$ rpki-client -vvf rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/1EDAC9BA85AA11F1B700E1E55BA30FBC.roa File: 1EDAC9BA85AA11F1B700E1E55BA30FBC.roa (raw, json) Hash identifier: kf1pHs/8bNvsCfkzb+oZx7Nt2agM4ptLzDTnsP5UWjI= Subject key identifier: CF:9A:DA:56:4B:E9:B3:0D:DF:A5:56:02:22:7D:02:A4:F1:BA:BD:BD Certificate issuer: /CN=A91F090C/serialNumber=8AEE29DB2FE91407FE40E4BE78C40626D7E18FB1 Certificate serial: 39 Authority key identifier: 8A:EE:29:DB:2F:E9:14:07:FE:40:E4:BE:78:C4:06:26:D7:E1:8F:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/1EDAC9BA85AA11F1B700E1E55BA30FBC.roa Signing time: Wed 22 Jul 2026 08:48:33 +0000 ROA not before: Wed 22 Jul 2026 08:48:33 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 45176 IP address blocks: 119.15.158.0/24 maxlen: 24 119.15.159.0/24 maxlen: 24 2405:dbc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F090C, serialNumber=8AEE29DB2FE91407FE40E4BE78C40626D7E18FB1 Validity Not Before: Jul 22 08:48:33 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a6083e1-f622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f9:5c:28:b4:2b:18:22:1b:14:83:74:86:7a: 22:96:c5:60:82:66:9f:0b:6d:92:46:2a:dc:2f:0a: 70:12:68:66:a1:b6:46:41:1c:f9:96:a0:5c:91:72: 78:33:6c:fe:5a:5a:13:dd:1d:6a:34:1d:61:ff:d5: a0:03:c9:7f:5d:eb:2a:5c:93:fb:5a:a0:c1:04:b6: ce:ee:08:02:6e:42:44:df:b8:03:79:b2:7f:b1:0d: f2:cb:e4:69:59:92:16:0b:89:03:50:05:92:b2:bc: c6:07:2e:5a:06:11:17:a4:f2:da:66:3d:54:b5:82: d7:24:6a:e7:92:9a:e0:f9:bc:cb:df:f1:2b:40:12: c0:5f:5c:43:e8:63:2f:8a:1d:43:ad:08:16:3d:5c: 3c:ca:60:d7:76:97:69:8b:af:4c:8e:60:90:d4:04: f1:fb:b3:a5:d6:97:ad:dd:ed:b3:61:50:e6:78:95: 63:84:83:4d:1d:fc:32:c4:a1:39:36:0f:2d:b4:3f: fd:92:96:20:9e:fb:ab:3e:23:df:fe:f8:b1:23:56: 27:f3:93:76:82:a7:06:9c:78:81:f9:3c:cc:ef:ba: 64:77:ff:7d:e8:36:b0:11:84:f3:68:ab:25:2b:59: 7f:60:3d:1b:be:b9:fa:de:5d:60:2f:65:df:03:97: f6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9A:DA:56:4B:E9:B3:0D:DF:A5:56:02:22:7D:02:A4:F1:BA:BD:BD X509v3 Authority Key Identifier: keyid:8A:EE:29:DB:2F:E9:14:07:FE:40:E4:BE:78:C4:06:26:D7:E1:8F:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/1EDAC9BA85AA11F1B700E1E55BA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 119.15.158.0/23 IPv6: 2405:dbc0::/32 Signature Algorithm: sha256WithRSAEncryption 31:ef:52:43:09:61:2c:eb:3e:c4:b0:a4:3d:ac:f1:35:47:fc: