$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/20763B5024C611F191287557A6833773.roa File: 20763B5024C611F191287557A6833773.roa (raw, json) Hash identifier: 0r6vS9qeg1815ILGWf03i2uDlWfL7ibwuznjphtmkNw= Subject key identifier: 10:17:B7:4E:50:7B:F9:8D:19:8C:86:FA:8B:50:A4:FF:16:06:51:48 Certificate issuer: /CN=A91C6A87/serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6 Certificate serial: 02 Authority key identifier: 96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/20763B5024C611F191287557A6833773.roa Signing time: Sat 21 Mar 2026 01:34:39 +0000 ROA not before: Sat 21 Mar 2026 01:34:39 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 133139 IP address blocks: 139.5.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A87, serialNumber=96C1BC987AD6643913F65E05D1A663F64C4AE1B6 Validity Not Before: Mar 21 01:34:39 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69bdf5af-1c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c2:78:70:2f:c3:04:6b:66:75:25:26:d0:7b: f8:e1:ae:b5:97:73:30:09:e4:50:80:9b:7f:5f:ec: 46:85:1c:3b:28:0e:2e:d5:23:3b:26:29:7b:fc:62: 3b:15:91:cf:0d:fd:3f:d1:3c:a8:c8:87:0c:a5:08: fa:db:95:b4:41:5b:ef:39:41:20:ef:d0:d7:25:4e: 43:6a:6c:3c:72:02:c7:0a:cd:81:bb:fa:57:42:7a: cf:c3:c4:91:ee:e1:42:4b:39:b4:35:18:6f:c2:26: 61:4e:d0:d4:76:60:23:c2:50:de:1d:a7:0a:86:68: 6e:46:f3:79:4d:d1:ba:96:ca:5f:36:04:04:6f:c4: fa:27:2a:f2:f9:2b:0b:c1:04:88:7c:77:cc:bb:a6: 51:ec:f5:a4:84:42:90:03:48:2c:b2:29:fe:1e:8c: 7c:58:49:8e:79:85:7d:48:24:10:81:57:e2:9d:3f: c7:bf:3e:00:5a:48:a6:5f:da:ff:2f:fb:74:72:cc: bf:78:9a:50:62:92:66:c8:34:04:f9:0e:74:18:5c: 52:81:7c:33:dd:81:ab:cb:51:e0:75:b9:2c:c2:07: 3c:65:ac:ba:40:3f:7b:7f:70:a9:8e:ca:9d:fa:20: 3a:0d:37:7d:30:c9:45:f1:30:cd:96:5c:01:5a:38: 20:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:17:B7:4E:50:7B:F9:8D:19:8C:86:FA:8B:50:A4:FF:16:06:51:48 X509v3 Authority Key Identifier: keyid:96:C1:BC:98:7A:D6:64:39:13:F6:5E:05:D1:A6:63:F6:4C:4A:E1:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/lsG8mHrWZDkT9l4F0aZj9kxK4bY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsG8mHrWZDkT9l4F0aZj9kxK4bY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A87/BE0628C224C511F19A420EEBA5833773/20763B5024C611F191287557A6833773.roa sbgp-ipAddrBlock: critical IPv4: 139.5.184.0/22 Signature Algorithm: sha256WithRSAEncryption 96:0a:55:28:27:b4:9b:01:e6:6e:66:3e:13:ae:19:7f:0e:eb: 