$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/06820D08961011ECA540626AC4F9AE02.roa File: 06820D08961011ECA540626AC4F9AE02.roa (raw, json) Hash identifier: CzUXYWkkIQDOcHq1RR+8siO68bCnK+19oDi4KioI2dg= Subject key identifier: 21:DD:5C:41:6A:78:68:E9:A9:DE:34:43:70:9D:28:75:CD:8B:B2:D8 Certificate issuer: /CN=A91E504E/serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F Certificate serial: 04DD Authority key identifier: E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/06820D08961011ECA540626AC4F9AE02.roa Signing time: Thu 23 Jul 2026 01:26:04 +0000 ROA not before: Thu 23 Jul 2026 01:26:04 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 133199 IP address blocks: 208.87.200.0/24 maxlen: 24 208.87.201.0/24 maxlen: 24 208.87.202.0/24 maxlen: 24 208.87.203.0/24 maxlen: 24 208.87.204.0/24 maxlen: 24 208.87.205.0/24 maxlen: 24 208.87.206.0/24 maxlen: 24 208.87.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1245 (0x4dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F Validity Not Before: Jul 23 01:26:04 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a616dac-98db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c2:f3:6e:75:4f:d9:cd:53:fa:30:c1:9d:c8: ab:e1:ec:e1:fa:f1:0a:e8:25:4d:13:f0:25:18:6b: 56:34:77:12:74:69:ae:52:28:a7:c2:56:aa:93:cd: f4:c6:0c:20:93:b6:d8:9f:a0:99:64:ed:9e:bc:26: 8a:4c:9a:ca:a2:86:6c:ce:45:c7:cb:d6:65:ef:5e: 86:3f:cb:11:06:3d:0c:ab:c2:c3:bf:5f:86:3b:69: 33:0e:16:91:28:8f:42:1f:56:e2:85:93:34:fc:b2: a5:2a:9b:a3:0a:b6:5e:53:04:c3:68:89:31:6e:c7: a3:3b:0f:71:98:8a:5f:2d:de:68:88:83:b3:fa:fc: f0:44:89:8e:cc:10:82:d8:f7:e1:22:78:e9:ed:89: 2f:f4:2a:69:90:b9:89:80:ac:41:63:87:9b:66:ea: 33:28:b0:08:77:14:a2:06:fd:97:5f:bd:3e:f4:5b: a4:6a:c3:83:7f:d0:5f:c3:79:30:d9:16:c7:8d:8a: 6e:61:f3:77:51:27:22:93:1c:77:4f:01:99:85:d4: 62:0c:9f:a0:8f:0e:94:88:4f:46:66:d7:f4:85:3f: b2:f0:fb:a2:12:f2:84:12:e2:23:39:44:34:ce:ad: 46:df:9b:a3:63:f5:d0:9d:2f:fa:ee:8b:75:6f:b3: 0a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DD:5C:41:6A:78:68:E9:A9:DE:34:43:70:9D:28:75:CD:8B:B2:D8 X509v3 Authority Key Identifier: keyid:E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/06820D08961011ECA540626AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 208.87.200.0/21 Signature Algorithm: sha256WithRSAEncryption 61:b4:34:20:98:43:f4:33:10:75:a4:f9:ce:3a:39:4d:78:a1: 15:16:5b:29:94:b9:00:98:57:73:e1:6d:79:93:bc:a6:15:0c: eb:c7:33:ee:93:b4:38:79:3f:81:7a:7d:78:49:56:76:f7:cc: f2:72:7a:f1:0a:53:1d:15:2c:76:4c:06:93:ba:75:b7:f9:e1: dc:15:90:32:79:27:fc:90:7e:a9:1c:a0:e1:58:10:20:31:63: f0:ef:05:c4:4c:ac:41:8b:3e:4f:0e:1f:32:08:bb:50:42:fb: 3c:f6:20:ed:ba:ca:34:20:7b:d6:47:1d:19:e9:78:9b:ee:73: 92:e1:24:7c:9b:58:96:90:f4:53:bb:86:7c:42:73:a8:1d:98: 5b:8e:22:f3:b8:c1:af:51:14:ec:02:6c:99:f3:10:15:08:e5: e7:b2:81:b5:aa:74:a0:68:f4:61:07:8c:ec:73:c3:97:e9:c2: a2:aa:75:02:2e:cc:ac:b3:26:a1:e8:62:c0:bc:e1:bb:a2:0a: c0:8f:9d:08:98:a0:ba:93:72:c6:6a:d3:04:d2:f4:b3:4c:6e: 09:cc:19:f3:cd:81:f8:46:b7:71:94:30:3e:17:d9:56:1d:77: 81:49:74:f1:54:19:8e:bc:5a:6d:54:ad:e6:7d:8e:71:89:70: ef:e0:71:67 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEU0NzdEMzhBQUFDNEEzN0NDNkRGMTY2NUJGMUM4ODBB Rjk5QjdCNEYwHhcNMjYwNzIzMDEyNjA0WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYxNmRhYy05OGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMLzbnVP2c1T+jDBncir4ezh+vEK6CVNE/AlGGtWNHcSdGmuUiinwlaqk830 xgwgk7bYn6CZZO2evCaKTJrKooZszkXHy9Zl716GP8sRBj0Mq8LDv1+GO2kzDhaR KI9CH1bihZM0/LKlKpujCrZeUwTDaIkxbsejOw9xmIpfLd5oiIOz+vzwRImOzBCC 2PfhInjp7Ykv9CppkLmJgKxBY4ebZuozKLAIdxSiBv2XX70+9FukasODf9Bfw3kw 2RbHjYpuYfN3UScikxx3TwGZhdRiDJ+gjw6UiE9GZtf0hT+y8PuiEvKEEuIjOUQ0 zq1G35ujY/XQnS/67ot1b7MK2QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCHdXEFq eGjpqd40Q3CdKHXNi7LYMB8GA1UdIwQYMBaAFOR304qqxKN8xt8WZb8ciAr5m3tP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80RTNFMzY3RTk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi81SGZUaXFyRW8zekczeFpsdnh5SUN2bWJl MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVIZlRpcXJFbzN6RzN4Wmx2eHlJQ3ZtYmUwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTUwNEUvNEUzRTM2N0U5NjA4MTFFQ0EwNEEwMDg2QzRGOUFFMDIvMDY4MjBEMDg5 NjEwMTFFQ0E1NDA2MjZBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQD0FfIMA0GCSqGSIb3DQEBCwUAA4IBAQBhtDQgmEP0MxB1pPnOOjlN eKEVFlsplLkAmFdz4W15k7ymFQzrxzPuk7Q4eT+Ben14SVZ298zycnrxClMdFSx2 TAaTunW3+eHcFZAyeSf8kH6pHKDhWBAgMWPw7wXETKxBiz5PDh8yCLtQQvs89iDt uso0IHvWRx0Z6Xib7nOS4SR8m1iWkPRTu4Z8QnOoHZhbjiLzuMGvURTsAmyZ8xAV COXnsoG1qnSgaPRhB4zsc8OX6cKiqnUCLsyssyah6GLAvOG7ogrAj50ImKC6k3LG atME0vSzTG4JzBnzzYH4RrdxlDA+F9lWHXeBSXTxVBmOvFptVK3mfY5xiXDv4HFn -----END CERTIFICATE-----Generated at Fri Jul 24 00:37:48 2026 by rpki-client