$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/6CAAA4586C5111F08D82894CC4F9AE02.roa File: 6CAAA4586C5111F08D82894CC4F9AE02.roa (raw, json) Hash identifier: Aiqr1BZcTds3P/iXTe2jF+OrDs76X3Zs65sOq3vVPbg= Subject key identifier: 79:FF:EE:C8:9E:62:54:55:D6:1A:9A:84:5E:03:A6:59:65:CF:86:DF Certificate issuer: /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Certificate serial: BC Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/6CAAA4586C5111F08D82894CC4F9AE02.roa Signing time: Thu 23 Jul 2026 09:36:07 +0000 ROA not before: Thu 23 Jul 2026 09:36:07 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 153952 IP address blocks: 202.1.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Validity Not Before: Jul 23 09:36:07 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a61e087-65b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f5:bc:a4:91:99:8a:34:8d:3b:d2:f0:09:e0: 16:54:fb:d5:5d:a4:e7:48:16:f7:82:c7:ca:43:2f: 5e:23:3b:69:31:cf:15:cf:28:51:f9:79:94:ad:f3: b5:05:b9:82:23:2a:d4:83:c5:7c:96:7e:b2:d0:14: 9a:30:f1:2e:4d:4f:01:db:c8:61:67:ae:23:24:1f: e4:1c:88:8f:35:7f:82:50:93:fb:d6:6b:3a:35:8e: 51:da:32:fc:59:d6:7d:24:35:d9:43:50:71:03:f2: 40:fb:da:c1:bf:62:78:1b:33:8c:e4:7c:7d:5c:7e: c8:89:d2:f8:16:bd:f4:9a:f8:66:3c:d4:a2:3b:5f: ed:04:30:42:41:d5:5f:e9:f5:26:ea:a3:0c:72:a3: 59:47:59:b8:33:e3:83:25:e3:d0:68:12:78:0d:00: 9a:46:1b:72:c3:74:36:2e:89:0c:32:82:90:b0:88: 54:41:81:03:d1:0c:6e:f0:76:60:c1:61:d9:11:88: 07:9e:da:74:4c:e3:f3:3a:70:8b:5b:85:f7:54:d1: 74:0f:08:65:2e:96:67:21:4b:48:65:4e:de:56:fe: 1c:d5:f6:f3:36:04:af:27:d1:51:ed:eb:8a:21:79: 3e:ae:e5:57:1a:75:ab:23:77:4d:7a:0a:2b:bb:75: 73:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FF:EE:C8:9E:62:54:55:D6:1A:9A:84:5E:03:A6:59:65:CF:86:DF X509v3 Authority Key Identifier: keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/6CAAA4586C5111F08D82894CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.1.20.0/23 Signature Algorithm: sha256WithRSAEncryption 89:13:5e:c8:85:bb:52:c9:3e:b3:76:77:25:4e:f3:3c:37:12: 90:51:06:f5:21:2c:31:d7:79:19:34:95:04:1f:3b:d3:56:46: 7c:1e:70:8a:31:16:b9:cb:96:08:93:01:e6:90:52:76:19:19: b3:9d:71:a6:e7:b5:17:10:fd:ef:9c:24:d3:1b:14:ee:c3:fa: 1b:fb:cb:01:bf:70:b9:9c:0f:6f:60:36:c3:d7:2c:81:78:fe: f2:10:96:8c:1b:77:0e:0d:a6:db:2a:2a:fc:0d:de:15:61:45: b2:e8:10:c2:41:9d:2e:9a:f0:24:99:b9:77:69:c3:b9:00:e5: 62:4f:4f:db:14:de:8e:f8:6f:8f:fb:44:fe:b6:68:0b:3c:ef: 68:9c:21:93:23:de:3b:1a:af:28:0b:68:b0:0c:c0:56:23:c3: 31:40:77:34:d3:21:75:00:69:9c:9c:92:71:d0:a1:32:b1:cd: ae:26:37:53:83:95:ef:fe:02:c1:bc:c6:5d:33:49:a4:dc:fc: 21:c8:90:f4:77:b4:92:14:0a:0b:8e:59:69:d1:86:3f:a7:a8: 68:b6:de:63:8c:95:1a:f4:bf:54:04:b3:ed:c4:a5:4c:1a:53: 1a:c2:5a:fa:a3:8b:85:a5:7a:27:a2:a4:98:8a:d4:14:fa:79: 93:34:14:9c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0MzIxMTAvBgNVBAUTKDk2RkMzRDFGODc5NUJFRTlFQUExRUI5NUQyOUE1OUM4 QTQwMjczRDMwHhcNMjYwNzIzMDkzNjA3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYxZTA4Ny02NWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfW8pJGZijSNO9LwCeAWVPvVXaTnSBb3gsfKQy9eIztpMc8VzyhR+XmUrfO1 BbmCIyrUg8V8ln6y0BSaMPEuTU8B28hhZ64jJB/kHIiPNX+CUJP71ms6NY5R2jL8 WdZ9JDXZQ1BxA/JA+9rBv2J4GzOM5Hx9XH7IidL4Fr30mvhmPNSiO1/tBDBCQdVf 6fUm6qMMcqNZR1m4M+ODJePQaBJ4DQCaRhtyw3Q2LokMMoKQsIhUQYED0Qxu8HZg wWHZEYgHntp0TOPzOnCLW4X3VNF0DwhlLpZnIUtIZU7eVv4c1fbzNgSvJ9FR7euK IXk+ruVXGnWrI3dNegoru3Vz4wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHn/7sie YlRV1hqahF4Dplllz4bfMB8GA1UdIwQYMBaAFJb8PR+Hlb7p6qHrldKaWcikAnPT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODQzMi9GQjY4NUIxRTZD NTAxMUYwODk5ODA3NEJDNEY5QUUwMi9sdnc5SDRlVnZ1bnFvZXVWMHBwWnlLUUNj OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2dzlINGVWdnVucW9ldVYwcHBaeUtRQ2M5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg0MzIvRkI2ODVCMUU2QzUwMTFGMDg5OTgwNzRCQzRGOUFFMDIvNkNBQUE0NTg2 QzUxMTFGMDhEODI4OTRDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBygEUMA0GCSqGSIb3DQEBCwUAA4IBAQCJE17IhbtSyT6zdnclTvM8 NxKQUQb1ISwx13kZNJUEHzvTVkZ8HnCKMRa5y5YIkwHmkFJ2GRmznXGm57UXEP3v nCTTGxTuw/ob+8sBv3C5nA9vYDbD1yyBeP7yEJaMG3cODabbKir8Dd4VYUWy6BDC QZ0umvAkmbl3acO5AOViT0/bFN6O+G+P+0T+tmgLPO9onCGTI947Gq8oC2iwDMBW I8MxQHc00yF1AGmcnJJx0KEysc2uJjdTg5Xv/gLBvMZdM0mk3PwhyJD0d7SSFAoL jllp0YY/p6hott5jjJUa9L9UBLPtxKVMGlMawlr6o4uFpXonoqSYitQU+nmTNBSc -----END CERTIFICATE-----Generated at Fri Jul 24 12:37:26 2026 by rpki-client