$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/B390F78E5CB611EE97D70B78C4F9AE02.roa File: B390F78E5CB611EE97D70B78C4F9AE02.roa (raw, json) Hash identifier: 5pAydkFPBG/xNuitrTpbftHSJib51VywK3J+r7VMLUg= Subject key identifier: 53:A6:F7:95:AB:AD:F8:10:B5:A5:6A:EF:AF:1F:EA:04:E9:F7:8C:03 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 021D Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/B390F78E5CB611EE97D70B78C4F9AE02.roa Signing time: Sat 11 Jul 2026 04:29:45 +0000 ROA not before: Sat 11 Jul 2026 04:29:45 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 58421 IP address blocks: 202.49.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Jul 11 04:29:45 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a51c6b9-49ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4f:29:94:0d:cc:36:fa:e2:b9:44:e2:20:4a: 01:0d:b8:b8:a2:4f:b7:f1:ef:4d:45:f9:20:a3:1b: 81:95:14:e1:72:ec:36:a2:ef:dc:f1:12:d2:1c:6b: ee:30:2f:3b:f0:0e:17:53:13:43:94:19:10:ba:1f: 23:6b:45:08:95:75:dc:16:47:04:0d:53:02:a4:19: f8:15:52:9a:54:7e:f0:2f:08:c8:78:d8:a0:84:03: 10:5d:1f:21:06:97:2f:5b:dc:e4:a9:5d:92:de:67: 7b:c4:3c:fb:47:55:6a:77:af:1a:04:60:0f:46:14: 10:08:f3:0e:a2:3d:97:56:3d:c7:b7:93:a7:5b:02: 63:52:dd:f5:98:1b:aa:46:d8:68:94:53:8b:9d:dd: d1:86:43:6f:78:e9:57:3c:a6:fd:5e:2e:1c:d5:2b: e6:0e:2f:ac:37:61:ce:c5:50:10:fb:dc:43:09:61: b8:a3:c1:5d:78:44:bb:b2:d2:99:26:86:ca:98:d4: dd:15:ee:9c:ac:98:0c:4a:45:4d:27:32:a5:45:c3: a7:7c:31:cd:e9:75:04:0a:f1:02:75:1e:00:4c:3b: 10:43:c9:f2:20:1c:ae:0d:3c:71:b6:84:42:73:67: c3:e6:ae:32:da:ae:32:f3:1e:8d:f7:17:8a:ae:55: d6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A6:F7:95:AB:AD:F8:10:B5:A5:6A:EF:AF:1F:EA:04:E9:F7:8C:03 X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/B390F78E5CB611EE97D70B78C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.49.208.0/21 Signature Algorithm: sha256WithRSAEncryption bb:1b:ba:01:35:c1:df:30:0f:e1:c3:b1:0c:9b:c1:c6:dd:bf: cd:9c:ef:60:6c:66:e8:71:44:6e:69:21:27:40:61:c7:cd:27: 50:d5:46:5f:e7:10:3e:95:19:54:7c:e7:ac:66:fe:20:26:74: 44:03:c5:c7:8c:af:a5:7b:74:ba:e5:71:34:04:d4:71:e1:f5: 08:14:ca:e9:4a:62:1f:6d:15:b8:bd:7e:06:02:93:5d:0a:ec: ac:22:b3:cb:0e:f5:06:26:98:ce:79:41:57:05:32:fb:92:33: e8:ec:7d:33:1e:e2:37:35:34:f6:46:5e:3d:09:f0:33:ea:8d: 19:db:21:85:4a:21:67:21:0b:8f:3a:25:ba:ed:15:ae:49:b5: 33:67:11:6d:be:6b:5c:6a:ad:11:a5:cc:39:49:b2:0d:d1:9e: 33:d2:48:93:b3:9d:e8:50:c0:1e:a7:da:01:6d:5d:53:fa:cd: 1c:e0:45:5c:39:e5:1d:f5:9a:17:86:ea:38:9d:95:c0:e7:44: a1:d1:cc:ed:dd:72:9a:4d:2a:1c:0d:7e:9d:cc:c4:64:33:f9: c2:bd:1c:a5:1b:03:9c:60:4d:6d:03:93:31:e0:20:a2:41:b7: cf:4b:c0:4a:bd:56:2a:ca:2f:a0:a4:4d:c8:10:c0:dd:f2:1c: f3:19:66:b8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjYwNzExMDQyOTQ1WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTUxYzZiOS00OWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr08plA3MNvriuUTiIEoBDbi4ok+38e9NRfkgoxuBlRThcuw2ou/c8RLSHGvu MC878A4XUxNDlBkQuh8ja0UIlXXcFkcEDVMCpBn4FVKaVH7wLwjIeNighAMQXR8h BpcvW9zkqV2S3md7xDz7R1Vqd68aBGAPRhQQCPMOoj2XVj3Ht5OnWwJjUt31mBuq RtholFOLnd3RhkNveOlXPKb9Xi4c1SvmDi+sN2HOxVAQ+9xDCWG4o8FdeES7stKZ JobKmNTdFe6crJgMSkVNJzKlRcOnfDHN6XUECvECdR4ATDsQQ8nyIByuDTxxtoRC c2fD5q4y2q4y8x6N9xeKrlXW3QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFOm95Wr rfgQtaVq768f6gTp94wDMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZDMUMvM0MxNDJCMTY1N0ZFMTFFRUFBNTUzMDYwQzRGOUFFMDIvQjM5MEY3OEU1 Q0I2MTFFRTk3RDcwQjc4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDyjHQMA0GCSqGSIb3DQEBCwUAA4IBAQC7G7oBNcHfMA/hw7EMm8HG 3b/NnO9gbGbocURuaSEnQGHHzSdQ1UZf5xA+lRlUfOesZv4gJnREA8XHjK+le3S6 5XE0BNRx4fUIFMrpSmIfbRW4vX4GApNdCuysIrPLDvUGJpjOeUFXBTL7kjPo7H0z HuI3NTT2Rl49CfAz6o0Z2yGFSiFnIQuPOiW67RWuSbUzZxFtvmtcaq0Rpcw5SbIN 0Z4z0kiTs53oUMAep9oBbV1T+s0c4EVcOeUd9ZoXhuo4nZXA50Sh0czt3XKaTSoc DX6dzMRkM/nCvRylGwOcYE1tA5Mx4CCiQbfPS8BKvVYqyi+gpE3IEMDd8hzzGWa4 -----END CERTIFICATE-----Generated at Fri Jul 24 01:42:52 2026 by rpki-client