$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/651072686CBB11EA95256D30C4F9AE02.roa File: 651072686CBB11EA95256D30C4F9AE02.roa (raw, json) Hash identifier: MFDPLm44DATJMRrpcLnWLE/YbVrKW9kBqUp08oFW0NM= Subject key identifier: 1A:C0:28:6E:07:47:E5:F1:7D:90:7E:B1:DF:FD:CD:F0:82:60:CA:99 Certificate issuer: /CN=A91EBBD7/serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19 Certificate serial: 0B3C Authority key identifier: A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/651072686CBB11EA95256D30C4F9AE02.roa Signing time: Mon 14 Sep 2026 19:39:10 +0000 ROA not before: Mon 14 Sep 2026 19:39:09 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 38004 IP address blocks: 202.89.24.0/21 maxlen: 21 202.89.24.0/25 maxlen: 25 202.89.24.128/25 maxlen: 25 202.89.25.0/24 maxlen: 25 202.89.26.0/24 maxlen: 24 202.89.29.0/24 maxlen: 24 2401:5f40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2876 (0xb3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBBD7, serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19 Validity Not Before: Sep 14 19:39:09 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa84d5d-abf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3b:05:44:ef:42:1e:6a:60:07:b8:d0:98:32: 7f:de:fc:b8:82:bf:b4:b6:04:8f:d1:79:b8:1b:43: 12:87:f1:f6:c1:24:44:35:d1:73:25:fa:34:6c:d3: 8e:f6:84:32:aa:25:a5:99:b3:d7:d5:68:94:d6:73: 12:9d:62:11:e9:71:64:61:06:85:06:4a:b6:b3:f4: f9:0b:86:a5:e4:83:c8:1b:35:f5:4f:ba:97:cb:fb: 52:d9:46:0a:5f:e7:9f:25:03:73:f3:7e:dc:10:2f: e3:5c:67:3f:b6:3b:50:8e:a0:9b:16:07:c3:c4:42: 57:f2:5c:73:16:30:5b:83:5d:3c:6f:35:a5:b9:f4: 0f:e7:ce:c3:27:2c:9e:87:18:e7:b3:86:53:86:1d: 26:8d:e6:06:ce:91:05:20:8e:2f:5b:5f:2b:71:ac: 83:f2:4f:3c:11:fa:ad:43:86:8d:10:8b:47:8a:88: 5d:ef:8a:c4:bc:a1:43:55:63:4e:02:e2:27:64:12: f7:f8:1a:59:94:87:ed:3a:ce:8c:d6:e8:39:ac:50: c8:c4:c0:bf:67:47:7e:43:45:7f:05:ca:a4:d9:57: cd:79:70:83:c9:49:cf:01:4f:04:13:2d:bd:8d:6c: 9f:24:65:e6:3a:3c:e6:ab:b7:7e:77:eb:a4:64:b8: 10:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C0:28:6E:07:47:E5:F1:7D:90:7E:B1:DF:FD:CD:F0:82:60:CA:99 X509v3 Authority Key Identifier: keyid:A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/651072686CBB11EA95256D30C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.89.24.0/21 IPv6: 2401:5f40::/32 Signature Algorithm: sha256WithRSAEncryption 6e:ae:c9:f0:e4:f8:df:38:21:92:c5:7d:b0:ac:9b:fb:12:07: