$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5F9FA12E0CA411ED96936D79C4F9AE02.roa File: 5F9FA12E0CA411ED96936D79C4F9AE02.roa (raw, json) Hash identifier: 2uDIVTyJFeprZ8aKmJZDal4SC0k4TrY+Gr38dV8hu3U= Subject key identifier: C9:03:79:7A:29:92:D0:85:14:F7:E1:64:35:E4:44:48:92:03:F4:50 Certificate issuer: /CN=A91E504E/serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F Certificate serial: 04DE Authority key identifier: E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5F9FA12E0CA411ED96936D79C4F9AE02.roa Signing time: Thu 23 Jul 2026 01:26:06 +0000 ROA not before: Thu 23 Jul 2026 01:26:06 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 133861 IP address blocks: 208.87.200.0/24 maxlen: 24 208.87.201.0/24 maxlen: 24 208.87.202.0/24 maxlen: 24 208.87.203.0/24 maxlen: 24 208.87.204.0/24 maxlen: 24 208.87.205.0/24 maxlen: 24 208.87.206.0/24 maxlen: 24 208.87.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1246 (0x4de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F Validity Not Before: Jul 23 01:26:06 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a616dae-0316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e8:2f:e8:ae:f5:df:49:90:f1:00:11:1c:06: 6e:78:a5:a6:c1:55:2f:cf:bc:07:6f:db:5f:6b:f3: 59:b1:f0:e4:65:c6:d3:e7:46:31:1e:30:4a:06:bb: 17:e8:7d:b6:f2:e1:d5:84:1e:5c:fc:66:60:0d:cc: c9:6f:00:9e:36:4a:de:54:2b:27:99:ab:03:23:d4: e3:bd:6b:2f:3a:7a:0b:b6:58:2c:9f:6a:0d:a7:9c: 39:91:6e:b9:8b:11:12:77:16:3c:a1:65:fc:16:91: 79:34:1b:aa:cb:ad:d7:07:6a:62:25:01:a9:14:26: 8b:62:5b:64:e5:cc:3f:a7:16:b1:72:a5:d0:a3:5a: b4:ed:88:14:7f:71:a2:64:d8:79:1c:df:dd:5b:02: 53:40:ca:04:27:79:cb:f5:0b:55:cb:72:83:4c:ce: 09:4c:de:80:37:b3:a9:2e:5b:78:a1:c9:16:12:d0: 8c:32:03:8c:5c:c9:43:0d:66:97:d8:1c:15:d1:e7: b3:08:cd:f7:f0:35:fd:6e:46:65:0f:f5:0c:5d:33: 7d:6e:91:9c:25:28:5f:37:16:c0:1e:ec:e1:58:97: c1:bd:35:56:2d:c5:4f:23:e5:b2:68:9f:18:57:c0: 71:65:07:a8:7c:b8:b6:ea:63:6b:f0:5d:ec:5f:28: 98:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:03:79:7A:29:92:D0:85:14:F7:E1:64:35:E4:44:48:92:03:F4:50 X509v3 Authority Key Identifier: keyid:E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5F9FA12E0CA411ED96936D79C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 208.87.200.0/21 Signature Algorithm: sha256WithRSAEncryption 23:f7:ff:7a:ce:56:99:ad:a4:0d:45:91:a9:c3:30:07:7a:58: c7:c1:79:55:26:71:1e:bb:8d:9e:94:ed:b8:50:6c:d1:9d:3b: 17:91:6f:95:d9:01:95:85:78:35:63:31:76:68:38:d0:ac:b6: 69:84:67:7a:a3:2c:aa:e9:33:fe:4a:5b:cb:a1:f0:72:4b:5d: 01:f9:0e:de:54:1d:04:8a:63:c1:1a:46:ae:85:38:d6:da:88: b4:e1:26:fc:2b:55:0a:d6:b1:c6:96:30:88:3c:46:b9:76:09: 26:8c:b9:5b:d9:34:ed:4b:d0:2d:6b:9c:be:df:90:3e:60:c6: 7a:30:a2:f4:b3:fe:da:da:cd:71:0a:d8:77:ba:1b:b5:a5:66: 85:7b:6b:ff:b3:94:1d:1d:ac:4f:48:f1:ea:4d:f1:12:25:e7: fc:5e:b7:1e:9c:93:89:ab:d4:f5:0f:ce:83:78:8f:f5:67:58: d6:a7:79:ad:df:7b:c3:95:b9:1d:58:44:79:03:64:18:05:af: 23:af:3d:e4:69:b3:3a:de:d2:6b:61:86:7d:d6:c1:0d:5e:60: 98:55:5b:63:45:f7:f7:fe:0f:ac:b6:45:83:f3:de:47:9f:9c: cc:fd:f8:bc:e3:37:53:d4:f1:c2:7d:00:ff:6b:4d:68:cb:62: 35:3e:4a:d4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEU0NzdEMzhBQUFDNEEzN0NDNkRGMTY2NUJGMUM4ODBB Rjk5QjdCNEYwHhcNMjYwNzIzMDEyNjA2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYxNmRhZS0wMzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAougv6K7130mQ8QARHAZueKWmwVUvz7wHb9tfa/NZsfDkZcbT50YxHjBKBrsX 6H228uHVhB5c/GZgDczJbwCeNkreVCsnmasDI9TjvWsvOnoLtlgsn2oNp5w5kW65 ixESdxY8oWX8FpF5NBuqy63XB2piJQGpFCaLYltk5cw/pxaxcqXQo1q07YgUf3Gi ZNh5HN/dWwJTQMoEJ3nL9QtVy3KDTM4JTN6AN7OpLlt4ockWEtCMMgOMXMlDDWaX 2BwV0eezCM338DX9bkZlD/UMXTN9bpGcJShfNxbAHuzhWJfBvTVWLcVPI+WyaJ8Y V8BxZQeofLi26mNr8F3sXyiYRQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMkDeXop ktCFFPfhZDXkREiSA/RQMB8GA1UdIwQYMBaAFOR304qqxKN8xt8WZb8ciAr5m3tP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80RTNFMzY3RTk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi81SGZUaXFyRW8zekczeFpsdnh5SUN2bWJl MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVIZlRpcXJFbzN6RzN4Wmx2eHlJQ3ZtYmUwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTUwNEUvNEUzRTM2N0U5NjA4MTFFQ0EwNEEwMDg2QzRGOUFFMDIvNUY5RkExMkUw Q0E0MTFFRDk2OTM2RDc5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQD0FfIMA0GCSqGSIb3DQEBCwUAA4IBAQAj9/96zlaZraQNRZGpwzAH eljHwXlVJnEeu42elO24UGzRnTsXkW+V2QGVhXg1YzF2aDjQrLZphGd6oyyq6TP+ SlvLofByS10B+Q7eVB0EimPBGkauhTjW2oi04Sb8K1UK1rHGljCIPEa5dgkmjLlb 2TTtS9Ata5y+35A+YMZ6MKL0s/7a2s1xCth3uhu1pWaFe2v/s5QdHaxPSPHqTfES Jef8XrcenJOJq9T1D86DeI/1Z1jWp3mt33vDlbkdWER5A2QYBa8jrz3kabM63tJr YYZ91sENXmCYVVtjRff3/g+stkWD895Hn5zM/fi84zdT1PHCfQD/a01oy2I1PkrU -----END CERTIFICATE-----Generated at Fri Jul 24 00:42:48 2026 by rpki-client