$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/96AD16C6B5FA11F0A1583C84C4F9AE02.roa File: 96AD16C6B5FA11F0A1583C84C4F9AE02.roa (raw, json) Hash identifier: cPtboh4v7nkotNNj9XWHw3L4iY4CTngCHMdDjbgdLS8= Subject key identifier: 2F:68:6B:10:B0:1E:7E:77:0F:05:0F:8F:3C:FF:F0:C8:B2:91:CC:FC Certificate issuer: /CN=A91139AB/serialNumber=C1424C4CCC59C9A031BE1ACDF7982D87AB57D068 Certificate serial: 80 Authority key identifier: C1:42:4C:4C:CC:59:C9:A0:31:BE:1A:CD:F7:98:2D:87:AB:57:D0:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUJMTMxZyaAxvhrN95gth6tX0Gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/96AD16C6B5FA11F0A1583C84C4F9AE02.roa Signing time: Sat 30 May 2026 21:26:43 +0000 ROA not before: Sat 30 May 2026 21:26:43 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 4857 IP address blocks: 202.147.96.0/20 maxlen: 20 202.147.112.0/20 maxlen: 24 203.82.160.0/20 maxlen: 24 203.82.176.0/20 maxlen: 24 203.201.64.0/20 maxlen: 24 203.201.80.0/20 maxlen: 24 203.201.96.0/20 maxlen: 20 203.201.112.0/20 maxlen: 24 221.120.128.0/20 maxlen: 24 221.120.144.0/24 maxlen: 24 221.120.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.crl rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUJMTMxZyaAxvhrN95gth6tX0Gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 21:10:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91139AB, serialNumber=C1424C4CCC59C9A031BE1ACDF7982D87AB57D068 Validity Not Before: May 30 21:26:43 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6a1b5613-13ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:65:46:e5:48:cf:a6:63:4b:15:4c:f5:ae:3d: 8d:1e:db:27:2d:91:99:41:5e:dd:d2:3b:a4:ca:ee: fa:85:72:86:10:bf:a3:fe:7d:33:3e:48:c7:1b:4a: 52:4a:69:df:0e:39:29:8f:db:26:71:a6:8c:a0:2b: 81:08:50:2d:f2:77:36:53:f9:55:79:a5:16:51:b7: 3d:ab:1c:21:82:38:d2:69:c3:a5:4b:ce:d3:dc:97: c9:bc:87:b7:bb:f1:07:d6:2e:5a:6c:a6:48:e6:97: 64:85:84:da:2f:7c:99:5b:9c:47:95:14:48:c7:b2: ce:f9:d7:90:9f:95:91:c6:5a:1b:c0:36:95:67:a3: 34:61:e0:78:a5:dc:ee:e9:d9:d7:a6:df:c4:03:ff: d1:c1:14:c1:2e:82:53:a5:5b:62:9c:3c:db:85:7f: 70:67:c8:3b:19:a6:23:6e:75:0d:9d:b5:e3:c5:c7: d1:16:fe:c3:dd:6c:bc:d2:24:d2:b5:27:6d:cb:ca: 10:35:4e:59:bb:7f:5c:bd:89:13:7e:a5:a8:3c:49: c2:b8:76:65:31:72:3d:e0:2f:f6:98:05:16:1c:b4: 1a:f3:ce:4a:6a:4a:cb:4e:3b:6d:c2:b0:b3:2a:11: e9:d3:b5:25:b3:51:85:92:e4:2c:1a:a3:e1:0c:50: 28:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:68:6B:10:B0:1E:7E:77:0F:05:0F:8F:3C:FF:F0:C8:B2:91:CC:FC X509v3 Authority Key Identifier: keyid:C1:42:4C:4C:CC:59:C9:A0:31:BE:1A:CD:F7:98:2D:87:AB:57:D0:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUJMTMxZyaAxvhrN95gth6tX0Gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/96AD16C6B5FA11F0A1583C84C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.147.96.0/19 