$ rpki-client -vvvf rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/D6871FC40C5711EFBD14BD5AC4F9AE02.roa File: D6871FC40C5711EFBD14BD5AC4F9AE02.roa (raw, json) Hash identifier: qwJA5OuyiK7eP/P/MqSQvF5A7nR6rR1yB2u2XbUrA08= Subject key identifier: 12:50:EC:07:40:27:E8:4B:1E:F9:52:12:12:23:9C:E3:73:5E:39:CB Certificate issuer: /CN=A91993A0/serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D Certificate serial: 020B Authority key identifier: BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/D6871FC40C5711EFBD14BD5AC4F9AE02.roa Signing time: Wed 23 Sep 2026 03:53:30 +0000 ROA not before: Wed 23 Sep 2026 03:53:30 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 10103 IP address blocks: 202.70.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91993A0, serialNumber=BCB7CF4430BB98EA04851C340726E588150E139D Validity Not Before: Sep 23 03:53:30 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab34d3a-bd9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fb:8c:bc:f7:1c:60:94:20:fe:d1:62:60:d0: d8:74:4b:d2:1a:40:89:cf:f2:0f:68:8f:67:06:d5: 2e:85:2e:b7:0b:44:0a:78:10:cb:c2:62:9e:ba:7b: 95:37:df:f2:c5:4d:e2:15:f1:34:34:17:7d:51:c7: a3:56:12:4e:30:f1:00:ba:52:82:88:11:2a:16:76: 54:c9:57:c7:63:93:7f:57:45:25:ea:61:df:8e:a3: 1b:33:20:c7:0a:b9:a7:73:61:e1:60:c5:23:f7:42: cd:ca:0a:ab:31:50:f1:d8:40:cf:73:ae:c6:82:98: e9:bf:e5:45:56:24:f1:a2:e6:5e:e7:2a:e3:e4:08: d1:04:2b:2c:fc:b6:82:f6:5c:e6:a7:87:13:32:af: df:5b:38:d3:7d:99:ed:ef:0f:9d:77:0a:9e:cc:99: f4:58:55:93:99:7b:fd:7b:15:49:d8:b0:eb:2c:17: 5a:2f:0b:9f:aa:82:cf:52:3c:40:ce:1e:e9:ba:12: 9d:dd:c4:5b:ec:b2:76:49:25:73:ea:8d:01:d0:73: 85:75:ad:f1:3c:06:3b:e9:52:2d:92:25:ec:ca:da: 73:e8:8f:65:19:41:ad:57:ca:36:a4:e6:2b:84:ba: c6:94:7a:d7:b7:a8:58:70:59:e0:ee:69:19:fa:7c: 64:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:50:EC:07:40:27:E8:4B:1E:F9:52:12:12:23:9C:E3:73:5E:39:CB X509v3 Authority Key Identifier: keyid:BC:B7:CF:44:30:BB:98:EA:04:85:1C:34:07:26:E5:88:15:0E:13:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/vLfPRDC7mOoEhRw0BybliBUOE50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLfPRDC7mOoEhRw0BybliBUOE50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91993A0/A5955E560C4511EF9E7E051DC4F9AE02/D6871FC40C5711EFBD14BD5AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.70.160.0/20 Signature Algorithm: sha256WithRSAEncryption