$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/796A04A6BA1A11F08C920A83C4F9AE02.roa File: 796A04A6BA1A11F08C920A83C4F9AE02.roa (raw, json) Hash identifier: obYL84rEidQqf3PGOj0TCR0aB0CKEWuDcGzuDXBidKY= Subject key identifier: F8:19:28:65:55:1C:2E:A8:82:26:D2:82:6F:40:9F:B3:B7:91:AA:19 Certificate issuer: /CN=A91FEEA9/serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8 Certificate serial: 3540 Authority key identifier: 29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/796A04A6BA1A11F08C920A83C4F9AE02.roa Signing time: Fri 24 Apr 2026 15:14:00 +0000 ROA not before: Fri 24 Apr 2026 15:14:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134375 IP address blocks: 119.252.192.0/23 maxlen: 24 119.252.194.0/23 maxlen: 23 119.252.194.0/24 maxlen: 24 119.252.195.0/24 maxlen: 24 119.252.196.0/22 maxlen: 24 119.252.200.0/21 maxlen: 24 119.252.210.0/23 maxlen: 24 119.252.216.0/22 maxlen: 24 119.252.220.0/23 maxlen: 24 119.252.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13632 (0x3540) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEEA9, serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8 Validity Not Before: Apr 24 15:14:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69eb88b8-3477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ef:5a:a1:53:26:68:da:7d:4c:25:af:62:d3: 18:cb:0c:06:37:f9:df:db:59:b3:9d:5d:84:32:83: 13:53:43:fa:0c:f8:2b:d4:35:b0:94:1c:d0:03:01: 71:b8:65:3d:f2:78:44:fd:1f:62:9e:14:30:e0:09: 2d:07:a9:9c:89:43:56:fa:b5:67:9d:f4:4a:37:7e: dc:23:33:65:f8:d5:dd:d9:9f:da:60:87:29:f2:f9: 84:a4:82:44:07:22:77:bd:4e:f0:db:cd:56:c3:d3: 80:a6:42:8d:24:17:f7:1d:91:15:1b:6b:ae:d9:91: cb:3b:94:f4:87:e3:99:cc:38:d9:f9:77:23:82:e2: 56:27:88:af:42:7e:02:63:7b:84:e6:b5:97:64:95: 4a:c8:f4:88:a7:26:dd:3b:48:24:cb:11:07:0d:37: fe:b3:09:18:db:3b:b4:85:6e:4b:35:3a:cf:df:9c: d4:d2:c3:08:6b:4b:12:a6:1b:7e:15:7b:31:9d:5f: c3:f9:6e:3f:3c:32:90:d4:ec:69:1d:de:2d:1c:23: 74:43:6f:17:db:5f:25:4a:c0:8f:a5:e5:8e:07:b2: 77:64:0d:b8:01:63:2b:33:25:8a:32:28:00:3b:01: 63:8e:8d:45:c6:60:8c:db:23:b7:8b:c3:2b:6a:8e: aa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:19:28:65:55:1C:2E:A8:82:26:D2:82:6F:40:9F:B3:B7:91:AA:19 X509v3 Authority Key Identifier: keyid:29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/796A04A6BA1A11F08C920A83C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 119.252.192.0/20 119.252.210.0/23 119.252.216.0/21 Signature Algorithm: sha256WithRSAEncryption 