 +0000 ROA not before: Wed 30 Sep 2026 22:42:43 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 132264 IP address blocks: 131.203.8.0/21 maxlen: 24 131.203.16.0/22 maxlen: 24 131.203.20.0/22 maxlen: 24 131.203.24.0/22 maxlen: 24 131.203.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 21:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1994 (0x7ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Validity Not Before: Sep 30 22:42:43 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd9063-526c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e5:8f:11:18:ef:34:b5:97:32:45:d7:60:b4: 33:04:1b:96:99:48:74:31:57:b4:59:0d:3e:68:61: 92:22:df:7c:35:0a:7b:5b:1b:e3:e7:b2:00:5a:e0: 7d:3a:fd:d0:51:2a:87:7d:d8:38:6c:f8:74:b2:b5: 42:97:76:a0:23:53:9d:d0:ec:65:55:61:fe:13:3b: 6b:85:84:0a:37:f3:01:ba:e5:5c:e1:69:a6:2f:1b: 0b:3a:1a:58:4d:7f:97:ed:46:c5:6d:21:6a:ad:88: 2b:f6:4b:cf:83:67:ce:4d:7d:39:d0:0e:67:36:6a: 12:23:44:e3:59:43:51:72:0e:ed:06:79:8a:14:77: 03:04:e5:c8:b1:9c:53:d7:ee:c2:9f:2f:95:f5:c2: f7:d9:1a:9c:84:95:62:da:ea:fc:07:2b:5b:4c:6a: 07:ae:82:08:ee:74:24:5a:82:47:2c:ef:3e:08:f0: c0:ff:e7:69:33:f3:6e:6d:ff:ec:a3:d4:76:0e:e9: 89:81:4f:c9:68:fc:40:4b:08:97:e3:5e:e3:fe:40: 01:19:64:c6:12:01:ce:fc:d5:4e:ce:9f:e7:ad:67: 58:89:68:8b:33:a9:1c:00:f8:05:eb:99:ab:b8:c4: 1a:53:f4:3e:fd:bc:ff:5d:80:53:33:e2:51:14:af: b2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0B:00:B8:C7:A4:96:DF:A0:BE:94:11:AA:E4:02:AB:69:00:FD:9E X509v3 Authority Key Identifier: keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7BD18B9EA69D11ED970A2E1EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 131.203.8.0-131.203.27.255 131.203.160.0/21 Signature Algorithm: sha256WithRSAEncryption 57:a5:61:71:d1:56:e8:ff:df:26:f5:5d:63:bf:8c:de:a1:1a: 15:74:81:ee:ab:49:91:dc:a7:96:4b:b3:ce:46:b6:5f:b0:d2: 8c:84:47:1b:1e:8e:ab:51:b0:0c:e4:48:5d:c5:ec:51:a9:6f: 65:1c:62:8b:c8:66:0a:1b:e4:6f:d6:53:c4:e2:f0:56:78:40: 55:ed:87:bd:86:11:b8:36:89:a1:13:29:ff:bb:73:f6:53:cd: 02:03:bc:26:05:09:e6:9b:20:24:b7:1c:15:3b:90:37:3c:a7: ac:38:8f:23:ec:05:01:54:90:cc:10:1e:e4:5b:de:a0:cc:49: 84:59:e7:d5:87:a6:c0:4d:e1:c0:ca:b9:8b:a5:48:6d:ba:70: 10:d3:96:61:0e:a5:2d:44:59:f9:b2:9d:4d:7e:33:4f:2a:ea: 5b:f4:93:d1:23:f8:92:2a:7a:29:8d:58:22:e1:9b:ec:91:07: 95:f6:be:08:01:2d:3a:0a:4d:4d:15:26:79:da:de:91:12:2c: 26:ba:ed:e9:70:76:6f:35:81:aa:e4:4d:e4:10:94:24:bc:57: ba:1f:83:8d:00:6f:28:e5:4f:b7:4a:c8:f1:60:cf:9d:a7:86: cd:ec:5a:71:3e:80:45:24:2e:78:ec:a3:06:ea:70:a8:ee:fb: e7:54:5f:7d -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICB8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDIxOEE4QUEwNTAyNjdCMDgwNUUzRkRDOEE5MzlCRjhG QkNCMDAxMDEwHhcNMjYwOTMwMjI0MjQzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkOTA2My01MjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAluWPERjvNLWXMkXXYLQzBBuWmUh0MVe0WQ0+aGGSIt98NQp7Wxvj57IAWuB9 Ov3QUSqHfdg4bPh0srVCl3agI1Od0OxlVWH+EztrhYQKN/MBuuVc4WmmLxsLOhpY TX+X7UbFbSFqrYgr9kvPg2fOTX050A5nNmoSI0TjWUNRcg7tBnmKFHcDBOXIsZxT 1+7Cny+V9cL32RqchJVi2ur8BytbTGoHroII7nQkWoJHLO8+CPDA/+dpM/Nubf/s o9R2DumJgU/JaPxASwiX417j/kABGWTGEgHO/NVOzp/nrWdYiWiLM6kcAPgF65mr uMQaU/Q+/bz/XYBTM+JRFK+y+wIDAQABo4ICbjCCAmowHQYDVR0OBBYEFOULALjH pJbfoL6UEarkAqtpAP2eMB8GA1UdIwQYMBaAFCGKiqBQJnsIBeP9yKk5v4+8sAEB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84NjU4RTQ2Njg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3Z0Y0XzNJcVRtX2o3eXdB UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lZcUtvRkFtZXdnRjRfM0lxVG1fajd5d0FRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvODY1OEU0NjY4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvN0JEMThCOUVB NjlEMTFFRDk3MEEyRTFFQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBAODywgDBAKDyxgDBAODy6AwDQYJKoZIhvcNAQELBQADggEBAFel YXHRVuj/3yb1XWO/jN6hGhV0ge6rSZHcp5ZLs85Gtl+w0oyERxsejqtRsAzkSF3F 7FGpb2UcYovIZgob5G/WU8Ti8FZ4QFXth72GEbg2iaETKf+7c/ZTzQIDvCYFCeab ICS3HBU7kDc8p6w4jyPsBQFUkMwQHuRb3qDMSYRZ59WHpsBN4cDKuYulSG26cBDT lmEOpS1EWfmynU1+M08q6lv0k9Ej+JIqeimNWCLhm+yRB5X2vggBLToKTU0VJnna 3pESLCa67elwdm81garkTeQQlCS8V7ofg40AbyjlT7dKyPFgz52nhs3sWnE+gEUk LnjsowbqcKju++dUX30= -----END CERTIFICATE-----Generated at Tue Oct 6 05:07:17 2026 by rpki-client