$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/40C6FC26ABFA11F1BB867F9D6911F970.roa File: 40C6FC26ABFA11F1BB867F9D6911F970.roa (raw, json) Hash identifier: 2dqyZkRvza50oGysNw3pfGLRZQAvLoX2N8qymJzoCB0= Subject key identifier: 69:D9:30:7F:DE:C6:46:DB:34:6B:9D:FD:00:53:08:F5:3C:67:6C:9A Certificate issuer: /CN=A911EEF8/serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C Certificate serial: 015B Authority key identifier: 56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/40C6FC26ABFA11F1BB867F9D6911F970.roa Signing time: Wed 09 Sep 2026 02:57:54 +0000 ROA not before: Wed 09 Sep 2026 02:57:54 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 18383 IP address blocks: 202.10.96.0/20 maxlen: 22 202.10.96.0/21 maxlen: 24 202.10.104.0/22 maxlen: 24 202.10.108.0/23 maxlen: 24 2403:1800::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EEF8, serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C Validity Not Before: Sep 9 02:57:54 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6aa0cb32-dfd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ee:a8:33:69:0e:d6:bf:44:07:82:a5:07:14: f2:86:4d:bb:88:98:bb:05:72:3a:2b:29:0f:7f:f9: e1:0b:6e:91:8e:95:86:3f:fd:e0:ed:02:af:87:b9: 68:cd:c7:90:32:d2:f4:11:64:d0:b4:df:59:37:2f: 6b:f1:f1:fb:59:b0:08:cb:37:f6:1d:a0:4b:7e:a2: 5e:4b:ac:89:9f:cf:10:fd:4b:fd:30:9f:2a:31:4c: 2c:9e:16:1e:a0:e7:95:6d:d0:31:51:73:18:e6:86: a1:d9:48:e5:7a:5c:f9:3b:d0:a2:fb:60:f0:5c:9d: 1d:cd:bd:4c:43:86:d2:bd:cc:96:4c:9d:32:dc:24: 58:0a:ef:8e:f2:4e:65:c1:08:f5:60:33:f0:2c:ae: 77:72:76:31:6b:44:69:c1:42:ec:8d:15:0c:08:49: c8:b7:be:5b:f6:a0:3a:b7:1f:ff:3b:0f:2d:29:61: 94:8f:b5:1c:39:be:da:63:e5:65:af:b1:d8:98:94: 36:0b:92:69:80:f8:74:36:86:8a:b7:a5:bc:04:a6: 9c:60:e7:a5:5f:a6:e8:e7:ae:a3:3e:7f:06:d9:84: e5:dc:ab:86:62:0a:3b:6a:79:fc:fc:ad:57:e5:24: 21:7d:90:f8:7e:a0:87:06:1b:20:14:5e:b2:8c:44: c6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D9:30:7F:DE:C6:46:DB:34:6B:9D:FD:00:53:08:F5:3C:67:6C:9A X509v3 Authority Key Identifier: keyid:56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/40C6FC26ABFA11F1BB867F9D6911F970.roa sbgp-ipAddrBlock: critical IPv4: 202.10.96.0/20 IPv6: 2403:1800::/32 Signature Algorithm: sha256WithRSAEncryption 28:39:f2:83:7e:db:4f:3e:3e:79:5d:71:6e:10:57:4b:25:d1: 83:f4:5f:1e:c1:c7:f3:b1:e7:06:27:be:b2:84:d4:83:e0:15: 