6a:39:7b:19:a0:a5:69:24:69:b4:e3:78:2b:03:2f:b7:91:e0: 2a:20:13:23:97:55:43:f0:9a:40:25:17:94:97:f9:96:38:91: f2:68:d4:91:1d:7e:ef:8a:f2:f4:dd:6f:e0:46:96:0f:13:9d: 2f:8f:9a:af:a8:ca:6e:5d:8a:d1:e5:5d:37:30:77:44:03:df: aa:55:08:ca:4f:0a:cc:1a:82:61:40:5e:7f:25:5d:28:98:ca: 7f:f8:2b:d3:85:6c:bc:a5:82:a7:56:31:a5:bf:67:43:24:b8: 6d:b6:51:c6:d6:b8:25:72:75:d6:5f:95:13:7c:c4:61:f8:f2: 94:3f:d9:30:55:f6:2e:d7:24:a3:7b:5c:0a:8e:e6:30:7f:0f: 57:ed:ce:b2:f7:6d:ea:76:9a:66:2e:4a:38:4e:83:05:60:9a: 1a:a1:fe:73:78:71:ba:40:9b:cb:1b:f9:1f:26:d5:c6:6c:0a: 5e:8b:33:9c:bb:25:4c:d4:a1:39:d5:f5:5d:27:46:0e:2e:40: 8a:d3:a9:d4:1a:18:7e:3d:30:de:cf:50:07:d5:db:e8:2f:ab: 39:4e:a1:8f:7a:ca:2e:73:ab:fa:b9:7e:1d:d8:3b:37:61:3a: a3:66:8b:4d -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NkE4NzExMC8GA1UEBRMoOTZDMUJDOTg3QUQ2NjQzOTEzRjY1RTA1RDFBNjYzRjY0 QzRBRTFCNjAeFw0yNjAzMjEwMTM0MzlaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YmRmNWFmLTFjNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWwnhwL8MEa2Z1JSbQe/jhrrWXczAJ5FCAm39f7EaFHDsoDi7VIzsmKXv8YjsV kc8N/T/RPKjIhwylCPrblbRBW+85QSDv0NclTkNqbDxyAscKzYG7+ldCes/DxJHu 4UJLObQ1GG/CJmFO0NR2YCPCUN4dpwqGaG5G83lN0bqWyl82BARvxPonKvL5KwvB BIh8d8y7plHs9aSEQpADSCyyKf4ejHxYSY55hX1IJBCBV+KdP8e/PgBaSKZf2v8v +3RyzL94mlBikmbINAT5DnQYXFKBfDPdgavLUeB1uSzCBzxlrLpAP3t/cKmOyp36 IDoNN30wyUXxMM2WXAFaOCB5AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUEBe3TlB7 +Y0ZjIb6i1Ck/xYGUUgwHwYDVR0jBBgwFoAUlsG8mHrWZDkT9l4F0aZj9kxK4bYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2QTg3L0JFMDYyOEMyMjRD NTExRjE5QTQyMEVFQkE1ODMzNzczL2xzRzhtSHJXWkRrVDlsNEYwYVpqOWt4SzRi WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHNHOG1IcldaRGtUOWw0RjBhWmo5a3hLNGJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkE4Ny9CRTA2MjhDMjI0QzUxMUYxOUE0MjBFRUJBNTgzMzc3My8yMDc2M0I1MDI0 QzYxMUYxOTEyODc1NTdBNjgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAKLBbgwDQYJKoZIhvcNAQELBQADggEBAJYKVSgntJsB5m5mPhOuGX8O 62o5exmgpWkkabTjeCsDL7eR4CogEyOXVUPwmkAlF5SX+ZY4kfJo1JEdfu+K8vTd b+BGlg8TnS+Pmq+oym5ditHlXTcwd0QD36pVCMpPCswagmFAXn8lXSiYyn/4K9OF bLylgqdWMaW/Z0MkuG22UcbWuCVyddZflRN8xGH48pQ/2TBV9i7XJKN7XAqO5jB/ D1ftzrL3bep2mmYuSjhOgwVgmhqh/nN4cbpAm8sb+R8m1cZsCl6LM5y7JUzUoTnV 9V0nRg4uQIrTqdQaGH49MN7PUAfV2+gvqzlOoY96yi5zq/q5fh3YOzdhOqNmi00= -----END CERTIFICATE-----Generated at Thu Mar 26 09:11:50 2026 by rpki-client