a0:04:32:35:df:ea:6c:b1:ea:45:3e:81:19:9b:e4:ac:5f:45: fc:36:dc:26:48:fd:dd:5d:e6:05:f5:50:ba:17:6f:22:f1:6b: 68:44:90:ab:8d:7b:b2:4e:6b:43:88:19:d6:ee:7b:ab:52:b2: 1e:3b:56:ca:8c:a0:bc:ec:5d:f6:35:5a:10:f5:66:9e:79:81: 63:e2:46:58:3e:fe:27:13:ba:80:59:e0:74:c6:5d:f9:53:b2: d3:1a:27:05:98:01:36:84:24:2d:52:2f:e6:38:22:37:f9:88: 0d:84:86:01:08:d3:bd:06:29:88:f9:14:92:36:bf:f0:5c:a2: 0b:2c:6e:a0:d9:ef:d5:fd:da:b3:87:cf:a2:b6:cd:a7:07:1d: 63:80:2e:45:dc:fc:c5:15:21:1c:1f:e8:1a:b3:21:6d:dd:c6: 57:86:a0:dc:b0:84:0c:5b:37:73:7e:5f:3f:cf:0b:32:a9:7d: 91:95:a5:8b:fd:9b:c6:4a:c4:39:50:e6:36:c1:e2:d7:ba:79: 2f:3a:23:2f:61:f8:7a:25:46:4a:59:00:89:af:0c:77:2b:6d: 6f:66:94:bb:6e:19:21:c8:68:ea:79:c1:b4:39:84:0f:40:7d: 3b:a2:4c:82:fd:1b:18:0d:8a:61:5e:19:3a:c9:91:40:ab:f0: c9:71:5a:84 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkzQTAxMTAvBgNVBAUTKEJDQjdDRjQ0MzBCQjk4RUEwNDg1MUMzNDA3MjZFNTg4 MTUwRTEzOUQwHhcNMjYwOTIzMDM1MzMwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIzNGQzYS1iZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/uMvPccYJQg/tFiYNDYdEvSGkCJz/IPaI9nBtUuhS63C0QKeBDLwmKeunuV N9/yxU3iFfE0NBd9UcejVhJOMPEAulKCiBEqFnZUyVfHY5N/V0Ul6mHfjqMbMyDH Crmnc2HhYMUj90LNygqrMVDx2EDPc67Ggpjpv+VFViTxouZe5yrj5AjRBCss/LaC 9lzmp4cTMq/fWzjTfZnt7w+ddwqezJn0WFWTmXv9exVJ2LDrLBdaLwufqoLPUjxA zh7puhKd3cRb7LJ2SSVz6o0B0HOFda3xPAY76VItkiXsytpz6I9lGUGtV8o2pOYr hLrGlHrXt6hYcFng7mkZ+nxk2wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBJQ7AdA J+hLHvlSEhIjnONzXjnLMB8GA1UdIwQYMBaAFLy3z0Qwu5jqBIUcNAcm5YgVDhOd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTNBMC9BNTk1NUU1NjBD NDUxMUVGOUU3RTA1MURDNEY5QUUwMi92TGZQUkRDN21Pb0VoUncwQnlibGlCVU9F NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZMZlBSREM3bU9vRWhSdzBCeWJsaUJVT0U1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTkzQTAvQTU5NTVFNTYwQzQ1MTFFRjlFN0UwNTFEQzRGOUFFMDIvRDY4NzFGQzQw QzU3MTFFRkJEMTRCRDVBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEykagMA0GCSqGSIb3DQEBCwUAA4IBAQCgBDI13+pssepFPoEZm+Ss X0X8NtwmSP3dXeYF9VC6F28i8WtoRJCrjXuyTmtDiBnW7nurUrIeO1bKjKC87F32 NVoQ9WaeeYFj4kZYPv4nE7qAWeB0xl35U7LTGicFmAE2hCQtUi/mOCI3+YgNhIYB CNO9BimI+RSSNr/wXKILLG6g2e/V/dqzh8+its2nBx1jgC5F3PzFFSEcH+gasyFt 3cZXhqDcsIQMWzdzfl8/zwsyqX2RlaWL/ZvGSsQ5UOY2weLXunkvOiMvYfh6JUZK WQCJrwx3K21vZpS7bhkhyGjqecG0OYQPQH07okyC/RsYDYphXhk6yZFAq/DJcVqE -----END CERTIFICATE-----Generated at Sat Sep 26 12:04:47 2026 by rpki-client