6d:c6:d3:7f:58:ba:e4:4c:ff:1b:33:76:21:bb:d7:91:72:cc: 09:01:f7:fd:70:d0:64:9a:84:64:62:c7:3a:3b:fd:04:ba:04: 7b:39:40:5d:03:81:8e:79:06:ff:76:3f:a9:c9:07:6e:d5:e6: b9:87:86:af:64:e6:54:cf:83:4b:e8:a5:c4:66:70:06:d8:a2: f6:b6:c6:52:62:1b:51:3f:17:ea:aa:d6:25:bd:ec:21:e7:c5: 2e:80:8a:88:e2:15:ad:30:f2:b7:a2:01:d6:3b:f8:18:65:44: 0f:17:e5:0c:d6:c2:0a:4f:94:23:55:30:fd:09:88:84:c2:e0: 07:5c:94:cf:bb:2a:00:13:e2:73:fc:25:57:54:7f:79:c5:70: df:a7:77:76:ec:e5:80:b5:f5:7f:ba:45:fd:f2:96:79:64:81: fe:67:54:6d:a9:af:ac:e5:5a:fc:12:68:91:45:ed:fd:7e:ff: f5:fd:dc:a7:85:fc:11:d4:24:7d:58:3c:44:3a:5d:b1:54:14: 87:98:30:82:55:ee:65:f6:56:b0:e7:50:f7:77:42:b5:4d:44: 2c:55:6b:64 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVFRjgxMTAvBgNVBAUTKDU2QzY5MzA1QjVFQkE1NDI1NTVEOEM3OEM1NjFBQjdB NkNEMUFBMkMwHhcNMjYwOTA5MDI1NzU0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEwY2IzMi1kZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3O6oM2kO1r9EB4KlBxTyhk27iJi7BXI6KykPf/nhC26RjpWGP/3g7QKvh7lo zceQMtL0EWTQtN9ZNy9r8fH7WbAIyzf2HaBLfqJeS6yJn88Q/Uv9MJ8qMUwsnhYe oOeVbdAxUXMY5oah2Ujlelz5O9Ci+2DwXJ0dzb1MQ4bSvcyWTJ0y3CRYCu+O8k5l wQj1YDPwLK53cnYxa0RpwULsjRUMCEnIt75b9qA6tx//Ow8tKWGUj7UcOb7aY+Vl r7HYmJQ2C5JpgPh0NoaKt6W8BKacYOelX6bo566jPn8G2YTl3KuGYgo7ann8/K1X 5SQhfZD4fqCHBhsgFF6yjETGUwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFGnZMH/e xkbbNGud/QBTCPU8Z2yaMB8GA1UdIwQYMBaAFFbGkwW166VCVV2MeMVhq3ps0aos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUVGOC85Nzk5RTZEMEJC QzQxMUVGQjk4NUJFM0ZDNEY5QUUwMi9Wc2FUQmJYcnBVSlZYWXg0eFdHcmVtelJx aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZzYVRCYlhycFVKVlhZeDR4V0dyZW16UnFpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUVFRjgvOTc5OUU2RDBCQkM0MTFFRkI5ODVCRTNGQzRGOUFFMDIvNDBDNkZDMjZB QkZBMTFGMUJCODY3RjlENjkxMUY5NzAucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQEygpgMA0EAgACMAcDBQAkAxgAMA0GCSqGSIb3DQEBCwUAA4IBAQAo OfKDfttPPj55XXFuEFdLJdGD9F8ewcfzsecGJ76yhNSD4BVtxtN/WLrkTP8bM3Yh u9eRcswJAff9cNBkmoRkYsc6O/0EugR7OUBdA4GOeQb/dj+pyQdu1ea5h4avZOZU z4NL6KXEZnAG2KL2tsZSYhtRPxfqqtYlvewh58UugIqI4hWtMPK3ogHWO/gYZUQP F+UM1sIKT5QjVTD9CYiEwuAHXJTPuyoAE+Jz/CVXVH95xXDfp3d27OWAtfV/ukX9 8pZ5ZIH+Z1Rtqa+s5Vr8EmiRRe39fv/1/dynhfwR1CR9WDxEOl2xVBSHmDCCVe5l 9law51D3d0K1TUQsVWtk -----END CERTIFICATE-----Generated at Tue Sep 22 14:28:09 2026 by rpki-client