$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/42724A42D87811E98F4DC832C4F9AE02.roa File: 42724A42D87811E98F4DC832C4F9AE02.roa (raw, json) Hash identifier: ZJYaPsTMO3Cea4Hqz4wOhF/LU5hO3CBOLG+2o7dGQng= Subject key identifier: 8F:42:C0:92:8E:42:67:3A:0A:C0:99:05:A0:56:1E:D9:2B:E9:40:EB Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Certificate serial: 2876 Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/42724A42D87811E98F4DC832C4F9AE02.roa Signing time: Mon 20 Jul 2026 16:15:29 +0000 ROA not before: Mon 20 Jul 2026 16:15:29 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 45667 IP address blocks: 202.60.206.0/24 maxlen: 24 203.159.98.0/24 maxlen: 24 203.159.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10358 (0x2876) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Validity Not Before: Jul 20 16:15:29 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a5e49a1-b7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:2b:40:14:88:8b:cf:b2:fc:d8:68:f4:f6: 36:87:68:e5:6c:8d:a1:24:2c:49:bf:1a:e2:94:b0: b0:c9:8c:67:33:72:b3:5d:41:4d:5a:6f:36:e2:84: ed:11:a5:e5:8e:86:d2:cd:e1:0a:b2:7a:0d:d1:93: 14:a7:10:9a:d5:65:ef:d4:a9:07:f3:c5:46:6a:b4: 4f:41:07:e8:27:bc:17:ff:48:05:e0:4f:95:7c:58: 9d:cc:ee:9a:4d:da:a5:cb:9b:c0:ac:45:0f:b0:57: ad:84:58:c7:0c:88:c7:2e:e7:d7:cc:71:2d:93:22: f9:81:a0:26:21:3c:f8:ea:69:31:df:4f:53:9d:02: 96:e2:af:be:e7:59:d6:bb:e4:13:24:ba:74:80:5e: 48:12:c5:d8:78:35:c5:d9:9b:d2:61:f9:64:6c:5f: 33:f6:37:49:a4:ff:73:8b:04:ab:23:9b:36:c9:13: 0c:50:2f:06:ca:55:68:ed:72:a3:c4:9d:12:43:73: 55:d0:5f:e0:53:a9:02:e6:f2:77:d0:db:ad:48:ba: 52:26:5c:01:ca:c8:67:77:8d:3e:ee:bb:b3:b1:aa: e9:38:40:c4:8d:12:5c:7a:c1:32:8a:06:c9:70:4e: 55:6e:4b:40:d4:91:a7:08:1d:71:38:a4:fb:04:4c: c2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:42:C0:92:8E:42:67:3A:0A:C0:99:05:A0:56:1E:D9:2B:E9:40:EB X509v3 Authority Key Identifier: keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/42724A42D87811E98F4DC832C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.60.206.0/24 203.159.98.0/24 203.159.119.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:0b:1f:91:02:34:39:f4:0f:e9:48:ac:9c:85:a1:5e:56:fa: 3b:3a:8b:9f:08:d9:0a:63:01:00:22:2a:19:ac:c5:cc:c1:da: 54:64:86:b3:8f:04:80:86:88:3a:e7:eb:4d:09:fc:22:05:63: d1:de:8b:22:5e:4e:9e:c8:c2:91:7e:8d:9d:2b:6c:c9:56:ff: fa:c7:34:7e:1d:55:af:68:1e:9d:71:f7:3e:ee:9f:54:5c:0a: 59:f8:93:4c:6e:8f:39:d4:89:14:93:24:82:ce:bc:a5:a3:0c: 5a:95:e2:ff:f5:15:03:55:58:c7:9e:eb:6b:af:ea:b2:63:56: f5:c6:e1:ab:fc:9a:20:04:00:e2:f6:f1:f7:31:4a:1f:1a:92: 32:07:00:e0:78:8e:78:2c:14:1f:1c:1e:90:36:66:17:59:3d: 65:60:2b:a4:07:92:b9:d4:7c:aa:23:19:e6:5f:d5:e0:85:1b: 57:a7:f9:78:fc:77:59:ec:f3:ed:fb:09:c6:92:7b:83:a5:d4: 18:49:e8:9a:1c:97:9b:48:f5:87:26:46:c3:01:34:13:79:62: 99:56:f8:50:ef:f1:a0:36:3b:09:f4:b7:a8:73:b0:7c:b4:22: 4f:1b:af:90:e1:2a:a8:46:e7:c1:44:fa:6e:5f:1e:c3:32:fb: a3:5b:a1:40 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICKHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE RjgwN0NEODEwHhcNMjYwNzIwMTYxNTI5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTVlNDlhMS1iN2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwForQBSIi8+y/Nho9PY2h2jlbI2hJCxJvxrilLCwyYxnM3KzXUFNWm824oTt EaXljobSzeEKsnoN0ZMUpxCa1WXv1KkH88VGarRPQQfoJ7wX/0gF4E+VfFidzO6a Tdqly5vArEUPsFethFjHDIjHLufXzHEtkyL5gaAmITz46mkx309TnQKW4q++51nW u+QTJLp0gF5IEsXYeDXF2ZvSYflkbF8z9jdJpP9ziwSrI5s2yRMMUC8GylVo7XKj xJ0SQ3NV0F/gU6kC5vJ30NutSLpSJlwByshnd40+7ruzsarpOEDEjRJcesEyigbJ cE5VbktA1JGnCB1xOKT7BEzC/wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFI9CwJKO Qmc6CsCZBaBWHtkr6UDrMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3 Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6 WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFFNjAvRjE5OTY3MTJDN0NGMTFFNEIxM0JFMTIxQzRGOUFFMDIvNDI3MjRBNDJE ODc4MTFFOThGNERDODMyQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAyjzOAwQAy59iAwQAy593MA0GCSqGSIb3DQEBCwUAA4IBAQCcCx+R AjQ59A/pSKychaFeVvo7OoufCNkKYwEAIioZrMXMwdpUZIazjwSAhog65+tNCfwi BWPR3osiXk6eyMKRfo2dK2zJVv/6xzR+HVWvaB6dcfc+7p9UXApZ+JNMbo851IkU kySCzrylowxaleL/9RUDVVjHnutrr+qyY1b1xuGr/JogBADi9vH3MUofGpIyBwDg eI54LBQfHB6QNmYXWT1lYCukB5K51HyqIxnmX9XghRtXp/l4/HdZ7PPt+wnGknuD pdQYSeiaHJebSPWHJkbDATQTeWKZVvhQ7/GgNjsJ9Leoc7B8tCJPG6+Q4SqoRufB RPpuXx7DMvujW6FA -----END CERTIFICATE-----Generated at Fri Jul 24 07:12:45 2026 by rpki-client