b1:cb:d3:10:2b:f7:87:ed:71:14:e4:43:35:2b:0d:ca:1a:32: 74:cd:a8:58:50:be:76:8c:45:20:24:77:e0:3f:15:ae:f1:9f: 0a:ba:77:e5:5a:7d:8c:da:2a:f7:57:9e:dd:ec:89:3c:f2:41: 1a:76:14:e2:9e:14:b9:56:18:c7:0e:5f:ac:df:07:f6:a3:3a: 68:a3:22:76:f1:d7:30:bc:1c:dc:82:19:ca:e0:63:09:4d:bc: 46:3c:73:19:b8:60:0d:8a:bd:51:ab:34:1c:a1:53:70:7d:1d: 8c:59:d4:13:1e:88:9a:30:f7:5c:7b:77:2f:28:d2:44:10:30: f3:95:a2:38:8f:97:77:ce:2c:e8:5f:54:df:99:cc:c8:cc:97: df:0a:ec:0b:9d:1d:f9:a6:f1:ea:d0:bd:3e:17:08:a8:c1:c6: 38:26:db:6e:f1:b2:ad:f6:29:a3:77:b2:d6:6c:36:04:83:c3: b6:ec:61:cf:fd:48:f8:af:47:6e:a5:48:3e:e2:cd:da:de:d1: e7:a4:9a:a1:fa:27:03:30:7d:25:21:2f:f2:04:7d:ae:02:83: 25:f6:8e:0d:87:c2:16:0a:b3:bf:57:71:c7:85:f2:3a:97:58: cd:e2:c1:30 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDkwQzExMC8GA1UEBRMoOEFFRTI5REIyRkU5MTQwN0ZFNDBFNEJFNzhDNDA2MjZE N0UxOEZCMTAeFw0yNjA3MjIwODQ4MzNaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNjA4M2UxLWY2MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCW+VwotCsYIhsUg3SGeiKWxWCCZp8LbZJGKtwvCnASaGahtkZBHPmWoFyRcngz bP5aWhPdHWo0HWH/1aADyX9d6ypck/taoMEEts7uCAJuQkTfuAN5sn+xDfLL5GlZ khYLiQNQBZKyvMYHLloGERek8tpmPVS1gtckaueSmuD5vMvf8StAEsBfXEPoYy+K HUOtCBY9XDzKYNd2l2mLr0yOYJDUBPH7s6XWl63d7bNhUOZ4lWOEg00d/DLEoTk2 Dy20P/2SliCe+6s+I9/++LEjVifzk3aCpwaceIH5PMzvumR3/33oNrARhPNoqyUr WX9gPRu+ufreXWAvZd8Dl/afAgMBAAGjggJvMIICazAdBgNVHQ4EFgQUz5raVkvp sw3fpVYCIn0CpPG6vb0wHwYDVR0jBBgwFoAUiu4p2y/pFAf+QOS+eMQGJtfhj7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOTBDL0I3QzRFOTM2NUQy OTExRUFCMDU0RkYzQkM0RjlBRTAyL2l1NHAyeV9wRkFmLVFPUy1lTVFHSnRmaGo3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaXU0cDJ5X3BGQWYtUU9TLWVNUUdKdGZoajdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDkwQy9CN0M0RTkzNjVEMjkxMUVBQjA1NEZGM0JDNEY5QUUwMi8xRURBQzlCQTg1 QUExMUYxQjcwMEUxRTU1QkEzMEZCQy5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE AgABMAYDBAF3D54wDQQCAAIwBwMFACQF28AwDQYJKoZIhvcNAQELBQADggEBADHv UkMJYSzrPsSwpD2s8TVH/LHL0xAr94ftcRTkQzUrDcoaMnTNqFhQvnaMRSAkd+A/ Fa7xnwq6d+VafYzaKvdXnt3siTzyQRp2FOKeFLlWGMcOX6zfB/ajOmijInbx1zC8 HNyCGcrgYwlNvEY8cxm4YA2KvVGrNByhU3B9HYxZ1BMeiJow91x7dy8o0kQQMPOV ojiPl3fOLOhfVN+ZzMjMl98K7AudHfmm8erQvT4XCKjBxjgm227xsq32KaN3stZs NgSDw7bsYc/9SPivR26lSD7izdre0eekmqH6JwMwfSUhL/IEfa4CgyX2jg2HwhYK s79XcceF8jqXWM3iwTA= -----END CERTIFICATE-----Generated at Fri Jul 24 20:19:20 2026 by rpki-client