02:2d:09:09:db:ac:e3:6c:90:1a:ee:1c:0f:cf:eb:56:ea:7b: aa:1e:e9:76:93:b7:37:b0:8c:85:a2:ff:25:4f:b2:b9:85:db: 73:0f:93:d0:4b:1b:9b:c6:ed:fb:26:f1:f1:ee:32:64:b5:00: 92:3e:41:2e:ca:98:fa:5a:29:c3:43:8f:c2:b8:aa:d0:63:02: 48:26:41:de:d2:5b:ef:ce:33:42:6c:f9:72:ce:67:b7:ea:b3: 2e:57:29:db:9f:fc:6b:df:68:ad:23:91:04:8a:63:ca:34:2c: 37:e7:0b:9f:3d:11:31:f5:d7:4d:4b:45:cc:aa:8a:12:6e:2e: 3e:8a:ba:05:ef:bb:e0:28:01:73:b5:19:49:27:b3:2d:00:38: 5e:6d:23:09:5c:59:05:c4:91:06:bc:36:66:35:5c:14:8d:1d: 26:40:8a:d8:75:20:cc:fb:ed:88:89:dd:83:60:6d:5a:2a:78: 3f:fb:ee:86:a3:e6:67:39:7a:9c:dc:52:18:5e:82:17:23:f9: a0:64:f1:49:b2:21:e7:d4:14:ee:99:1d:0f:3c:0d:50:81:88: 04:41:2f:db:fd:ef:e7:4b:5e:62:05:1c:db:0f:23:06:5d:43: e0:aa:51:5c:57:96:8f:2b:7e:7d:9c:ed:eb:df:fc:ae:c3:9a: fd:ac:e0:a6 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICNUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFQTkxMTAvBgNVBAUTKDI5NDFDNzE2MUVENEEyRTA5QkI5MUNBQkM0NDNDOEND QkMwMzJFRDgwHhcNMjYwNDI0MTUxNDAwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWViODhiOC0zNDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5u9aoVMmaNp9TCWvYtMYywwGN/nf21mznV2EMoMTU0P6DPgr1DWwlBzQAwFx uGU98nhE/R9inhQw4AktB6mciUNW+rVnnfRKN37cIzNl+NXd2Z/aYIcp8vmEpIJE ByJ3vU7w281Ww9OApkKNJBf3HZEVG2uu2ZHLO5T0h+OZzDjZ+XcjguJWJ4ivQn4C Y3uE5rWXZJVKyPSIpybdO0gkyxEHDTf+swkY2zu0hW5LNTrP35zU0sMIa0sSpht+ FXsxnV/D+W4/PDKQ1OxpHd4tHCN0Q28X218lSsCPpeWOB7J3ZA24AWMrMyWKMigA OwFjjo1FxmCM2yO3i8Mrao6qPQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFPgZKGVV HC6ogibSgm9An7O3kaoZMB8GA1UdIwQYMBaAFClBxxYe1KLgm7kcq8RDyMy8Ay7Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUVBOS9DRUQwQTlFNjFE OTcxMUUyQkYzRTgxODEwOEIwMkNEMi9LVUhIRmg3VW91Q2J1UnlyeEVQSXpMd0RM dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tVSEhGaDdVb3VDYnVSeXJ4RVBJekx3REx0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkVFQTkvQ0VEMEE5RTYxRDk3MTFFMkJGM0U4MTgxMDhCMDJDRDIvNzk2QTA0QTZC QTFBMTFGMDhDOTIwQTgzQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQEd/zAAwQBd/zSAwQDd/zYMA0GCSqGSIb3DQEBCwUAA4IBAQACLQkJ 26zjbJAa7hwPz+tW6nuqHul2k7c3sIyFov8lT7K5hdtzD5PQSxubxu37JvHx7jJk tQCSPkEuypj6WinDQ4/CuKrQYwJIJkHe0lvvzjNCbPlyzme36rMuVynbn/xr32it I5EEimPKNCw35wufPREx9ddNS0XMqooSbi4+iroF77vgKAFztRlJJ7MtADhebSMJ XFkFxJEGvDZmNVwUjR0mQIrYdSDM++2Iid2DYG1aKng/++6Go+ZnOXqc3FIYXoIX I/mgZPFJsiHn1BTumR0PPA1QgYgEQS/b/e/nS15iBRzbDyMGXUPgqlFcV5aPK359 nO3r3/yuw5r9rOCm -----END CERTIFICATE-----Generated at Wed May 13 07:22:38 2026 by rpki-client