$ rpki-client -vvvf rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/BD5B75800C4E11EF85EEFC1FC4F9AE02.roa File: BD5B75800C4E11EF85EEFC1FC4F9AE02.roa (raw, json) Hash identifier: NazWi/gFjQ3BO/XyJl+NNSElSeaXtbsVIYSSDzzt8Y8= Subject key identifier: DE:BA:86:B6:29:B8:DD:62:E8:8D:FD:9A:30:37:17:32:A4:EA:03:FE Certificate issuer: /CN=A91993A0/serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D Certificate serial: 020D Authority key identifier: BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/BD5B75800C4E11EF85EEFC1FC4F9AE02.roa Signing time: Wed 23 Sep 2026 03:53:34 +0000 ROA not before: Wed 23 Sep 2026 03:53:34 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 3491 IP address blocks: 202.70.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 03:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91993A0, serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D Validity Not Before: Sep 23 03:53:34 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab34d3e-5cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:64:ef:9e:a7:e8:9e:44:a4:d5:22:d0:cb:e0: 83:f5:47:d4:81:e0:05:b5:28:e2:48:2d:25:55:37: b5:52:06:6f:51:49:0b:94:d7:3a:08:6c:b4:47:24: 37:96:59:63:06:0d:85:45:a0:b2:62:fb:a6:7d:cd: 17:46:30:41:21:2a:ae:1e:d0:3e:67:7d:da:31:bf: 0b:74:04:0a:a3:53:27:80:df:8f:14:a0:fe:c8:39: 11:8b:d9:30:f9:65:0c:ef:a0:7a:e1:80:c8:62:54: 63:13:e7:57:ca:80:72:74:bb:a2:2a:16:65:51:c4: 61:24:f9:2c:be:86:35:73:86:4d:a3:6c:46:78:35: ad:c1:5f:49:8b:17:fb:c3:6e:29:ad:e2:fe:d1:9c: 7c:12:b1:8d:2f:0e:2c:76:ec:84:ae:47:69:f6:46: c0:44:e7:5a:0c:9d:7b:15:1d:eb:55:74:8e:69:74: 42:f6:d3:fc:50:4e:08:9c:70:91:63:2a:d7:38:f9: 99:3e:e7:96:19:86:d7:28:9a:3e:85:e9:41:bd:6e: 79:cd:df:55:09:f2:cd:12:a3:6e:a7:b8:63:f0:3a: fd:d1:4c:3f:1e:b8:77:ff:6a:79:ab:63:52:86:ab: 61:cf:a3:2d:49:91:a8:89:02:2f:59:da:49:dc:e6: b1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BA:86:B6:29:B8:DD:62:E8:8D:FD:9A:30:37:17:32:A4:EA:03:FE X509v3 Authority Key Identifier: keyid:BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/BD5B75800C4E11EF85EEFC1FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.70.160.0/20 Signature Algorithm: sha256WithRSAEncryption 5b:a1:96:d6:4a:e5:d9:91:c4:87:b7:f2:cc:36:db:9a:a8:e9: 0a:47:be:90:96:30:fe:bd:30:79:58:a7:c0:59:31:31:bd:14: a5:6e:6b:cf:d4:02:f9:a3:f6:d6:0a:09:41:f6:56:67:94:b0: b2:4b:47:28:f6:b8:01:a2:e2:44:a9:e6:91:6f:2a:0c:84:25: 7b:cc:4a:d9:59:9a:cc:0b:19:e5:be:1c:d4:be:ea:34:c6:89: 46:50:61:c8:63:1b:1f:e7:76:34:a9:3e:99:06:00:03:57:36: fe:8e:30:f4:e8:f4:40:ae:ed:dd:c4:c8:ed:aa:49:f9:6e:7f: c1:a5:60:bd:9f:21:7b:e8:61:82:bf:96:f0:fe:17:26:71:92: b5:04:38:49:9b:bb:bd:19:9e:d2:be:a2:e4:77:e1:c7:10:d4: 87:31:34:f9:e9:3b:1d:94:88:1b:51:c4:b7:6b:32:0e:8d:c1: e6:3a:f5:c2:99:41:b5:88:a3:fa:f7:d1:94:9a:be:b0:38:3d: eb:24:bd:21:ad:bb:16:b7:8b:20:d0:53:d7:f5:4c:bf:0f:8f: 5b:16:4a:90:a8:4e:94:23:70:5a:df:d3:4d:5b:92:e3:b2:ed: 70:c0:82:8e:7f:54:e5:07:0e:13:23:a5:bb:75:be:22:f3:d6: ad:ae:e9:59 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkzQTAxMTAvBgNVBAUTKEJDQjdDRjQ0MzBCQjk4RUEwNDg1MUMzNDA3MjZFNTg4 MTUwRTEzOUQwHhcNMjYwOTIzMDM1MzM0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIzNGQzZS01Y2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumTvnqfonkSk1SLQy+CD9UfUgeAFtSjiSC0lVTe1UgZvUUkLlNc6CGy0RyQ3 llljBg2FRaCyYvumfc0XRjBBISquHtA+Z33aMb8LdAQKo1MngN+PFKD+yDkRi9kw +WUM76B64YDIYlRjE+dXyoBydLuiKhZlUcRhJPksvoY1c4ZNo2xGeDWtwV9Jixf7 w24preL+0Zx8ErGNLw4sduyErkdp9kbAROdaDJ17FR3rVXSOaXRC9tP8UE4InHCR YyrXOPmZPueWGYbXKJo+helBvW55zd9VCfLNEqNup7hj8Dr90Uw/Hrh3/2p5q2NS hqthz6MtSZGoiQIvWdpJ3OaxHwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN66hrYp uN1i6I39mjA3FzKk6gP+MB8GA1UdIwQYMBaAFLy3z0Qwu5jqBIUcNAcm5YgVDhOd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTNBMC9BNTk1NUU1NjBD NDUxMUVGOUU3RTA1MURDNEY5QUUwMi92TGZQUkRDN21Pb0VoUncwQnlibGlCVU9F NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZMZlBSREM3bU9vRWhSdzBCeWJsaUJVT0U1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTkzQTAvQTU5NTVFNTYwQzQ1MTFFRjlFN0UwNTFEQzRGOUFFMDIvQkQ1Qjc1ODAw QzRFMTFFRjg1RUVGQzFGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEykagMA0GCSqGSIb3DQEBCwUAA4IBAQBboZbWSuXZkcSHt/LMNtua qOkKR76QljD+vTB5WKfAWTExvRSlbmvP1AL5o/bWCglB9lZnlLCyS0co9rgBouJE qeaRbyoMhCV7zErZWZrMCxnlvhzUvuo0xolGUGHIYxsf53Y0qT6ZBgADVzb+jjD0 6PRAru3dxMjtqkn5bn/BpWC9nyF76GGCv5bw/hcmcZK1BDhJm7u9GZ7SvqLkd+HH ENSHMTT56TsdlIgbUcS3azIOjcHmOvXCmUG1iKP699GUmr6wOD3rJL0hrbsWt4sg 0FPX9Uy/D49bFkqQqE6UI3Ba39NNW5Ljsu1wwIKOf1TlBw4TI6W7db4i89atrulZ -----END CERTIFICATE-----Generated at Thu Sep 24 01:07:28 2026 by rpki-client