$ rpki-client -vvf rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/94BF06A8F31D11EA8D62F57EC4F9AE02.roa File: 94BF06A8F31D11EA8D62F57EC4F9AE02.roa (raw, json) Hash identifier: y9BTyvgaU1VbrP+/g6c74FO/jdmkWItE5o2GWg/yoeo= Subject key identifier: B2:51:1D:60:29:44:71:7F:E5:BF:AA:6C:EE:45:19:73:F5:7E:96:88 Certificate issuer: /CN=A91717C0/serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B Certificate serial: 08A6 Authority key identifier: F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/94BF06A8F31D11EA8D62F57EC4F9AE02.roa Signing time: Fri 26 Jun 2026 21:25:05 +0000 ROA not before: Fri 26 Jun 2026 21:25:05 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 9241 IP address blocks: 202.170.32.0/20 maxlen: 20 202.170.33.0/24 maxlen: 24 202.170.36.0/24 maxlen: 24 202.170.38.0/24 maxlen: 24 202.170.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2214 (0x8a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91717C0, serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B Validity Not Before: Jun 26 21:25:05 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a3eee31-e4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3c:c0:b2:5b:3e:60:be:c1:56:b3:a1:f1:f9: 13:f6:fd:79:08:55:8d:5a:6d:e1:1c:94:5e:20:01: 9b:0d:ee:b0:2d:06:95:bc:b8:be:68:26:49:3c:80: 1b:f7:8d:8b:62:88:de:3e:6b:69:5d:5d:6f:b4:d0: ba:34:ad:a7:7c:4c:02:4b:0e:14:72:6e:2e:8b:d0: ef:4b:d4:46:c4:6a:97:f2:82:bc:cb:5d:d6:18:d9: 3b:c8:c3:80:13:83:f3:7d:70:99:d0:23:e6:c9:87: 8e:fa:8b:4c:9c:8e:02:6e:6c:32:a3:82:1d:ef:86: 9e:80:d6:1a:ae:2e:98:3b:d0:16:3a:b1:96:70:21: 16:0d:7f:f7:ed:d9:b6:ae:2b:54:89:99:e4:a7:ba: f8:23:7b:5a:47:eb:86:47:e8:f3:0d:d3:99:5a:7c: ec:d1:29:4d:93:11:e8:24:89:2e:2d:29:c4:8a:e9: e0:b4:13:19:24:a4:fb:4c:ce:fa:43:73:76:8a:ef: 35:30:e6:bb:51:1d:fb:ec:3d:5a:f2:84:ea:64:3c: ef:32:18:5b:90:61:e0:5b:c4:1f:a4:3a:25:4f:fc: 87:ad:17:cb:82:8b:7f:9c:88:d9:b5:08:03:c1:48: 41:c8:4d:0b:9e:f5:d5:ca:9f:35:3d:28:ed:d1:8f: 2c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:51:1D:60:29:44:71:7F:E5:BF:AA:6C:EE:45:19:73:F5:7E:96:88 X509v3 Authority Key Identifier: keyid:F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/94BF06A8F31D11EA8D62F57EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.170.32.0/20 Signature Algorithm: sha256WithRSAEncryption c2:85:68:47:47:cc:bb:18:89:25:0f:cb:32:18:50:94:21:90: 40:c7:ad:b2:20:c9:c6:fd:ff:e4:ad:d5:c4:36:52:da:e1:0f: 4d:2d:17:41:b7:64:27:36:73:e7:ae:fc:85:ea:31:5a:1b:19: 46:d4:ea:96:a0:41:7b:d9:05:5c:c7:b4:ee:f2:92:3a:5d:57: 6d:44:05:a8:54:a7:a3:7b:33:3d:92:89:79:2e:21:39:c1:e9: 70:6a:90:cc:88:4f:53:21:e8:f2:f1:60:37:3b:2b:2e:2d:ec: cb:29:23:03:e4:b6:49:40:ce:b7:6a:5a:95:c9:b0:77:f5:70: bf:9b:8c:71:c3:a6:db:85:a0:4e:36:4a:a8:d9:44:e5:78:58: a2:73:50:84:be:63:72:53:9b:dd:0a:f1:1a:0c:e9:0b:fa:dc: e9:f5:70:17:6a:e7:50:71:33:5c:23:3f:bf:39:e9:33:67:55: de:53:50:20:0e:a1:ad:de:0c:fe:29:39:f0:6d:13:f9:2c:27: 53:9f:6a:45:db:c0:ce:1b:b4:aa:3c:0c:fc:a1:3a:7d:2c:59: 55:f1:7c:46:8a:9b:8c:a0:fa:5f:90:6a:b5:b5:bf:92:54:91: 17:ad:e1:0b:02:96:78:6a:c8:54:0e:d9:ab:92:bd:8c:ab:e1: 6a:e9:61:75 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3QzAxMTAvBgNVBAUTKEY3NTE0M0FCNUJFODMwQkU5M0JDRDc3NkQzMzJCMEZE NUI3ODdFM0IwHhcNMjYwNjI2MjEyNTA1WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTNlZWUzMS1lNGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6DzAsls+YL7BVrOh8fkT9v15CFWNWm3hHJReIAGbDe6wLQaVvLi+aCZJPIAb 942LYojePmtpXV1vtNC6NK2nfEwCSw4Ucm4ui9DvS9RGxGqX8oK8y13WGNk7yMOA E4PzfXCZ0CPmyYeO+otMnI4Cbmwyo4Id74aegNYari6YO9AWOrGWcCEWDX/37dm2 ritUiZnkp7r4I3taR+uGR+jzDdOZWnzs0SlNkxHoJIkuLSnEiungtBMZJKT7TM76 Q3N2iu81MOa7UR377D1a8oTqZDzvMhhbkGHgW8QfpDolT/yHrRfLgot/nIjZtQgD wUhByE0LnvXVyp81PSjt0Y8s3QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLJRHWAp RHF/5b+qbO5FGXP1fpaIMB8GA1UdIwQYMBaAFPdRQ6tb6DC+k7zXdtMysP1beH47 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTdDMC8wMThFQkU1OEYz MUExMUVBQkMwMENDNUNDNEY5QUUwMi85MUZEcTF2b01MNlR2TmQyMHpLd19WdDRm anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxRkRxMXZvTUw2VHZOZDIwekt3X1Z0NGZqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzE3QzAvMDE4RUJFNThGMzFBMTFFQUJDMDBDQzVDQzRGOUFFMDIvOTRCRjA2QThG MzFEMTFFQThENjJGNTdFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEyqogMA0GCSqGSIb3DQEBCwUAA4IBAQDChWhHR8y7GIklD8syGFCU IZBAx62yIMnG/f/krdXENlLa4Q9NLRdBt2QnNnPnrvyF6jFaGxlG1OqWoEF72QVc x7Tu8pI6XVdtRAWoVKejezM9kol5LiE5welwapDMiE9TIejy8WA3OysuLezLKSMD 5LZJQM63alqVybB39XC/m4xxw6bbhaBONkqo2UTleFiic1CEvmNyU5vdCvEaDOkL +tzp9XAXaudQcTNcIz+/OekzZ1XeU1AgDqGt3gz+KTnwbRP5LCdTn2pF28DOG7Sq PAz8oTp9LFlV8XxGipuMoPpfkGq1tb+SVJEXreELApZ4ashUDtmrkr2Mq+Fq6WF1 -----END CERTIFICATE-----Generated at Fri Jul 24 21:05:47 2026 by rpki-client