$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2F4FE7325B7C11EDAAFAB831C4F9AE02.roa File: 2F4FE7325B7C11EDAAFAB831C4F9AE02.roa (raw, json) Hash identifier: ZEuPiUQckZniRx9NOhZ6gYYx61mX4enZZWyGpfGF2y0= Subject key identifier: F1:E8:57:26:83:EA:B5:9A:B0:49:57:F4:CE:9E:D3:78:A6:E5:0D:25 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 0372 Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2F4FE7325B7C11EDAAFAB831C4F9AE02.roa Signing time: Mon 15 Jun 2026 01:30:24 +0000 ROA not before: Mon 15 Jun 2026 01:30:24 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 65501 IP address blocks: 140.168.244.0/22 maxlen: 22 140.168.244.0/24 maxlen: 24 140.168.245.0/24 maxlen: 24 140.168.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 882 (0x372) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Jun 15 01:30:24 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a2f55b0-1cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0a:44:41:ba:14:6f:33:12:37:71:26:9e:12: de:b0:c8:9e:2b:55:8b:e7:02:a0:8c:6d:d1:58:7b: a2:76:76:bd:d9:4f:81:85:af:43:30:5f:80:18:35: 59:6d:07:8c:90:2e:c1:49:67:a5:ae:7d:2d:18:98: 86:f7:85:25:64:d4:7e:ea:55:12:c4:cd:02:07:75: 8e:ce:b9:3d:30:94:b4:62:e4:b5:15:ec:89:47:83: ce:32:b5:42:fa:ed:2f:3d:d2:3a:11:16:d9:c2:99: b1:b6:cf:53:06:0d:e7:21:92:39:92:cd:71:b9:02: 44:16:b9:21:f8:20:bf:3d:25:81:ef:25:45:fb:0d: 86:a7:b5:5e:72:eb:60:54:ff:63:51:26:34:75:da: e8:a2:08:07:71:92:3f:b0:26:45:65:18:0e:2f:74: f5:5c:d4:12:7e:94:dc:01:f8:05:40:23:1c:75:2e: 46:f9:43:61:6c:ca:22:56:95:c4:d6:6b:1e:2e:21: 8d:5b:86:f7:8c:98:bf:67:52:ea:e2:17:47:86:a6: 75:00:18:05:d4:99:8f:12:2f:3c:5b:8c:0b:ad:d6: f5:91:db:6f:6c:95:32:7d:fd:2a:94:8c:48:30:51: 10:eb:2e:3a:5b:dd:cb:ec:af:d6:f9:a8:2c:5d:40: b3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E8:57:26:83:EA:B5:9A:B0:49:57:F4:CE:9E:D3:78:A6:E5:0D:25 X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2F4FE7325B7C11EDAAFAB831C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 140.168.244.0/22 Signature Algorithm: sha256WithRSAEncryption ac:07:89:79:b0:a6:81:e9:0b:d6:80:1a:12:ee:3f:f6:aa:50: ff:98:31:e6:73:16:f2:c9:d1:44:a1:9b:4f:ff:ab:87:2f:fc: ab:ac:05:d2:a3:ff:53:15:1e:53:85:69:c1:35:46:04:a6:d0: 83:b5:20:49:96:af:6a:30:96:fd:33:42:cd:cc:23:5f:3f:db: 65:f4:6b:10:d1:f6:06:22:2e:ca:d6:07:5f:26:de:ae:14:6d: 85:77:02:04:bc:d9:eb:d3:2b:24:14:bb:61:56:e7:ac:51:7f: bf:da:3f:7e:36:ee:32:2b:f0:11:04:26:a1:5b:0f:e5:a1:bb: 6d:aa:4b:35:8a:8b:17:61:e8:9c:f5:ed:21:6e:50:5b:e0:e8: 64:21:f7:42:c6:85:c6:6f:38:fd:a7:f4:a2:5c:68:38:cd:52: 88:0a:98:4f:21:23:a0:bc:3d:09:30:b4:ed:58:bc:46:e8:d4: fb:25:3a:7e:11:40:06:8c:9d:2e:35:df:33:f6:91:90:a3:93: c3:a0:af:08:68:c2:df:a6:84:41:bf:0f:4b:41:48:44:28:ca: ff:b2:30:99:0d:36:67:5b:63:d0:35:a1:8a:51:b6:9b:87:b0: 7d:b7:5d:39:37:64:c9:53:40:64:4a:24:a6:e5:e0:8f:28:a2: 4d:ec:f8:0b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjYwNjE1MDEzMDI0WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTJmNTViMC0xY2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6wpEQboUbzMSN3EmnhLesMieK1WL5wKgjG3RWHuidna92U+Bha9DMF+AGDVZ bQeMkC7BSWelrn0tGJiG94UlZNR+6lUSxM0CB3WOzrk9MJS0YuS1FeyJR4POMrVC +u0vPdI6ERbZwpmxts9TBg3nIZI5ks1xuQJEFrkh+CC/PSWB7yVF+w2Gp7Vecutg VP9jUSY0ddrooggHcZI/sCZFZRgOL3T1XNQSfpTcAfgFQCMcdS5G+UNhbMoiVpXE 1mseLiGNW4b3jJi/Z1Lq4hdHhqZ1ABgF1JmPEi88W4wLrdb1kdtvbJUyff0qlIxI MFEQ6y46W93L7K/W+agsXUCzjQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPHoVyaD 6rWasElX9M6e03im5Q0lMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURCOTgvRDkzRTkzREM0OTIxMTFFREFCRDU5QzUzQzRGOUFFMDIvMkY0RkU3MzI1 QjdDMTFFREFBRkFCODMxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCjKj0MA0GCSqGSIb3DQEBCwUAA4IBAQCsB4l5sKaB6QvWgBoS7j/2 qlD/mDHmcxbyydFEoZtP/6uHL/yrrAXSo/9TFR5ThWnBNUYEptCDtSBJlq9qMJb9 M0LNzCNfP9tl9GsQ0fYGIi7K1gdfJt6uFG2FdwIEvNnr0yskFLthVuesUX+/2j9+ Nu4yK/ARBCahWw/lobttqks1iosXYeic9e0hblBb4OhkIfdCxoXGbzj9p/SiXGg4 zVKICphPISOgvD0JMLTtWLxG6NT7JTp+EUAGjJ0uNd8z9pGQo5PDoK8IaMLfpoRB vw9LQUhEKMr/sjCZDTZnW2PQNaGKUbabh7B9t105N2TJU0BkSiSm5eCPKKJN7PgL -----END CERTIFICATE-----Generated at Fri Jul 24 02:37:13 2026 by rpki-client