203.82.160.0/19 203.201.64.0/18 221.120.128.0-221.120.145.255 Signature Algorithm: sha256WithRSAEncryption 53:df:3e:bd:02:41:6a:72:1a:db:d5:c5:9e:bd:6d:99:26:de: 9f:85:cc:19:f9:11:72:16:46:bd:37:2a:a2:ba:71:e2:a8:12: 2f:a9:56:c0:d1:86:e1:d4:3a:70:66:03:1f:30:d6:98:61:53: b9:6a:d5:db:87:f9:1b:f0:24:5b:81:61:1b:86:23:1b:af:b0: 3e:fa:14:c3:aa:8a:29:38:9d:7e:b0:b8:9a:e5:9d:d1:bc:98: 8e:e5:48:e7:e6:cd:2d:45:b8:47:52:54:30:6f:52:63:6d:f0: 5e:44:e3:f3:51:4b:f8:21:af:5a:ac:e2:5a:c6:32:c3:11:17: e1:04:31:2d:f2:a1:9b:9e:c3:21:f8:e7:f7:03:11:8e:20:79: 8a:ba:7a:d5:83:ca:94:0d:99:25:c3:a6:c7:38:76:e1:c4:9c: 22:41:96:a6:d6:46:33:5a:e2:ac:1b:9a:44:fa:c8:d0:5c:65: 3c:f7:3d:8b:ce:84:90:1c:5a:27:07:ba:2b:25:93:00:b9:d7: e8:a4:ee:4d:ae:7e:b6:e5:e5:90:1a:e3:8b:10:bc:1a:5e:d4: fe:17:3b:e4:2a:14:7b:40:0d:ad:bd:3d:12:5e:74:19:10:47: 9d:e9:c7:a5:cd:94:dd:82:94:5b:70:2a:76:93:c4:2e:68:e0: 1d:df:4d:d8 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM5QUIxMTAvBgNVBAUTKEMxNDI0QzRDQ0M1OUM5QTAzMUJFMUFDREY3OTgyRDg3 QUI1N0QwNjgwHhcNMjYwNTMwMjEyNjQzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFiNTYxMy0xM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmVG5UjPpmNLFUz1rj2NHtsnLZGZQV7d0jukyu76hXKGEL+j/n0zPkjHG0pS SmnfDjkpj9smcaaMoCuBCFAt8nc2U/lVeaUWUbc9qxwhgjjSacOlS87T3JfJvIe3 u/EH1i5abKZI5pdkhYTaL3yZW5xHlRRIx7LO+deQn5WRxlobwDaVZ6M0YeB4pdzu 6dnXpt/EA//RwRTBLoJTpVtinDzbhX9wZ8g7GaYjbnUNnbXjxcfRFv7D3Wy80iTS tSdty8oQNU5Zu39cvYkTfqWoPEnCuHZlMXI94C/2mAUWHLQa885KakrLTjttwrCz KhHp07Uls1GFkuQsGqPhDFAoVQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFC9oaxCw Hn53DwUPjzz/8Miykcz8MB8GA1UdIwQYMBaAFMFCTEzMWcmgMb4azfeYLYerV9Bo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzlBQi8xNThENDkwNjI1 NUIxMUVCQTlGNTYwMUFDNEY5QUUwMi93VUpNVE14WnlhQXh2aHJOOTVndGg2dFgw R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVSk1UTXhaeWFBeHZock45NWd0aDZ0WDBHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTM5QUIvMTU4RDQ5MDYyNTVCMTFFQkE5RjU2MDFBQzRGOUFFMDIvOTZBRDE2QzZC NUZBMTFGMEExNTgzQzg0QzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQFypNgAwQFy1KgAwQGy8lAMAwDBAfdeIADBAHdeJAwDQYJKoZIhvcN AQELBQADggEBAFPfPr0CQWpyGtvVxZ69bZkm3p+FzBn5EXIWRr03KqK6ceKoEi+p VsDRhuHUOnBmAx8w1phhU7lq1duH+RvwJFuBYRuGIxuvsD76FMOqiik4nX6wuJrl ndG8mI7lSOfmzS1FuEdSVDBvUmNt8F5E4/NRS/ghr1qs4lrGMsMRF+EEMS3yoZue wyH45/cDEY4geYq6etWDypQNmSXDpsc4duHEnCJBlqbWRjNa4qwbmkT6yNBcZTz3 PYvOhJAcWicHuislkwC51+ik7k2ufrbl5ZAa44sQvBpe1P4XO+QqFHtADa29PRJe dBkQR53px6XNlN2ClFtwKnaTxC5o4B3fTdg= -----END CERTIFICATE-----Generated at Sun Jun 14 00:21:39 2026 by rpki-client