$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/FDAEEFB0A12A11EAB063A548C4F9AE02.roa File: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (raw, json) Hash identifier: F2o3bVfdgibRTgDe0DxEdoAWCoUl7F1g3jf5bWQpITQ= Subject key identifier: 8F:2A:B2:5A:02:36:39:05:2E:DA:C6:E0:12:76:12:1B:33:91:DD:BB Certificate issuer: /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Certificate serial: 09F5 Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/FDAEEFB0A12A11EAB063A548C4F9AE02.roa Signing time: Thu 18 Jun 2026 20:23:44 +0000 ROA not before: Thu 18 Jun 2026 20:23:43 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 23760 IP address blocks: 202.41.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2549 (0x9f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D890E, serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Validity Not Before: Jun 18 20:23:43 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a3453cf-3986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:80:88:18:c6:61:f9:9d:83:73:fe:43:ae:cf: 21:bb:23:a0:a0:47:1c:7f:f4:79:52:24:98:e3:82: a2:b2:c1:3a:56:9d:05:3a:69:a2:e9:aa:66:52:30: b7:11:07:53:74:92:5c:e7:ba:b7:28:f8:ec:07:61: a4:19:50:e4:40:ff:7b:09:95:ad:18:2f:7a:d8:a0: 9b:ab:ab:d4:d5:94:de:03:6a:b7:28:65:43:96:ec: 13:f6:87:4e:7a:0a:8e:8f:a7:77:06:a3:9f:b3:ae: bc:45:17:a7:ef:be:31:35:9b:df:37:0d:90:f4:86: 7d:84:98:1f:1d:04:a7:a2:85:02:cf:63:27:d3:ec: 5f:05:04:c2:92:39:d3:41:c8:95:ea:6c:dc:87:ab: d1:9a:97:32:8d:49:dd:19:12:98:80:37:d4:dd:bf: ff:ac:8e:2f:99:f8:26:40:7e:42:f3:93:2a:e0:94: 93:24:d9:30:d1:dc:ba:e3:c7:b2:f8:c5:4d:19:e1: 67:6a:45:a4:92:c2:71:ea:54:20:62:4d:48:b2:f4: f8:5e:40:df:e1:9a:c5:78:69:4b:f4:7f:5c:da:19: 8e:c7:ad:66:5c:47:1c:8b:39:54:6b:d6:03:34:d7: f2:35:d9:ab:ed:d0:3b:f7:cf:a0:8c:eb:25:ab:18: 4d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2A:B2:5A:02:36:39:05:2E:DA:C6:E0:12:76:12:1B:33:91:DD:BB X509v3 Authority Key Identifier: keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/FDAEEFB0A12A11EAB063A548C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.41.135.0/24 Signature Algorithm: sha256WithRSAEncryption 08:b9:c2:6b:9a:57:15:1f:9d:c4:12:c4:dd:d9:19:45:7a:54: 6a:0e:13:f8:1a:18:34:f5:95:03:e4:ca:23:45:4d:b6:f6:ab: 83:9a:7f:06:c9:ee:78:64:c9:e1:1e:a1:78:74:38:cc:75:45: d3:43:9b:6f:a2:01:21:ee:60:6e:d8:a5:bb:d1:08:52:70:ad: 2d:39:1d:e1:6b:a5:7b:9b:2d:0b:d7:da:64:7c:99:e7:92:30: 88:f3:9b:01:bc:8d:39:49:bb:5d:4b:dd:be:82:46:ca:69:34: d9:f2:9f:c0:dd:17:9a:d8:ac:52:2b:2a:30:df:9e:d5:55:d0: f0:7d:36:41:fa:49:7b:32:88:fc:c3:f3:a8:a4:44:e9:7d:ee: 51:0c:c5:ed:f6:c1:2a:9c:d6:47:c7:12:6f:8b:6d:08:74:59: 81:f8:a0:75:7e:49:59:ad:c3:8f:19:52:0c:34:83:ba:12:93: dd:9f:ce:ee:21:46:fe:07:5b:2c:92:3e:02:8c:89:df:48:06: 7b:69:a7:95:9f:b9:94:23:f5:4b:5b:2c:b9:3c:11:26:74:7c: cb:6e:00:64:73:74:d6:e6:4c:56:b6:0a:51:17:7b:1d:60:b8: 7e:a7:c4:ca:08:06:e5:e1:3b:8b:3c:51:3d:62:49:3f:60:e9: 72:46:72:27 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MEUxMTAvBgNVBAUTKDBCMDIyQjFFQTM0QzAzN0M1MUY2NTdGQzNFMEQ4NEEz QzYxODY4MjIwHhcNMjYwNjE4MjAyMzQzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTM0NTNjZi0zOTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4CIGMZh+Z2Dc/5Drs8huyOgoEccf/R5UiSY44KissE6Vp0FOmmi6apmUjC3 EQdTdJJc57q3KPjsB2GkGVDkQP97CZWtGC962KCbq6vU1ZTeA2q3KGVDluwT9odO egqOj6d3BqOfs668RRen774xNZvfNw2Q9IZ9hJgfHQSnooUCz2Mn0+xfBQTCkjnT QciV6mzch6vRmpcyjUndGRKYgDfU3b//rI4vmfgmQH5C85Mq4JSTJNkw0dy648ey +MVNGeFnakWkksJx6lQgYk1IsvT4XkDf4ZrFeGlL9H9c2hmOx61mXEccizlUa9YD NNfyNdmr7dA798+gjOslqxhNcQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFI8qsloC NjkFLtrG4BJ2Ehszkd27MB8GA1UdIwQYMBaAFAsCKx6jTAN8UfZX/D4NhKPGGGgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkwRS84RDQxMzVGRUEx MjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEzeFI5bGY4UGcyRW84WVlh Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3SXJIcU5NQTN4UjlsZjhQZzJFbzhZWWFDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDg5MEUvOEQ0MTM1RkVBMTI5MTFFQUEwMjI3NzQ2QzRGOUFFMDIvRkRBRUVGQjBB MTJBMTFFQUIwNjNBNTQ4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyimHMA0GCSqGSIb3DQEBCwUAA4IBAQAIucJrmlcVH53EEsTd2RlF elRqDhP4Ghg09ZUD5MojRU229quDmn8Gye54ZMnhHqF4dDjMdUXTQ5tvogEh7mBu 2KW70QhScK0tOR3ha6V7my0L19pkfJnnkjCI85sBvI05SbtdS92+gkbKaTTZ8p/A 3Rea2KxSKyow357VVdDwfTZB+kl7Moj8w/OopETpfe5RDMXt9sEqnNZHxxJvi20I dFmB+KB1fklZrcOPGVIMNIO6EpPdn87uIUb+B1sskj4CjInfSAZ7aaeVn7mUI/VL Wyy5PBEmdHzLbgBkc3TW5kxWtgpRF3sdYLh+p8TKCAbl4TuLPFE9Ykk/YOlyRnIn -----END CERTIFICATE-----Generated at Fri Jul 24 08:17:22 2026 by rpki-client