$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa File: 2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa (raw, json) Hash identifier: 2sdmpYEclOMLpBPBQMRyf2bR5K+Znn8UXPaVbPG6E8g= Subject key identifier: 05:2D:9D:C2:98:F1:D1:A2:33:E6:3D:1F:A1:F9:CF:1C:D7:78:DC:44 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 0373 Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa Signing time: Mon 15 Jun 2026 01:30:26 +0000 ROA not before: Mon 15 Jun 2026 01:30:25 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 65510 IP address blocks: 140.168.64.0/19 maxlen: 19 140.168.78.0/24 maxlen: 24 140.168.79.0/24 maxlen: 24 140.168.87.0/24 maxlen: 24 140.168.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 883 (0x373) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Jun 15 01:30:25 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a2f55b1-e37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9c:65:2c:00:1a:67:43:56:fe:ac:04:11:7b: 32:cd:c9:32:47:15:19:41:e3:58:05:63:ae:01:18: 7a:02:38:5d:16:86:3e:31:9a:00:54:e7:cf:3d:bb: 48:22:2a:1e:39:0b:21:fe:94:08:01:ab:c5:80:9b: 08:7d:31:52:dc:1c:3d:cf:79:d8:2a:6e:32:e8:89: 6c:47:3a:5a:ad:e6:fe:ef:77:a3:3f:c8:13:fb:c5: 56:40:7f:6b:8f:d0:9a:82:03:d8:7c:2a:10:49:e8: dd:25:9b:69:ab:9d:03:ed:e4:58:8b:48:30:3a:76: 64:8c:d9:36:b0:26:e2:6b:37:40:ee:f9:cc:0a:d0: c4:a6:85:26:8c:5a:6a:1c:fe:cb:cf:3f:71:19:a5: be:0d:91:9f:15:08:8e:6b:7c:1b:25:05:42:5b:06: bc:00:00:3d:9b:da:de:30:b2:e2:97:92:93:b9:79: eb:45:9a:af:7d:30:c7:22:79:b7:04:9d:84:df:f0: 4c:6e:59:36:60:2e:26:6e:6b:16:dc:f6:d4:5a:e6: 37:9f:64:bf:7c:98:e4:a3:f6:ce:08:59:54:23:fb: 37:c5:4d:ab:45:c7:69:2b:de:16:90:2b:a0:5f:b3: 18:d7:a0:4f:21:6f:f2:c1:63:a4:14:a3:43:52:44: 7d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2D:9D:C2:98:F1:D1:A2:33:E6:3D:1F:A1:F9:CF:1C:D7:78:DC:44 X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 140.168.64.0/18 Signature Algorithm: sha256WithRSAEncryption 7c:b3:c1:e5:57:24:c0:78:b1:3e:2f:35:fc:54:4f:d4:56:39: 05:35:b2:a6:66:12:40:c0:6d:a3:f8:8b:a5:d9:71:d5:31:52: d8:11:bf:a1:65:7a:8a:a5:b2:ff:77:ce:09:9d:96:ad:75:a6: 76:78:94:06:99:af:4d:35:93:ef:67:1f:03:1e:82:78:9e:f6: 39:6d:f4:0e:86:bd:06:bd:62:b9:d1:88:66:7f:2e:a7:31:4c: e6:82:a1:8a:39:3b:8f:92:49:ab:8b:ee:8f:3c:f2:fb:9f:78: 1c:b2:3f:07:0e:1c:35:b0:cb:bb:56:68:6c:4a:06:8e:d3:27: 26:53:48:26:8a:97:3b:23:c7:e2:d2:8a:50:ed:09:8d:41:09: 65:17:5f:68:3f:0d:af:3e:fa:f9:53:ad:f0:4b:30:46:fb:36: 19:00:48:66:17:2c:de:29:e9:64:74:9d:4e:09:27:c2:63:4b: 29:2a:7d:44:6a:eb:8c:df:99:f6:45:2f:8d:86:04:a5:6c:1d: d9:ba:c3:9a:c2:ee:4b:9a:31:92:0b:c3:0d:6f:0a:5b:82:1b: 58:99:ee:40:a5:77:b7:c6:d1:34:4f:6b:56:ba:81:7d:65:61: 4d:2f:84:e5:b3:66:dc:58:ae:89:a5:7e:6f:67:f7:f3:ea:56: 8f:05:27:1f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjYwNjE1MDEzMDI1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTJmNTViMS1lMzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5xlLAAaZ0NW/qwEEXsyzckyRxUZQeNYBWOuARh6AjhdFoY+MZoAVOfPPbtI IioeOQsh/pQIAavFgJsIfTFS3Bw9z3nYKm4y6IlsRzpareb+73ejP8gT+8VWQH9r j9CaggPYfCoQSejdJZtpq50D7eRYi0gwOnZkjNk2sCbiazdA7vnMCtDEpoUmjFpq HP7Lzz9xGaW+DZGfFQiOa3wbJQVCWwa8AAA9m9reMLLil5KTuXnrRZqvfTDHInm3 BJ2E3/BMblk2YC4mbmsW3PbUWuY3n2S/fJjko/bOCFlUI/s3xU2rRcdpK94WkCug X7MY16BPIW/ywWOkFKNDUkR9PQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAUtncKY 8dGiM+Y9H6H5zxzXeNxEMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURCOTgvRDkzRTkzREM0OTIxMTFFREFCRDU5QzUzQzRGOUFFMDIvMkZEOEE0NkU1 QjdDMTFFREFBRkFCODMxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQGjKhAMA0GCSqGSIb3DQEBCwUAA4IBAQB8s8HlVyTAeLE+LzX8VE/U VjkFNbKmZhJAwG2j+Iul2XHVMVLYEb+hZXqKpbL/d84JnZatdaZ2eJQGma9NNZPv Zx8DHoJ4nvY5bfQOhr0GvWK50Yhmfy6nMUzmgqGKOTuPkkmri+6PPPL7n3gcsj8H Dhw1sMu7VmhsSgaO0ycmU0gmipc7I8fi0opQ7QmNQQllF19oPw2vPvr5U63wSzBG +zYZAEhmFyzeKelkdJ1OCSfCY0spKn1EauuM35n2RS+NhgSlbB3ZusOawu5LmjGS C8MNbwpbghtYme5ApXe3xtE0T2tWuoF9ZWFNL4Tls2bcWK6JpX5vZ/fz6laPBScf -----END CERTIFICATE-----Generated at Fri Jul 24 00:02:12 2026 by rpki-client