d2:16:68:a7:7d:ac:28:20:94:95:0e:15:db:d7:c0:55:dd:7b: c1:9c:b4:4b:50:ac:aa:86:99:15:31:db:ef:ef:f5:d9:59:cc: ed:a5:6d:87:7b:65:4a:ee:6c:e9:80:3b:91:6c:79:2a:3d:ee: 7c:ec:56:c7:1b:78:97:87:7c:0d:18:d5:fb:4b:2e:ef:2a:35: 03:8b:71:30:b9:16:90:95:96:44:9b:18:d7:58:42:41:9b:7c: 39:0b:9b:6c:4f:36:ec:3f:bb:f3:53:8c:d6:f8:d1:a7:14:99: e2:36:a2:a1:19:f8:11:46:d9:34:a9:0b:18:26:0b:36:93:4b: 8b:58:48:3b:f8:e9:4b:4e:7a:65:91:24:68:23:6f:4c:38:ff: f5:1b:00:ec:aa:c0:e7:6e:38:7e:5c:3d:ad:b8:e0:48:c8:f7: 09:81:8c:0f:28:d7:0c:f6:d4:ff:8f:4c:2c:6a:92:fd:d4:ce: 7b:82:3b:d3:13:80:05:82:dd:ff:6b:96:f3:f4:d5:65:07:3d: ce:9a:42:d9:19:df:30:bf:57:ce:4b:db:4a:e1:d0:19:70:13: d6:96:ce:e6:ca:89:2c:9f:39:77:53:6b:eb:cf:cb:5d:59:b3: 4b:3e:4a:2b -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCRDcxMTAvBgNVBAUTKEE5QkIwREZCNkQ0RkY2M0I3Mjg4MzNCRTBBRDY2MjM3 OTZFQzhBMTkwHhcNMjYwOTE0MTkzOTA5WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE4NGQ1ZC1hYmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6jsFRO9CHmpgB7jQmDJ/3vy4gr+0tgSP0Xm4G0MSh/H2wSRENdFzJfo0bNOO 9oQyqiWlmbPX1WiU1nMSnWIR6XFkYQaFBkq2s/T5C4al5IPIGzX1T7qXy/tS2UYK X+efJQNz837cEC/jXGc/tjtQjqCbFgfDxEJX8lxzFjBbg108bzWlufQP587DJyye hxjns4ZThh0mjeYGzpEFII4vW18rcayD8k88EfqtQ4aNEItHiohd74rEvKFDVWNO AuInZBL3+BpZlIftOs6M1ug5rFDIxMC/Z0d+Q0V/Bcqk2VfNeXCDyUnPAU8EEy29 jWyfJGXmOjzmq7d+d+ukZLgQAQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFBrAKG4H R+XxfZB+sd/9zfCCYMqZMB8GA1UdIwQYMBaAFKm7DfttT/Y7cogzvgrWYjeW7IoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkJENy9GOTMyMTkxMjZD QjkxMUVBODA4MzJFMkVDNEY5QUUwMi9xYnNOLTIxUDlqdHlpRE8tQ3RaaU41YnNp aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Fic04tMjFQOWp0eWlETy1DdFppTjVic2loay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUJCRDcvRjkzMjE5MTI2Q0I5MTFFQTgwODMyRTJFQzRGOUFFMDIvNjUxMDcyNjg2 Q0JCMTFFQTk1MjU2RDMwQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQDylkYMA0EAgACMAcDBQAkAV9AMA0GCSqGSIb3DQEBCwUAA4IBAQBu rsnw5PjfOCGSxX2wrJv7EgfSFminfawoIJSVDhXb18BV3XvBnLRLUKyqhpkVMdvv 7/XZWcztpW2He2VK7mzpgDuRbHkqPe587FbHG3iXh3wNGNX7Sy7vKjUDi3EwuRaQ lZZEmxjXWEJBm3w5C5tsTzbsP7vzU4zW+NGnFJniNqKhGfgRRtk0qQsYJgs2k0uL WEg7+OlLTnplkSRoI29MOP/1GwDsqsDnbjh+XD2tuOBIyPcJgYwPKNcM9tT/j0ws apL91M57gjvTE4AFgt3/a5bz9NVlBz3OmkLZGd8wv1fOS9tK4dAZcBPWls7myoks nzl3U2vrz8tdWbNLPkor -----END CERTIFICATE-----Generated at Sat Sep 26 15:46:17 2026 by rpki-client